Performing a Basic Startup Configuration

• Cisco 7100 Series VPN Configuration Guide that shipped with your router from the factory. This document contains sample configurations and procedures for configuring a Virtual Private Network (VPN).

• Modular configuration and modular command reference publications in the Cisco IOS software configuration documentation set that corresponds to the software release installed on your Cisco hardware.

• Each port adapter is securely inserted in its slot.

• All network interface cables are connected.

• A Flash Disk or Flash memory card is installed in its PC Card slot.

• The power cable is connected and secured with the cable-retention clip.

• The console terminal is connected and powered on.

Step 4 Observe the initialization process. When the system boot is complete (a few seconds), the network processor begins to initialize the interfaces. During this initialization, the LEDs on each port behave differently (most flash on and off).

The enabled (EN) LED on each interface goes on when initialization is completed, and the console screen displays a script and system banner similar to the following:

              Restricted Rights Legend
 
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
 
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
 

Step 5 When you start up the router for the first time, the system automatically enters the setup command facility, which determines which interfaces are installed and prompts you for configuration information for each one. On the console terminal, after the system displays the system banner and hardware configuration, you will see the following System Configuration Dialog prompt:

--- System Configuration Dialog ---
 
Would you like to enter the initial configuration dialog? [yes/no]:
 

1. The host must be on the remote side of the router's synchronous serial connection to the WAN.

2. User Datagram Protocol (UDP) broadcasts to and from the router and the TCP/IP host are enabled.

This functionality is coordinated by your system administrator at the site where the TCP/IP host is located. You should not use AutoInstall unless the required files are available on the TCP/IP host. Refer to the publications Configuration Fundamentals Configuration Guide and Configuration Fundamentals Command Reference for information about how AutoInstall works.

Complete the following steps to prepare the router for the AutoInstall process:

Step 1 Attach the appropriate synchronous serial cable to an available synchronous serial interface on the router.

Step 2 Turn the power switch on the power supply to the on (|) position. (This action supplies AC power to the router.)

The router loads the operating system image from Flash memory. If the remote end of the WAN connection is connected and properly configured, the AutoInstall process begins.

Step 3 After the AutoInstall process is completed, use the copy running-config startup-config command to write the configuration data to the router's nonvolatile random-access memory (NVRAM).

Hostname# copy running-config startup-config

---

Note Completing this step saves the configuration settings that the AutoInstall process created to NVRAM. If you fail to do this, your configuration will be lost the next time you reload the router.

---

When you first start the setup facility, you must configure the global parameters and interface parameters. Global parameters are used for controlling system-wide settings. Interface parameters are used to create a connection over a LAN or WAN.

Complete the following steps to use the setup facility:

Step 1 Ensure that a console terminal is connected to the console port, and then boot the router.

The system boots from Flash memory. The following information appears after about 30 seconds. When you see this information, you have successfully booted your router:

              Restricted Rights Legend
 
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
 
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
 
 
 
Cisco Internetwork Operating System Software 
IOS (tm) EGR Software (c7100-P-M), Released Version 12.0(4)XE
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Mon 07-Jun-99 10:25 by biff
Image text-base:0x600088F8, data-base:0x60A54000
 
cisco 7140-2T3 (EGR) processor with 61440K/69632K bytes of memory.
R7000 CPU at 262Mhz, Implementation 39, Rev 1.0, 256KB L2, 2048KB L3 Cache
Last reset from power-on
X.25 software, Version 3.0.0.
3 FastEthernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
125K bytes of non-volatile configuration memory.
 
40960K bytes of ATA PCMCIA card at slot 0 (Sector size 512 bytes).
4096K bytes of Flash internal SIMM (Sector size 256K).
 
 
Press RETURN to get started!

---

Note The banner and the installed hardware sections of the configuration script appear only at initial system startup. On subsequent uses of the setup facility, the script begins with a System Configuration Dialog as shown in the next step.

---

Step 2 When asked if you want to enter the initial configuration dialog and see the current interface summary, enter yes or press Return.

