Cisco Nexus 3000 Password Recovery

[fredrichdarren]

Hi everyone,

I am trying to recover the console password of a Cisco Nexus 3000; however, for some weird reason, whatever I am trying is not working. Using CTRL + C, I am able login to the “switch(boot)#” The switch does not take the command “dir” I tried multiple videos from YouTube, but it is not working. Is there any other way to fix this? 

Please see below

switch(boot)(config)#
switch(boot)(config)#
switch(boot)(config)# admin-password
WARNING! Enabling local authentication for login through console due to password recovery
switch(boot)(config

switch(boot)(config)# dir
^
% invalid command detected at '^' marker.

switch(boot)(config)# exit
switch(boot)# dir

Usage for bootflash: filesystem
84451328 bytes used
334979072 bytes free
419430400 bytes total

switch(boot)# dir bootflash:

Usage for bootflash: filesystem
84451328 bytes used
334979072 bytes free
419430400 bytes total
switch(boot)#

This is the switch booting after a power cycle

GRUB Loading stage2
[ 0.000000] Fastboot Memory at 0c100000 of size 2013265922.U3.4.bin....
ÿUsage: init 0123POST INIT Starts at Mon May 20 18:28:42 UTC 2024
Starting Nexus 3000 Platform POST.....
Executing Mod 1 1 SEEPROM Test:...done (0 seconds)
Executing Mod 1 1 GigE Port Test:.done (8 seconds)
Executing Mod 1 1 PCIE Test:.................done (0 seconds)
Mod 1 1 Post Completed Successfully
POST is completed
.... done.
Loading System Software Mon May 20 18:29:07 UTC 2024

System Software(/bootflash/n3000-uk9.6.0.2.U3.4.bin) Loaded Mon May 20 18:29:28 UTC 2024
ethernet switching mode
cp: cannot stat `/isan/etc/capability.cap': No such file or directory
INIT: Entering runlevel: 3
Mounting other filesystems: [ OK ]

Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config
Added VLAN with VID == 4042 to IF -:muxif:-
2024 May 20 18:29:36 Block_003 %$ VDC-1 %$ %USER-0-SYSTEM_MSG: FAST REBOOT DISABLED - bcm_usd
2024 May 20 18:29:37 Block_003 %$ VDC-1 %$ %USER-2-SYSTEM_MSG: CLIS: loading cmd files begin - clis
2024 May 20 18:29:48 Block_003 %$ VDC-1 %$ %USER-2-SYSTEM_MSG: CLIS: loading cmd files end - clis
2024 May 20 18:29:48 Block_003 %$ VDC-1 %$ %USER-2-SYSTEM_MSG: CLIS: init begin - clis
2024 May 20 18:30:10 Block_003 %$ VDC-1 %$ %USER-0-SYSTEM_MSG: Starting bcm_attach - bcm_usd
2024 May 20 18:30:13 Block_003 %$ VDC-1 %$ %USER-0-SYSTEM_MSG: Finished bcm_attach... - bcm_usd
2024 May 20 18:30:31 Block_003 %$ VDC-1 %$ %VDC_MGR-2-VDC_ONLINE: vdc 1 has come online

C
******************************************************************************

WARNING

***************

UNAUTHORISED ACCESS TO THIS DEVICE IS PROHIBITED.

***************************************************

!PROSECUTION!
******************************************************************************
Block_003 login:
Password:
Login incorrect

Thanks

[marce1000]

      - Checkout this procedure : https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/password_recovery/password-recovery-procedure-for-cisco-nxos.html

 M.

[fredrichdarren]

Thank you @marce1000 

[fredrichdarren]

Hi @marce1000 

I can only move from loader to this point >>>>>> switch(boot)(config)#

• And here is what I am getting: witch(boot)# switch(boot)# show user-account
  ^
  % invalid command detected at '^' marker.

switch(boot)(config)# copy running-config startup-config
^
% invalid command detected at '^' marker.switch(boot)# copy running-config startup-config
copy: cannot access file '/bootflash/running-config'
switch(boot)#

Is there anything that I can try from here?

Thank you

[fredrichdarren]

@marce1000 

I followed the URL provided. However, I am still stuck with no progress.

[marce1000]

        >...switch(boot)(config)#       copy running-config startup-config
  Try the command                  do  copy running-config startup-config             instead ,

 M.

