How to Recover a Cisco Router Password

[Pyrotechnic]

Sponsored Links

Introduction.

This paper provides several ways to restore the password for the router Cisco. You can recover your password on most platforms without changing hardware jumpers, but the router must be rebooted. Password recovery can be performed only with the console port is physically connected to the router.

There are three ways to restore the permitted access to the router when the password is lost. You can VIEW (view) password, CHANGE (Change) password, or ERASE (Erase) configuration and start all over again, as if the device was completely new.

Each procedure is divided into the following main stages:

• Configure the router to boot without having to read configuration information from the nonvolatile memory (NVRAM). This stage is sometimes called the regime of testing the system.
• Reboot the system.
• To access to the authorized mode (enable mode); it can be done without a password, if you are working in test mode system.
• View or change your password, or erase the existing configuration.
• Once again, configure the router to download and read the NVRAM, to make sure that everything is in order.
• Reboot the system.

Note: In some cases, password recovery is necessary that the terminal gave an interrupt signal (stop) you need to know how your terminal or PC terminal emulator issues this signal. For example, in ProComm by default, this signal is generated keys Alt-B will, in Windows Terminal - pressing Break or CTRL-Break. Windows Terminal also allows you to assign any function key to generate such a signal. In the Terminal, select Function Keys and ask one of them, such a function, fill in the characters ^ $ B (Shift 6, Shift 4, Shift B).

Below are detailed instructions for specific routers, Cisco. In the section heading, locate the type of your router to determine which method to use.

[Pyrotechnic]

Method # 1.

All Series Cisco 2000, 2500, 3000, 680x0-Based 4000 and 7000, working with software version 10.0 (or later) in ROMs, IGS, working with software version 9.1 (or later) in the ROM.

This method can be applied to the series 7000 and 7010 only if the router is working with software version 10.0 in the memory ROM, installed on the card processor. Memory can download the software Flash 10.0, but the physical presence of ROM on the processor card is necessary.

1. Connect a terminal or PC with terminal emulation to the console port of the router.
2. Type "show version" and record the configuration register setting. Usually it - 0x2102 or 0x102.
3. Turn off and then turn on the router.
4. Press Break on the terminal within 60 seconds after turning on the router. You will see the request> without the name of the router. If you do not see such a request, then the terminal does not send the necessary signal interrupts. In this case, check the terminal or terminal emulation setup.
5. Type "o / r 0x42" on request> to boot from Flash memory, or "o / r 0x41" to boot from ROM. Note that the symbol "o" - does not figure to zero. If you have Flash memory and it is not damaged, 0x42 - the best setting. Use the installation of 0x41 only if the Flash memory is erased or not installed.

Note: If you use the installation 0x41, you can only view or erase the configuration. You can not change your password.

1. Type in "i" on request>. The router will reboot but will ignore the saved configuration.
2. Answer "no" to all requests setup.
3. Type "enable" on request "Router>". You'll be in the allowed mode and will be prompted "Router #".
4. Choose one of three options:

To view (VIEW) password type "show config."

To change (CHANGE) password (if, for example, it is encrypted):

a. Type "config mem" to copy the NVRAM into memory.

b. Type "wr term".

If you see a message "enable secret xxxx", then:

Type "config term" and make the changes

Type "enable secret & ltpassword>"

Press "Ctrl-Z"

If you do not see the message, then:

Type "enable secret & ltpassword>"

Type "enable password & ltpassword>"

Press "Ctrl-Z"

c. Type "write mem" to capture the changes.

1. To erase (ERASE) configuration, type "write erase."
2. Type "config term" in response to the request.
3. Type "config-register 0x2102," or whatever value you recorded in step 2.
4. Press Ctrl-Z to exit the editor.
5. Type "reload" in response to a request. You do not need to write to memory.

[Pyrotechnic]

Method # 2.

Cisco routers 1003, 4500 or IDT Orion-Based

1. Connect a terminal or PC with terminal emulation to the console port of the router.
2. Type "show version" and record the configuration register setting. Usually it - 0x2102 or 0x102.
3. Turn off and then turn on the router.
4. Press Break on the terminal within 60 seconds after turning on the router. You will be prompted "rommon>". If you do not see such a request, then the terminal does not send the necessary signal interrupts. In this case, check the terminal or terminal emulation Setup.
5. Type "confreg" on request "rommon>".
6. Answer "y" to the request "Do you wish to change configuration [y / n]?" (You want to change the configuration [yes / no]?).
7. Answer "n" to all requests until a request: "ignore system config info [y / n]?" (Ignore the system configuration information [yes / no?)]. Answer "y."
8. Answer "n" to the following requests until a request: "change boot characteristics [y / n]?" (Change boot characteristics [yes / no]?). Answer "y."
9. At the request "enter to boot:" type "2" and "carriage return". If Flash memory is erased, type "1." If you erase all memory Flash, model 4500 to be returned to Cisco.

Note: If you chose to install "1," you can only view or erase the configuration. You can not change your password.

1. Configuration report printed. Answer "n" to the query: "Do you wish to change configuration [y / n]?" (You want to change the configuration [yes / no]?).
2. Type "reset" on request "rommon>" or frequency for the model 4500 or 7500.
3. When loading answer "no" to all requests Setup.
4. Type "enable" on request "Router>". You'll be in the allowed mode and will be prompted "Router #".
5. Choose one of three options:

To view (VIEW) password type "show config."

To change (CHANGE) password (if, for example, it is encrypted):

a. Type "config mem" to copy the NVRAM into memory.

b. Type "wr term".

If you see a message "enable secret xxxx", then:

Type "config term" and make the changes

Type "enable secret & ltpassword>"

Press "Ctrl-Z"

If you do not see the message, then:

Type "enable password & ltpassword>"

Press "Ctrl-Z"

c. Type "write mem" to capture the changes.

1. To erase (ERASE) configuration, type "write erase."
2. Type "config term" in response to the request.
3. Type "config-register 0x2102," or whatever value you recorded in step 2.
4. Press Ctrl-Z to exit the editor.
5. Type "reload" in response to a request. You do not need to write to memory.

[Pyrotechnic]

Method # 3 - Switch to Catalyst.

Catalyst 1200 and 5000

To recover a lost password on the Catalyst 1200, Catalyst 5000 and all concentrators:

1. You must be at the console.
2. Restart the device.
3. When prompted for a password, press Enter (blank password value - within 30 seconds).
4. Enter "Enable".
5. When prompted for a password, press Enter (blank password value - within 30 seconds).
6. Change your password.

Catalyst 1600

To recover a lost password on the Catalyst 1600 switch, you need to press and release the reset button on the switch until the display LCD (liquid crystal display) is not the message "erasing mgmt passwd". After this switch will carry out the restoration, but without a password. The operation can be done from TrueView.

Catalyst 1800

To recover a lost password on the Catalyst 1800 switch, first look at the left of the switch. There, under the lid are two red switches. Switch located closer to the front panel of the Catalyst 1800 - switch NMI (non-masked interrupt). Press the NMI switch three times within the first 30 seconds after turning on the switch. This operation will restore the password value, the default, - "public".

Catalyst 2600

Click the System Request menu to access the System Request Menu and then select Clear NVRAM. This operation will erase the password, but, in addition, restore the configuration settings, the default, which means you lose all the configuration options that you have asked for the switch.

Catalyst 3000

1. Click the System Request
2. Use the arrow keys, select CLEAR NVRAM.
3. Press Return.
4. The switch will reboot, without requiring a password.

Thank you for your attention!