Issues resetting password and secret password.

[Sperry2023]

Hi!

I recently got a new (to me) catalyst 2650. I went through the break process and enabled the secret password and the regular password. After that, I used “exit”, “copy run start.”

Then after a reload my passwords did not work. I assume this is because “copy run start” does not work the way I thought it did.

Any guidance would be greatly appreciated!

[M02@rt37]

Hello @Sperry2023 

please provide us an output of that command:

# show version

At then end you will see this line:

Configuration register is XXXX with XXXX as 0x2102. If not you will need to modify this value.

under configuration terminal ; 

config-register 0x2102

[Sperry2023]

The result of my initial commands was:

SW01#conf t
Enter configuration commands, one per line. End with CNTL/Z.
SW01(config)#enable secret password XXXXX
SW01(config)#enable password XXXXX
SW01(config)#exit
SW01#wr
00:02:13: %SYS-5-CONFIG_I: Configured from console by console
Building configuration...
[OK]

I then reloaded and the config did not save.

This is the result of show version:

SW01#show version
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA6, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2005 by cisco Systems, Inc.
Compiled Fri 21-Oct-05 01:59 by XXXXX
Image text-base: 0x80010000, data-base: 0x80568000

ROM: Bootstrap program is C2950 boot loader

SW01 uptime is 2 minutes
System returned to ROM by power-on
System image file is "flash:/c2950-i6q4l2-mz.121-22.EA6.bin"

cisco WS-C2950-24 (RC32300) processor (revision R0) with 21013K bytes of memory.
Processor board ID FOC1008Z0KD
Last reset from system-reset
Running Standard Image
24 FastEthernet/IEEE 802.3 interface(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: XXXXX
Motherboard assembly number: XXXXX
Power supply part number: XXXXX
Motherboard serial number: XXXXX
Power supply serial number: XXXXX
Model revision number: R0
Motherboard revision number: A0
Model number: WS-C2950-24
System serial number: XXXXX
Configuration register is 0xF

I then ran 

SW01#config-register 0x2102

result:

Translating "config-register"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address

[MHM Cisco World]

Friend 

You need to enter only one command 

Enable password 

Or

Enable secret 

Not both of them.

[Richard Burts]

enable password is the older (and less secure) implementation of a password for privileged level access.

enable secret is the newer (and more secure) implementation of a password for privileged level access. 

If you enter them both then the enable password is ignored and enable secret is the password that will be used. So you might as well delete the enable password entry since it is doing nothing.

After doing copy run start you could do show start to see if your config changes were saved.

[MHM Cisco World]

You are right but he did it in recovery password process so I think he make recovery process freezes.

So he must try one of them

That my Opinion here.

MHM

[balaji.bandi]

Configuration register is 0xF

I then ran

W01#config-register 0x2102

You need to change the above config in config model:

#config t

(config)#config-register 0x2102

#end

#write

#reload

Once the switch come back make changes.

[balaji.bandi]

Follow below guide and make sure you enter the password corectly.

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/12040-pswdrec-2900xl.html

[MHM Cisco World]

You do 

Enable password 

And 

Enable secret 

Both ?