Hvis enable passwordet på en Cisco Router eller switch er ukendt, er det nødvendigt at køre Cisco Password Recovery Procedure.

R4><input>enable</input>
Password:
Password:
Password:
% Bad secrets

R4>

Ukendt enable password i eksemplet herover

Overordnet procedure

Boot Routeren til Rommon
Ændre Cisco Confreg fra 0x2102 til 0x2142 fra rommon
Boot Routeren til IOS
Slette konfigurationen med det ukendte password
Ændre Cisco Confreg tilbage fra 0x2142 til 0x2102
Reboot Routeren

Boot Routeren til rommon

For at boote Routeren til rommon, skal man sende <BREAK> karakteren fra terminalemuleringsprogrammet - for eksempel putty - til Consoleporten, når Routeren tændes. (Der sendes break fra Putty på min Lenovo bærbare når tasten <Fn> holdes nedes samtidig med at der trykkes gentagne gange på <BREAK> tasten.

System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled


Readonly ROMMON initialized
rommon 1 >

Ændre Confreg i rommon til 0x2142

rommon 1 > <input>confreg</input>


           Configuration Summary
   (Virtual Configuration Register: <notice>0x2102</notice>)
enabled are:
load rom after netboot fails
console baud: 9600
boot: image specified by the boot system commands
      or default to: cisco2-c1841

do you wish to change the configuration? y/n  [n]:  <input>y</input>
enable  "diagnostic mode"? y/n  [n]:  
enable  "use net in IP bcast address"? y/n  [n]:  
disable "load rom after netboot fails"? y/n  [n]:  
enable  "use all zero broadcast"? y/n  [n]:  
enable  "break/abort has effect"? y/n  [n]:  
enable  "ignore system config info"? y/n  [n]:  <input>y</input>
change console baud rate? y/n  [n]:  n
change the boot characteristics? y/n  [n]:  n


           Configuration Summary
   (Virtual Configuration Register: <notice>0x2142</notice>)
enabled are:
load rom after netboot fails
ignore system config info
console baud: 9600
boot: image specified by the boot system commands
      or default to: cisco2-c1841

do you wish to change the configuration? y/n  [n]:  <input>n</input>


You must reset or power cycle for new config to take effect
rommon 2 >

Boot Router til IOS

rommon 2 > <input>reset</input>

System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled


Readonly ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0xcb80
program load complete, entry point: 0x8000f000, size: 0xcb80

<notice>.....undladte linier.....</notice>
62720K bytes of ATA CompactFlash (Read/Write)


         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: <input>no</input>
<notice>.....undladte linier.....</notice>

Slette eksisterende konfiguration

Router>
Router><input>enable</input>
Router#<input>erase startup-config</input>
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete

Ændre Confreg i IOS til 0x2102

Router#<input>configure terminal</input>
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#<input>config-register 0x2102</input>
Router(config)#<input>exit</input>

Reboot Router

Router#<input>reload</input>

System configuration has been modified. Save? [yes/no]: <input>no</input>
Proceed with reload? [confirm]

*May 11 05:50:02.591: %SYS-5-RELOAD: Reload requested by console.
System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 platform with 262144 Kbytes of main memory
<notice>.....undladte linier.....</notice>