cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1350
Views
1
Helpful
4
Replies

IOS-XR - Factory reset CiscoASR9k

amasana
Level 1
Level 1

Hello,

Due to a missconfiguration of the TACACS+ service on my ASR9k, now i'm locked out of it, the console port can't issue any commands, it always shows this: "Command authorization failed - 'AAA API' detected the 'fatal' condition 'No method could process the authorisation request' % Incomplete command."

I tried to delete/rename the config files but there's no such command on rommon.

Changing the confreg won't work.

I also tried booting from rommon using a configuration .txt file from a freshly formatted USB but i also get errors. "Media storage device /usb: was detected as unformatted, will format.
Media storage device /usb: failed to format filesystem to recover it. Error=0x12e(Corrupted file system detected)"

The USB is 1GB so i don't know if that may be the problem, i can try with another one tomorrow but i'm not sure that would solve the issue.

The interfaces won't go UP, so i can't access to the mgm interface nor reach the TACACS server from there, so changing that configuration is not an option.

Any advice on what can i do next? I feel like there should be a way to ignore the configuration or factory reset the device from rommon, but i'm unable to find how to do it.

Thanks. 

 

1 Accepted Solution
4 Replies 4

@amasana 

 If you can factory reset it, here is a guide

Cisco ASR 9000 Router - How to Factory Reset

Jump to 

Reset Cisco ASR 9000 Router to Factory Settings

Thanks for your response! Unfortunately, nothingthere will work:

The device is this one "https://www.cisco.com/c/es_mx/support/routers/asr-9006-router/model.html", so it doesn't have a direct Reset button.

I can't put commands on console, so i can't do a write erase, and on that model the confreg 0x2142 won't bypass the configuration

This worked! I didn't had to use the backupconfig.txt, just rollback 3 commits (config_rollback –n 0x3)and reload. Thanks!