--- System Configuration Dialog ---
 
Would you like to enter the initial configuration dialog? [yes/no]: yes
At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
 
Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system
 
First, would you like to see the current interface summary? [yes]:
 

In the following example, the summary shows a router at first-time startup; that is, nothing is configured. The type of interfaces varies depending on the type of Cisco 7100 series router you are using and the type of modular port adapter that is installed in the router.

Any interface listed with OK? value "NO" does not have a valid configuration
 
Interface            IP-Address      OK? Method  Status   Protocol
FastEthernet0/0      unassigned      NO  unset   up       up 
FastEthernet0/1      unassigned      NO  unset   up       up 
ATM1/0               unassigned      NO  unset   down     down 
ATM2/0               unassigned      NO  unset   down     down 
 

Step 3 Enter the router host name, enable secret password, enable password, and virtual terminal password.

Configuring global parameters:
 
  Enter host name [Router]: sanjose
 
  The enable secret is a password used to protect access to
  privileged EXEC and configuration modes. This password, after
  entered, becomes encrypted in the configuration.
  Enter enable secret: barney
 
  The enable password is used when you do not specify an
  enable secret password, with some older software versions, and
  some boot images.
  Enter enable password: betty
 
  The virtual terminal password is used to protect
  access to the router over a network interface.
  Enter virtual terminal password: fred
 

Step 4 Decide whether you want to configure Simple Network Management Protocol (SNMP).

Enter yes or press Return to accept SNMP management; enter no to refuse it.

Configure System Management? [yes/no]: no
  Configure SNMP Network Management? [yes]: no
 

Step 5 Choose which protocols to support on your interfaces. For IP-only installations, you can accept the default values for most of the questions. In most cases, you use IP routing. If you are using IP routing, you must also select an interior routing protocol. You can specify only one of two interior routing protocols to operate on your system using the setup facility: Interior Gateway Routing Protocol (IGRP) or Routing Information Protocol (RIP).

To configure IP routing, enter yes (the default) or press Return, and then select an interior routing protocol.

Configure IP? [yes]: yes
  Configure IGRP routing? [yes]: yes
    Your IGRP autonomous system number [1]: 15
  Configure CLNS? [no]: no
 

Step 6 Configure the Fast Ethernet LAN port in slot 0. Use your own addresses and subnet mask at the setup prompts. Obtain this information from your network administrator.

Configuring interface parameters:
 
Do you want to configure FastEthernet0/0 interface? [yes]: yes
  Use the 100 Base-TX (RJ-45) connector? [yes]: yes
  Operate in full-duplex mode? [no]: yes
  Configure IP on this interface? [yes]: yes
    IP address for this interface: 10.1.1.1
    Subnet mask for this interface [255.0.0.0]: 
    Class A network is 10.0.0.0, 8 subnet bits; mask is /8
 
Do you want to configure FastEthernet0/1 interface? [yes]: no
 

Step 7 Configure the ATM port in slot 1. Use your own addresses and subnet mask at the setup prompts. Obtain this information from your network administrator.

Do you want to configure ATM1/0 interface? [yes]: yes
  Configure IP on this interface? [yes]: yes
    IP address for this interface: 10.1.1.2
    Subnet mask for this interface [255.0.0.0]:
    Class A network is 10.0.0.0, 8 subnet bits; mask is /8
 
Do you want to configure ATM2/0 interface? [yes]:no
 

Step 8 Configure the synchronous serial port in slot 4. Use your own addresses and subnet mask at the setup prompts. Obtain this information from your network administrator.

Do you want to configure Serial4/0 interface [yes]:
Configure IP on this interface? [yes]: 
    IP address for this interface: 10.1.1.3 
    Number of bits in subnet field [0]: 
    Class A network is 10.1.1.0, 0 subnet bits; mask is /24

---

Note The setup facility shows you the command script that you created during the setup session. This script allows you to view your changes before they are made permanent. The program also asks you if you want to use this configuration.

