Password Recovery
3 likes1,015 views
This document provides steps to recover passwords on a Cisco router by booting from flash memory rather than the startup configuration. The steps include shutting down the router, removing the compact flash card, rebooting to enter ROMMON mode, changing the configuration register to boot from flash, and resetting the router. Once logged in, the user can issue commands like "show running-config" to view current settings, and "configure terminal" to change the enable secret password.
Password Recovery
- 2. Step-by-Step Procedure Step 1. Either switch off or shut down the router. Step 2. Remove the compact flash that is on the rear of the router. This image shows the rear of the 2951 router:
- 3. Step 3 Switch on the router. Step 4 Once the router is on Rommon mode, reinsert the compact flash. Step 5 Type confreg 0x2142 at the rommon 1> prompt in order to boot from Flash. This step bypasses the startup configuration where the passwords are stored. Step 6 Type reset at the rommon 2> prompt. The router reboots, but ignores the saved configuration.
- 4. Step 7 Type no after each setup question, or press Ctrl-C in order to skip the initial setup procedure. Step 8 Type enable at the Router> prompt. You are in enable mode and should see the Router# prompt. Step 9 Type configure memory or copy startup-config running-config in order to copy the nonvolatile RAM (NVRAM) into memory. warning Warning: Do not enter copy running-config startup-config or write. These commands erase your startup configuration.
- 5. Step 10 Issue the show running-config command. The show running-config command shows the configuration of the router. In this configuration, the shutdown command appears under all interfaces, which indicates all interfaces are currently shut down. In addition, the passwords (enable password, enable secret, vty, and console are in either an encrypted or unencrypted format. You can reuse unencrypted passwords. You change encrypted passwords to a new password. Step 11 Type configure terminal. The hostname(config)# prompt appears.
- 6. Step 12 Type enable secret <password> in order to change the enable secret password. For example: hostname(config)#enable secret cisco Step 13 Issue the no shutdown command on every interface that you use. If you issue a show ip interface brief command, every interface that you want to use should display up up. Step 14 Type config-register <configuration_register_setting> . Where <configuration_register_setting> is either the value you recorded in step 2 or 0x2102 . For example: hostname(config)#config-register 0x2102
- 7. Step 15 Press Ctrl-z or end in order to leave the configuration mode. The hostname# prompt appears. Step 16 Type write memory or copy running-config startup-config in order to commit the changes.
- 8. Example This section provides an example of the password recovery procedure. This example was created with a Cisco 2900 Series ISR. Even if you do not use a Cisco 2900 Series ISR, this output provides an example of what you should experience on your product.
- 11. Execute Steps 1 through 4 from Step-by-Step Procedure
- 20. Note: In order to recover your password when password recovery functionality is disabled, refer to the Recovering a Device section of No Service Password-Recovery.
- 21. Follow us @ www.facebook.com/NetProtocolXpert www.instagram.com/netprotocol_xpert plus.google.com/collection/k8HMDB twitter.com/NPX_cisco www.linkedin.com/company/netprotocol-xpert netprotocolxpert.blogspot.in remote.com/netprotocolxpert www.netprotocolxpert.in 21