System information

Recovering a Lost Password
Book Title
24-488
• Password-Recovery Procedure: IGS Running Software Prior to Software Release 9.1
• Password-Recovery Procedure: Cisco 500-CS Communication Server
Note To complete this procedure, you must have a terminal or a personal computer (running
terminal emulation software) connected to the console port of the router.
Following is the password-recovery procedure for Cisco platforms running recent software releases:
Step 1 Power down the router.
Step 2 Change the hardware configuration register by moving the jumper from bit position 0 or
1 to bit position 6. This will force the router to ignore the contents of NVRAM, and
therefore the configuration file, after it loads the operating system. Note the original
position of the jumper.
Note To move the hardware configuration register jumper, you might need to remove the processor
card from the router chassis. This is the case with the Route Processor (RP) card in Cisco 7000 series
routers. Refer to your hardware documentation for complete instructions on removing and inserting
the processor card. If you had to remove the processor card, reinsert it before continuing.
Step 3 Power up the router.
The router will boot but will ignore the contents of NVRAM and enter the Setup routine.
Step 4 Answer no to all the setup questions.
The Router> prompt appears.
Step 5 Enter the enable exec command.
Step 6 Enter the show configuration privileged exec command to see whether the password is
cleartext (is not encrypted) or if it is encrypted.
If the password is cleartext, go to Step 10. If the password is encrypted, continue with
Step 7.
Step 7 If the password is encrypted, enter the configure memory privileged exec command.
This writes the stored configuration into running memory.
Step 8 Enter the configure terminal privileged exec command to enter router configuration
mode.
Step 9 If you have lost the enable password, use the enable-password global configuration
command to configure a new password.
If you have lost the login password, configure the console line with a new login password
using the login and password line configuration commands. Press ^Z to exit
configuration mode. Proceed to Step 11.
Syntax:
To enable password checking at login, use the login line configuration command:
login [local | tacacs]
Syntax Description: