Cisco 10000 Series Troubleshooting Manual page 59

Chapter 7 Replacing or Recovering Passwords
The enable secret password is encrypted and cannot be recovered; it must be replaced. Go to the next
step to replace an enable secret, console login, or enable password. If there is no enable secret password,
note the enable and console login passwords. If the enable and console login passwords are not
encrypted, go to Step 16.
Do not execute the next step unless you have determined you must change or replace the enable, enable
Caution
secret, or console login passwords. Failure to follow the steps as shown might cause you to erase the
router configuration.
Enter the copy startup-config running-config command to load the startup configuration file into
Step 12
running memory. This action allows you to modify or replace passwords in the configuration.
Router# copy startup-config running-config
Enter the privileged EXEC command configure terminal to enter configuration mode:
Step 13
Router# configure terminal
Change all three passwords using the following commands:
Step 14
Router(config)# enable secret newpassword1
Router(config)# enable password newpassword2
Router(config)# line con 0
Router(config-line)# password newpassword3
Change only the passwords necessary for your configuration. You can remove individual passwords by
using the no form of the above commands. For example, entering the no enable secret command
removes the enable secret password.
You must configure all interfaces to avoid having the system be administratively shut down:
Step 15
Router(config)# interface fastethernet 0/0
Router(config-int)# no shutdown
Enter the equivalent commands for all interfaces that were originally configured. If you omit this step,
all interfaces are administratively shut down and unavailable when the router is restarted.
Use the config-register command to set the configuration register to the original value noted in Step 3
Step 16
or Step 7, or to the factory default value 0x2102.
Router(config)# config-register 0x2102
Press Ctrl-Z (hold down the Control key while you press Z) or enter end to exit configuration mode
Step 17
and return to the EXEC command interpreter.
Caution Do not execute the next step unless you have changed or replaced a password. If you skipped Step 12
through Step 15, go to Step 19. Failure to observe this caution causes you to erase the router
configuration file.
Enter the copy running-config startup-config command to save the new configuration to NVRAM.
Step 18
Enter the reload command to reboot the router.
Step 19
Log in to the router using the new or recovered passwords.
Step 20
OL-0439-02
Password Recovery Procedure
Cisco 10000 Series Router Troubleshooting Guide
7-3