Cisco 891-W "Access Verification"

[sjackowski]

Recieved this unit from an individual who has very little knowledge (like myself) with the 800 series.

I'm having issues just getting into this device, when I power it on and console into the unit i am presented with an "Access Verification" prompt that requires credentials that I do not have/know.

At some point (not sure how) I managed to get to a "yourname#" prompt at which point I configured using this document here and created a username and password and some other basic settings, I saved the config and did a reload and it takes me right back to that "Access Verification" prompt.

Sould I be using the CCPE to gain access to this device instead? Is there a way to recover that "Access Verification" username and pass? How did I ever get to that "yourname#" prompt?

[Abzal]

Hi,

If it was previously configured and used then you may need to do password recovery. And you may try login - cisco, passowrd - cisco.

http://www.cisco.com/en/US/products/hw/routers/ps380/products_password_recovery09186a00800942bc.shtml

And here is how you can do basic configuration of username and password on vty:

conf t

username admin priv 15 secret @dm!n

line vty 0 15

login local

no password

line con 0

no login

no password

It allows you to connect via console without any password and login, but via telnet it will ask login/password.

Hope it will help.

Best regards,
Abzal

[sjackowski]

OK, I followed the procedure as outlined in that link but I only see the passwords I set when I was able to get to the "initial config dialog" after somehow getting to that "yourname#" prompt.

At any rate as I said before I followed the procedure and did reset the seceret password just for kicks (I already knew what that was) and saved, now every time I reboot I get to the "initial config dialog" prompt again, I will go through it again I suppose... at this point, how can I just get into the ccpe and try to make some changes that way, I just want this setup real basic right now configured after my Time Warner cable modem and handing out DHCP.

***update***

I did mange to give FastEthernet8 an IP address of 10.10.10.5 and can ping when I hook laptop into that port put cannot get to web page. If I do a "show run" it displays FastEthernet8 with "10.10.10.5 255.0.0.0 / no ip route-cache / duplex half." Should I change that subnet?

***update***

I simply set my static ip of 10.10.10.66 and my net mask at 255.0.0.0 and I am now at a login screen but I'm embarred to say I'm not sure of the username? I dont ever remember creating one?

***update***

Sorry for all the updates, things are moving fast now.

I managed to create username and pass by the following command:

Router(config)# username privilege 15 password 0

I now can log in but it is asking me to change the username and password everytime I log into the CP Express? then a message pops up stating

"Cisco CP Express cannot connect to your router "IO Exception" "please check connection"??

So I cant get past the login? Why will the changes not stick?

[sjackowski]

Well I managed to get into the ccpe many times... and after all the work above I saved config and pulled plug and plugged back in and nothing saved!!

So I'm back to square one.. why is nothing saving???

Here is my config:

!

! Last configuration change at 00:59:20 UTC Sun Jan 27 2013 by cisco2

! NVRAM config last updated at 01:00:07 UTC Sun Jan 27 2013 by cisco2

! NVRAM config last updated at 01:00:07 UTC Sun Jan 27 2013 by cisco2

version 15.1

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname 891

!

boot-start-marker

boot-end-marker

!

!

enable secret 5 $1$NEo3$vKhriHJTWWvuUH91t/4T2/

enable password "password"

!

no aaa new-model

!

service-module wlan-ap 0 bootimage autonomous

crypto pki token default removal timeout 0

!

!

ip source-route

no ip routing

!

!

!

!

!

no ip cef

no ipv6 cef

!

!

!

!

multilink bundle-name authenticated

!

!

!

!

!

!

license udi pid CISCO891W-AGN-A-K9 sn FTX163086U5

!

!

username cisco1 privilege 15 secret 4 gMj8cDXfU6CzFI9r1WoD5G6GTI5KwVY2O2lU2DSTP4c

username cisco2 privilege 15 secret 4 6yU7cyZFSWW4QGtgFIB/eBlLIAvZBlES6kZS.IBYhO6

!

!

!

!

!

!

!

!

!

!

!

interface FastEthernet0

no ip address

shutdown

!

interface FastEthernet1

no ip address

shutdown

!

interface FastEthernet2

no ip address

shutdown

!

interface FastEthernet3

no ip address

shutdown

!

interface FastEthernet4

no ip address

shutdown

!

interface FastEthernet5

no ip address

shutdown

!

interface FastEthernet6

no ip address

shutdown

!

interface FastEthernet7

no ip address

shutdown

!

interface FastEthernet8

ip address 10.10.10.5 255.0.0.0

no ip route-cache

duplex half

speed auto

!

interface GigabitEthernet0

no ip address

no ip route-cache

shutdown

duplex auto

speed auto

!

interface wlan-ap0

description Service module interface to manage the embedded AP

no ip address

no ip route-cache

shutdown

arp timeout 0

!

interface Wlan-GigabitEthernet0

description Internal switch interface connecting to the embedded AP

no ip address

!

interface Vlan1

ip address 192.168.1.15 255.255.255.0

no ip route-cache

!

interface Async1

no ip address

encapsulation slip

no ip route-cache

!

ip forward-protocol nd

!

!

ip http server

ip http authentication local

no ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

!

!

!

!

!

snmp-server community public RO

!

control-plane

!

!

!

!

mgcp profile default

!

!

!

!

!

line con 0

line 1

modem InOut

stopbits 1

speed 115200

flowcontrol hardware

line 2

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin udptn ssh

line aux 0

line vty 0 4

privilege level 15

password password

login local

transport input telnet

transport output telnet

line vty 5 15

privilege level 15

login local

transport input telnet

transport output telnet

!

end

[jj27 · Accepted solution]

The configuration register probably needs changed.

Enter command: config-register 0x2102

Save config and reboot. Your config should be retained.


Sent from Cisco Technical Support Android App

[sjackowski]

jjohnston1127 wrote:
The configuration register probably needs changed.

Enter command: config-register 0x2102

Save config and reboot. Your config should be retained.


Sent from Cisco Technical Support Android App

Thank you!! This did the trick, can you explain why?

[jj27]

The most common reason the configuration register, in my experience, is for password recovery. If you boot into ROMMON mode and set the configuration register to 0x2142 (what I'm guessing yours was, in this case) it will bypass the NVRAM contents (startup-config) and boot like it is a brand new router so you can setup the username, password, etc.  The configuration register 0x2102 is the default and is a common mistake to forget to change it back after recovery.

[sjackowski]

Any tips for basic setup between cable modem and SG300 L3 switch? I just want to be able to hand out some IP's to a few machines. Will I connect modem to FE 8 or WAN GE 0? Thanks again.