Cisco Systems ASR 1000 Series Network Router User Manual


 
B-21
Cisco ASR 1000 Series Aggregation Services Routers Hardware Installation and Initial Configuration Guide
OL-13208-03
Appendix B Troubleshooting Initial Startup Problems
Replacing or Recovering a Lost Password
Step 12 Scan the configuration file display looking for the passwords (the enable passwords are usually near the
beginning of the file, and the console login or user EXEC password is near the end). The passwords
displayed look something like this:
enable secret 5 $1$ORPP$s9syZt4uKn3SnpuLDrhuei
enable password 23skiddoo
.
.
line con 0
password onramp
The enable secret password is encrypted and cannot be recovered; it must be replaced. The enable and
console login passwords may be encrypted or clear text. Proceed to the next step to replace an enable
secret, console login, or enable password. If there is no enable secret password, note the enable and
console login passwords, if they are not encrypted, and proceed to Step 17.
Caution Do not execute the next step unless you have determined you must change or replace the enable, enable
secret, or console login passwords. Failure to follow the steps as shown might cause you to erase your
router configuration.
Step 13 Enter the configure memory command to load the startup configuration file into running memory. This
action allows you to modify or replace passwords in the configuration.
Router# configure memory
Step 14 Enter the privileged EXEC configure terminal command to enter configuration mode:
Hostname# configure terminal
Step 15 Change all three passwords using the following commands:
Hostname(config)# enable secret newpassword1
Hostname(config)# enable password newpassword2
Hostname(config)# line con 0
Hostname(config-line)# password newpassword3
Change only the passwords necessary for your configuration. You can remove individual passwords by
using the no form of the above commands. For example, entering the no enable secret command removes
the enable secret password.
Step 16 You must configure all interfaces to be not administratively shut down as follows: