Cisco Router Password recovery procedure

CISCO ROUTER PASSWORD RECOVERY

1.    Attach a terminal or PC with terminal emulation to the console port of the router.

Use these terminal settings:

• 9600 baud rat
•  No parity
• 8 data bits
• 1 stop bit
• No flow control

2.    Power cycle the router.

3.    Press Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMmon.

4.    ALSO TRY CNTRL+ALT+FN+Pause or CNTRL+ALT+FN+F12  if you can’t find the break key

Standard Break Key Combinations

Software	Platform	Operating System	Try This
Hyperterminal	IBM Compatible	Windows XP	Ctrl-Break
Hyperterminal	IBM Compatible	Windows 2000	Ctrl-Break
Hyperterminal	IBM Compatible	Windows 98	Ctrl-Break
Hyperterminal (version 595160)	IBM Compatible	Windows 95	Ctrl-F6-Break
Kermit	Sun Workstation	UNIX	Ctrl-\l
			Ctrl-\b
MicroPhone Pro	IBM Compatible	Windows	Ctrl-Break
Minicom	IBM Compatible	Linux	Ctrl-a f
ProComm Plus	IBM Compatible	DOS or Windows	Alt-b
SecureCRT	IBM Compatible	Windows	Ctrl-Break
Telix	IBM Compatible	DOS	Ctrl-End
Telnet	N/A	N/A	Ctrl-], then type send brk
Telnet to Cisco	IBM Compatible	N/A	Ctrl-]
Teraterm	IBM Compatible	Windows	Alt-b
Terminal	IBM Compatible	Windows	Break
			Ctrl-Break
Tip	Sun Workstation	UNIX	Ctrl-], then Break or Ctrl-c
			~#
VT 100 Emulation	Data General	N/A	F16
Windows NT	IBM Compatible	Windows	Break-F5
			Shift-F5
			Shift-6 Shift-4 Shift-b (^$B)
Z-TERMINAL	Mac	Apple	Command-b
N/A	Break-Out Box	N/A	Connect pin 2 (X-mit) to +V for half a second
	Cisco to aux port	N/A	Control-Shft-6, then b
	IBM Compatible	N/A	Ctrl-Break

5.    Type confreg 0x2142 at the rommon 1> prompt in order to boot from Flash.

This step bypasses the startup configuration where the passwords are stored.

6.    Type reset or i at the rommon 2> prompt.

7.    The router reboots, but ignores the saved configuration.

8.    Type no after each setup question, or press Ctrl-C in order to skip the initial setup procedure.

9.    Type enable at the Router> prompt.

You are in enable mode and should see the Router# prompt.

10. IF YOU DO NOT WANT THE EXISTING CONFIG THE GO TO STEP 17 otherwise continue to step 10.

11.  Type  copy startup-config running-config in order to copy the nonvolatile RAM (NVRAM) into memory

12.  Warning: Do not type copy running-config startup-config or write. These commands erase your startup configuration.

13.  Type configure terminal.

The router(config)# prompt appears.

14.  Type enable secret <password> in order to change the enable secret password. For example:

hostname(config)#enable secret cisco

15.  Issue the no shutdown command on every interface that you use.

16.  If you issue a show ip interface brief command, every interface that you want to use should display up up.

17.  Type configure terminal.

router(config)# prompt appears.

Type config-register 0x2102

Example     router(config)#config-register 0x2102

18.  Issue the no shutdown command on every interface that you use.

19.  If you issue a show ip interface brief command, every interface that you want to use should display up up.

20.  Press Ctrl-z or end in order to leave the configuration mode.

21.  The hostname# prompt appears. Type ; write memory or copy running-config startup-config in order to commit the changes.

Cisco Router Password recovery procedure

CISCO ROUTER PASSWORD RECOVERY

1.    Attach a terminal or PC with terminal emulation to the console port of the router.

Use these terminal settings:

