Recovering Passwords For The Pix 500 Series Security Appliance - Cisco PIX 500 Series Configuration Manual

Performing Password Recovery
hostname(config)# enable password password
hostname(config)# username name password password
Step 14 Load the default configuration by entering the following command:
hostname(config)# no config-register
The default configuration register value is 0x1. For more information about the configuration register,
see the
Save the new passwords to the startup configuration by entering the following command:
Step 15
hostname(config)# copy running-config startup-config

Recovering Passwords for the PIX 500 Series Security Appliance

Recovering passwords on the PIX 500 Series security appliance erases the login password, enable
password, and aaa authentication console commands. To recover passwords for the PIX 500 Series
security appliance, perform the following steps:
Download the PIX password tool from Cisco.com to a TFTP server accessible from the security
Step 1
appliance. For instructions, go to the following URL:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_password_recovery09186a0080
09478b.shtml
Connect to the security appliance console port according to the instructions in
Step 2
Command-Line Interface" section on page
Power off the security appliance, and then power it on.
Step 3
Immediately after the startup messages appear, press the Escape key to enter monitor mode.
Step 4
In monitor mode, configure the interface network settings to access the TFTP server by entering the
Step 5
following commands:
monitor> interface interface_id
monitor> address interface_ip
monitor> server tftp_ip
monitor> file pw_tool_name
monitor> gateway gateway_ip
Step 6 Download the PIX password tool from the TFTP server by entering the following command:
monitor> tftp
If you have trouble reaching the server, enter the ping address command to test the connection.
At the "Do you wish to erase the passwords?" prompt, enter Y.
Step 7
You can log in with the default login password of "cisco" and the blank enable password.
The following example shows password recovery on a PIX 500 Series security appliance with the TFTP
server on the outside interface:
monitor> interface 0
0: i8255X @ PCI(bus:0 dev:13 irq:10)
1: i8255X @ PCI(bus:0 dev:14 irq:7 )
Cisco Security Appliance Command Line Configuration Guide
43-8
Cisco Security Appliance Command
Chapter 43
Reference.
2-4.
Troubleshooting the Security Appliance
"Accessing the
OL-12172-03