Re: Password Recovery / 7606-S with RSP720-3C-GE

Eric Flahaut · ‎09-15-2018

Hello. I would like to request assistance with a password recovery.

I am working on a Cisco 7606-S Switch and a 7600 Series Route Switch Processor 720 with Multilayer Switch Feature Card.

I have copied the newest IOS (c7600rsp72043-adventerprisek9-mz.155-3.S8.bin) to a newly formatted flash card. I use this image to boot the cards from ROMMON.

The problem is this, the cards boot successfully with the IOS, however an old configuration loads with the IOS and the credentials are unknown.

I have used the "confreg 0x2102" and other "confreg 0x0" options with the same outcome. I have removed all flash media disks from disk1, and the two internal flash media disks from the card. All of these options result in the loading of the old configuration with the new IOS.

How can I remove this configuration and clean boot from the newly downloaded IOS.

Thank you in advance for your help.

Leo Laohoo · ‎09-15-2018

@Eric Flahaut wrote:

I have used the "confreg 0x2102" and other "confreg 0x0" options with the same outcome. I

0x2102 is not password-recovery mode. This instructs the system to read the configuration.

0x2142 instructs the system to ignore the configuration and boot into ROMmon. This is how to start the password-recovery process.

Kindly read Password Recovery Procedure for the Catalyst 6500 with Supervisor 720 Running Cisco IOS Software.

Eric Flahaut · ‎09-17-2018

Thank you for the suggestion.

I have tried the "confreg 0x2142" in the past and again, just now, with the same result. Once the switch boots with the new IOS, it reads a configuration from "somewhere" and loads this configuration into memory.

I don't know where this configuration is saved. As before I have removed all memory cards from the external disk slots and the internal disk slots.

Any other ideas are greatly appreciated.

carllarson · ‎07-19-2022

Here hoping someone has found a solution to this problem. I'm having the same issue and I have tried many different confreg boot modes.

I've also tried swapping the flash cards on the internal system with one that was working fine, but the configuration is still loaded on somehow, so I cant reset the NVRAM.

Please if anyone has found a solution or has better ideas to reply.

Leo Laohoo · ‎07-19-2022

Post the complete output to the command "sh version".

carllarson · ‎07-20-2022

Drake-7609>show ver
Cisco IOS Software, c7600rsp72043_rp Software (c7600rsp72043_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRD5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Sat 02-Oct-10 18:39 by prod_rel_team

ROM: System Bootstrap, Version 12.2(33r)SRE, RELEASE SOFTWARE (fc1)
BOOTLDR: Cisco IOS Software, c7600rsp72043_rp Software (c7600rsp72043_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRD5, RELEASE SOFTWARE (fc2)

Drake-7609 uptime is 2 minutes
Uptime for this control processor is 2 minutes
System returned to ROM by power cycle (SP by power on)
System image file is "sup-bootdisk:c7600rsp72043-advipservicesk9-mz.122-33.SRD5.bin"
Last reload type: Normal Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO7606-S (M8500) processor (revision 1.1) with 917504K/65536K bytes of memory.
Processor board ID FOX1545GUE1
BASEBOARD: RSP720
CPU: MPC8548_E, Version: 2.1, (0x80390021)
CORE: E500, Version: 2.2, (0x80210022)
CPU:1200MHz, CCB:400MHz, DDR:200MHz,
L1: D-cache 32 kB enabled
I-cache 32 kB enabled

Last reset from power-on
7 Virtual Ethernet interfaces
2 Gigabit Ethernet interfaces
3964K bytes of non-volatile configuration memory.

500472K bytes of Internal ATA PCMCIA card (Sector size 512 bytes).
Configuration register is 0x2102

Drake-7609>

This is what I got, I went into Rommon and set it back to 0x2142 (see attached files) and then booted into the disk and got the same thing.

Richard Burts · ‎07-20-2022

In both of your text files the config register is 0x2102. The config register needs to be 0x2142 to avoid the existing config

HTH

Rick

carllarson · ‎07-20-2022

Right! I changed it in rommon but it changes back to 0x2102 when it boots. And since I don't know the password to enable I cannot configure it from the terminal...

Eric Flahaut · ‎07-20-2022

Carllarson,

It has been so long ago, that I don't remember exactly. But I seem to recall the backup supervisor card was installed and the router was pulling a config from that device and loading it into memory. I hope this helps and good luck.

carllarson · ‎07-20-2022

I'll look into that, thank you!

colinpittman · ‎01-04-2023

Hi Carl,

I hope you found a solution, if not, I think i may of, it's a matter of timing, if you issue a break command whilst in Switch Processor mode the confreg is not a recognized command and 5 seconds too late after switching to the route processor the config is loaded even though the you issue the confreg 0x2142 in rommon so it appears to have pulled the config through from "somewhere" in short as soon as you see the "*Jan 4 11:23:50.211: %OIR-6-CONSOLE: Changing console ownership to route processor" do the break command and then follow as below and you should be just fine!

regards Colin

Cisco IOS Software, c7600rsp72043_sp Software (c7600rsp72043_sp-ADVIPSERVICESK9-M), Version 12.2(33)SRE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 15-Sep-11 03:27 by prod_rel_team

*Jan 4 11:23:50.211: %SYS-3-LOGGER_FLUSHING: System pausing to ensure console debugging output.

*Jan 4 11:23:49.627: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor

*Jan 4 11:23:50.211: %OIR-6-CONSOLE: Changing console ownership to route processor

System Bootstrap, Version 12.2(33r)SRD5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2009 by cisco Systems, Inc.
C7600-RSP720/RP platform with 1048576 Kbytes of main memory

rommon 1 > confreg 0x2142

You must reset or power cycle for new config to take effect
rommon 2 > reset

Resetting .......

System Bootstrap, Version 12.2(33r)SRD5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2009 by cisco Systems, Inc.
C7600-RSP720/RP platform with 1048576 Kbytes of main memory

Download Start
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Download Completed! Booting the image.
Self decompressing the image : ##################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### [OK]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, c7600rsp72043_rp Software (c7600rsp72043_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 15-Sep-11 03:20 by prod_rel_team

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO7609-S (M8500) processor (revision 1.0) with 917504K/65536K bytes of memory.
Processor board ID FOX1518G3Q9
BASEBOARD: RSP720
CPU: MPC8548_E, Version: 2.1, (0x80390021)
CORE: E500, Version: 2.2, (0x80210022)
CPU:1200MHz, CCB:400MHz, DDR:200MHz,
L1: D-cache 32 kB enabled
I-cache 32 kB enabled

Last reset from s/w reset
1 Virtual Ethernet interface
2 Gigabit Ethernet interfaces
3964K bytes of non-volatile configuration memory.

500472K bytes of Internal ATA PCMCIA card (Sector size 512 bytes).

--- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: n

Press RETURN to get started!

*Jan 4 11:24:57.547: RP: Currently running ROMMON from S (Gold) region
*Jan 4 11:24:57.671: %MLS_RATE-6-ENABLING_RL_DEFAULT: TTL rate-limiter is set to default value
*Jan 4 11:24:57.671: %MLS_RATE-6-ENABLING_RL_DEFAULT: MTU rate-limiter is set to default value
*Jan 4 11:24:57.907: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
*Jan 4 11:25:05.723: %SYS-5-RESTART: System restarted --
Cisco IOS Software, c7600rsp72043_rp Software (c7600rsp72043_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 15-Sep-11 03:20 by prod_rel_team
*Jan 4 11:23:50.519: %SYS-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure console debugging output.

Firmware compiled 30-Jun-11 13:52 by integ Build [100]
*Jan 4 11:24:15.175: %ONLINE-SP-6-DNLDFAIL: Module 6, Proc. 1, Runtime image download failed because of scp send failure
*Jan 4 11:24:54.879: %SPANTREE-SP-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
*Jan 4 11:24:55.079: SP: SP: Currently running ROMMON from S (Gold) region
*Jan 4 11:25:05.915: %SYS-SP-5-RESTART: System restarted --
Cisco IOS Software, c7600rsp72043_sp Software (c7600rsp72043_sp-ADVIPSERVICESK9-M), Version 12.2(33)SRE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 15-Sep-11 03:27 by prod_rel_team
*Jan 4 11:25:07.895: %OIR-SP-6-INSPS: Power supply inserted in slot 1
*Jan 4 11:25:07.899: %C7600_PWR-SP-4-PSOK: power supply 1 turned on.
*Jan 4 11:25:10.484: %FABRIC-SP-5-CLEAR_BLOCK: Clear block option is off for the fabric in slot 6.
*Jan 4 11:25:10.568: %FABRIC-SP-5-FABRIC_MODULE_ACTIVE: The Switch Fabric Module in slot 6 became active.
*Jan 4 11:25:12.521: %DIAG-SP-6-RUN_MINIMUM: Module 6: Running Minimal Diagnostics...
*Jan 4 11:25:16.751: %DIAG-SP-6-DIAG_OK: Module 6: Passed Online Diagnostics
*Jan 4 11:25:17.127: %OIR-SP-6-INSCARD: Card inserted in slot 6, interfaces are now online
Router>en
Router#ter len 0
Router#wr er
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
Router#
*Jan 4 11:25:40.831: %SYS-SP-7-NV_BLOCK_INIT: Initialized the geometry of nvram
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#config-
Router(config)#config-register 0x2102
Router(config)#^Z
Router#re
*Jan 4 11:26:00.255: %SYS-5-CONFIG_I: Configured from console by consoleload

System configuration has been modified. Save? [yes/no]: n
Proceed with reload? [confirm]