12-28-2024 03:51 PM
I've been task to go through some inventory and I've came across a Catalyst 3650 that I can't seem to rest and not sure why. Since I don't know the username or password I am entering ROM mode
I initialize the flash
Booting...
flash_init
boot
switch: flash_init
Initializing Flash...
flashfs[7]: 0 files, 1 directories
flashfs[7]: 0 orphaned files, 0 orphaned directories
flashfs[7]: Total bytes: 6784000
flashfs[7]: Bytes used: 1024
flashfs[7]: Bytes available: 6782976
flashfs[7]: flashfs fsck took 2 seconds....done Initializing Flash.
I want to show that my file systems are read only so I can't just delete the files in flash
switch: dir
xmodem[0]: (read-only)
null[1]: (read-write)
bs[3]: (read-only)
flash[18]: (read-only)
tftp[19]: (read-write)
ftp[20]: (read-only)
http[21]: (read-only)
I set the ignore start up configure to true
switch: set SWITCH_IGNORE_STARTUP_CFG = 1
switch: boot
From here it starts to boot and eventually I get back to the username/password, I've done this serval times on other switches but this time I'm not able to bypass the startup config. to factory reset it. here is what happens
Getting rest of image
Reading full image into memory...Check base package header ...: done = 16384
Getting rest of image
Reading full image into memory....done
Reading full base package into memory...: done = 32795564
Bundle Image
--------------------------------------
Kernel Address : 0x5377c3c4
Kernel Size : 0x4381df/4424159
Initramfs Address : 0x53bb45a3
Initramfs Size : 0x1ab5e09/28007945
Compression Format: mzip
Bootable image at @ ram:0x5377c3c4
Bootable image segment 0 address range [0x81100000, 0x81da5280] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 623
Loading Linux kernel with entry point 0x81895bf0 ...
Bootloader: Done loading app on core_mask: 0xf
### Launching Linux Kernel (flags = 0x5)
Linux version 4.9.187 (sumikum7@sjc-ads-5670) (gcc version 5.3.0 (GCC) ) #1 SMP Fri Nov 19 03:09:46 PST 2021
CVMSEG size: 2 cache lines (256 bytes)
Cavium Inc. SDK-5.1.0
bootconsole [early0] enabled
CPU0 revision is: 000d900a (Cavium Octeon II)
Checking for the multiply/shift bug... no.
Checking for the daddiu bug... no.
%IOSXEBOOT-a5d0a45363676f12d25f956ac5d347ad-new_cksum: (rp/0): 4
%IOSXEBOOT-a5d0a45363676f12d25f956ac5d347ad-saved_cksum: (rp/0): 4
Final tar file: mcu_ucode_bundle_8_1_0.tar
Both links down, not waiting for other switches
Switch number is 1
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software [Gibraltar], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 16.12.7, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Wed 02-Feb-22 07:28 by mcpre
This software version supports only Smart Licensing as the software licensing mechanism.
PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO SOFTWARE PRODUCT, PRODUCT FEATURE,
AND/OR SUBSEQUENTLY PROVIDED SOFTWARE FEATURES (COLLECTIVELY, THE
"SOFTWARE"), AND/OR USING SUCH SOFTWARE CONSTITUTES YOUR FULL
ACCEPTANCE OF THE FOLLOWING TERMS. YOU MUST NOT PROCEED FURTHER IF YOU
ARE NOT WILLING TO BE BOUND BY ALL THE TERMS SET FORTH HEREIN.
Your use of the Software is subject to the Cisco End User License Agreement
(EULA) and any relevant supplemental terms (SEULA) found at
http://www.cisco.com/c/en/us/about/legal/cloud-and-software/software-terms.html.
You hereby acknowledge and agree that certain Software and/or features are
licensed for a particular term, that the license to such Software and/or
features is valid only for the applicable term and that such Software and/or
features may be shut down or otherwise terminated by Cisco after expiration
of the applicable license term (e.g., 90-day trial period). Cisco reserves
the right to terminate any such Software feature electronically or by any
other means available. While Cisco may provide alerts, it is your sole
responsibility to monitor your usage of any such term Software feature to
ensure that your systems and networks are prepared for a shutdown of the
Software feature.
FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found, FIPS Mode Not Enabled
All TCP AO KDF Tests Pass
cisco WS-C3650-48PS (MIPS) processor (revision H0) with 794816K/6147K bytes of memory.
Processor board ID FDO1926E2J3
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
250456K bytes of Crash Files at crashinfo:.
1609272K bytes of Flash at flash:.
0K bytes of WebUI ODM Files at webui:.
Base Ethernet MAC Address : 18:8b:9d:73:96:80
Motherboard Assembly Number : 73-15901-04
Motherboard Serial Number : FDO19261LAF
Model Revision Number : H0
Motherboard Revision Number : A0
Model Number : WS-C3650-48PS
System Serial Number : FDO1926E2J3
WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Press RETURN to get started!
