cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
871
Views
0
Helpful
12
Replies

Catalyst 3650 can't reset

befox2261
Level 1
Level 1

I've been task to go through some inventory and I've came across a Catalyst 3650 that I can't seem to rest and not sure why. Since I don't know the username or password I am entering ROM mode 

I initialize the flash

Booting...

flash_init
boot

switch: flash_init
Initializing Flash...

flashfs[7]: 0 files, 1 directories
flashfs[7]: 0 orphaned files, 0 orphaned directories
flashfs[7]: Total bytes: 6784000
flashfs[7]: Bytes used: 1024
flashfs[7]: Bytes available: 6782976
flashfs[7]: flashfs fsck took 2 seconds....done Initializing Flash.

I want to show that my file systems are read only so I can't just delete the files in flash

switch: dir

xmodem[0]: (read-only)
null[1]: (read-write)
bs[3]: (read-only)
flash[18]: (read-only)
tftp[19]: (read-write)
ftp[20]: (read-only)
http[21]: (read-only)

I set the ignore start up configure to true

switch: set SWITCH_IGNORE_STARTUP_CFG = 1

switch: boot

From here it starts to boot and eventually I get back to the username/password, I've done this serval times on other switches but this time I'm not able to bypass the startup config. to factory reset it. here is what happens 

Getting rest of image
Reading full image into memory...Check base package header ...: done = 16384
Getting rest of image
Reading full image into memory....done
Reading full base package into memory...: done = 32795564
Bundle Image
--------------------------------------
Kernel Address : 0x5377c3c4
Kernel Size : 0x4381df/4424159
Initramfs Address : 0x53bb45a3
Initramfs Size : 0x1ab5e09/28007945
Compression Format: mzip

Bootable image at @ ram:0x5377c3c4
Bootable image segment 0 address range [0x81100000, 0x81da5280] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 623
Loading Linux kernel with entry point 0x81895bf0 ...
Bootloader: Done loading app on core_mask: 0xf

### Launching Linux Kernel (flags = 0x5)

Linux version 4.9.187 (sumikum7@sjc-ads-5670) (gcc version 5.3.0 (GCC) ) #1 SMP Fri Nov 19 03:09:46 PST 2021
CVMSEG size: 2 cache lines (256 bytes)
Cavium Inc. SDK-5.1.0
bootconsole [early0] enabled
CPU0 revision is: 000d900a (Cavium Octeon II)
Checking for the multiply/shift bug... no.
Checking for the daddiu bug... no.
%IOSXEBOOT-a5d0a45363676f12d25f956ac5d347ad-new_cksum: (rp/0): 4
%IOSXEBOOT-a5d0a45363676f12d25f956ac5d347ad-saved_cksum: (rp/0): 4

Final tar file: mcu_ucode_bundle_8_1_0.tar

Both links down, not waiting for other switches
Switch number is 1

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

 

Cisco IOS Software [Gibraltar], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 16.12.7, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Wed 02-Feb-22 07:28 by mcpre


This software version supports only Smart Licensing as the software licensing mechanism.


PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO SOFTWARE PRODUCT, PRODUCT FEATURE,
AND/OR SUBSEQUENTLY PROVIDED SOFTWARE FEATURES (COLLECTIVELY, THE
"SOFTWARE"), AND/OR USING SUCH SOFTWARE CONSTITUTES YOUR FULL
ACCEPTANCE OF THE FOLLOWING TERMS. YOU MUST NOT PROCEED FURTHER IF YOU
ARE NOT WILLING TO BE BOUND BY ALL THE TERMS SET FORTH HEREIN.

Your use of the Software is subject to the Cisco End User License Agreement
(EULA) and any relevant supplemental terms (SEULA) found at
http://www.cisco.com/c/en/us/about/legal/cloud-and-software/software-terms.html.

You hereby acknowledge and agree that certain Software and/or features are
licensed for a particular term, that the license to such Software and/or
features is valid only for the applicable term and that such Software and/or
features may be shut down or otherwise terminated by Cisco after expiration
of the applicable license term (e.g., 90-day trial period). Cisco reserves
the right to terminate any such Software feature electronically or by any
other means available. While Cisco may provide alerts, it is your sole
responsibility to monitor your usage of any such term Software feature to
ensure that your systems and networks are prepared for a shutdown of the
Software feature.

FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found, FIPS Mode Not Enabled

All TCP AO KDF Tests Pass
cisco WS-C3650-48PS (MIPS) processor (revision H0) with 794816K/6147K bytes of memory.
Processor board ID FDO1926E2J3
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
250456K bytes of Crash Files at crashinfo:.
1609272K bytes of Flash at flash:.
0K bytes of WebUI ODM Files at webui:.

