Access Security Guide K/KA/KB.15.15

WARNING! This means that anyone who has physical access to the switch could use this button
combination to replace the switch current configuration with the factory-default configuration, and
render the switch accessible without the need to input a username or password.
You can use the factory-reset command to prevent the Reset+Clear combination from being
used for this purpose.
Syntax:
[no]front-panel-security factory-reset
Disables or re-enables the following functions associated with using the Reset+Clear
buttons in the combination described under “Restoring the factory default
configuration” (page 43):
Replacing the current startup-config file with the factory default
startup-config file
Clearing any local usernames and passwords configured on the switch
Default: Both functions enabled.
For redundant management systems, this command only affects the active
management module.
NOTE: The Reset+Clear button combination always reboots the switch, regardless
of whether the [no] form of the command has been used to disable the above two
functions. Also, if you disable factory-reset, you cannot disable the
password-recovery option, and the reverse.
Figure 22 Example of disabling the factory reset option
Restoring the factory default configuration
You can also use the Reset button together with the Clear button (Reset+Clear) to restore the factory
default configuration for the switch. To do this:
1. Press and hold the Reset button.
2. While holding the Reset button, press and hold the Clear button.
Front panel security 43