5-2
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter5 Administrating the Access Point
Disabling the Mode Button
Disabling the Mode Button
You can disable the mode button on access points having a console port by using the global configuration
[no] boot mode-button command. This command prevents password recovery and is used to prevent
unauthorized users from gaining access to the access point CLI.
Caution This command disables password recovery. If you lose the privileged EXEC mode password for the
access point after entering this command, you will need to contact the Cisco Technical Assistance Center
(TAC) to regain access to the access point CLI.
The mode button is enabled by default. Beginning in the privilege EXEC mode, follow these steps to
disable the access point mode button.
You can check the status of the mode-button by executing the show boot or show boot mode-button
commands in the privileged EXEC mode. The status does not appear in the running configuration. The
following shows a typical response to the show boot and show boot mode-button commands:
ap#show boot
BOOT path-list: flash:/ap3g2-k9w7-mx.152-4.JA1/ap3g2-k9w7-mx.152-4.JA1
Config file: flash:/config.txt
Private Config file: flash:/private-config
Enable Break: yes
Manual Boot: no
Enable IOS Break: no
HELPER path-list:
NVRAM/Config file
buffer size: 32768
Mode Button: on
Radio Core TFTP:
ap#
Note As long as the privileged EXEC password is known, you can restore the mode button to normal operation
using the global configuration boot mode-button command.
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 no boot mode-button Disables the access point mode button.
Step3 end Note It is not necessary to save the configuration.