Any help is greatly appreciated
12-28-2024 04:11 PM
12-28-2024 04:18 PM
when I try this I get the following read only error:
switch: set SWITCH_DISABLE_PASSWORD_RECOVERY = 0
Can't set variable "SWITCH_DISABLE_PASSWORD_RECOVERY" -- is readonly.
12-28-2024 04:31 PM
The readonly message is expected.
Try to boot the switch
12-28-2024 05:43 PM
I get the same behavior where I'm booted and need creds
12-28-2024 05:08 PM - edited 12-28-2024 05:21 PM
@befox2261 wrote:switch: set SWITCH_IGNORE_STARTUP_CFG = 1 switch: set SWITCH_DISABLE_PASSWORD_RECOVERY = 0
These syntax is wrong.
Someone has put "decorations" and added a space. The correct syntax should be:
set SWITCH_IGNORE_STARTUP_CFG=1
set SWITCH_DISABLE_PASSWORD_RECOVERY=0
No space.
12-28-2024 05:47 PM
switch: set SWITCH_IGNORE_STARTUP_CFG=1
Can't set variable with illegal char "=" (0x3d) in name.
switch: set SWITCH_DISABLE_PASSWORD_RECOVERY=0
Can't set variable with illegal char "=" (0x3d) in name.
I get the following errors trying to do it without spaces
12-28-2024 06:35 PM
If the switch is in ROMMON, post the complete output to the command "set".
12-28-2024 07:16 PM
switch: set
?=
ABNORMAL_RESET_COUNT=0
AUTO_SWITCH_CONSOLE_DISABLE=0
BOOT=flash:packages.conf;
BSI=0
BYPASS_STARTUP_CONFIG== 1
CALL_HOME_DEBUG=0000000000000
CFG_MODEL_NUM=WS-C3650-48FS-S
CLEI_CODE_NUMBER=IPMV610BRB
CSR_PCIERST_DISCONNECTED=yes
DC_COPY=yes
D_STACK_DOMAIN_NUM=1
ECI_CODE_NUMBER=467899
LICENSE_BOOT_LEVEL=ipbasek9,all:C3650_48;
LINUX_COREMASK=15
MAC_ADDR=18:8b:9d:73:96:80
MANUAL_BOOT=no
MODEL_NUM=WS-C3650-48PS
MODEL_REVISION_NUM=H0
MOTHERBOARD_ASSEMBLY_NUM=73-15901-04
MOTHERBOARD_REVISION_NUM=A0
MOTHERBOARD_SERIAL_NUM=FDO19261LAF
POE1_ASSEMBLY_NUM=73-16439-01
POE1_REVISION_NUM=A0
POE1_SERIAL_NUM=FDO1926185P
POE2_ASSEMBLY_NUM=73-16439-01
POE2_REVISION_NUM=A0
POE2_SERIAL_NUM=FDO1926185Q
RANDOM_NUM=333891276
RECOVERY_BUNDLE=sda9:cat3k_caa-recovery.bin
RET_2_RTS=20:58:31 CDT Thu Apr 14 2022
SWITCH=_IGNORE_STARTUP = 1
SWITCH_IGNORE_STARTUP== 1
SWITCH_IGNORE_STARTUP_CFG==1
SWITCH_NUMBER=1
SYSTEM_SERIAL_NUM=FDO1926E2J3
TAN_NUM=800-41231-01
TAN_REVISION_NUMBER=C0
TEMPLATE=advanced
TERMLINES=0
VERSION_ID=V02
boot=?
bypass_startu_config=1
bypass_startup_config=1
bypass_stgartup_config=1
set=BYPASS_STARTUP_CONFIG = 1
switch_IGNORE_STARTUP_CFG=1
here ya go
12-28-2024 09:42 PM
@befox2261 wrote:
bypass_startu_config=1 bypass_startup_config=1 bypass_stgartup_config=1 set=BYPASS_STARTUP_CONFIG = 1 switch_IGNORE_STARTUP_CFG=1
Well, even though these variables are incorrect, someone entered them without spaces and they work.
Is there a ROMMON command "unset ALL"?
12-29-2024 08:34 AM
just wanted to take the time to thank you as well, I'm sure we would of gotten to the same result eventually
12-29-2024 02:05 AM
Hi @befox2261
You have lot of variables but nothing exactly matches the required one.
Could you please give a try to set the variable in rommon without the "set" keyword as a prefix. Just copy paste the below command in rommon and try.
SWITCH_IGNORE_STARTUP_CFG=1
Refer Page 315 in this doc and follow the steps.
12-29-2024 08:25 AM
never did this before without the "set" command but seem to work in this case, thanks for the help!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide