PASSWORD RECOVERY FUNCTIONALITY IS DISABLED

[ensciscocheck]

can any one help me to recover password for 1921 router? PASSWORD RECOVERY FUNCTIONALITY IS DISABLED

please help 

thanks

Tpham

[Mark Malone]

You could break into the router by putting it into rommon and then initialize the flash and then delet the config file from there , reboot and it should come back with router>

[ensciscocheck]

break sequence is disable as well I can't do it. any other suggestion?

[nspasov]

Have a look at this thread:

https://supportforums.cisco.com/document/12776/cannot-break-rommon-because-no-service-password-recovery-command-has-been-configured

Thank you for rating helpful posts!

[cleetusant]

Dear  nspasov,

Your solution doesn't work with Cisco 2911 router. Any alternate solution ?

"Readonly ROMMON initialized

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED

program load complete, entry point: 0x80803000, size: 0x1b340"

No Prompt comes later.

Thanls

Cleetus

[Richard Burts]

Cleetus

When password recovery is disabled, then Ctrl+Brk will not get you to rommon. This is part of the feature. As mentioned in previous response there is a very short interval after booting completes that will accept Ctrl+Brk. Are you sure that you have tried this very quickly after booting completes? 

[cleetusant]

Hi Rick,

I tried hitting Ctrl+Brk frequently from as soon as the Power On till one minute after the Boot completes. Still no luck to get the prompt.

Any thoughts ?

Cleetus

[cleetusant]

Thank you Rick, 

Sorry for the late reply. The same thing I had tried and failed in Putty. But very later I tried "Secure CRT" and it worked well and I could recover password. Thank you for the lead.

Cleetus

[posejdon23]

I have this problem for 2901 router. I don't see any ip address on my interfaces, I have been trying with method below and it's don't work for me becouse they are for older models. 

I tryed too from this link and for methode recovery via telenet and for that methode I need ip address on interface but I dont know witch is mine.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/15-mt/sec-usr-cfg-15-mt-book/sec-no-svc-pw-recvry.html#GUID-B70AA045-635D-40EE-91B8-CF86C13E8AAA

Does someone have solution?
Many thanks
Vladimir

[Richard Burts]

Vladimir

Do you have the capability of doing packet capture on your computer (something like wireshark)? If so then connect your computer to router interface, power down the router, power up the router, look for packets sent from the router. If you see a packet from the router look for an IP address. You might need to do this for each of the Ethernet interfaces of the router.

What is the history of this router? Is it one that you have had and know was working ok but no longer know its addresses (and perhaps passwords)? Or is this a new acquisition and you do not know anything about it?

Do you have console access to this router? Are you able to login on the console of this router? If so could you post the output of show version?

[posejdon23]

Hello Richard it is for me new acquisition. I dont know anything about routher (Ip address and password) I see only process boting IOS and when it was finishing I see too Logo and I need password for entering in command mode (I can use consol cable and I use Putty client). I was trying configure my laptop interface like dhcp server and I didnt see any ip address on both G1 and G2 int of the routher. I will try with wireshark tomorow.

[Richard Burts]

Vladimir

If you connect to the console port and then power cycle the router do you see output of the boot process on the console? If so then when the boot process completes with the line that says ok, if you quickly (within 5 seconds) send a couple of break signals do you get any response from the router?

[posejdon23]

Yes I see boot process of the router and after decompressing the image I get "OK" afther that I was sending break command more times.

Keyborad combinations CTRL+BREAKE or PAUSE keys, CTRL+C , Right click on Putty then Special Command Breake and nothing happens.

I mean these command only work in regular Rommon mode but I have situation that password recovery functionality is disabled.

Some other solutions???

Many thanks

[Richard Burts]

Vladimir

Entering the break sequence to enter into rommon is an important part of the password recovery process. So the command to disable password recovery disables the function of the break sequence most of the time. The exception to this is that at the completion of the boot process there is a very short interval (I believe it is about 5 seconds) in which the break sequence will be accepted. It does not go directly into rommon but does ask if you want to recover the router. If you respond that you do want to recover the router it deletes the startup config and boots again. In doing this you are not able to recover the existing passwords but are able to recover the router.

If you have tried this and it is not working then either you are not doing it quickly enough after seeing the OK in the output or you are not using the correct break sequence. I have a suggestion that might work for you. Follow these steps:

- connect your computer to the console port and make sure that you are seeing output from the router.

- power cycle the router and time how long it takes the boot process to complete.

- in your emulator (Putty or whatever) set the connection speed to 300 (yes that is very slow)

- power cycle the router

- add one minute to the time that it takes the power cycle to complete (or perhaps 2 minutes might be better). Wait that long before you do anything.

- change your emulator back to the normal speed (probably 9600)

- enter yes. Hopefully this will reset the router.

[posejdon23]

I succeed , many thanks Rick.

I have used this combination for break press and hold key CTRL and frecfenty click taster BREAK/PAUSE. I have used normal speed clock speed rate 9600.
Here are my screen shoot how it looked like.
I hope these will be helpfu.