Correct procedure for default factory reset of Cisco C1111-4P ISR

[StephenMcDermott29087]

Hi,

I have recently acquired a Cisco C1111-4P integrated services router which was formerley the property of a company recently gone into administration.

I do not have the unit's logon profile (username and password) and have attempted to factory default reset via the reset button  but with no success.

Here's a transcript copy of the system output :-

User Access Verification

Username: Rom image verified correctly

System Bootstrap, Version 16.12(2r), RELEASE SOFTWARE
Copyright (c) 1994-2020 by cisco Systems, Inc.

Current image running: Boot ROM1

Last reset cause: PowerOn
C1111-4P platform with 4194304 Kbytes of main memory

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
Reset button push detected
unable to open bootflash:golden.bin (14)

........

Located c1100-universalk9_ias.16.09.06.SPA.bin

################################################################################
################################################################################
###############################################################################

Package header rev 3 structure detected
IsoSize = 419381248
Performing Integrity Check ...
Performing Signature Verification ...
RSA Signed RELEASE Image Signature Verification Successful
Image validated

cisco C1111-4P (1RU) processor with 1452661K/6147K bytes of memory.
Processor board ID FCZ2436904X
1 Virtual Ethernet interface
6 Gigabit Ethernet interfaces
4294966432 terminal lines
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
2863103K bytes of flash memory at bootflash:.
0K bytes of WebUI ODM Files at webui:.

Router IOS Configuration Recovery is unsuccessful

%INIT: waited 0 seconds for NVRAM to be available

% Warning: use /31 mask on non point-to-point interface cautiously
This CLI will be deprecated soon, Please use new CLI 'ip http access-class ipv4
<1-99> | <access-list-name>'
WARNING: Command has been added to the configuration using a type 7 password. H
owever, type 7 passwords will soon be deprecated. Migrate to a supported passwor
d type
WARNING: Command has been added to the configuration using a type 7 password. H
owever, type 7 passwords will soon be deprecated. Migrate to a supported passwor
d type
WARNING: Command has been added to the configuration using a type 7 password. H
owever, type 7 passwords will soon be deprecated. Migrate to a supported passwor
d type
WARNING: Command has been added to the configuration using a type 7 password. H
owever, type 7 passwords will soon be deprecated. Migrate to a supported passwor
d type
%Log packet overrun, PC 0x1024E4C, format:
User:%s logged command:%s

**********************************************
*** You are responsible for all activity ***
*** Performed on this router ***
*** All config changes are logged ***
User Access Verification

Username:

Can anybody please advise on what the problem is and how I go about a succesful factory default reset.

Thankyou.

[balaji.bandi]

You can use the reset button to factory reset :

https://www.cisco.com/c/en/us/td/docs/routers/access/1100/software/configuration/xe-16-7/cisco_1100_series_swcfg_xe_16_7_x/cisco_1100_series_swcfg_chapter_0110.html

Password recovery :

https://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/asr1routers/asr-1000-series-hig/asr-hig-tbl.html

[StephenMcDermott29087]

Hi,

I've tried using the reset button procedure but without success asd,at the end of the process,I'm prompted for the username and password instead of a ROMMON prompt.

[balaji.bandi]

try password recovery with break command using console cable ( i have posted other link that posted)

[StephenMcDermott29087]

Have tried with serial console cable and interrupting the bootup process by issuing the "break" command(using Hyperterminal emulation software) but the problem persists :-

User Access Verification

Username: 
Password:

% Authentication failed

Username:
% Username: timeout expired!

[balaji.bandi]

why your reset button not working because "PASSWORD RECOVERY FUNCTIONALITY IS DISABLED"

Where did you get this device from ? 

Not sure what hyper terminal is this: some are different so check the sequence depends on the hyper term you using :

https://www.cisco.com/c/en/us/support/docs/routers/10000-series-routers/12818-61.html

[StephenMcDermott29087]

As I explained in my opening message the Cisco C1111-4P ISR was formerly the property of a UK company that has recently gone into administration.The router,along with all of the Company's  other IT & office assets,were sold off at a private auction in order to meet its financial obligations to its creditors.

I've tried using both Putty and HyperTerminal software terminal emulators but,from what you're saying,this would make no difference to the reset process as "PASSWORD RECOVERY FUNCTIONALITY IS DISABLED".

So is there a solution and,if so,what is it???

Please advise.

[Leo Laohoo]

---

@StephenMcDermott29087 wrote:

So is there a solution and,if so,what is it???

---

During the powering up, bash the Ctrl+Break key.  That is the only way. 

[StephenMcDermott29087]

Yes - that's exactly what I did and have made some progress.

Additionally,and for terminal emulation,I switched from using a RJ45 USB to serial adapter cable to a mini-usb/USB cable to connect to the router's USB console port.

So,using hyperterminal terminal emulator & when I interrupt the boot process using the ctrl/break keys,the following is output :-

Rom image verified correctly

System Bootstrap, Version 16.12(2r), RELEASE SOFTWARE
Copyright (c) 1994-2020 by cisco Systems, Inc.

Current image running: Boot ROM1

Last reset cause: PowerOn
C1111-4P platform with 4194304 Kbytes of main memory

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED

PASSWORD RECOVERY IS DISABLED.
Do you want to reset the router to the factory default
configuration and proceed y/n [n]:

Router continuing with existing configuration...

Located c1100-universalk9_ias.16.09.06.SPA.bin
################################################################################
################################################################################
################################################################################
################################################################################
################################################################################
################################################################################
################################################################################
################################################################################
################################################################################
##########################################################################

So the message "reset the router to the factory default configuration and proceed " is issued but appears to have an automated and default response of [n],i.e.no. and continues to load the existing non-default configuration.

Is there anyway a reply can be issued to the reset prompt???

Any advice would be appreciated.

Thanks.

[balaji.bandi]

Most cases as per our experience, the mentioned above URL all the break keys to work.

when the break key work, you get in to ROMMON Mode as mentioned in the document, from there you can recover password or reset to factory.

Current image running: Boot ROM1

Last reset cause: PowerOn
C1111-4P platform with 4194304 Kbytes of main memory

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED

PASSWORD RECOVERY IS DISABLED.
Do you want to reset the router to the factory default
configuration and proceed y/n [n]:  y    <<<--------------Answer should be yes(y) here.

Once you get

Press RETURN to get started!

> enable

config t

service password-recovery

!

end

wr

reload and test it.

[StephenMcDermott29087]

PASSWORD RECOVERY IS DISABLED.
Do you want to reset the router to the factory default
configuration and proceed y/n [n]:  y    <<<--------------Answer should be yes(y) here.

I obviously understand the answer should be "yes(y)" but the emulator's output does not pause at that point to provide the opportunity to reply "yes(y)".I'm bashing away at the ctrl-break sequence but it simply continues to load the existing configuration.

Thanks for the configuration advice but,in order to configure,I must first reset the device in order to achieve ROMMON mode.And it's the reset process I'm unable to effect.

So I'm wondering how I can make a "yes(y)" reply in order to initiate a device factory default reset??

Please advise.

[Leo Laohoo]

How, exactly, are you consoled into the router?  

Are you using a USB-to-Serial adaptor?

[StephenMcDermott29087]

I was originally using a standard console cable,i.e.RJ45 connector at the router end and a USB-to-Serial adapter for the client (PC) connection.However,the router would not accept the ctrl-break input but,after switching the standard console cable for a mini-USB cable (mini-usb at the router end and standard USB connection at the client(PC) end) I was able to issue ctrl-break commands via HyperTerminal terminal emulator.

[balaji.bandi]

So you mean you not able to input any information on the console, this thinks 2 issue :

1. Emulator config ( post the serial settings (if you using putty)

2. show us the serial cable

example putty :

[StephenMcDermott29087 · Accepted solution]

Have managed to resolve and now have a default factory reset ISR.

I could not relay any break command input via Putty 64bit emulation software but could do so using HyperTerminal terminal emulator.
By modifying the terminal's ASCII sending and receiving settings I was able to invoke a "pause" at this point :-

PASSWORD RECOVERY IS DISABLED.
Do you want to reset the router to the factory default
configuration and proceed y/n [n]:

and simply replied "y".

Cisco router is now factory default reset.

Thanks to balaji.bandi and Leo Laohoo for their support and advice.