• 9600 baud rat
•  No parity
• 8 data bits
• 1 stop bit
• No flow control

2.    Power cycle the router.

3.    Press Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMmon.

4.    ALSO TRY CNTRL+ALT+FN+Pause or CNTRL+ALT+FN+F12  if you can’t find the break key

Standard Break Key Combinations

Software	Platform	Operating System	Try This
Hyperterminal	IBM Compatible	Windows XP	Ctrl-Break
Hyperterminal	IBM Compatible	Windows 2000	Ctrl-Break
Hyperterminal	IBM Compatible	Windows 98	Ctrl-Break
Hyperterminal (version 595160)	IBM Compatible	Windows 95	Ctrl-F6-Break
Kermit	Sun Workstation	UNIX	Ctrl-\l
			Ctrl-\b
MicroPhone Pro	IBM Compatible	Windows	Ctrl-Break
Minicom	IBM Compatible	Linux	Ctrl-a f
ProComm Plus	IBM Compatible	DOS or Windows	Alt-b
SecureCRT	IBM Compatible	Windows	Ctrl-Break
Telix	IBM Compatible	DOS	Ctrl-End
Telnet	N/A	N/A	Ctrl-], then type send brk
Telnet to Cisco	IBM Compatible	N/A	Ctrl-]
Teraterm	IBM Compatible	Windows	Alt-b
Terminal	IBM Compatible	Windows	Break
			Ctrl-Break
Tip	Sun Workstation	UNIX	Ctrl-], then Break or Ctrl-c
			~#
VT 100 Emulation	Data General	N/A	F16
Windows NT	IBM Compatible	Windows	Break-F5
			Shift-F5
			Shift-6 Shift-4 Shift-b (^$B)
Z-TERMINAL	Mac	Apple	Command-b
N/A	Break-Out Box	N/A	Connect pin 2 (X-mit) to +V for half a second
	Cisco to aux port	N/A	Control-Shft-6, then b
	IBM Compatible	N/A	Ctrl-Break

5.    Type confreg 0x2142 at the rommon 1> prompt in order to boot from Flash.

This step bypasses the startup configuration where the passwords are stored.

6.    Type reset or i at the rommon 2> prompt.

7.    The router reboots, but ignores the saved configuration.

8.    Type no after each setup question, or press Ctrl-C in order to skip the initial setup procedure.

9.    Type enable at the Router> prompt.

You are in enable mode and should see the Router# prompt.

10.  IF YOU DO NOT WANT THE EXISTING CONFIG THE GO TO STEP 17 otherwise continue to step 10.

11.  Type  copy startup-config running-config in order to copy the nonvolatile RAM (NVRAM) into memory

12.  Warning: Do not type copy running-config startup-config or write. These commands erase your startup configuration.

13.  Type configure terminal.

The router(config)# prompt appears.

14.  Type enable secret <password> in order to change the enable secret password. For example:

hostname(config)#enable secret cisco

15.  Issue the no shutdown command on every interface that you use.

16.  If you issue a show ip interface brief command, every interface that you want to use should display up up.

17.  Type configure terminal.

router(config)# prompt appears.

Type config-register 0x2102

Example     router(config)#config-register 0x2102

18.  Issue the no shutdown command on every interface that you use.

19.  If you issue a show ip interface brief command, every interface that you want to use should display up up.

20.  Press Ctrl-z or end in order to leave the configuration mode.

21.  The hostname# prompt appears. Type ; write memory or copy running-config startup-config in order to commit the changes.

Configuring Router Alias commands

Configuring Alias commands

Objective; shortcut alias commands on Cisco routers or Switches

 LAB Tasks;

Configure shortcut for show ip route

Configure shortcut alias for show ip interface brief

Configure shortcut for configure terminal

Configure shortcut for show running config

Verification commands;

C

B

R

SR

Final configurations

alias exec c conf t

alias exec r show ip route

alias exec b show ip int brie

alias exec sr show running-config

Configuring Router Alias commands

Configuring Alias commands

Objective; shortcut alias commands on Cisco routers or Switches

 LAB Tasks;

Configure shortcut for show ip route

Configure shortcut alias for show ip interface brief

Configure shortcut for configure terminal

Configure shortcut for show running config

Verification commands;

C

B

R

SR

Final configurations

alias exec c conf t

alias exec r show ip route

alias exec b show ip int brie

alias exec sr show running-config

Configuring cisco switch Etherchannels - on , PAgP, LACP

Configuring Etherchannels

Objective; Configure an Etherchannel  between switch1 and switch 2.

What is an Ether channel?

