cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
Register for the monthly ISE Webinars to learn about ISE configuration and deployment.
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

148
Views
5
Helpful
4
Replies
Beginner

Cisco ISE Appliance 3655 CLI Password Recovery

Hello Cisco ISE experts,
I have a Cisco appliance 3655 which I need to perform a CLI password recovery. Our remote engineer has forgotten the password set on the CLI during the initial configuration. 

Since the 3655 Appliance does not have a CD/DVD drive, how do we perform the password recovery? 

Could someone please assist with a guide/procedure to get the ISO file across so we can access the boot menu. 

Apparently we can not get to the CIMC portal either. 

Appreciate your assistance. 

Thanks.

 

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advocate

Re: Cisco ISE Appliance 3655 CLI Password Recovery

If you cannot access the CIMC remotely then you will have to perform this work in person with a monitor and keyboard. If you had access to the CIMC you could mount the ISO via the java or html KVM. But with you saying you can't access the CIMC then your other option is to boot the appliance from a bootable USB drive with the ISE 2.4/2.6 loaded on it. The boot menu is available outside of the CIMC during server restarts. I have heard of people having issues with booting from USB so this might now work.

Since you don't have the CIMC password youwill have to perform a CIMC password reset via the service jumpers inside. I have not done this myself on a SNS appliance so it might be advisable to preemptively open a TAC case. The process is very likely the same as the c220m5 it was built off. Look for the section titled "Using the Clear Password Header (J38, Pins 13 - 14)".
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/hw/C220M5/install/C220M5/C220M5_chapter_010.html#task_z11_ncv_jz


I would reset the CIMC password first, then leverage the CIMC KVM to mount the ISO and reset the ISE CLI password.

4 REPLIES 4
Highlighted
VIP Advocate

Re: Cisco ISE Appliance 3655 CLI Password Recovery

If you cannot access the CIMC remotely then you will have to perform this work in person with a monitor and keyboard. If you had access to the CIMC you could mount the ISO via the java or html KVM. But with you saying you can't access the CIMC then your other option is to boot the appliance from a bootable USB drive with the ISE 2.4/2.6 loaded on it. The boot menu is available outside of the CIMC during server restarts. I have heard of people having issues with booting from USB so this might now work.

Since you don't have the CIMC password youwill have to perform a CIMC password reset via the service jumpers inside. I have not done this myself on a SNS appliance so it might be advisable to preemptively open a TAC case. The process is very likely the same as the c220m5 it was built off. Look for the section titled "Using the Clear Password Header (J38, Pins 13 - 14)".
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/hw/C220M5/install/C220M5/C220M5_chapter_010.html#task_z11_ncv_jz


I would reset the CIMC password first, then leverage the CIMC KVM to mount the ISO and reset the ISE CLI password.

Beginner

Re: Cisco ISE Appliance 3655 CLI Password Recovery

Damien, thank you so much for your prompt response. Really appreciated.
Since the server is in a remote location I cannot perform the steps as you mentioned. I have asked the team to try and get to CIMC but as they explain they cannot login to it. Perhaps the password is mistyped same as the main CLI admin.
They are going to give a try with USB so hopefully that works.
I will keep you posted.
Thanks again.
VIP Advocate

Re: Cisco ISE Appliance 3655 CLI Password Recovery

This is the specific issue I was thinking of with USB. You don't mention if the SNS had 2.4 or 2.6 on it, but I'm not sure if it also impacts 2.6. If you left 2.6 installed on the SNS appliance, maybe it will work.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq94084

I would certainly try the CIMC default password and still work on manually resetting it in person.
user: admin
password: password or Cisco1234 - not sure which it is now.
Beginner

Re: Cisco ISE Appliance 3655 CLI Password Recovery

Hi Damien, thanks again for your reply. The SNS has 2.6 installed so we are hopeful it will work, or have the CIMC access sorted so we can go that path. The remote engineers will get to it this week and I will keep you posted on the progress. Appreciate your input and options proposed.

Thanks.