User guide

Release Notes for Cisco Router and Security Device Manager 2.5

OL-5009-20

Important Notes

• Unable to Perform “squeeze flash:” Operation, page 19

• Security Alert Dialog May Remain After Cisco SDM Launches, page 21

Cisco IOS Enforces One-Time Use of Default Credentials

To address CSCsm25466, Cisco IOS images included with recent shipments of Cisco 800, Cisco 1800,

Cisco 2800, and Cisco 3800 routers, enforce the one-time use of the default username and password

provided in the Cisco SDM configuration file. If you bypass Cisco SDM or Cisco SDM Express and use

a console or Telnet connection to log into the router, the login and exec banners warn you that you must

change the username "cisco" and password "cisco" before you log off of the router. If you do not change

the credentials as directed, you will not be able to log on to the router the next time that you attempt to

do so.

The following Cisco IOS releases enforce the one-time use of the default credentials:

• 12.4(11)T or later

• 12.4(11)SW, 12.4(11)SW1, 12.4(11)XV, 12.4(11)XJ

• 12.4(9)T5, 12.4(9)T6

• 12.3(21), 12.3(22)

Follow the procedure in this section to secure the router by creating a new username and password, to

remove the login banner and exec banner warnings, and to save the configuration changes to the router

startup configuration.

Note If you login to the router using a Telnet or a console connection but do not complete the steps in this

procedure, be aware of the following:

• If you do not change the default username and password, and then log off the router, you will not be

able to log into the router again without entering the reload command. No additional warning is

given before you log off.

• If you do not change the default username and password, but do enter the write memory command

before ending the session, future logins will be disabled. In this case, you will need to follow the

password recovery procedure at the following link:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_tech_note09186a00801746e6.sht

To secure the router, remove the banner warnings and save the changes to the router startup config,

complete the following steps:

Step 1 Connect the light blue console cable, included with your router, from the blue console port on your router

to a serial port on your PC. Refer to your router’s hardware installation guide for instructions.

Step 2 Connect the power supply to your router, plug the power supply into a power outlet, and turn on your

router. Refer to your router’s quick start guide for instructions.

Step 3 Use HyperTerminal or a similar terminal emulation program on your PC, with the terminal emulation

settings of 9600 baud, 8 data bits, no parity, 1 stop bit, and no flow control, to connect to your router.

Step 4 When prompted, enter the username cisco, and password cisco.

Step 5 Enter configuration mode by entering the following command: