So we've been told that we need to recover the passwords on these devices.
Let's start with router 1,
here's router 1 we can see some neighbor relationships have come up, so EIGRP neighbor relationships
have been formed, type enable don't know what the password is.
So there's not much we can do here.
We can't reload the router for password recovery
you need physical access.
So on the router, I'm going to turn off the power and then turn it on again, and then I'm going to press
control C, which works as a control break on my keyboard, the brake sequence depends on your
keyboard and operating system, such as Windows or Mac and the application that you're using.
So on Windows, you could use putty, could use terror term or some other terminal emulation software.
You'll have to look at what the brake sequence is on that specific device.
So have a look on your keyboard for a brake key and press control brake as an example, or control C
to break the start up process.
Question mark Enter shows us various options available in ROM mon or ROM monitor mode, help also gives
us the same list of commands.
We're going to want to bypass the startup configuration by setting the configuration register to 0
x2142.
You can find a list of configuration register values by doing a search on Google, just search for Cisco
configuration register and you'll find documents such as the following that allow you to see various
configuration register values, 0x2142 allows you to ignore the startup configuration.
In other words, the router ignores NVRAM and boots without a startup configuration. I'll then
reset the device to get it to reboot.
So that's router 1, router 2
has a similar problem when I type enable, I don't know the password of router 2.
Now, before I restore the password on router 2, let's complete router 1 because it's now booted up.
I'll use No to bypass the initial configuration dialog, I now have a router using a default configuration
type enable.
This router has a default configuration
but notice, the startup configuration shows me the enable password that is shown in clear text so we
would know that password here, but you can bypass that even if you don't know what the password is.
Notice, we are currently in enable mode, so again, the startup-configuration shows us the password
but that's because service password encryption has not been set.
If that was set, I wouldn't know what the password was, but I could still restore the routers configuration
by using the command copy startup configuration running configuration, show run now shows us the configuration
including the password
but notice loopback, addresses and physical interface addresses are now configured on the router. If
a service password encryption was set,
I wouldn't know what the password was, but I could still restore the configuration.
Now you can hack this password
but notice on devices such as router 2 and switch 1 that are using the secret password, you will not
easily be able to work out what the password is.
But we can still bypass the configuration and then sent the enable password to Cisco.
So even if I don't know what the password is, I can bypass the device configuration by setting the
configuration register to 0x2142 rebooting the router and then going to privilege mode or enable
mode and then copying the configuration and then setting the password.
One thing to be aware of is notice the physical interfaces are shut down.
So even though you restore the configuration, you will need to go and no shut the physical interfaces
once you've done that, restore. So show IP interface brief notice, the interfaces are now up and I can
save the router configuration by using the WR command or in the exam copy running-config, startup
config.
So now if I exit out of the router
and then go back in and type enable the password now used is Cisco, I've encrypted that password
but if I hadn't encrypted the password, this would be displayed in clear text. In the exam
do what you're told.
Don't do extra things like I'm doing here.
Do what's required.
I'm trying to show you extra options and teach you various options on the routers.
Now, just be careful, even though we've saved the configuration and we can log back into the router.
The running configuration doesn't affect the configuration register.
I need to configure the configuration register, so I'm going to set that to 2102.
So show version,
shows us that the configuration register will be set to this at next reload, the configuration
register is separate to the running configuration.
So even though you've saved the running configuration, it doesn't change the configuration register.
The configuration register needs to be set separately.
So that's router
1 completed.
Let's have a look at router 2.