1.      An EtherChannel allows you to bundle up to 8 Fast Ethernet or Gigabit Ethernet links into a single logical link.

2.      Single Spanning tree instance treats Port Channel as single interface

TYPES OF ETHERCHANNELS

1.      MANUAL configuration   - Turn Etherchannel on

2.      Automatic Configuration - Using PAgP or LACP

EtherChannel Modes
Mode	Description
on	Forces the interface into an EtherChannel without PAgP or LACP. With the on mode, a usable EtherChannel exists only when an interface group in the on mode is connected to another interface group in the on mode.
Desirable (PAGP)	Places an interface into an active negotiating state, in which the interface starts negotiations with other interfaces by sending PAgP packets.
Auto (PAGP)	Places an interface into a passive negotiating state, in which the interface responds to PAgP packets it receives but does not start PAgP packet negotiation. This setting minimizes the transmission of PAgP packets.
Active (LACP)	Places an interface into an active negotiating state, in which the interface starts negotiations with other interfaces by sending LACP packets.
Passive (LACP)	Places an interface into a passive negotiating state, in which the interface responds to LACP packets that it receives, but does not start LACP packet negotiation. This setting minimizes the transmission of LACP packets.

The Port Aggregation Protocol (PAgP) and Link Aggregation Control Protocol (LACP) facilitate the automatic creation of EtherChannels by exchanging packets between Ethernet interfaces. PAgP is a Cisco-proprietary protocol that can be run only on Cisco switches and on those switches licensed by licensed vendors to support PAgP. LACP is defined in IEEE 802.3AD and allows Cisco switches to manage Ethernet channels between switches that conform to the 802.3AD protocol.

By using one of these protocols, a switch learns the identity of partners capable of supporting either PAgP or LACP and learns the capabilities of each interface. It then dynamically groups similarly configured interfaces into a single logical link (channel or aggregate port); these interfaces are grouped based on hardware, administrative, and port parameter constraints. For example, PAgP groups the interfaces with the same speed, duplex mode, native VLAN, VLAN range, and trunking status and type. After grouping the links into an EtherChannel, PAgP adds the group to the spanning tree as a single switch port.

SW1 Configuration	SW2 Configuration	Protocol	Trunk formed or not?
ON	ON	NONE	YES
ON	AUTO	NONE	NO
ON	Desirable	NONE	NO
ON	Passive	NONE	NO
ON	Active	NONE	NO
Desirable	Desirable	PAgP	YES
Desirable	AUTO	PAgP	YES
AUTO	AUTO	NONE	NO
ACTIVE	ACTIVE	LACP	YES
ACTIVE	PASSIVE	LACP	YES
PASSIVE	PASSIVE	NONE	NO

 ETHERCHANNEL ON -LAB Tasks;

1.      Configure FE0/13 and FE 0/14 on SW1 as channel group 1 mode on

2.      Configure FE0/13 and FE 0/14 on SW2 as channel group 1 mode on

Verification commands;

Ping R1 to R2 and R2 to R1

Show etherchannel summary

Show interface port-channel 1

show interface port-channel1 switchport

Show interfaces trunk

show spanning-tree vlan 100

Final Configurations

SW1:

interface FastEthernet0/13

channel-group 1 mode on

!

interface FastEthernet0/14

channel-group 1 mode on

!

interface Port-channel1

switchport mode dynamic desirable

SW2:

interface FastEthernet0/13

channel-group 1 mode on

!

interface FastEthernet0/14

channel-group 1 mode on

!

interface Port-channel1

switchport mode dynamic desirable

 ETHERCHANNEL PAGP-LAB

PAGP Final Configuration;

SW1:

interface FastEthernet0/13

channel-group 1 mode desirable

!

interface FastEthernet0/14

channel-group 1 mode desirable

!

interface Port-channel1

switchport trunk encapsulation dot1q

switchport mode trunk

SW2:

interface FastEthernet0/13

channel-group 1 mode auto

!

interface FastEthernet0/14

channel-group 1 mode auto

!

interface Port-channel1

switchport trunk encapsulation dot1q

switchport mode trunk

 ETHERCHANNEL LACP-LAB 

Final Configurations;

SW1:

interface FastEthernet0/13

channel-group 1 mode active

!

interface FastEthernet0/14

channel-group 1 mode active

!

interface Port-channel1

switchport mode dynamic desirable

SW2:

interface FastEthernet0/13

channel-group 1 mode passive

!

interface FastEthernet0/14

channel-group 1 mode passive

!

interface Port-channel1

switchport mode dynamic desirable