cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
562
Views
0
Helpful
1
Replies

804 Password Recovery Problem

djmarkey
Level 1
Level 1

Hello all,

I have a 804 ISDN router that we've lost the enable password for. I've gone through the Cisco site and found a page that shows how to recover from a problem like this. Unfortunitly it doesn't work. The page describes how to do a break when the 804 boots up to get it into ROMMON and change the config register. Unfortunitly what really happens is that instead of coming up with a "boot#" prompt, which looks like you're enabled, I get a "boot>" prompt which only allows me to view the settings. Without the enabled password, which is the problem in the first place, I can't get enabled in ROMMON either. Anyone have any suggestions on how I can wipe the config on the 804, or at least get around the enable password?

1 Reply 1

sstudsdahl
Level 4
Level 4

When you get to the "boot>" prompt, what settings are you refering to? If you enter "set" does it return a line containing "set ios-conf"? If so, you should be able to set the new ios-conf register to 142 ("set ios-conf = 142"), and then issue the "boot" command to load the IOS on the router. At this point, you should be able to type "enable" from the "Router>" prompt and gain access to the enable prompt. The rest of the instructions can be found at:

http://www.cisco.com/warp/public/474/pswdrec_800.html

It sounds as if you have looked at this page and are having problems with it. I would try issuing the "set" command from your "boot>" prompt and see if it returns the expected info. It could very well be a typo in the documentation for what prompt you should see or even a difference of versions of the bootrom software.

If the above does not work, there are a few options that you can take. Probably the easiest would be to decrypt the password if possible. If you are using "enable secret" to set your enable password, this won't work. If you are not using the enable secret password option you can feed the "encrypted" password into several utilities that will give you the unencrypted version. One of these is the Boson GetPass utility. Here is a link to it:

http://www.boson.com/promo/getpass_utility.htm

Another option would be to use the SNMP-WRITE string and a TFTP server to have the router copy a new config (or portion of) from the TFTP server. Here is a link for more information about how to do this:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB?cmd=pass_through&location=outline@^1@@.1dd6813b/0#selected_message

The snmpset command is a linux/unix based command but there are a number of utilities for Windows also if that is the OS that you use.

HTH

Steve