Cisco Switch 2960 / 3560 Password Recovery Procedures

Worked on a used cisco switch 2960 which has been configured password. Following steps have been recorded how to get into recover mode.

1. Connect Console Cable

Cisco provides a couple of ports for console access, such as Console port, Mini USB port, AUX port. I has a previous post "Using Cisco Mini USB Console Cable to Configure Cisco Switches and Routers" for Mini USB usage. Usually old fashion way to use console port is still prevailing.

Configure the baud rate and character format of the PC or terminal to match these console port default characteristics:

• 9600 baud
• 8 data bits
• No parity
• 1 stop bit

2. Hold down MODE Button while powering on the device

Note: for Cisco routers and certain type of Cisco switch (2955), it will require press Break Button / Ctrl+Break on terminal window to interrupt boot procedure.

Using driver version 1 for media type 1 Base ethernet MAC Address: 00:26:ca:28:4e:80 Xmodem file system is available. The password-recovery mechanism is enabled. The system has been interrupted prior to initializing the flash filesystem.  The following commands will initialize the flash filesystem, and finish loading the operating system software:     flash_init     boot switch:

On System 3560, the output will be a little difference:

Using driver version 1 for media type 1 Base ethernet MAC Address: 00:26:ca:28:4e:80 Xmodem file system is available. The password-recovery mechanism is enabled. The system has been interrupted prior to initializing the flash filesystem.  The following commands will initialize the flash filesystem, and finish loading the operating system software:     flash_init     load_helper     boot switch:

3. Initialize the flash file system and delete old configuration file

note: you also can use command 'dir flash:' to list files and rename configuration file with rename command 'rename flash:config.text flash:config.text.old'

switch: flash_init

Initializing Flash...

mifs[2]: 0 files, 1 directories

mifs[2]: Total bytes     :    3870720

mifs[2]: Bytes used      :       1024

mifs[2]: Bytes available :    3869696

mifs[2]: mifs fsck took 1 seconds.

mifs[3]: 531 files, 19 directories

mifs[3]: Total bytes     :   27998208

mifs[3]: Bytes used      :    9988096

mifs[3]: Bytes available :   18010112

mifs[3]: mifs fsck took 6 seconds.

...done Initializing Flash.

switch: del flash:config.text

Are you sure you want to delete "flash:config.text" (y/n)?y

File "flash:config.text" deleted

switch: del falsh:vlan.dat

Are you sure you want to delete "falsh:vlan.dat" (y/n)?y

File "falsh:vlan.dat" not deleted -- no such device

On System 3560:

switch: flash_init Initializing Flash... flashfs[0]: 458 files, 6 directories flashfs[0]: 0 orphaned files, 0 orphaned directories flashfs[0]: Total bytes: 32514048 flashfs[0]: Bytes used: 9073664 flashfs[0]: Bytes available: 23440384 flashfs[0]: flashfs fsck took 7 seconds. ...done Initializing Flash. Boot Sector Filesystem (bs) installed, fsid: 3 Setting console baud rate to 9600... switch: dir flash: Directory of flash:/ 2    -rwx  4154                     20110718-afterEVDO.txt 3    -rwx  4034                     backup-201107018-beforeEVDO.txt 4    -rwx  2056                     vlan.dat 5    -rwx  9071                     config.text 7    drwx  192                     c3560-ipbase-mz.122-35.SE5 465  -rwx  5                       private-config.text 23440384 bytes available (9073664 bytes used) switch: rename flash:config.text flash:config.old switch: dir flash: Directory of flash:/ 2    -rwx  4154                     20110718-afterEVDO.txt 3    -rwx  4034                     backup-201107018-beforeEVDO.txt 4    -rwx  2056                     vlan.dat 5    -rwx  9071                     config.old 7    drwx  192                     c3560-ipbase-mz.122-35.SE5 465  -rwx  5                       private-config.text 23440384 bytes available (9073664 bytes used)

