forgot enable password and user - 3850 stack

[robertkwild]

hi all,

got a 3850 stack and the top one ie switch one is primary, i need to recover or make a new enable password and login for myself, has anyone got the steps to do this please

thanks,

rob

[Flavio Miranda]

@robertkwild 

 There will be plenty of material for password recovery on the forum and internet. Here is one

https://www.rogerperkin.co.uk/cisco/password-recovery/password-recovery-cisco-catalyst-3850/

[balaji.bandi]

Connect the console cable to master switch and follow below instructions  and change what ever you like to change password or enable pasword.

https://community.cisco.com/t5/networking-knowledge-base/password-recovery-on-cisco-catalyst-3850/ta-p/3154378

[robertkwild]

thanks guys, what about the other switches in the stack, shall i leave them switched on?

EDIT - i read the link you gave me @Flavio Miranda 

ensure to remove all power cables and if using stack power disconnect the stack power so you can isolate the top switch of the stack.

[Flavio Miranda]

The switches on stack will receive the config from the primary one. You can turn them off or not but they probably reload anyway when you get them together again

[robertkwild]

Ok @Flavio Miranda I'm doing the guide you suggested and getting stuck on the password as it's saying

"Invalid input detected"

I do

Username rwild privilege 15 somepasswordhere

My password contains special characters and numbers

Even when I try to test with password as password I get above error and it's always pointing at character 2

[robertkwild]

Got it, it is

username Mynetworkadmin privilege 15 secret $Str0ngP@ss$

[robertkwild]

@Flavio Mirandai need to delete an access class on a vty line, how do i do this please, this is whats stopping me from sshing to the switch

[Flavio Miranda]

Share the config please.

it should "

line vty x

no access-class xx in/out"

[robertkwild]

@Flavio Mirandai managed to work it out in the end

line vty 0 15

no access-class RESTRICT-SSH in

but i still cant login ssh

my vty lines look like this now

line vty 0 4

transport input ssh

line vty 5 15

transport input ssh

[robertkwild]

thank god for that i had to do this and i can now ssh in

hostname Switch9k
ip domain name npg.com
crypto key zeroize rsa
ip ssh dh min size 2048
crypto key generate rsa modulus 2048
do show ip ssh | i size
do show ip ssh | i SSH
ip ssh version 2
do show ip ssh
service password-encryption
username rsanchez privilege 15 secret $up3r$ecr3tP**bleep**
line vty 0 15
transport input ssh

show crypto key mypubkey rsa

[Flavio Miranda]

Great to hear @robertkwild 

 good job