---

The following configuration command script was created:
 
hostname sanjose
enable secret 5 $1$gG.I$gc9JUfK2r6pIDL0vo3j191
enable password betty
line vty 0 4
password fred
no snmp-server
!
ip routing
no clns routing
!
interface FastEthernet0/0
 ip address 10.1.1.1 255.255.0.0
 no ip directed-broadcast
 duplex auto
 speed auto
!
interface ATM1/0
 ip address 10.1.1.2 255.255.255.0
 ip broadcast-address 3.3.3.255
 no ip directed-broadcast
 shutdown
 duplex auto
 speed auto
!
interface Serial4/0
 ip address 10.1.1.3
 no ip directed-broadcast
 shutdown
 framing c-bit
 cablelength 10
 dsu bandwidth 44210
!
router igrp 200
 network 10.0.0.0
!
end
 

[0] Go to the IOS command prompt without saving this config.
[1] Return back to the setup without saving this config.
[2] Save this configuration to nvram and exit.
 
Enter your selection [2]: 2
 

Your router is now minimally configured and ready to use. You can use the setup command if you want to modify the parameters after the initial configuration. To perform more complex configurations, use the configure command.

Router> enable
 

The prompt changes to the privileged EXEC prompt.

Router#
 

Step 4 Enter the configure terminal command at the enable prompt to enter configuration mode from the terminal.

Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#
 

At this point, you can configure the router's host name, passwords, and other global configurations.

---

Note To see a list of the configuration commands available to you, enter ? at the prompt or press the Help key while in configuration mode. For more information, refer to the Configuration Fundamentals Configuration Guide and the Configuration Fundamentals Command Reference.

---

Step 5 At this point, you can either:

To configure the Fast Ethernet interfaces, use the duplex command and the speed command. To fully enable autonegotiation on the Fast Ethernet interfaces, use the duplex auto command and the speed auto command.

Caution If the connected Fast Ethernet port does not support autonegotiation or is not configured for autonegotiation, then the router uses a method called parallel detection which can determine speed, but not duplex. In this case the autosensensing Fast Ethernet port on your Cisco 7100 series router will default to half-duplex mode.

Use the following procedure to configure Fast Ethernet port 0:

Router(config)# interface fastethernet 0/0
Router(config-if)#
 

You can now enter any changes to the configuration.

Router(config-if)# ip address 10.1.1.20 255.0.0.0
 

Step 3 Change a default setting or configure other features on the interface as needed.

The following example shows you how to change the duplex mode (autonegotiation is the default) and the speed (autonegotiation is the default):

Router(config-if)# duplex half
Router(config-if)# speed 10

---

Note For more information on configuring interfaces, refer to the Cisco IOS Interface Configuration Guide and the Cisco IOS Interface Command Reference publications.

---

Router(config-if)# no shutdown
 

Step 5 Configure additional interfaces as required.

Step 7 Save the new configuration to NVRAM as follows:

Router# copy running-config startup-config
[OK]
 

Use the following instructions to perform a basic interface configuration: enabling an interface, specifying IP routing, and setting up external timing on a DCE interface. You might also need to enter other configuration commands, depending on the requirements for your system configuration and the protocols you plan to route on the interface.

In the following procedure, press the Return key after each step unless otherwise noted. At any time, you can exit the privileged level and return to the user level by entering disable at the prompt as follows:

Router# disable
 
 

Router(config)# interface serial 1/0
Router(config-if)#
 

You can now enter any changes to the configuration.

---

Note To see a list of the configuration commands available to you, enter ? at the prompt or press the Help key while in configuration mode.

---

Router(config-if)# ip address 10.1.1.10 255.0.0.0
 

Step 3 Change the default settings or configure other features on the interface as needed.

The following example sets the external clock rate to 72 kbps:

Router(config-if)# clockrate 72000
 

To see a list of valid clock rates, enter the clockrate ? command. If you enter a nonstandard clock rate (that is, a rate not displayed by the clockrate ? command), the clock rate is rounded to the nearest value that the hardware can support. To determine the value that the clock rate was rounded to, use the show running-configuration command.