Base Ethernet MAC Address : 18:8b:9d:73:96:80
Motherboard Assembly Number : 73-15901-04
Motherboard Serial Number : FDO19261LAF
Model Revision Number : H0
Motherboard Revision Number : A0
Model Number : WS-C3650-48PS
System Serial Number : FDO1926E2J3


WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type


Press RETURN to get started!

Any help is greatly appreciated

 

12 Replies 12

@befox2261 

Did you check this

SWITCH_DISABLE_PASSWORD_RECOVERY=0

when I try this I get the following read only error:

switch: set SWITCH_DISABLE_PASSWORD_RECOVERY = 0
Can't set variable "SWITCH_DISABLE_PASSWORD_RECOVERY" -- is readonly.

The readonly message is expected. 

 

Try to boot the switch 

I get the same behavior where I'm booted and need creds

Leo Laohoo
Hall of Fame
Hall of Fame

@befox2261 wrote:
switch: set SWITCH_IGNORE_STARTUP_CFG = 1
switch: set SWITCH_DISABLE_PASSWORD_RECOVERY = 0

These syntax is wrong.  

Someone has put "decorations" and added a space.  The correct syntax should be: 

 

set SWITCH_IGNORE_STARTUP_CFG=1
set SWITCH_DISABLE_PASSWORD_RECOVERY=0

No space.  

 

 

switch: set SWITCH_IGNORE_STARTUP_CFG=1
Can't set variable with illegal char "=" (0x3d) in name.

switch: set SWITCH_DISABLE_PASSWORD_RECOVERY=0
Can't set variable with illegal char "=" (0x3d) in name.

I get the following errors trying to do it without spaces 

If the switch is in ROMMON, post the complete output to the command "set".

switch: set
?=
ABNORMAL_RESET_COUNT=0
AUTO_SWITCH_CONSOLE_DISABLE=0
BOOT=flash:packages.conf;
BSI=0
BYPASS_STARTUP_CONFIG== 1
CALL_HOME_DEBUG=0000000000000
CFG_MODEL_NUM=WS-C3650-48FS-S
CLEI_CODE_NUMBER=IPMV610BRB
CSR_PCIERST_DISCONNECTED=yes
DC_COPY=yes
D_STACK_DOMAIN_NUM=1
ECI_CODE_NUMBER=467899
LICENSE_BOOT_LEVEL=ipbasek9,all:C3650_48;
LINUX_COREMASK=15
MAC_ADDR=18:8b:9d:73:96:80
MANUAL_BOOT=no
MODEL_NUM=WS-C3650-48PS
MODEL_REVISION_NUM=H0
MOTHERBOARD_ASSEMBLY_NUM=73-15901-04
MOTHERBOARD_REVISION_NUM=A0
MOTHERBOARD_SERIAL_NUM=FDO19261LAF
POE1_ASSEMBLY_NUM=73-16439-01
POE1_REVISION_NUM=A0
POE1_SERIAL_NUM=FDO1926185P
POE2_ASSEMBLY_NUM=73-16439-01
POE2_REVISION_NUM=A0
POE2_SERIAL_NUM=FDO1926185Q
RANDOM_NUM=333891276
RECOVERY_BUNDLE=sda9:cat3k_caa-recovery.bin
RET_2_RTS=20:58:31 CDT Thu Apr 14 2022
SWITCH=_IGNORE_STARTUP = 1
SWITCH_IGNORE_STARTUP== 1
SWITCH_IGNORE_STARTUP_CFG==1
SWITCH_NUMBER=1
SYSTEM_SERIAL_NUM=FDO1926E2J3
TAN_NUM=800-41231-01
TAN_REVISION_NUMBER=C0
TEMPLATE=advanced
TERMLINES=0
VERSION_ID=V02
boot=?
bypass_startu_config=1
bypass_startup_config=1
bypass_stgartup_config=1
set=BYPASS_STARTUP_CONFIG = 1
switch_IGNORE_STARTUP_CFG=1

here ya go


@befox2261 wrote:
bypass_startu_config=1
bypass_startup_config=1
bypass_stgartup_config=1
set=BYPASS_STARTUP_CONFIG = 1
switch_IGNORE_STARTUP_CFG=1​

Well, even though these variables are incorrect, someone entered them without spaces and they work.  

Is there a ROMMON command "unset ALL"?

 

just wanted to take the time to thank you as well, I'm sure we would of gotten to the same result eventually

Devaa
Spotlight
Spotlight

Hi @befox2261 

You have lot of variables but nothing exactly matches the required one.

Could you please give a try to set the variable in rommon without the "set" keyword as a prefix. Just copy paste the below command in rommon and try.

SWITCH_IGNORE_STARTUP_CFG=1

Refer Page 315 in this doc and follow the steps. 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/3se/system_management/configuration_guide/b_sm_3se_3650_cg.pdf

never did this before without the "set" command but seem to work in this case, thanks for the help!