[fredrichdarren]

@marce1000 

This is a different switch, but it is the same model

Enter configuration commands, one per line. End with CNTL/Z.
switch(boot)(config)# do copy running-config startup-config
Destination: error opening bootflash: Device unavailable or corrupted
switch(boot)(config)#

[marce1000]

              >switch(boot)(config)#  end
                                                   copy running-config startup-config

      (check if that sequence can work)

 M.
                                                  
                  

[fredrichdarren]

Hi @marce1000 

I tried this, too, and still, it is not working. Thank you, though, for your suggestions.

[fredrichdarren]

Hi @marce1000 

This is the initial switch

loader> cmdline recoverymode=1

loader> boot n3000-uk9-kickstart.5.0.3.U5.1a.bin

Starting kernel...n OKe: n3000-uk9-kickstart.5.0.3.U5.1a.bin....
Usage: init 0123456SsQqAaBbCcUu
INIT: version 2.85 booting
sprom_drv_init_platform: nuova_i2c_register_get_card_index
blogger: /var/log/isan.log: No such file or directory (2).
Starting Nexus 3000 Platform POST.....
Executing Mod 1 1 SEEPROM Test:...done (0 seconds)
Executing Mod 1 1 GigE Port Test:.done (8 seconds)
Executing Mod 1 1 PCIE Test:.................done (0 seconds)
Mod 1 1 Post Completed Successfully
POST is completed
Checking all filesystems..... done.
.
Loading system software
Bootstrapping Unexporting directories for NFS kernel daemon...done.
Stopping NFS kernel daemon: rpc.mountd rpc.nfsddone.
Unexporting directories for NFS kernel daemon...
done.
Stopping kernel log daemon: klogd.
INIT: Going single usere: init
ending processes the TERM signal
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2012, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
switch(boot)#
switch(boot)# dir
4096 Dec 11 2011 01:48:31 .patch/
2097302 Jul 14 2014 08:00:14 20140625_192326_poap_5516_1.log
675108 Jul 14 2014 18:55:36 20140625_192326_poap_5516_2.log
1048621 Jun 27 2014 08:46:33 20140625_192326_poap_5516_init.log
0 Nov 03 2022 17:01:56 20221103_170156_poap_4078_init.log
0 Nov 03 2022 19:09:21 20221103_190921_poap_4061_init.log
0 May 19 2024 16:43:57 20240519_164357_poap_3977_init.log
0 May 19 2024 20:42:52 20240519_204252_poap_4108_init.log
640 May 31 2014 00:37:55 license_FOC1820R0AX_6_1.lic
49152 May 31 2014 00:43:05 lost+found/
1592 Oct 29 2014 06:36:19 mts.log
25645568 May 31 2014 00:29:44 n3000-uk9-kickstart.5.0.3.U5.1a.bin
37857280 Oct 12 2017 18:19:27 n3000-uk9-kickstart.6.0.2.U6.5c.bin
131945492 May 31 2014 00:30:12 n3000-uk9.5.0.3.U5.1a.bin
206969903 Oct 12 2017 21:56:49 n3000-uk9.6.0.2.U6.5c.bin
1024 Dec 11 2011 01:48:14 sprom_cstruct_2_0_0
1024 Dec 11 2011 01:48:48 sprom_cstruct_3_0_0
4096 Jan 29 2010 00:33:05 vdc_2/
4096 Jan 29 2010 00:33:05 vdc_3/
4096 Jan 29 2010 00:33:05 vdc_4/
4096 Jan 29 2010 00:33:05 virt_strg_pool_bf/
4096 Dec 11 2011 01:48:33 virtual-instance/

Usage for bootflash: filesystem
524406784 bytes total used
1126498304 bytes free
1650905088 bytes available
switch(boot)#
switch(boot)# conf t
Enter configuration commands, one per line. End with CNTL/Z.
switch(boot)(config)# do copy running-config startup-config
copy: cannot access file '/bootflash/running-config'
switch(boot)(config)#

[fredrichdarren]

Hi @marce1000 

Here is another error just I picked up just now

switch(boot)# load n3000-uk9-kickstart.5.0.3.U5.1a.bin
Bootstrapping via POAP if startup-config doesn't exist
INIT: Sending processes the TERM signal
INIT: (boot)#
Unexporting directories for NFS kernel daemon...done.
Stopping NFS kernel daemon: rpc.mountd rpc.nfsddone.
Unexporting directories for NFS kernel daemon...
done.
Stopping kernel log daemon: klogd.
INIT: Going single usere: init
ending processes the TERM signal
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2012, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
switch(boot)#

[marce1000]

        >...Bootstrapping via POAP if startup-config doesn't exist
             To be ignored until you have a valid startup configuration , 

 M.