- A Cisco 2500 Series router that has an unknown console or enable password.
- An active Serial Console session to the device that you’re unable to login to.
- Break the boot sequence when powering on the Cisco 2500 Series router to place yourself in rom monitor mode.
- Change the configuration register to 0x2142 to make the router bypass the contents of NVRAM when booting then initialize the router (boot the router into IOS).
- (Option 1) – Once booted, place yourself into privileged mode and copy the start up-config to the running config. Afterward, you may change the line password or enable password and write the configuration by to NVRAM by issuing the copy run start command.
- (Option 2) – Once booted, place yourself into privileged mode and do a write erase to clear the contents of the NVRAM.
- Now change the configuration register back to 0x2102 to boot set the router to boot normally and load the NVRAM contents upon boot.
Shown below is a Cisco 2501 router that has a console password on the device. With such password you will not be able to access exec mode without authenticating this password correctly. When buying routers used, you may commonly be faced with scenario.
Step 1. Power cycle the router or power on the router initially. While the router is booting you’ll need to break the boot sequence to boot the router into bootrom, you do this by holding down CTRL and pressing PAUSE BREAK. Do this repeatedly till you are placed at the bootrom prompt.
Step 2. Change the configuration register so that the router will ignore the contents of the NVRAM when booting into Cisco IOS. Set the configuration register to 0x2142 and initialize the router (Boot the router to IOS).
Step 3a – (Option 1). After the router has booted into Cisco IOS, you’ll be prompted by the initial configuration dialog, type n here and press enter and you’ll be placed into user mode. Now you’re able to place your self into privileged mode by typing enable. Once in privileged mode you can copy the startup configuration to the running configuration and then change the passwords manually then saved the configuration by to NVRAM by typing copy run start.
Step 3b – (Option 2). After the router has booted into Cisco IOS, you’ll be prompted by the initial configuration dialog, type n here and press enter and you’ll be placed into user mode. Now you’re able to place your self into privileged mode by typing enable. Once in privileged mode you can erase the contents of NVRAM by issuing the write erase command.
Step 4. Once you’ve performed a password reset or NVRAM sanitation, you’ll need to set the configuration register back to 0x2102 so the router will boot normally and load the NVRAM contents upon a reboot or power failure.