4. Reboot the system with default configuration

switch: boot Loading "flash:c2960-lanlitek9-mz.122-44.SE6/c2960-lanlitek9-mz.122-44.SE6.bin"... @@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ File "flash:c2960-lanlitek9-mz.122-44.SE6/c2960-lanlitek9-mz.122-44.SE6.bin" uncompressed and installed, entry point: 0x3000 executing...               Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.            cisco Systems, Inc.            170 West Tasman Drive            San Jose, California 95134-1706 Cisco IOS Software, C2960 Software (C2960-LANLITEK9-M), Version 12.2(44)SE6, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Mon 09-Mar-09 18:10 by gereddy Image text-base: 0x00003000, data-base: 0x01000000 Initializing flashfs... Using driver version 1 for media type 1 mifs[3]: 0 files, 1 directories mifs[3]: Total bytes     : 3870720 mifs[3]: Bytes used      : 1024 mifs[3]: Bytes available : 3869696 mifs[3]: mifs fsck took 0 seconds. mifs[3]: Initialization complete. mifs[4]: 530 files, 19 directories mifs[4]: Total bytes     : 27998208 mifs[4]: Bytes used      : 9985536 mifs[4]: Bytes available : 18012672 mifs[4]: mifs fsck took 1 seconds. mifs[4]: Initialization complete. ...done Initializing flashfs. Checking for Bootloader upgrade.. not needed POST: CPU MIC register Tests : Begin POST: CPU MIC register Tests : End, Status Passed POST: PortASIC Memory Tests : Begin POST: PortASIC Memory Tests : End, Status Passed POST: CPU MIC interface Loopback Tests : Begin POST: CPU MIC interface Loopback Tests : End, Status Passed POST: PortASIC RingLoopback Tests : Begin POST: PortASIC RingLoopback Tests : End, Status Passed POST: PortASIC CAM Subsystem Tests : Begin POST: PortASIC CAM Subsystem Tests : End, Status Passed POST: PortASIC Port Loopback Tests : Begin POST: PortASIC Port Loopback Tests : End, Status Passed Waiting for Port download...Complete This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to [email protected]. cisco WS-C2960-24-S (PowerPC405) processor (revision C0) with 61440K/4088K bytes of memory. Processor board ID FOC1330Y46Z Last reset from power-on 1 Virtual Ethernet interface 24 FastEthernet interfaces The password-recovery mechanism is enabled. 64K bytes of flash-simulated non-volatile configuration memory. Base ethernet MAC Address       : 00:26:CA:28:4E:80 Motherboard assembly number     : 73-11471-05 Power supply part number        : 341-0097-02 Motherboard serial number       : FOC133106GX Power supply serial number      : AZS132908XC Model revision number           : C0 Motherboard revision number     : A0 Model number                    : WS-C2960-24-S System serial number            : FOC1330Y46Z Top Assembly Part Number        : 800-29858-02 Top Assembly Revision Number    : C0 Version ID                      : V03 CLEI Code Number                : COMSJ00ARC Hardware Board Revision Number  : 0x01 Switch Ports Model              SW Version            SW Image ------ ----- -----              ----------            ---------- *    1 24    WS-C2960-24-S      12.2(44)SE6           C2960-LANLITEK9-M          --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]:no

Reboot Switch 3560:

switch: boot Loading "flash:c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin"... @@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ \@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ "flash:c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin" uncompressed and installed, entry point: 0x3000 executing...               Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.            cisco Systems, Inc.            170 West Tasman Drive            San Jose, California 95134-1706 Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Thu 19-Jul-07 18:15 by nachen Image text-base: 0x00003000, data-base: 0x01100000 Initializing flashfs... flashfs[1]: 458 files, 6 directories flashfs[1]: 0 orphaned files, 0 orphaned directories flashfs[1]: Total bytes: 32514048 flashfs[1]: Bytes used: 9073664 flashfs[1]: Bytes available: 23440384 flashfs[1]: flashfs fsck took 1 seconds. flashfs[1]: Initialization complete....done Initializing flashfs. front_end/ (directory) extracting front_end/fe_type_1 (34696 bytes) extracting front_end/front_end_ucode_info (43 bytes) extracting ucode_info (76 bytes) POST: CPU MIC register Tests : Begin POST: CPU MIC register Tests : End, Status Passed POST: PortASIC Memory Tests : Begin POST: PortASIC Memory Tests : End, Status Passed POST: CPU MIC interface Loopback Tests : Begin POST: CPU MIC interface Loopback Tests : End, Status Passed POST: PortASIC RingLoopback Tests : Begin POST: PortASIC RingLoopback Tests : End, Status Passed POST: PortASIC CAM Subsystem Tests : Begin POST: PortASIC CAM Subsystem Tests : End, Status Passed POST: PortASIC Port Loopback Tests : Begin POST: PortASIC Port Loopback Tests : End, Status Passed Waiting for Port download...Complete This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to [email protected]. cisco WS-C3560G-48TS (PowerPC405) processor (revision D0) with 122880K/8184K bytes of memory. Processor board ID FOC1332W23F Last reset from power-on 1 Virtual Ethernet interface 52 Gigabit Ethernet interfaces The password-recovery mechanism is enabled. 512K bytes of flash-simulated non-volatile configuration memory. Base ethernet MAC Address       : 00:26:CA:45:DB:80 Motherboard assembly number     : 73-10214-04 Power supply part number        : 341-0107-01 Motherboard serial number       : FOC13322VSE Power supply serial number      : AZS132709CX Model revision number           : D0 Motherboard revision number     : D0 Model number                    : WS-C3560G-48TS-S System serial number            : FOC1332W23F Top Assembly Part Number        : 800-26849-01 Top Assembly Revision Number    : C0 Version ID                      : V03 CLEI Code Number                : CNMWY00ARC Hardware Board Revision Number  : 0x09 Switch Ports Model              SW Version            SW Image                 ------ ----- -----              ----------            ----------               *    1 52    WS-C3560G-48TS     12.2(46)SE            C3560-IPBASEK9-M         Press RETURN to get started! *Mar  1 00:02:28.906: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down *Mar  1 00:02:31.062: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan *Mar  1 00:02:52.813: %SYS-5-RESTART: System restarted -- Cisco IOS Software, C3560 Software (C3560-IPBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2) Copyright (c) 1986-2008 by Cisco Systems, Inc. Compiled Thu 21-Aug-08 15:26 by nachen          --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]:

Reference:

1. Cisco Catalyst Fixed Configuration Layer 2 and Layer 3 Switches
2. All Cisco Products Password Recovery Procedures