assword Recovery Procedure for Cisco 801, 802, 803, 804, and

Cisco Password Recovery Procedure for Cisco 801, 802, 803, 804, and 805 Routers

Table of Contents
Password Recovery Procedure..........................................................................................................................1
for Cisco 801, 802, 803, 804, and 805 Routers........................................................................................1
Contents...................................................................................................................................................1
Description..............................................................................................................................................1
Step−by−Step Procedure.........................................................................................................................1
Related Information................................................................................................................................5

i
Password Recovery Procedure
for Cisco 801, 802, 803, 804, and 805 Routers

Contents
Description
Step−by−Step Procedure
Related Information

Description
This document describes the password recovery procedure for Cisco 801, 802, 803, 804, and 805 routers.

To recover a password on a Cisco 806 or 827 router, click here.

Step−by−Step Procedure
1. Attach a terminal or PC with terminal emulation to the console port of the router. Use the following
terminal settings:
9600 baud rate
No parity
8 data bits
1 stop bit

The required console cable specifications are described in Cabling Guide for RJ−45 Console and
AUX Ports (Cisco's 1000 series, 2500 series, and AS5100).

2. Using the power switch, turn the router off and then turn it back on.

3. Press Break on the terminal keyboard within 60 seconds of the power−up to put the router into
ROMMON.

If the break sequence doesn't work, see Possible Key Combinations for Break Sequence During
Password Recovery for other key combinations.

4. Type set at the boot# prompt and record the current value of the config register (set by the
"ios−conf" variable)

boot# set
set baud =9600
set data−bits =8
set parity =none
set stop−bits =1
set console−flags =0
set mac−address =0050.7307.C329
set unit−ip =10.200.40.65

Cisco Password Recovery Procedure for Cisco 801, 802, 803, 804, and 805 Routers
 set serv−ip =255.255.255.255
set netmask =255.255.252.0
set gate−ip =10.200.40.1
set pkt−timeout =8
set tftp−timeout =16
set boot−action =flash
set file−name ="c800−oy6−mw.120−5.T"
set watchdog =off
set prompt ="boot"
set ios−conf =0x2102 !−− this is the value to record

5. Type set ios−conf = 142 at the boot# prompt.

If Flash is intact, the best setting is 142.

If the Flash is not installed or is erased, use the 141 setting. Note: With this setting you can view or
erase the configuration, but you cannot change the password.

6. Type boot at the boot#> prompt to initialize the router.

The router reboots but ignores its saved configuration.

7. Type no after each setup question or press Ctrl−C to skip the initial setup procedure.

8. Type enable at the Router> prompt.

You'll be in enable mode and see the Router# prompt.

9. Important: Type config mem or copy start running to copy the nonvolatile RAM (NVRAM) into
memory. Do not type config term.

10. Type wr term or show running.

The show running and wr term commands show the configuration of the router. In this
configuration you see under all the interfaces the shutdown command, which means all interfaces are
currently shutdown. Also, you can see the passwords either in encrypted or unencrypted format.

11. Type config term and make the changes.

The prompt is now hostname(config)#.

12. Type enable secret <password>.

13. Issue the no shutdown command on every interface that is used. If you issue a show ip interface
brief command, every interface that you want to use should be "up up".

14. Type config−register 0x2102, or the value you recorded in step 2.

15. Press Ctrl−z to leave the configuration mode.

The prompt is now hostname#.

16. Type write mem or copy running startup to commit the changes.

Cisco Password Recovery Procedure for Cisco 801, 802, 803, 804, and 805 Routers
 Router>show version
Cisco Internetwork Operating System Software
IOS (tm) C800 Software (C800−Y6−MW), Version 12.1(1), RELEASE SOFTWARE (fc1)
Copyright (c) 1986−2000 by cisco Systems, Inc.
Compiled Tue 14−Mar−00 16:01 by cmong
Image text−base: 0x000EA000, data−base: 0x005D3000

ROM: TinyROM version 1.0(3)

Router uptime is 2 days, 3 hours, 8 minutes
System returned to ROM by power−on
System image file is "flash:c800−y6−mw.121−1"

Cisco C801 (MPC850) processor (revision 0) with 51428K bytes of virtual memory.
Processor board ID JAD03050229
CPU part number 33
Bridging software.
Basic Rate ISDN software, Version 1.1.
1 Ethernet/IEEE 802.3 interface(s)
1 ISDN Basic Rate interface(s)
12M bytes of physical memory (DRAM)
8K bytes of non−volatile configuration memory
8M bytes of flash on board (4M from flash card)

Configuration register is 0x2102

!−−− The router was just powercycled and during

bootup a break sequence was sent to the router.

TinyROM version 1.0(3)

Fri Apr 30 18:22:12 1999
Copyright (c) 1998−1999 by cisco Systems, Inc.
All rights reserved.

POST ......... OK. 12MB DRAM, 8MB Flash.

boot# set ios−conf = 142

boot# boot

Booting "c800−y6−mw.121−1" ...,

Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software − Restricted
Rights clause at FAR sec. 52.227−19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227−7013.

cisco Systems, Inc.

170 West Tasman Drive
San Jose, California 95134−1706

Cisco Internetwork Operating System Software

IOS (tm) C800 Software (C800−Y6−MW), Version
12.1(1), RELEASE SOFTWARE (fc1)
Copyright (c) 1986−2000 by cisco Systems, Inc.
Compiled Tue 14−Mar−00 16:01 by cmong
Image text−base: 0x000EA000, data−base: 0x005D3000

Cisco C801 (MPC850) processor (revision 0) with 51428K bytes of virtual memory.
Processor board ID JAD03050229

Cisco Password Recovery Procedure for Cisco 801, 802, 803, 804, and 805 Routers
 CPU part number 33
Bridging software.
Basic Rate ISDN software, Version 1.1.
1 Ethernet/IEEE 802.3 interface(s)
1 ISDN Basic Rate interface(s)
12M bytes of physical memory (DRAM)
8K bytes of non−volatile configuration memory
8M bytes of flash on board (4M from flash card)

−−− System Configuration Dialog −−−

Would you like to enter the initial configuration dialog? [yes/no]: n

Press RETURN to get started! (press Enter)

00:01:45: %SYS−5−RESTART: System restarted −−

Cisco Internetwork Operating System Software
IOS (tm) C800 Software (C800−Y6−MW), Version 12.1(1), RELEASE SOFTWARE (fc1)
Copyright (c) 1986−2000 by cisco Systems, Inc.
Compiled Tue 14−Mar−00 16:01 cmong
00:01:45: %LINK−5−CHANGED: Interface BRI0, changed state to administratively down
00:01:45: %LINK−5−CHANGED: Interface Ethernet0, changed state to administratively down
00:01:46: %LINEPROTO−5−UPDOWN: Line protocol on Interface BRI0, changed state to down
00:01:46: %LINEPROTO−5−UPDOWN: Line protocol on Interface Ethernet0, changed state to down
Router>en
Router#copy start run
Destination filename [running−config]? (press Enter)
2010 bytes copied in 32.120 secs (62 bytes/sec)
Router#
Router#
00:02:53: %LINEPROTO−5−UPDOWN: Line protocol on Interface BRI0:1, changed state to down
00:02:53: %LINEPROTO−5−UPDOWN: Line protocol on Interface BRI0:2, changed state to down
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#enable secret cisco
Router(config)#
00:03:39: %SYS−5−CONFIG_I: Configured from console by console

Router#sh ip int brief

Interface IP−Address OK? Method Status Protocol
BRI0 unassigned YES TFTP administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
Dialer0 unassigned YES TFTP up up
Dialer1 192.168.32.1 YES TFTP up up
Ethernet0 10.200.40.65 YES TFTP administratively down down
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int e 0
Router(config−if)#no shut
Router(config−if)#
00:04:02: %LINK−3−UPDOWN: Interface Ethernet0, changed state to up
00:04:03: %LINEPROTO−5−UPDOWN: Line protocol on Interface Ethernet0, changed state to up
Router(config)#config−reg 0x2102
Router(config)#^Z
Router#
00:04:36: %SYS−5−CONFIG_I: Configured from console by console
Router#write mem

Cisco Password Recovery Procedure for Cisco 801, 802, 803, 804, and 805 Routers
 Related Information
• Password Recovery Procedures Index
• Password Recovery Procedure for the Cisco 806 and 827 Routers

Cisco Systems TAC Certified

Learn more about Cisco TAC Certification...

All contents are Copyright © 1992−−2001 Cisco Systems Inc. All rights reserved. Important Notices and Privacy Statement.

Cisco Password Recovery Procedure for Cisco 801, 802, 803, 804, and 805 Routers