10-31-2024 12:54 PM
Hi, all,
As noted in another post (which I still haven't been able to resolve) after generating a certificate I can no longer get into the router. Any attempt to access it gets the response "502 Bad Gateway", even after a hard reset.
I can get into port 8007 but the default userid/password of cisco/cisco do not work. Does anyone know of a userid/password combination which will allow access though this port? I can't find anything on the internet about it.
TIA.
Jerry
Solved! Go to Solution.
11-01-2024 11:11 AM
Ah, SUCCESS, finally!
I ran nmap to find the open ports. I also found 8008 and 8443 were open. I had previously tried port 8008 but not 8443. I used https://192.168.1.1:8443 and was able to get the login page. The default cisco/cisco worked and I was able to reset the router to factory default including certificate and I'm back in business.
Thanks very much for those who tried to help. I really appreciate the assistance. And I hope in the future this will help someone else who has the same problem.
10-31-2024 01:10 PM
The default user/pass for this device is cisco/cisco. If that does not work, maybe the device is still using the last credential you added to it.
10-31-2024 08:27 PM
Thanks, Flavio, but while cisco/cisco is the default user/pass for port 80, that does not seem to be the case for port 8007. And yes, I tried the last credentials, also with no luck.
Thanks for the response, though.
11-01-2024 04:28 AM
It should be otherwise we should create different users and pass on the router.
One last suggestion I have is get a console cable and try to access it using CLI. If you succeed, you can change the password for GUI.
11-01-2024 09:57 AM
I can think of several reasons why one would want a different password for port 8007. If nothing else, for accessing the GUI if the regular password is lost.
Unfortunately I hadn't gotten far enough to enable SSL, so the CLI isn't available to me.
But the problem is not the password for the GUI. When I try to access the GUI normally I get back 502 Bad Gateway. The problem is a bad certificate because it happened right after I tried to create a certificate and the system hung. But I can't get into it to do anything about it. I'm just hoping to be able to get in via port 8007 and clear the certificate.
Thanks for the suggestions.
11-01-2024 12:57 AM - edited 11-01-2024 12:58 AM
May be you need to try reset to factory - turn off the kit (remove all the cables and do the Factory reset) - do not connect any cables.
and check you have web Acces and do the upgrade to latest firmware before you add any cables or connect any other cables (use only mgmt PC to do the task)
there were vulnerability if you connect to internet have exploits :
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20190123-rv-info.html
11-01-2024 10:12 AM
Thanks for the suggestions, but I've already been though all of these things. The first thing I did when I opened the box was to update it to the latest firmware. Since then I tried downgrading it to the previous version with no luck there, either. There are no older versions that I can find (one person with this problem several years ago went back to a previous version which is no longer available).
I've also done a factory reset but that didn't help, either. The problem is I have a bad certificate on the box (this started when I tried to create a certificate and the system hung). A factory reset does not clear the certificates. That can only be done through the GUI. And of course I can't do it through the GUI.
I would just hope that accessing though port 8007 doesn't look at the certificate and would let me clear the bad one. Otherwise, the only other access I have is through tftp - and I don't know of any way to clear the bad certificate through that access.
But thanks for the suggestions. They are all very good. Unfortunately, they are also all tried.
11-01-2024 11:11 AM
Ah, SUCCESS, finally!
I ran nmap to find the open ports. I also found 8008 and 8443 were open. I had previously tried port 8008 but not 8443. I used https://192.168.1.1:8443 and was able to get the login page. The default cisco/cisco worked and I was able to reset the router to factory default including certificate and I'm back in business.
Thanks very much for those who tried to help. I really appreciate the assistance. And I hope in the future this will help someone else who has the same problem.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide