Cisco Password Recovery

Hello,
How can I block any body to change the password using the Cisco Password recovery? because I am facing one problem that few of our clients rebootting the router and change the Conf registry and change the password.
Please give me few Suggestions.
Thanks

Try the "no service password-recovery" in global config mode.
Please read the information contained in the follwoing URL before you use this command:
http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps5413/products_feature_guide09186a00802a1e76.html
Hope this helps,

Similar Messages

  • Cisco ISE 1.2 vm cli admin password recovery

    I'm having trouble getting this to work.   I was under the impression by mounting the ISO (connect at power on) i could perform the password recovery like it states for the hardware appliance.  However, if i mount the 1.2.0.899 iso image (connect at power) I don't seen to get any options in my vm console?  At most, I have a <enter> at the very beginning that will take me to Grub or ADE boot menu...  but I don't see anything about options to change the password?  

    Make sure you are following the steps in the following link:
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/installation_guide/ise_ig/ise_postins.html#38674
    Also, make sure that the VM Guest is set to boot from DVD/CD first before trying the HDD. 
    Thank you for rating helpful posts!

  • Enable password recovery in cisco 2950 with AAA

    Hello friends,
    I need to reccover switch enable password, i have already configured AAA also, when i am tryig to follow below proceedure finally saying Authorization failed. how can i recover enable password,
    Regards,
    Haris
    If I try to recover password like this description says
    http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_25_see/configuration/guide/swtrbl.html#wp1090048
    Step 1 Connect a terminal or PC with terminal-emulation software to the switch console port.
    Step 2 Set the line speed on the emulation software to 9600 baud.
    Step  3 Power off the switch. Reconnect the power cord to the switch and,  within 15 seconds, press the Mode button while the System LED is still  flashing green.
    Base ethernet MAC Address: 00:0x:xx:xx:xx:xx
    Xmodem file system is available.
    The password-recovery mechanism is enabled.
    The system has been interrupted prior to initializing the
    flash filesystem. The following commands will initialize
    the flash filesystem, and finish loading the operating
    system software:
    flash_init
    load_helper
    boot
    switch:
    Step 4 switch: flash_init
    Initializing Flash...
    flashfs[0]: 600 files, 19 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 32514048
    flashfs[0]: Bytes used: 7713792
    flashfs[0]: Bytes available: 24800256
    flashfs[0]: flashfs fsck took 10 seconds.
    ...done Initializing Flash.
    Boot Sector Filesystem (bs) installed, fsid: 3
    Setting console baud rate to 9600...
    Step5 switch:load_helper
    Step6 switch: dir flash:
    Directory of flash:/
    2 -rwx 916 <date> vlan.dat
    5 drwx 192 <date> c2960-lanbase-mz.122-25.SEE1
    620 -rwx 5488 <date> config.text
    621 -rwx 5 <date> private-config.text
    24800256 bytes available (7713792 bytes used)
    Step7 switch: rename flash:config.text flash:config.text.old
    Step8 switch: boot
    Loading "flash:c2960-lanbase-mz.122-25.SEE1/c2960-lanbase-mz.122-25.SEE1.bin"...
    Initializing flashfs...
    flashfs[1]: 600 files, 19 directories
    flashfs[1]: 0 orphaned files, 0 orphaned directories
    flashfs[1]: Total bytes: 32514048
    flashfs[1]: Bytes used: 7713792
    flashfs[1]: Bytes available: 24800256
    flashfs[1]: flashfs fsck took 1 seconds.
    flashfs[1]: Initialization complete....done Initializing flashfs.
    64K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address : 00:0x:xx:xx:xx:xx
    Motherboard assembly number : xxxxxxxxxx
    Power supply part number : xxxxxxxxxxx
    Motherboard serial number : xxxxxxxxxxx
    Power supply serial number : xxxxxxxxxxx
    Model revision number : B0
    Motherboard revision number : B0
    Model number : WS-C2960G-24TC-L
    System serial number : xxxxxxxxxxxx
    Top Assembly Part Number : xxxxxxxxxxxx
    Top Assembly Revision Number : B0
    Version ID : V02
    CLEI Code Number : xxxxxxxxxxxxx
    Hardware Board Revision Number : 0x01
    Switch Ports Model SW Version SW Image
    * 1 24 WS-C2960G-24TC-L 12.2(25)SEE1 C2960-LANBASE-M
    Press RETURN to get started!
    Step9 Hit <Enter>
    Would you like to terminate autoinstall? [yes]: yes
    Step10
    --- System Configuration Dialog ---
    Would you like to enter the initial configuration dialog? [yes/no]no
    Switch>
    Step11 Switch> enable
    Step12 Switch# rename flash:config.text.old flash:config.text
    Destination filename [config.text]? <Enter>
    Step13 Switch# copy flash:config.text system:running-config
    Destination filename [running-config]?<Enter>
    5488 bytes copied in 0.940 secs (5838 bytes/sec)
    Step14 NewSwitchName#conf t
    % Authorization failed.
    Doesn't this procedure work any more ?

    The password recovery worked, but you copied your problematic config back to the switch. Skip Step 13 and paste only the working part of the config to the switch.
    You can see your renamed config with "more flash:config.text.old".

  • Cisco NCS admin password recovery.

    Hi All
    In Cisco NCS shell I have incorrectly entered the following command in order to chang ethe admin password and saved it
    username admin password hash <password> role admin
    and hence lost the access to shell (ssh). Is there a way to retrieve or reset the admin password. Tried to log in as single user (as in any ohter Red Hat Distribution) but didn't work. In the worst case scenario I have rebuild the server (VM) from the .ova imange, however the licenses won't work.
    Any advise would be greatly appreciated.
    Regards

    Hello,
    The only way to recover the admin password for NCS would be to use the recovery image (iso). The recovery image is not available for download from CCO. Please open a TAC case & they can special publish the image for you.
    For the CLI admin password, the recovery method is the same as the physical appliance.  Attach the recovery ISO, and reboot the machine.  You may have to force the virtual machine to boot from the cd drive.  Once it does, you will get the  menu that contains the password recovery option.
    Hope this helps.
    Ram

  • Password recovery on Cisco AP 1232

    Hi all.
    I have a Cisco 1232 AP at a remote location. It was configured by somebody no longer with the company and I have no passwords for it, no do I have a back up config.
    It is using local authenticaiton.
    Is there a way to do a password recovery without losing the current configuration?

    Check this out:
    http://www.cisco.com/en/US/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#resios
    There is another similar post on this board for using a password cracker.
    Here's a link to the thread:
    http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Getting%20Started%20with%20Wireless&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1dddb082/1#selected_message
    Good Luck
    Scott

  • Password Recovery Cisco WLAN Controllers

    Hi,
    I would like to know the procedure for recoering passwords on Cisco 2000/ 4000 series contorllers.
    Please Help!
    Thanks and Regards,
    Mohan

    Sorry, you have to reset to factory defaults. Then reconfigure. Here's the TAC Case
    Solution # K52826052
    Title How to recover a password on the Cisco Wireless LAN Controller
    Core Issue
    Resolution
    There is no password recovery option on the Wireless LAN Controller (WLC). You need to set the WLC to factory defaults and reconfigure it.
    In order to set the WLC to factory defaults, power cycle the WLC, press ESC Key during the boot up process from the console and select last option(5) to clear the configuration and reboot the Wireless Lan Controller.
    Note:The new default username and password is "admin".

  • Cisco 2651XM Recovery Password

    Dears,
    I have one Cisco 2651 gateway with the following featurtes:
    Cisco IOS Software,
    C2600 Software (C2600-IPVOICEK9-M),
    Version 12.4(19),
    RELEASE SOFTWARE (fc1)
    I did the recovery password procedure, but router boot normally and i can´t get rommon mode. I tried using SSH connection with: CTRL + Break, CTRL + ] + Break and Break keys and the router doesn`t boot to rommon mode. 
    Could you tell me any idea about this problem?

    If the router can't "understand" your Ctrl+C then it means either your console connection (like using a USB-to-Serial cable is incompatible) or someone's disabled password-recovery. 
    You'll need to provide more information.

  • Cisco ACS 4.x Password Recovery

    I inherited a ACS server, but I don't have the admin password. Does anyone know of a password recovery technique ?

    If it is running acs ver 4.0 on windows, then it is not possible. With ACS v4.0 all the configurations have been shifted from registry to a database file thus increasing the security in ACS. So as of now there is no way to recover the lost Admin password in ACS v4.0, cause no setting is in registry, all settings are in SQL database.
    So need to reimage it ...
    If it is acs windows 3.3.4 or below then you need to make registry change,
    login to ACS machine as administrator..
    Go to start ===> run ===> regedit
    Click on HKEYLOCAL machine ===> software ===> cisco
    ===>CiscoAAAv3.2===>CSAdmin===> and delete all administrative users defined by
    right clicking into the administraor folder.
    Now login locally to ACS and it should not prompt you for password.
    For a best practice make sure that you have Allow automatic login is checked
    This will not prompt you for password if you are logging in locally from ACS mahcine.
    If it is appliance then you need to use recovery cd to reset admin password.
    Regards,
    ~JG
    Do rate helpful posts

  • No service password recovery command on cisco 2801 router

    HI,
    we have a cisco 2801 router in class which has a disabled pasword recovery. We tried almost everything, we cannot get into ROMmon and the break sequence dosent work in any program (hyper terminal, putty, teraterm pro). We dont have any idea how to solve this problem.
    Here is the log from hyperterminal:
    System Bootstrap, Version 12.3(8r)T9, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 2004 by cisco Systems, Inc.
    PLD version 0x10
    GIO ASIC version 0x127
    c2801 processor with 131072 Kbytes of main memory
    Main memory is configured to 64 bit mode with parity disabled
    Readonly ROMMON initialized
    PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
    program load complete, entry point: 0x8000f000, size: 0xc100
    Initializing ATA monitor library.......
    program load complete, entry point: 0x8000f000, size: 0xc100
    Initializing ATA monitor library.......
    program load complete, entry point: 0x8000f000, size: 0xd49718
    Self decompressing the image : #################################################
    ######## [OK]
    --- TRIED BREAK SEQUENCE HERE but nothing happens ---
    Smart Init is enabled
    smart init is sizing iomem
      ID            MEMORY_REQ         TYPE
                    0X003AA110 public buffer pools
                    0X00211000 public particle pools
    0X0013          0X00035000 Card in slot 1
                    0X000021B8 Onboard USB
    If any of the above Memory Requirements are
    "UNKNOWN", you may be using an unsupported
    configuration or there is a software problem and
    system operation may be compromised.
    Allocating additional 7692663 bytes to IO Memory.
    PMem allocated: 117440512 bytes; IOMem allocated: 16777216 bytes
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, 2801 Software (C2801-IPBASE-M), Version 12.4(1c), RELEASE SO
    FTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2005 by Cisco Systems, Inc.
    Compiled Wed 26-Oct-05 08:42 by evmiller
    Image text-base: 0x6007ECA0, data-base: 0x61480000 
    --- TRIED BREAK SEQUENCE HERE but nothing happens too ---
    Port Statistics for unclassified packets is not turned on.
    Cisco 2801 (revision 6.0) with 114688K/16384K bytes of memory.
    Processor board ID FCZ102422KK
    2 FastEthernet interfaces
    2 Low-speed serial(sync/async) interfaces
    DRAM configuration is 64 bits wide with parity disabled.
    191K bytes of NVRAM.
    62720K bytes of ATA CompactFlash (Read/Write)
    Press RETURN to get started!
    Thanks for help!

    I usually suffer from the same issue, but what works for me everytime is the other method that simulates break sequence. Can't find the documentation for it but this is how it goes:
    Set the serial connection as follows in Putty:
    Baud rate 1200
    1 stop bit
    8 data bits
    no parity
    no flow control
    Turn off your router, then turn it back on and immediately press the spacebar for about 10-15 seconds. All you'll see is giberish. After that reset your console connection settings to the usual 9600 baud rate, and you'll find yourself in rommon mode.

  • Cisco 3945 password recovery

    I observed two cisco 3945 routers lose IOS during password recovery. Router was rebooted, break sequence ctrl-break, then boot(instead of reset) issued. The router booted to its existing configuration or password recovery failed and router was power cycled again then ctrl-break issued. However this time the IOS was gone and all flash file systems were blank! It happened on two routers. Anyone know why such an anomaly would occur or has anyone witnessed such?

    config register was set to confreg 0X2142 first time password recovery was attempted. It took but only after the power cycle(not when I simply typed boot) but by then the IOS images were gone. I found that very disturbing when it happened on two different routers and I never saw such a thing happen to a router before. 

  • ONS 15454 Password Recovery Cable

    Does anyone know the part number for the password recovery cable needed to connect a laptop to the TCC card to used to reset the password to Cisco defaults?  I have attached the cisco PDF which explains the connection of this cable.
    Thanks

    The part number is 15454-EPC=
    In the past, you couldn't order this item but had to call Cisco TAC and request one.
    Hope this helps.

  • LMS 4.2.1 password recovery system administrator ADE-OS

    Hi,
    How is-it possible to do a recovery password for sysadmin on ADE-OS ?
    We're using LMS 4.2.1 and my customer doesn't remember the username and password created during installation.
    We have the admin user for the https connection.
    Thanks,
    Jeff

    keep in mind that there is CSCtx08080
    see the Release Notes of LMS 4.2.1 :
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2.1/readme/lms_421_readme.html#wp1205822
    but it is resolved in LMS 4.2.2
    =====================================
    CSCtx08080 Bug Details
    "Password recovery" option not working in Virtual appliance
    Symptom:
    "Password Recovery" option is not working in Virtual Appliance.
    Conditions:
    "Password Recovery" option is not working as expected.
    When the ISO image is mounted and the option "Recover administrator password" is chosen for
    password recovery, an error message"Failed to mount drive partition" appears instead of the password recovery window.
    Status Status
    Fixed
    (Verified)
    Severity Severity
    4 - minor
    Last Modified Last Modified
    In Last 2 weeks
    Product Product
    CiscoWorks LMS Portal
    Technology Technology
    1st Found-In 1st Found-in
    4.2
    Fixed-In Fixed-in
    4.2(2)
    Workaround:
    None.

  • 6509 - 720 Supervisor Module Failure after Password Recovery

    Hi,
    I attempted to perform a password recovery on a 6509 with dual WS-SUP720-3B modules running 12.2(33)SXI2A.
    After changing the configuration register to 0x2142 and booting, I am getting a major error on the supervisor modules. I've changed the configuration register back to 0x2102 and am still getting the same error on both supervisor modules. I've also tried it with one module removed and one module installed.
    I have about 30 seconds in where I can run commands before I get booted to rommon.
    Any thoughts?
    See below for the console output:
    System Bootstrap, Version 8.5(3)
    Copyright (c) 1994-2008 by cisco Systems, Inc.
    Cat6k-Sup720/SP processor with 524288 Kbytes of main memory
    Autoboot executing command: "boot bootdisk:"
    Initializing ATA monitor library...
    string is bootdisk:s72033-ipservicesk9-mz.122-33.SXI2a.bin
    Loading image, please wait ...
    Initializing ATA monitor library...
    Self extracting the image... [OK]
    Self decompressing the image : ################################################################################################################################################################################################### [OK]
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, s72033_sp Software (s72033_sp-IPSERVICESK9-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 02-Sep-09 01:25 by prod_rel_team
    Image text-base: 0x40101328, data-base: 0x4224F120
    *Apr 19 05:03:02.747: %SYS-SP-3-LOGGER_FLUSHING: System pausing to ensure console debugging output.
    *Apr 19 05:03:01.515: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor for this switch
    Firmware compiled 19-May-09 12:08 by apyu Build [25600]
    *Apr 19 05:03:02.747: %OIR-SP-6-CONSOLE: Changing console ownership to route processor
    System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 2006 by cisco Systems, Inc.
    Cat6k-Sup720/RP platform with 524288 Kbytes of main memory
    Download Start
    Download Completed! Booting the image.
    Self decompressing the image : ############################################################################################################################################################################################################################################################################################################################ [OK]
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 02-Sep-09 01:00 by prod_rel_team
    Image text-base: 0x40101328, data-base: 0x43A51E70
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco WS-C6509-E (R7000) processor (revision 1.5) with 458720K/65536K bytes of memory.
    Processor board ID SMC133600GT
    SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
    Last reset from s/w reset
    1 Virtual Ethernet interface
    194 Gigabit Ethernet interfaces
    1917K bytes of non-volatile configuration memory.
    8192K bytes of packet buffer memory.
    65536K bytes of Flash internal SIMM (Sector size 512K).
             --- System Configuration Dialog ---
    Would you like to enter the initial configuration dialog? [yes/no]: no
    Press RETURN to get started!
    *Apr 19 04:55:51.335: RP: Currently running ROMMON from S (Gold) region
    *Apr 19 04:55:52.107: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan. The Bridge IDs of all active STP instances have been updated, which might change the spanning tree topology
    *Apr 19 04:56:00.531: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c)
    Router> 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 02-Sep-09 01:00 by prod_rel_team
    *Apr 19 05:03:03.111: %SYS-SP-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure console debugging output.
    *Apr 19 04:55:46.739: %SPANTREE-SP-5-EXTENDED_SYSID: Extended SysId enabled for type vlan. The Bridge IDs of all active STP instances have been updated, which might change the spanning tree topology
    *Apr 19 04:55:46.747: SP: SP: Currently running ROMMON from S (Gold) region
    *Apr 19 04:55:47.483: %SCHED-SP-7-WAen
    Router#TCH: Attempt to set uninitialized watched boolean (address 0). -Process= "<interrupt level>", ipl= 1, pid= 3
    -Traceback= 408E0820 40D74FEC 40D4B31C 40D4A1A8 40D46448 40F604B8 4173CCDC
    *Apr 19 04:55:59.607: %SYS-SP-5-RESTART: System restarted --
    Cisco IOS Software, s72033_sp Software (s72033_sp-IPSERVICESK9-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 02-Sep-09 01:25 by prod_rel_team
    Router#
    Router#Apr 19 04:56:00.591: %OIR-SP-6-INSPS: Power supply inserted in slot 1
    *Apr 19 04:56:00.695: %C6KPWR-SP-4-PSOK: power supply 1 turned on.
    *Apr 19 04:56:00.943: %OIR-SP-6-INSPS: Power supply inserted in slot 2
    Router#
    Router#
    Router#
    *Apr 19 04:56:08.099: %FABRIC-SP-5-CLEAR_BLOCK: Clear block option is off for the fabric in slot 5.
    *Apr 19 04:56:08.195: %FABRIC-SP-5-FABRIC_MODULE_ACTIVE: The Switch Fabric Module in slot 5 became active.
    Router#
    Router#
    Router#
    *Apr 19 04:56:09.567: %DIAG-SP-6-RUN_MINIMUM: Module 5: Running Minimal Diagnostics...
    Router#
    Router#
    Router#
    Router#show diagnostic result
    % Incomplete command.
    Router#show diagnostic result ?
      module  Module Keyword
    Router#show diagnostic result ,modu     modjle   ule 5
    Current bootup diagnostic level: minimal
    Module 5: Supervisor Engine 720 (Active)  SerialNo : SAL1338YTZ0
      Overall Diagnostic Result for Module 5 : UNTESTED
      Diagnostic level at card bootup: minimal
      Test results: (. = Pass, F = Fail, U = Untested)
        1) TestScratchRegister -------------> U
        2) TestSPRPInbandPing --------------> U
        3) TestTransceiverIntegrity: 
          Port  1  2
                U  U 
        4) TestActiveToStandbyLoopback: 
          Port  1  2
     --More--                     U  U 
        5) TestLoopback: 
          Port  1  2
        6) TestNewIndexLearn ---------------> .
        7) TestDontConditionalLearn --------> .
        8) TestBadBpduTrap -----------------> .
        9) TestMatchCapture ----------------> .
       10) TestProtocolMatchChannel --------> .
       11) TestFibDevices ------------------> F
       12) TestIPv4FibShortcut -------------> F
       13) TestL3Capture2 ------------------> F
       14) TestIPv6FibShortcut -------------> F
       15) TestMPLSFibShortcut -------------> F
       16) TestNATFibShortcut --------------> F
       17) TestAclPermit -------------------> F
       18) TestAclDeny ---------------------> U
     --More--            19) TestQoSTcam ---------------------> U
       20) TestL3VlanMet -------------------> U
       21) TestIngressSpan -----------------> U
       22) TestEgressSpan ------------------> U
       23) TestNetflowInlineRewrite: 
          Port  1  2
                U  U 
       24) TestFabricSnakeForward ----------> U
       25) TestFabricSnakeBackward ---------> U
       26) TestTrafficStress ---------------> U
       27) TestFibTcamSSRAM ----------------> U
       28) TestAsicMemory ------------------> U
       29) TestAclQosTcam ------------------> U
       30) TestNetflowTcam -----------------> U
       31) ScheduleSwitchover --------------> U
       32) TestFirmwareDiagStatus ----------> U
       33) TestAsicSync --------------------> U
       34) TestUnusedPortLoopback: 
     --More--         
    Router#[Ashow diagnostic result module 5
    Current bootup diagnostic level: minimal
    Module 5: Supervisor Engine 720 (Active)  SerialNo : SAL1338YTZ0
      Overall Diagnostic Result for Module 5 : UNTESTED
      Diagnostic level at card bootup: minimal
      Test results: (. = Pass, F = Fail, U = Untested)
        1) TestScratchRegister -------------> U
        2) TestSPRPInbandPing --------------> U
        3) TestTransceiverIntegrity: 
