Bokshtein, Lev | 10 Jul 08:59 2009

RE:Urgent:::::Forgot Password

Here you are.

 

Lev

Moscow

 

 

Title:

Password Recovery for the SecureStack Series

Article ID:

5476

Technology :

switching

Previous ID:

ent18267

Products
SecureStack C3
SecureStack C2
SecureStack B3
SecureStack B2
SecureStack A2

Symptoms
Lost password
Forgot password

Solution
Central to these procedures is the "Reset button". On each SecureStack unit is a small push-button. On the C3/C2/B3/B2, it is located to the immediate right of the "
stack down" connector on the rear of the unit. On the A2, it is located to the immediate right of the console port on the front of the unit. This button does not power cycle the switch, but is used to clear the passwords as explained in detail below.

In these instructions, the "HW revision" refers to the last two digits of the serial number.

Newer hardware
C2G124-48 HW Revision Level 0C (zero C) and higher;
C2G124-48P HW Revision Level 0C (zero C) and higher;
all other C2 models, SecureStack C3, SecureStack B3, SecureStack B2, SecureStack A2.

This procedure is not disruptive to the operation of the SecureStack, with the possible exception of any RADIUS setup changes the user chooses to make.

Note that if RADIUS has been configured to regulate management access (5677), the associated passwords on the RADIUS server will override the local passwords. To drop back to local passwords, use the following procedure while there is no connection to the RADIUS server, then log in and disable RADIUS, then reassign passwords as desired.

While the switch is operational, press and hold the Reset button for five seconds, then release.

A "Password Reset button has been pressed" message will display on the cli console and in the current.log (5487).

The admin, rw, and ro login passwords will be reset to <enter>; and with C2 f/w 3.01.45 and higher, the boot menu password will be reset to the default value of "administrator" (5551).

Older hardware
C2G124-48 HW Revision Level 0B (zero B) and lower;
C2G124-48P HW Revision Level 0B (zero B) and lower.

All of these procedures are disruptive to the operation of the SecureStack, and "method 2" will result in configuration loss. Please read through the entire set of instructions for an understanding of the expected side effects, before performing any steps.

Note that if RADIUS has been configured to regulate management access (5677), the associated passwords on the RADIUS server will override the local passwords. To drop back to local passwords, use the following procedure while there is no connection to the RADIUS server, then log in and disable RADIUS, then continue with whatever recovery is necessary.

Resetting the rw, ro, and boot menu Passwords

a.       Power up (or reset) the unit.

b.      During boot-up while the CPU LED is blinking amber, press and hold the Reset button for five seconds, then release.

c.       Within a minute or two, the CPU LED will turn green, indicating that the boot process is complete.

After boot-up, the rw and ro login passwords will be reset to <enter>; and with C2 f/w 3.01.45 and higher, the boot menu password will be reset to the default value of "administrator" (5551).

With firmware prior to 2.00.48, logging in as rw allows the user to change the admin password. With firmware 2.00.48 and higher, in the absence of the admin password you will also need to use one of the following two recovery methods.

Resetting the admin Password, method 1, with the ability to obtain rw access:

1.      Log onto the C2 with rw access (using account "rw" or equivalent), via Telnet/SSH, or serially per the instructions in 5463.

2.      Save the active configuration to a new or existing configuration file within the C2's configs directory:

  show configuration outfile configs/<filename1>

3.      With a TFTP service running in the background, use TFTP to copy that file to a TFTP Server:

  copy configs/<filename1> tftp://<TFTP_server_IP_address>/<filename2>

4.      On the TFTP server, using Wordpad or equivalent unformatted text utility, open <filename2>.

5.      Delete the entire command line (example follows) which is disabling the admin password:

  set system login admin super-user disable password
    :02523ab0258709bdd3037bc91a201b8b397e0f4c:

6.      Re-save the file, to <filename3>.

7.      With a TFTP service running in the background, use TFTP to copy that file back to the C2:

  copy tftp://<TFTP_server_IP_address>/<filename3> configs/<filename4>

8.      Verify that the file is present and looks reasonable:

  dir

9.      Activate the C2 system onto the modified configuration file:

  configure configs/<filename4>

10.    The unit will reboot, and after boot-up is complete the admin login password will be reset to <enter> - with otherwise intact configurations.

Resetting the admin Password, method 2, without the ability to obtain RW access:

1.      Establish a serial console session to the C2, per the instructions in 5463.

2.      Reset the C2.

3.      Upon boot-up, type "2" <enter> when the below screen is presented in the CLI output.

  Enterasys C2-Series Boot Code...
  SDRAM Circuit Test of 256MB
  100%
 
 
  Version 01.00.29 05-09-2005
 
  Computing MD5 Checksum of operational code...
  Select an option. If no selection in 2 seconds then
  Operational code will start.
 
  1 - Start operational code.
  2 - Start Boot Menu.
  Select (1, 2):2

4.      From the Boot Menu, type "10" <enter> when the below screen is presented in the CLI output.

You may need a password (5551).

  Password: *************
 
  Boot Menu Version 01.00.29 05-09-2005
 
 
  Options available
  1  - Start operational code
  2  - Change baud rate
  3  - Retrieve event log using XMODEM (64KB).
  4  - Load new operational code using XMODEM
  5  - Display operational code vital product data
  6  - Run Flash Diagnostics
  7  - Update Boot Code
  8  - Delete operational code
  9  - Reset the system
  10 - Restore Configuration to factory defaults (delete config files)
  11 - Set new Boot Code password
  [Boot Menu] 10

Note: If this command is issued while the C2 is stacked, it affects the master unit only.

