Difference between revisions of "Password Recovery Procedure for the Catalyst 6500 with Supervisor 720 (WS-SUP720 / WS-SUP720-3B / WS-SUP720-3BXL) Running Cisco IOS Software Prior to 12.2(17)SX"

From NesevoWiki
Jump to navigationJump to search
Line 1: Line 1:
# Power up the router
+
* Power up the router
# Press '''Break''' on the terminal keyboard right after the RP gains control of the console port. On the Catalyst 6500 that runs Cisco IOS, the SP boots first. It then turns control over to the RP. After the RP gains control, initiate the break sequence. The RP has gained control of the console port when you see this message. (Do not initiate the break sequence until you see this message):
+
* Press '''Break''' on the terminal keyboard right after the RP gains control of the console port. On the Catalyst 6500 that runs Cisco IOS, the SP boots first. It then turns control over to the RP. After the RP gains control, initiate the break sequence. The RP has gained control of the console port when you see this message. (Do not initiate the break sequence until you see this message):
 
  00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
 
  00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
# Type '''confreg 0x2142''' at the '''rommon 1>''' prompt to boot from Flash without loading the configuration.
+
* Type '''confreg 0x2142''' at the '''rommon 1>''' prompt to boot from Flash without loading the configuration.
# The switch crashes with a Software Forced Crash:
+
* The switch crashes with a Software Forced Crash:
# Type '''no''' after each setup question, or press '''Ctrl-C''' to skip the initial setup procedure.
+
* Type '''no''' after each setup question, or press '''Ctrl-C''' to skip the initial setup procedure.
# Type '''enable''' at the '''Router>''' prompt. You are in enable mode. The '''Router#''' prompt is displayed.
+
* Type '''enable''' at the '''Router>''' prompt. You are in enable mode. The '''Router#''' prompt is displayed.
# It is important to issue the '''configure memory''' or '''copy start running''' commands to copy the Nonvolatile RAM (NVRAM) into memory. '''Do not issue the configure terminal command'''.
+
* It is important to issue the '''configure memory''' or '''copy start running''' commands to copy the Nonvolatile RAM (NVRAM) into memory. '''Do not issue the configure terminal command'''.
# Issue either the '''write terminal''' or '''show running command'''. These commands show the configuration of the router. In this configuration, you see the '''shutdown''' command under all the interfaces. This means that all the interfaces are currently shut down. You see the passwords either in encrypted or unencrypted format.
+
* Issue either the '''write terminal''' or '''show running command'''. These commands show the configuration of the router. In this configuration, you see the '''shutdown''' command under all the interfaces. This means that all the interfaces are currently shut down. You see the passwords either in encrypted or unencrypted format.
# Issue the '''configure terminal''' command to enter global configuration mode and make the changes. The prompt is now '''hostname(config)#.'''
+
* Issue the '''configure terminal''' command to enter global configuration mode and make the changes. The prompt is now '''hostname(config)#.'''
# Issue the '''enable secret <  password >''' in global configuration mode to change the '''enable''' password.
+
* Issue the '''enable secret <  password >''' in global configuration mode to change the '''enable''' password.
# Issue the '''config-register 0x2102'''  command, or the value you recorded in Step 2 in global configuration mode '''(Router(config)#)''' to set the configuration value back to its original value.
+
* Issue the '''config-register 0x2102'''  command, or the value you recorded in Step 2 in global configuration mode '''(Router(config)#)''' to set the configuration value back to its original value.
# Change any virtual terminal passwords, if present:
+
* Change any virtual terminal passwords, if present:
 
  Router(config)'''#line vty 0 4'''
 
  Router(config)'''#line vty 0 4'''
 
  Router(config-line)'''#password cisco'''
 
  Router(config-line)'''#password cisco'''
 
  Router(config-line)'''#^Z'''
 
  Router(config-line)'''#^Z'''
 
  Router#
 
  Router#
# Issue the '''no shutdown''' command on every interface that is normally in use. Issue a '''show ip interface brief''' <br/>command to see a list of interfaces and their current status. You must be in enable mode '''(Router#)''' to execute the '''show ip interface brief''' command. Here is an example for one interface:
+
* Issue the '''no shutdown''' command on every interface that is normally in use. Issue a '''show ip interface brief''' <br/>command to see a list of interfaces and their current status. You must be in enable mode '''(Router#)''' to execute the '''show ip interface brief''' command. Here is an example for one interface:
  
 
  Router'''#show ip interface brief'''
 
  Router'''#show ip interface brief'''
Line 37: Line 37:
 
  Router(config)# <do other interfaces as necessary...><br/>
 
  Router(config)# <do other interfaces as necessary...><br/>
  
# Press '''Ctrl-Z''' to leave the configuration mode. The prompt is now '''hostname#'''.<br/>
+
* Press '''Ctrl-Z''' to leave the configuration mode. The prompt is now '''hostname#'''.<br/>
# Issue either the '''write memory''' or '''copy running startup''' commands to commit the changes.
+
* Issue either the '''write memory''' or '''copy running startup''' commands to commit the changes.

Revision as of 13:39, 11 March 2016

  • Power up the router
  • Press Break on the terminal keyboard right after the RP gains control of the console port. On the Catalyst 6500 that runs Cisco IOS, the SP boots first. It then turns control over to the RP. After the RP gains control, initiate the break sequence. The RP has gained control of the console port when you see this message. (Do not initiate the break sequence until you see this message):
00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
  • Type confreg 0x2142 at the rommon 1> prompt to boot from Flash without loading the configuration.
  • The switch crashes with a Software Forced Crash:
  • Type no after each setup question, or press Ctrl-C to skip the initial setup procedure.
  • Type enable at the Router> prompt. You are in enable mode. The Router# prompt is displayed.
  • It is important to issue the configure memory or copy start running commands to copy the Nonvolatile RAM (NVRAM) into memory. Do not issue the configure terminal command.
  • Issue either the write terminal or show running command. These commands show the configuration of the router. In this configuration, you see the shutdown command under all the interfaces. This means that all the interfaces are currently shut down. You see the passwords either in encrypted or unencrypted format.
  • Issue the configure terminal command to enter global configuration mode and make the changes. The prompt is now hostname(config)#.
  • Issue the enable secret < password > in global configuration mode to change the enable password.
  • Issue the config-register 0x2102 command, or the value you recorded in Step 2 in global configuration mode (Router(config)#) to set the configuration value back to its original value.
  • Change any virtual terminal passwords, if present:
Router(config)#line vty 0 4
Router(config-line)#password cisco
Router(config-line)#^Z
Router#
  • Issue the no shutdown command on every interface that is normally in use. Issue a show ip interface brief
    command to see a list of interfaces and their current status. You must be in enable mode (Router#) to execute the show ip interface brief command. Here is an example for one interface:
Router#show ip interface brief
Interface                  IP-Address      OK? Method Status                Prol
Vlan1 172.17.10.10 YES TFTP administratively down dow
Vlan10 10.1.1.1 YES TFTP administratively down dow
GigabitEthernet1/1 unassigned YES unset administratively down dow
GigabitEthernet1/2 unassigned YES TFTP administratively down dow
GigabitEthernet2/1 unassigned YES TFTP administratively down dow
GigabitEthernet2/2 unassigned YES TFTP administratively down dow
FastEthernet3/1 172.16.84.110 YES TFTP administratively down dow
[snip] Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface fastEthernet 3/1
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)# <do other interfaces as necessary...>
  • Press Ctrl-Z to leave the configuration mode. The prompt is now hostname#.
  • Issue either the write memory or copy running startup commands to commit the changes.