[ 상식 정보 ]/Network2007. 10. 14. 02:30
Since I published the Cisco 2600 router password recovery, I have got many emails requesting password recoveries for many other router families. So, I will start with the 2500 platform.

The part that matters in the configuration register here is the sixth bit. When this bit is off, the router looks into the NVRAM for the configuration. If the bit is on, the router neglects the contents of NVRAM and acts as if there is no (startup-config). So, to get things going when you have forgotten the password, or a previous administrator does not give you the password due to lack of documentation, you can bypass this problem.

Go through the following steps carefully:

1. Interrupt the router booting operation. This is done by pressing (Ctrl+Break) key simultaneously as soon as you turn on the router. This step will get you to the ROM monitor mode (rommon).

You will have the following:

System Bootstrap, Version 11.0(10c), SOFTWARE

Copyright (c) 1986-1996 by cisco Systems

2500 processor with 14336 Kbytes of main memory

Abort at 0x1098FEC (PC)

>

The (>) prompt is for the ROM monitor mode.

2. Now you should change the value of the configuration register in order to make the router neglect the contents of the NVRAM in the next boot up. This is achieved using the following command:

> o/r 0x2142

This command will change the sixth bit (originally the configuration register is 0x2102) to one. By doing so, the router will act as new in the next boot, i.e., the router will not look for the startup-config in the NVRAM.

3. Perform a restart to the router using the following command:  

> i

The (i) stands for (initialize).

4. The router now will restart and ask you if you want to use the setup mode and of course you will say no. Now, in order not to loose the configuration that you already have in the router, you should go to the USER privileged mode and perform:

Router#copy start run

This will get you back your old configuration but with one exception, you already are in the privileged mode without having to know the password..!!!!

Now you put a new password or passwords if you may:

Router(config)#enable secret blabla

And you can also put new console and telnet passwords if you like.

5. To get things going back to normal, change the value of the configuration register to its original form (0x2102) using the following global configuration command:

Router(config)#config-register 0x2102

6. Now you should save the configuration including the new passwords that you know:

Router#copy run start

7. Now reload and you are good to go:

Router#reload

That we have done in these steps is that we by passed the original configuration that has the unknown password, and then we got to the privileged mode without the need to know the password. And then we loaded the old configuration so we don?t loose it and imposed a new password and saved things back to the NVRAM. And then we got back to the original boot sequence.

Posted by 무소유v