5.      From the Boot Menu, type "9" <enter>, then "y", when the below screen is presented in the CLI output.

  Options available
  1  - Start operational code
  2  - Change baud rate
  3  - Retrieve event log using XMODEM (64KB).
  4  - Load new operational code using XMODEM
  5  - Display operational code vital product data
  6  - Run Flash Diagnostics
  7  - Update Boot Code
  8  - Delete operational code
  9  - Reset the system
  10 - Restore Configuration to factory defaults (delete config files)
  11 - Set new Boot Code password
  [Boot Menu] 9
  Are you SURE you want to reset the system? (y/n):y

6.      After boot-up, the admin login password will be reset to <enter> - and the C2 will have lost all user configurations. The unit will need to be reconfigured manually or through the use of a previously saved configuration file.

Reassigning Passwords

1.      Log onto the SecureStack with admin access (using account "admin" or equivalent), via Telnet/SSH, or serially per the instructions in 5463.

2.      Assign new login passwords, as applicable:

 set system login ro ro enable password <password>
 set system login rw rw enable password <password>
 set system login admin super-user enable password <password>

3.      Assign a new boot menu password (5551), as applicable.

For the process of clearing the configuration, please refer to 5628.

INTERNAL INFORMATION


Solution
SALESFORCE Case #: 427271
SALESFORCE Case #: 427460
SALESFORCE Case #: 445715
SALESFORCE Case #: 450451
SALESFORCE Case #: 468449
SALESFORCE Case #: 486086

The A2 recovery procedure apparently did not work for this customer, despite the reception of the "Password Reset button has been pressed" message. Hmmm...
-ppoyant Oct 6 2006-

SALESFORCE Case #: 499387

The C2 recovery procedure apparently did not work for this customer, despite the reception of the "Password Reset button has been pressed" message. Hmmm...
-ppoyant Jun 14 2007-

SALESFORCE Case #: 529920 (f/w 5.00.59)
SALESFORCE Case #: 529582 Escalation #: 531018 (f/w 4.00.31)

Note the following C2/B2 firmware x.02.06.0004 release notes item:
12379  Resolved an issue whereby pressing the password reset button on the switch failed to reset the password for the admin user account.

Primus History

Status :

final

Audience :

external

Technology :

switching

Modified by :

ppoyant

Date Modified :

1174664212

Owner :

ppoyant

Author :

dhyde

Date Created :

1105557063

Type :

how to

Review Frequency :

low

Hoth Author :

 

 

From: Pal, Abhijit IN CCU SISL [mailto:abhijit.pal <at> siemens.com]
Sent: Friday, July 10, 2009 10:54
To: Enterasys Customer Mailing List
Subject: [enterasys] Urgent:::::Forgot Password

 

Hi,

 

I have an Enterasys SecureStack B3 Switch. I had disabled RO and RW some days back. Only admin was enabled. Now I have forgot the admin password. How to recover it ? or how to login into the system and change password of admin?

 

Please help. Its urgent……

 

Best Regards,

 Abhijit Pal

 

SIEMENS Information systems Limited.

GO/ GTAS(Global Technology Application Services)

13th Floor, Tower-2,Millenium City Bldg,

DN-62,Sector-5,SaltLake, Kolkata-700091.

DID:    +91 33 2339 9284

Board:+91 33 2339 9000

Fax:    +91 33 2339 9001

 

 

Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system.
Thank You.

  • --To unsubscribe from enterasys, send email to listserv <at> unc.edu with the body: unsubscribe enterasys Lev.Bokshtein <at> enterasys.com

  • --To unsubscribe from enterasys, send email to listserv <at> unc.edu with the body: unsubscribe enterasys gneu-enterasys <at> gmane.org
Sylvain Conti | 10 Jul 09:04 2009
Picon

RE: Urgent:::::Forgot Password

Hi,
 
The knowledge base is your friend.
 
 
Regards,
Sylvain CONTI  
Pilote Support Agence
+33 1 64 53 14 12 +33 6 78 78 07 47

INTEGRATEUR RESEAUX et SECURITE

Agence Ile de France, Parc Gutenberg - 11 voie La Cardon 91120 Palaiseau      T : +33 1 64 53 14 14   F : +33 1 69 32 14 02
Siège social,
 Espace Jacques Cartier   BP 96031   35360 Montauban de Bretagne       T : +33 2 99 06 61 61   F : +33 2 99 06 36 36 
sconti <at> retis.fr   www.retis.fr


 

De : Pal, Abhijit IN CCU SISL [mailto:abhijit.pal <at> siemens.com]
Envoyé : vendredi 10 juillet 2009 08:54
À : Enterasys Customer Mailing List
Objet : [enterasys] Urgent:::::Forgot Password

Hi,

 

I have an Enterasys SecureStack B3 Switch. I had disabled RO and RW some days back. Only admin was enabled. Now I have forgot the admin password. How to recover it ? or how to login into the system and change password of admin?

 

Please help. Its urgent……

 

Best Regards,

 Abhijit Pal

 

SIEMENS Information systems Limited.

GO/ GTAS(Global Technology Application Services)

13th Floor, Tower-2,MilleniumCity Bldg,

DN-62,Sector-5,SaltLake, Kolkata-700091.

DID:    +91 33 2339 9284

Board:+91 33 2339 9000

Fax:    +91 33 2339 9001

 


Important notice: This e-mail and any attachment there to contains corporate proprietary information. If you have received it by mistake, please notify us immediately by reply e-mail and delete this e-mail and its attachments from your system.
Thank You.

  • --To unsubscribe from enterasys, send email to listserv <at> unc.edu with the body: unsubscribe enterasys sconti <at> retis.fr

  • --To unsubscribe from enterasys, send email to listserv <at> unc.edu with the body: unsubscribe enterasys gneu-enterasys <at> gmane.org

Gmane