Password Recovery Techniques Part 2

14. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase."
15. Type "config term" at the prompt.
16 . Type "config-register 0 x2102" or whatever value you recorded in step
2.
17. Hit Ctrl-Z to quit from the editor.
18. Type "reload" at the prompt. You do not need to write memory.
Technique #3
IGS Routers Running Software Earlier Than 9.1
IGS routers have a bank of DIP switches on the rear panel. If they are
running software earlier than 9.1, then these switches are used for
password recovery.
1. Attach a terminal or PC with terminal emulation to the console port of
the router.
2. Power the router down.
3. Record the settings of the switches on the rear panel.
4 . Set switch 7 ON (or down).
5 . Set switches 0-3 OFF (or up).
6. Power the router up. It will boot up to the > prompt.
7. Type "b" at the > prompt. The router is in test-system mode.
8. Press return until the "Test- System>" prompt appears.
9. Type "enable" at the prompt. You'll be in enable mode and see the
"Test-System#" prompt.
10. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase".
11 . Restore the switch setting to those recorded in step 3.
12. Reboot the router.
Technique #4
CGS, MGS, AGS, AGS+ , 70 x0 Running ROMs Lower Than 10.0
1. Attach a terminal or PC with terminal emulation to the console port of
the router.
2. Power the router down.
3 . Remove the processor card (CSC/2 or CSC/3 or CSC/4 on AGS/CGS/MGS, or
RP on a 70 x0).
4 . Change the hardware register from bit position 0 (or 1) to position
15.
5. Re-insert the processor card.
6. Power the router up.
7. Press "b" at the > prompt or "b flash" if you have Flash memory
installed.
8. Press return until the "Test- System>" prompt appears.
9. Type "enable" at the prompt. You'll be in enable mode and see the
"Test-System#" prompt.
10. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase."
11. Power the router down.
12 . Remove the processor card and return the jumper on pin 15 to its
original position.
13. Power the router up.
Technique #5
500-CS Communication Servers
The password cannot be recovered from the 500-CS since it does not have a
console port. Your only option is to erase the configuration.
1. Power the router off by unplugging it.
2. Depress and hold the DEFAULT button on the front of the chassis.
3. Power the router back on.
4. Watch the OK and LAN LEDs. They will blink on, and then off.
5 . When they blink off (after about 15 seconds), release the DEFAULT
button.
6 . In 2-10 minutes, the 500-CS will enter setup mode as if it was factory
new.
7. Configure the router.
You could also recover a password on a 500 by holding the DEFAULT button
down for 30-45 seconds. The system will then be in test mode, and you can
follow the normal procedure for password recovery. See the earlier sections
for details.
Technique #6
Cisco 1020
You must call the Cisco TAC to recover Cisco 1020 passwords. The 1020 will
issue a password override challenge that can only be interpreted by TAC
personnel.
----------------------------