Cisco Systems Password recovery without serial port

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Password recovery without serial port JF Mezei 01-05-09
Posted by JF Mezei on January 5, 2009, 7:45 am
Please log in for more thread options
2924-XL-EN switch.

Now I have done it. I was cleaning up temporary files on my switch and
saw "config.text" and "stored-config" and mistakenly deleted
"config.text". When switch was rebooted, well I found the very hard way
that it no longer had a config.

The switch sort of functions, although it appears some ports don't
autonegotiate well.

HOWEVER, the serial port on that switch is inoperative. Had not tried to
use it in a long time. (there was a weather event last year which may
have zapped it).

I know the switch has a default management interface with ip
192.168.157.1 (from using wireshark). However:

As soon as it connects, I get:

                Password required, but none set

and the telnet session is then closed right away.

Is there anything that could be done to rescue this switch from an
ethernet port ?

I have another 2924-XL-EN wich is unreliable (works for a few minutes
then dies). Considering the first one is without config, if I were to
plug the second one and setup the cable as a trunk line, would the
second switch then be able to send commands to the "default" first one,
or would the later just ignore remote management commands ?

I hate monday mornings !!!!

Posted by Trendkill on January 5, 2009, 8:26 am
Please log in for more thread options
> 2924-XL-EN switch.
>
> Now I have done it. I was cleaning up temporary files on my switch and
> saw "config.text" and "stored-config" and mistakenly deleted
> "config.text". When switch was rebooted, well I found the very hard way
> that it no longer had a config.
>
> The switch sort of functions, although it appears some ports don't
> autonegotiate well.
>
> HOWEVER, the serial port on that switch is inoperative. Had not tried to
> use it in a long time. (there was a weather event last year which may
> have zapped it).
>
> I know the switch has a default management interface with ip
> 192.168.157.1 (from using wireshark). However:
>
> As soon as it connects, I get:
>
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Password required, but none set
>
> and the telnet session is then closed right away.
>
> Is there anything that could be done to rescue this switch from an
> ethernet port ?
>
> I have another 2924-XL-EN wich is unreliable (works for a few minutes
> then dies). Considering the first one is without config, if I were to
> plug the second one and setup the cable as a trunk line, would the
> second switch then be able to send commands to the "default" first one,
> or would the later just ignore remote management commands ?
>
> I hate monday mornings !!!!

Why does the serial not work? Do you get funny characters, or it
literally doesn't prompt you with anything? There is no way to rescue
other than what you are trying (put your pc in same vlan as the mgmt
port, and connect it to a port associated with that vlan). You will
need to reset the config to recover the password, but then if you
don't have a working console port, you have no way to get
in........seems like catch 22 to me. Perhaps someone else knows
another way...

Posted by JF Mezei on January 5, 2009, 8:35 am
Please log in for more thread options
Trendkill wrote:

> Why does the serial not work? Do you get funny characters, or it
> literally doesn't prompt you with anything?

It's dead. Completely dead. If I plug the cable into my unreliable Cisco
switch, I get output. If I plug same cable into the problem switch, I
get absolutely nothing. It would have likely been burned by lightning spike.

Posted by Trendkill on January 5, 2009, 8:52 am
Please log in for more thread options
> Trendkill wrote:
> > Why does the serial not work? =A0Do you get funny characters, or it
> > literally doesn't prompt you with anything?
>
> It's dead. Completely dead. If I plug the cable into my unreliable Cisco
> switch, I get output. If I plug same cable into the problem switch, I
> get absolutely nothing. It would have likely been burned by lightning spi=
ke.

Yeah if you were getting crud, its probably a speed of the line
issue. But if you are getting nothing (not even a cursor), then you
are probably hosed. May be worth it to recycle the thing to factory
and try serial again in case the speed or some setting did get messed
up. But that may be a last resort attempt....

Posted by JF Mezei on January 5, 2009, 9:18 am
Please log in for more thread options
Eureka ! I think I got it.

On the unreliable switch, I turned clustering on. I'll name the empty
switch "spock" (from "the search for spock where he had a body but no
mind :-)

I turned clustering on, gave it a cluster name of "CISCO" and made the
unreliable switch the master commander one.

show cluster candidates

this gave me my "spock" switch and it MAC address.

I went back into conf term, and

cluster member mac-address 0004.4dfd.1a80

this added the "spock" switch to the cluster.

show cluster now yields:

> SWITCH1#show cluster member
> |---Upstream---|
> SN MAC Address Name PortIf FEC Hops SN PortIf FEC State
> 0 0002.4ba3.4b80 SWITCH1 0 Up (Cmdr)
> 1 0004.4dfd.1a80 unit0 Fa0/24 1 0 Fa0/24 Up

And then:

rcommand 1

And I was connected to the "spock" switch which called itself "unit0"
and was able to issue commands to rename my config file to "config.text".

Interestingly, I was not able before going with the clustering stuff to
turn fa0/24 into a trunk line. It was complaining about multiple VLANs
already in use.


It isn't often that one can find a solution to a hopeless case !!!!!


Similar ThreadsPosted
Password recovery without serial port January 5, 2009, 7:45 am
Password Recovery November 20, 2005, 12:00 pm
Password recovery problem July 20, 2005, 1:48 pm
Password recovery - 2900XL July 28, 2006, 11:09 pm
Password Recovery for CISCO 836 September 5, 2006, 9:16 am
NO SERVICE PASSWORD RECOVERY March 6, 2008, 1:35 pm
cisco 857 password recovery June 30, 2009, 1:45 pm
HELP ON 2525 ROUTER PASSWORD RECOVERY February 12, 2005, 12:56 pm
Need password recovery util for LocalDirector 430 March 22, 2006, 1:53 am
Cisco 1900 Password Recovery October 6, 2006, 12:01 pm
PIX 520 with 5.1(4) OS enable password recovery problem October 7, 2006, 5:27 pm
Avoid Password Recovery on Cisco 5300 October 6, 2005, 5:15 pm
strange cisco 7604 password recovery problem April 3, 2009, 5:05 pm
aironet ap350 PASSWORD RECOVERY OR RESET ENTIRE CONFIG September 13, 2006, 7:24 pm
Password recovery disabled on Cisco 1711 Router - cannot login or reset May 17, 2006, 8:50 am
Residential Cabling Guide

Home Cabling Guide

Finally, an instantly downloadable book that saves you thousands in home improvement dollars! Enjoy living in 21st century technology-advanced home while increasing its selling value and competitive advantage on the real estate market. Whether your cabling is for home office or high-tech leisure, you can wire your home yourself or learn "wirish" to speak with your cabling contractors in their language!

Learn More