          Port  1  2
                U  U 
        4) TestActiveToStandbyLoopback: 
          Port  1  2
     --More--         
    Router#
    *Apr 19 04:56:29.637: %DIAG-SP-3-MAJOR: M
    %Software-forced reload
     04:56:30 UTC Sun Apr 19 2015: Breakpoint exception, CPU signal 23, PC = 0x42735338
       Possible software fault. Upon reccurence, please collect
       crashinfo, "show tech" and contact Cisco Technical Support.
    -Traceback= 42735338 42732E8C 423A6220 423A624C 421C1388 4223F614 4223F670 40962164 40963034 40962F54 40963D28 423259D0 42319604 42319820 42727FEC 
    $0 : 00000000, AT : 43FE0000, v0 : 45870000, v1 : 00000200
    a0 : 46DC99C0, a1 : 44E05758, a2 : 00000000, a3 : 00000040
    t0 : 00000010, t1 : 3400F101, t2 : 3400F100, t3 : FFFF00FF
    t4 : 42728608, t5 : 00002F04, t6 : 80000000, t7 : 00000000
    s0 : 00000000, s1 : 43EE0000, s2 : 50449158, s3 : 0000001F
    s4 : 50449158, s5 : 470B3AB4, s6 : 00000000, s7 : 08A5DFC8
    t8 : 08028FEC, t9 : 00000000, k0 : 00000000, k1 : 00000000
    gp : 43FDDE8C, sp : 5000DBB0, s8 : 00000000, ra : 42732E8C
    EPC  : 42735338, ErrorEPC : 870FDDF0, SREG     : 3400F103
    MDLO : 00000000, MDHI     : 00000000, BadVaddr : 00000000
    DATA_START : 0x43A51E70
    Cause 00000824 (Code 0x9): Breakpoint exception
    Writing crashinfo to bootflash:crashinfo_20150419-045630
    === Flushing messages (04:56:30 UTC Sun Apr 19 2015) ===
    Buffered messages:
    *Apr 19 04:55:51.335: RP: Currently running ROMMON from S (Gold) region
    *Apr 19 04:55:52.107: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan. The Bridge IDs of all active STP instances have been updated, which might change the spanning tree topology
    *Apr 19 04:56:00.531: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 02-Sep-09 01:00 by prod_rel_team
    *Apr 19 05:03:03.111: %SYS-SP-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure console debugging output.
    *Apr 19 04:55:46.739: %SPANTREE-SP-5-EXTENDED_SYSID: Extended SysId enabled for type vlan. The Bridge IDs of all active STP instances have been updated, which might change the spanning tree topology
    *Apr 19 04:55:46.747: SP: SP: Currently running ROMMON from S (Gold) region
    *Apr 19 04:55:47.483: %SCHED-SP-7-WATCH: Attempt to set uninitialized watched boolean (address 0). -Process= "<interrupt level>", ipl= 1, pid= 3
    -Traceback= 408E0820 40D74FEC 40D4B31C 40D4A1A8 40D46448 40F604B8 4173CCDC
    *Apr 19 04:55:59.607: %SYS-SP-5-RESTART: System restarted --
    Cisco IOS Software, s72033_sp Software (s72033_sp-IPSERVICESK9-M), Version 12.2(33)SXI2a, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Wed 02-Sep-09 01:25 by prod_rel_team
    *Apr 19 04:56:00.591: %OIR-SP-6-INSPS: Power supply inserted in slot 1
    *Apr 19 04:56:00.695: %C6KPWR-SP-4-PSOK: power supply 1 turned on.
    *Apr 19 04:56:00.943: %OIR-SP-6-INSPS: Power supply inserted in slot 2
    *Apr 19 04:56:08.099: %FABRIC-SP-5-CLEAR_BLOCK: Clear block option is off for the fabric in slot 5.
    *Apr 19 04:56:08.195: %FABRIC-SP-5-FABRIC_MODULE_ACTIVE: The Switch Fabric Module in slot 5 became active.
    *Apr 19 04:56:09.567: %DIAG-SP-6-RUN_MINIMUM: Module 5: Running Minimal Diagnostics...
    *Apr 19 04:56:29.637: %DIAG-SP-3-MAJOR: Module 5: Online Diagnostics detected a Major Error. Please use 'show diagnostic result <target>' to see test results.
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestFibDevices failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestIPv4FibShortcut failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestL3Capture2 failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestIPv6FibShortcut failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestMPLSFibShortcut failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestNATFibShortcut failed 
    Queued messages:
    *Apr 19 04:56:33.583: %SYS-3-LOGGER_FLUSHING: System pausing to ensure console debugging output.
    IPv6FibShortcut failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestMPLSFibShortcut failed 
    *Apr 19 04:56:29.641: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 5: TestNATFibShortcut failed 
    *Apr 19 04:56:29.971: %HA_EM-6-LOG: Mandatory.go_bootup.tcl: GOLD EEM TCL policy for  boot up diagnostic
    *Apr 19 04:56:30.575: %CPU_MONITOR-3-PEER_EXCEPTION: CPU_MONITOR peer has failed due to exception , reset by [5/0]
    *** System received a Software forced crash ***
    signal= 0x17, code= 0x24, context= 0x45876f54
      PC = 0x42728664, SP = 0x43ed9cd8, RA = 0x413ad2f4
      Cause Reg = 0x00003820, Status Reg = 0x34008002
    rommon 1 > 

