Standard Break Key Combinations

Software

Platform

Operating System

Try This

Hyperterminal

IBM Compatible

Windows 2000

Ctrl-Break

Hyperterminal (version 595160)

IBM Compatible

Windows 95

Ctrl-F6-Break

Kermit

Sun Workstation

UNIX

Ctrl-\l

Ctrl-\b

MicroPhone Pro

IBM Compatible

Windows

Ctrl-Break

Minicom

IBM Compatible

Linux

Ctrl-a f

ProComm Plus

IBM Compatible

DOS or Windows

Alt-b

Telix

IBM Compatible

DOS

Ctrl-End

Telnet to Cisco

IBM Compatible

N/A

Ctrl-]

Teraterm

IBM Compatible

Windows

Alt-b

Terminal

IBM Compatible

Windows

Break

Ctrl-Break

Tip

Sun Workstation

UNIX

Ctrl-], then Break or Ctrl-c

~#

VT 100 Emulation

Data General

N/A

F16

Windows NT

IBM Compatible

Windows

Break-F5

Shift-F5

Shift-6 Shift-4 Shift-b (^$B)

Z-TERMINAL

Mac

Apple

Command-b

N/A

Break-Out Box

N/A

Connect pin 2 (X-mit) to +V for half a second

Cisco to aux port

N/A

Control-Shft-6, then b

IBM Compatible

N/A

Ctrl-Break

 


Cisco Password Recovery

 

Description

This document describes the password recovery procedure for Cisco 801, 802, 803, 804, and 805 routers.

To recover a password on a Cisco 806 or 827 router, click here.

Step-by-Step Procedure

  1. Attach a terminal or PC with terminal emulation to the console port of the router. Use the following terminal settings:

9600 baud rate
No parity
8 data bits
1 stop bit

The required console cable specifications are described in Cabling Guide for RJ-45 Console and AUX Ports (Cisco's 1000 series, 2500 series, and AS5100).

  1. Using the power switch, turn the router off and then turn it back on.
  2. Press Break on the terminal keyboard within 60 seconds of the power-up to put the router into ROMMON.

If the break sequence doesn't work, see Possible Key Combinations for Break Sequence During Password Recovery for other key combinations.

  1. Type set at the boot# prompt and record the current value of the config register (set by the "ios-conf" variable)
5.                 boot# set 
6.                 set baud           =9600 
7.                 set data-bits      =8 
8.                 set parity         =none     
9.                 set stop-bits      =1 
10.             set console-flags  =0 
11.             set mac-address    =0050.7307.C329 
12.             set unit-ip        =10.200.40.65      
13.             set serv-ip        =255.255.255.255      
14.             set netmask        =255.255.252.0      
15.             set gate-ip        =10.200.40.1     
16.             set pkt-timeout    =8 
17.             set tftp-timeout   =16 
18.             set boot-action    =flash
19.             set file-name      ="c800-oy6-mw.120-5.T"      
20.             set watchdog       =off 
21.             set prompt         ="boot"      
set ios-conf       =0x2102    !-- this is the value to record
  1. Type set ios-conf = 142 at the boot# prompt.

If Flash is intact, the best setting is 142.

If the Flash is not installed or is erased, use the 141 setting. Note: With this setting you can view or erase the configuration, but you cannot change the password.

  1. Type boot at the boot#> prompt to initialize the router.

The router reboots but ignores its saved configuration.

  1. Type no after each setup question or press Ctrl-C to skip the initial setup procedure.
  2. Type enable at the Router> prompt.

You'll be in enable mode and see the Router# prompt.

  1. Important: Type config mem or copy start running to copy the nonvolatile RAM (NVRAM) into memory. Do not type config term.
  2. Type wr term or show running.

The show running and wr term commands show the configuration of the router. In this configuration you see under all the interfaces the shutdown command, which means all interfaces are currently shutdown. Also, you can see the passwords either in encrypted or unencrypted format.

  1. Type config term and make the changes.

The prompt is now hostname(config)#.

  1. Type enable secret <password>.
  2. Issue the no shutdown command on every interface that is used. If you issue a show ip interface brief command, every interface that you want to use should be "up up".
  3. Type config-register 0x2102, or the value you recorded in step 2.
  4. Press Ctrl-z to leave the configuration mode.

The prompt is now hostname#.

  1. Type write mem or copy running startup to commit the changes.
17.       Router>show version
18.       Cisco Internetwork Operating System Software
19.       IOS (tm) C800 Software (C800-Y6-MW), Version 12.1(1), RELEASE SOFTWARE (fc1)
20.       Copyright (c) 1986-2000 by cisco Systems, Inc.
21.       Compiled Tue 14-Mar-00 16:01 by cmong
22.       Image text-base: 0x000EA000, data-base: 0x005D3000
23.        
24.       ROM: TinyROM version 1.0(3)
25.       Router uptime is 2 days, 3 hours, 8 minutes
26.       System returned to ROM by power-on
27.       System image file is "flash:c800-y6-mw.121-1"
28.        
29.       Cisco C801 (MPC850) processor (revision 0) with 51428K bytes of virtual memory.
30.       Processor board ID JAD03050229
31.       CPU part number 33
32.       Bridging software.
33.       Basic Rate ISDN software, Version 1.1.
34.       1 Ethernet/IEEE 802.3 interface(s)
35.       1 ISDN Basic Rate interface(s)
36.       12M bytes of physical memory (DRAM)
37.       8K bytes of non-volatile configuration memory
38.       8M bytes of flash on board (4M from flash card)
39.        
40.       Configuration register is 0x2102
41.        
42.       !--- The router was just powercycled and during
43.       bootup a break sequence was sent to the router.
44.        
45.       TinyROM version 1.0(3)
46.       Fri Apr 30 18:22:12 1999
47.       Copyright (c) 1998-1999 by cisco Systems, Inc.
48.       All rights reserved.
49.        
50.       POST ......... OK. 12MB DRAM, 8MB Flash.
51.        
52.       boot# set ios-conf = 142
53.       boot# boot
54.        
55.       Booting "c800-y6-mw.121-1" ...,
56.               Restricted Rights Legend
57.        
58.       Use, duplication, or disclosure by the Government is 
59.       subject to restrictions as set forth in subparagraph
60.       (c) of the Commercial Computer Software - Restricted
61.       Rights clause at FAR sec. 52.227-19 and subparagraph
62.       (c) (1) (ii) of the Rights in Technical Data and Computer
63.       Software clause at DFARS sec. 252.227-7013.
64.        
65.             cisco Systems, Inc.
66.             170 West Tasman Drive
67.             San Jose, California 95134-1706
68.        
69.       Cisco Internetwork Operating System Software
70.       IOS (tm) C800 Software (C800-Y6-MW), Version
71.       12.1(1), RELEASE SOFTWARE (fc1)
72.       Copyright (c) 1986-2000 by cisco Systems, Inc.
73.       Compiled Tue 14-Mar-00 16:01 by cmong
74.       Image text-base: 0x000EA000, data-base: 0x005D3000
75.        
76.       Cisco C801 (MPC850) processor (revision 0) with 51428K bytes of virtual memory.
77.       Processor board ID JAD03050229
78.       CPU part number 33
79.       Bridging software.
80.       Basic Rate ISDN software, Version 1.1.
81.       1 Ethernet/IEEE 802.3 interface(s)
82.       1 ISDN Basic Rate interface(s)
83.       12M bytes of physical memory (DRAM)
84.       8K bytes of non-volatile configuration memory
85.       8M bytes of flash on board (4M from flash card)
86.        
87.        
88.           --- System Configuration Dialog ---
89.        
90.       Would you like to enter the initial configuration dialog? [yes/no]: n
91.        
92.        
93.       Press RETURN to get started! (press Enter)
94.        
95.       00:01:45: %SYS-5-RESTART: System restarted --
96.       Cisco Internetwork Operating System Software
97.       IOS (tm) C800 Software (C800-Y6-MW), Version 12.1(1), RELEASE SOFTWARE (fc1)
98.       Copyright (c) 1986-2000 by cisco Systems, Inc.
99.       Compiled Tue 14-Mar-00 16:01 cmong
100.   00:01:45: %LINK-5-CHANGED: Interface BRI0, changed state to administratively down 
101.   00:01:45: %LINK-5-CHANGED: Interface Ethernet0, changed state to administratively down 
102.   00:01:46: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0, changed state to down 
103.   00:01:46: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to down 
104.   Router>en
105.   Router#copy start run
106.   Destination filename [running-config]? (press Enter)
107.   2010 bytes copied in 32.120 secs (62 bytes/sec)
108.   Router#
109.   Router#
110.   00:02:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to down
111.   00:02:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:2, changed state to down
112.   Router#conf t
113.   Enter configuration commands, one per line. End with CNTL/Z.
114.   Router(config)#enable secret cisco
115.   Router(config)#
116.   00:03:39: %SYS-5-CONFIG_I: Configured from console by console
117.    
118.   Router#sh ip int brief 
119.   Interface   IP-Address      OK?    Method   Status                 Protocol
120.   BRI0        unassigned      YES    TFTP     administratively down  down
121.   BRI0:1      unassigned      YES    unset    administratively down  down
122.   BRI0:2      unassigned      YES    unset    administratively down  down
123.   Dialer0     unassigned      YES    TFTP     up                     up 
124.   Dialer1     192.168.32.1    YES    TFTP     up                     up
125.   Ethernet0   10.200.40.65    YES    TFTP     administratively down  down
126.   Router#conf t
127.   Enter configuration commands, one per line. End with CNTL/Z.
128.   Router(config)#int e 0
129.   Router(config-if)#no shut
130.   Router(config-if)#
131.   00:04:02: %LINK-3-UPDOWN: Interface Ethernet0, changed state to up
132.   00:04:03: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to up
133.   Router(config)#config-reg 0x2102
134.   Router(config)#^Z
135.   Router#
136.   00:04:36: %SYS-5-CONFIG_I: Configured from console by console
137.   Router#write mem