Recovery password Cisco2801 with "no service password-recovery"

Cristian Rimondi · ‎05-02-2012

hi,

i need to recover a router Cisco 2801.

I lost the password and the "no service password-recovery" is configured.

I have done many attempts with the procedure in this link :

http://www.cisco.com/en/US/partner/docs/ios/12_3/12_3y/12_3ya8/gtnsvpwd.html

but with no results.

Could someone help me ?

Leo Laohoo · ‎05-02-2012

1. Eject the CF;

2. Go here: http://www.heinzulm.com/password.php

Cristian Rimondi · ‎05-02-2012

I've tested your solution, but it does not work.

In the link that you wrote, there are the instruction for a Cisco2600.

Leo Laohoo · ‎05-02-2012

In the link that you wrote, there are the instruction for a Cisco2600.

2600 or 2800 are almost the same. Eject the CF and make sure your "Break" is working fine. Do the exact thing as instructed.

Ejecting the CF means that it won't boot the IOS (something the 2600 doesn't have and gives you an advantage.

Manuel Muetsch · ‎05-02-2012

Do you want to keep the startup-config or do you just want to gain access over your router?

In the last case i woul like to refer you to the following document:

http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a00801d8113.shtml

paolo bevilacqua · ‎05-02-2012

Manuel Muetsch wrote:

Do you want to keep the startup-config or do you just want to gain access over your router?

In the last case i woul like to refer you to the following document:

http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a00801d8113.shtml

Maybe you do not undertsand OP problem.

no service password-recovery == router locked !

Manuel Muetsch · ‎05-03-2012

I thought about the last part:

There are only a few methods you can use to recover from a lost password, but all of them destroy the start-up configuration.

Routers that have nonvolatile RAM (NVRAM) chips can be removed and reseated. The NVRAM is implemented with battery-backed up static RAM (SRAM). If you remove the SRAM, the contents of NVRAM are erased as well as the no service password-recovery configuration. Be sure to use proper anti-static procedures when you handle the NVRAM. Some of these routers are 3640 and 3660.
Other routers, such as the 1700, 2600, and 3620, use an electrically erasable programmable read-only memory (EEPROM) in order to hold the configuration. The EEPROM does not erase when you remove it.
Another method is to reload or boot the router with console access, and press CTRL-BREAK within five to ten seconds of the Cisco IOS software image decompressing or roughly when the "Image text-base:... " part of the banner begins. You are then prompted to reset the router to factory default (erase start-up configuration).

System Bootstrap, Version 11.1(19)AA, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
Copyright (c) 1998 by Cisco Systems, Inc.
C3600 processor with 65536 Kbytes of main memory
Main memory is configured to 64 bit mode with parity enabled

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
program load complete, entry point: 0x80008000, size: 0x10ce394
Self decompressing the image : #########################################################
########################################################################################
#######################################################################    [OK]

Smart Init is disabled. IOMEM set to: 10 

Using iomem percentage: 10

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco Internetwork Operating System Software 
IOS (tm) 3600 Software (C3640-IS-M), Version 12.3(3), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2003 by Cisco Systems, Inc.
Compiled Mon 18-Aug-03 19:03 by dchih
Image text-base: 0x60008950, data-base: 0x61B3E000

PASSWORD RECOVERY IS DISABLED
Do you want to reset the router to factory default
configuration and proceed [y/n] ?
Reset router configuration to factory default.
Cisco 3640 (R4700) processor (revision 0x00) with 59392K/6144K bytes of memory.
Processor board ID 09196037
R4700 CPU at 100Mhz, Implementation 33, Rev 1.0
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
2 Ethernet/IEEE 802.3 interface(s)
2 Voice FXO interface(s)
2 Voice FXS interface(s)
DRAM configuration is 64 bits wide with parity enabled.
125K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
8192K bytes of processor board PCMCIA Slot0 flash (Read/Write)
20480K bytes of processor board PCMCIA Slot1 flash (Read/Write)
[OK][OK]
SETUP: new interface Ethernet0/0 placed in "shutdown" state
SETUP: new interface Ethernet1/0 placed in "shutdown" state

Press RETURN to get started!

Router>

Cristian Rimondi · ‎05-03-2012

Thanks to all, but your information is incorrect.

Manuel, I don't care to save the configuration on the router, I want to reuse the router and do I have to be able to delete the passord. Your instructions are incorrect because they are not for 2800 series routers. I have already tried without success.
Leolahoo, I have Ejected the CF and I'm sure that my "Break" is working fine. But without the CF The Router loop this message :

System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

PLD version 0x10

GIO ASIC version 0x127

c2801 platform with 262144 Kbytes of main memory

Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED

flash: CompactFlash not present.

More over the procedure of Russian vodka drinking does not work.

Again, my router is the 2800 series. My question is: Is there a procedure to reset the entire configuration is present when the command "no service password-recovery" and I do not remember your password?

Thanks

Leo Laohoo · ‎05-03-2012

I have no idea how this is not working. The first time I saw this page I tried it with my 2850. But instead of following the page explicitly I ejected the CF and performed the Ctrl+Break when you reach this area:

IOS (tm) C2600 Software (C2600-JO3S56I-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)

Compiled Tue 07-Dec-99 07:11 by phanguye

Image text-base: 0x80008088, data-base: 0x8107A5D0 !!!!!!Issued Break Sequence Here

paolo bevilacqua · ‎10-28-2014

In this case you must send break immediately after IOS has finished loading - the timing is critical.

You will be prompted with:

Do you want to reset the router to factory default configuration and proceed [y/n] ?

Enter 'y', router will reset to factory default and restart.

Note, you may need to replace the the IOS image on compact flash with a recent one for this to work.