    What kind of line card was being inserted in slot 6? Have you tried other slots? The crash file in the RP says it was reset by SP, so the important crashinfo file would be in the sup-bootflash: Try an see if you find any "dir sup-bootflash:"
    Aug 5 17:46:11: %C6K_PLATFORM-2-PEER_RESET: RP is being reset by the SP
    %Software-forced reload
    To answer your question:
    A Is there any different procedure to install line modules in supervisor slots?
    >>No there are no special configuration you need to do when inserting a line card in slots that normally would be for supervisor.
    B Switch is having previously removed linecard (i.e, fastethernet module)in running configuration. Will it create any system crash?
    >>No, it will not cause the switch to crash, when you see the configuration of a line card even after it was removed is quite normal, it's cold module provisionsing, you would not want to keep putting in a configuration for any line card after just resetaing them do you?

  • Password recovery at catalyst 4507R-E

    Hi. I have catalyst 4507R-E and 2 engines are located at this catalyst. the engines are active standby. when i begin to recover i write  the recover config at main engine then i must be reset the catalyst after reboot active engine go to satndby and standby go to active. so i can not recover it.
    how can i solve this?
    must i first remove standby engine and then recover active engine
    then put the standby and active engine configuration go to standby.
    am i rigth? i am afraid the i lost the configuration because i have not backup configuration.
    i used this PDF.
    please write your comment.
    thank you very much.

    Hi teymur,
    You never lost your configuration, what you need to do is...
    1. Make a complete config synch between active and standby supervisor engine (I hope autosync is already enabled)
    2. Write the config to NVRAM on standby supervisor engine.
    3. Now when you put back the standby supervisor engine, reload the active supervisor engine whcih take the standby be active and active be standby.
    Also I would like to infor the password recovery procedure for you...
    Try the below procedure with only one supervisor in the chassis.
    1) Connect the console cable to the Supervisor IV console port
    2) Reset the 4507 by power cycling the unit.
    3) Interrupt the boot sequence by hitting CTRL+C
    4) Using the confreg command, I set it to skip the boot-up configuration.
    5) I issue the reset command to reboot the 4507 again.
    http://www.cisco.com/en/US/products/hw/switches/ps663/products_password_recovery09186a00800945f7.shtml
    Please rate the helpful posts.
    Regards,
    Naidu.

  • RV042 password Recovery without Reset

    last year our Nework Security Supervisor submit hes resignation
    and unfortunately did not endorse us the admin password we already tried the password
    he suggested when we contacted him but nothing of them works.
    Is there anyway we can reset the password withour resetting to factory default? Thanks hopegfully you can help me
    Moreever,Telnet and SNMP is also disabled.
    any thoughts how can i resolve this ....
    thanks in advance ...

    Hey Kahn,
    Unfortunately I believe there is no way to recover the password without a factory reset. I've heard of a way to perform a password recovery through CLI, but since telnet is disabled, CLI can't be accessed.
    I hope this helps,
    Lutz
    Cisco Small Business Content Development Team

Maybe you are looking for