Cisco 1841 Locked with British Telecoms Password. ROMMON won't work.

[Craiguccini]

Hi everyone,

On this router I can activate rommon but then I get a prompt that it belong to BT and to enter a password. I bought it off of eBay.

Is there a way I can utterly remove all passwords and third party extras. i just want to practice terminal emulation on it.

PLD version 0x10
GIO ASIC version 0x127
c1841 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0xcb80
program load complete, entry point: 0x8000f000, size: 0xcb80

program load complete, entry point: 0x8000f000, size: 0xd5da5c
Self decompressing the image : ########################################################################################################################################### [OK]

Smart Init is enabled
smart init is sizing iomem
ID MEMORY_REQ TYPE
0X003AA110 public buffer pools
0X00211000 public particle pools
0X03FD 0X00035000 Card in slot 0
0X000021B8 Onboard USB

If any of the above Memory Requirements are
"UNKNOWN", you may be using an unsupported
configuration or there is a software problem and
system operation may be compromised.

Allocating additional 21056636 bytes to IO Memory.
PMem allocated: 238026752 bytes; IOMem allocated: 30408704 bytes

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.4(7d), RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 03-Jan-07 19:14 by alnguyen
Image text-base: 0x60089960, data-base: 0x61480000

System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0xcb80
program load complete, entry point: 0x8000f000, size: 0xcb80

program load complete, entry point: 0x8000f000, size: 0xd5da5c
Self decompressing the image : ########################################################################################################################################### [OK]

Smart Init is enabled
smart init is sizing iomem
ID MEMORY_REQ TYPE
0X003AA110 public buffer pools
0X00211000 public particle pools
0X03FD 0X00035000 Card in slot 0
0X000021B8 Onboard USB

If any of the above Memory Requirements are
"UNKNOWN", you may be using an unsupported
configuration or there is a software problem and
system operation may be compromised.

Allocating additional 21056636 bytes to IO Memory.
PMem allocated: 238026752 bytes; IOMem allocated: 30408704 bytes

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.4(7d), RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 03-Jan-07 19:14 by alnguyen
Image text-base: 0x60089960, data-base: 0x61480000

Cisco 1841 (revision 7.0) with 232448K/29696K bytes of memory.
Processor board ID FCZ1419922Z
2 FastEthernet interfaces
1 Channelized (E1 or T1)/PRI port
DRAM configuration is 64 bits wide with parity disabled.
191K bytes of NVRAM.
63808K bytes of ATA CompactFlash (Read/Write)

Press RETURN to get started!

British Telecommunications plc

WARNING: You have accessed a network device operated by BT. You are required
to have a personal authorisation from the system administrator before you use
this system and you are strictly limited to the use set out in that
authorisation. Unauthorised access to or misuse of this system is prohibited
and may constitute an offence under the Computer Misuse Act 1990.

If you disclose any information obtained through this system without authority,
BT may take appropriate action against you. This may include legal
proceedings, prosecution and disciplinary action up to and including dismissal.

User Access Verification

Password:

[Julio E. Moisa]

Hi

You need to execute password recovery, check the following link to complete the process, I suggest follow each step:

https://www.cisco.com/c/en/us/support/docs/routers/1700-series-modular-access-routers/22187-pswdrec-1700.html

Hope it is useful

:-)

[Craiguccini]

Hi - I've tried this method. My issue is I cannot type in step 5, 

Type confreg 0x2142 at the rommon 1> prompt in order to boot from Flash.

This step bypasses the startup configuration where the passwords are store

because the BT password prompt appeard even after pressing BREAK

[Richard Burts]

I would think that if you go through the password recovery process on this 1841 to ignore the startup config that you would have a fresh start with this router. Basically the password recovery process is to start the boot process and then interrupt it to get into rommon. You set the config register to 0x2142, and then boot the router. The config register setting will ignore the startup config and you start with a fresh router. As you build a new config on the router remember to set the config register back to the normal setting of 0x2102.

HTH

Rick

[Craiguccini]

UPDATE:

I removed the compact flash card and the router booted in rommon and I can type. How can I replace the IOS on the card?

[Richard Burts]

I am glad to know that you found a way to get into rommmon and to be able to type. That means that you should be able to bypass the startup config, and essentially to start over fresh with the router.

Can I ask why you would want to replace the IOS on the card? It is certainly possible to replace the IOS but the first step would be to have a version of IOS as the replacement. Getting a new version of IOS code from Cisco requires a maintenance contract. And it is not clear whether you have a maintenance contract for this router.

HTH

Rick

[Craiguccini]

Hi,

I couldn't use rommon when the  compact flash card was installed because of a security feature BT seem to have installed on it. I wanted to reinstall the IOS because it would have hopefully got rid of the BT security features. ROMMON with out the compact flash doesnt appear to work properly either D:

Thanks for the help!

[Richard Burts]

Thanks for the explanation. Before I try to answer about the flash card may I ask whether you were successful in changing the config register to 0x2142? And if so did that allow you to build a new config on the router?

There are many discussions of upddating the flash card by removing it from the router and using the flash card with a card reader on your PC. Before we go deeper into that we need to clarify whether you would be able to get a new version of IOS for that router.Do you have a maintenance contract that would entitle you to a new version of IOS?

HTH

Rick