---

Note The T1 and E1 interfaces support both DTE and DCE mode, depending on the mode of the interface cable attached to the port.

---

Router(config-if)# no shutdown
 

Step 5 To complete the configuration, press Ctrl-Z (hold down the Control key while you press Z) or enter end to exit configuration mode and return to the EXEC command interpreter.

Step 6 Save the new configuration to NVRAM as follows:

Router# copy running-config startup-config
[OK]
 

Use the following instructions to perform a basic interface configuration: enabling an interface, specifying IP routing, and setting up external timing on a DCE interface. You might also need to enter other configuration commands, depending on the requirements for your system configuration and the protocols you plan to route on the interface.

In the following procedure, press the Return key after each step unless otherwise noted. At any time, you can exit the privileged level and return to the user level by entering disable at the prompt as follows:

Router# disable
 
 

Router(config)# interface serial 1/0
Router(config-if)#
 

You can now enter any changes to the configuration.

---

Note To see a list of the configuration commands available to you, enter ? at the prompt or press the Help key while in configuration mode.

---

Router(config-if)# ip address 10.1.1.30 255.0.0.0
 

The following example shows you how to set the clock source to internal (the default is line) and reduce the effective bandwidth (the default is 44210 kbps):

Router(config-if)# clock source internal
Router(config-if)# dsu bandwidth 16000

---

Note The local port configuration must match the remote port configuration. For example, if you reduce the effective bandwidth to 16000 on the local port, you must do the same on the remote port.

---

Router(config-if)# no shutdown
 

Step 5 To complete the configuration, press Ctrl-Z (hold down the Control key while you press Z) or enter end to exit configuration mode and return to the EXEC command interpreter.

Step 6 Save the new configuration to NVRAM as follows:

Router# copy running-config startup-config
[OK]
 

Use the following instructions to perform a basic interface configuration: enabling an interface, specifying IP routing, and setting up external timing on a DCE interface. You might also need to enter other configuration commands, depending on the requirements for your system configuration and the protocols you plan to route on the interface.

In the following procedure, press the Return key after each step unless otherwise noted. At any time, you can exit the privileged level and return to the user level by entering disable at the prompt as follows:

Router# disable
 
 

Router(config)# interface serial 1/0
Router(config-if)#
 

You can now enter any changes to the configuration.

---

Note To see a list of the configuration commands available to you, enter ? at the prompt or press the Help key while in configuration mode.

---

Router(config-if)# ip address 10.1.1.40 255.0.0.0
 

The following example shows you how to set the clock source to internal (the default is line) and reduce the effective bandwidth (the default is 34010 kbps):

Router(config-if)# clock source internal
Router(config-if)# dsu bandwidth 16000

---

Note The local port configuration must match the remote port configuration. For example, if you reduce the effective bandwidth to 16000 on the local port, you must do the same on the remote port.

---

Router(config-if)# no shutdown
 

Step 5 To complete the configuration, press Ctrl-Z (hold down the Control key while you press Z) or enter end to exit configuration mode and return to the EXEC command interpreter.

Step 6 Save the new configuration to NVRAM as follows:

Router# copy running-config startup-config
[OK]
 

Use the following instructions to perform a basic interface configuration: enabling an interface and specifying IP routing. You might also need to enter other configuration commands, depending on the requirements for your system configuration and the protocols you plan to route on the interface.

In the following procedure, press the Return key after each step unless otherwise noted. At any time, you can exit the privileged level and return to the user level by entering disable at the prompt as follows:

Router# disable
 
 

Router(config)# interface atm 1/0
Router(config-if)#
 

You can now enter any changes to the configuration.

---

Note To see a list of the configuration commands available to you, enter ? at the prompt or press the Help key while in configuration mode.

---

Router(config-if)# ip address 10.1.1.50 255.0.0.0
 

Router(config-if)# clock source internal
 

Router(config-if)# no shutdown
 

Step 5 To complete the configuration, press Ctrl-Z (hold down the Control key while you press Z) or enter end to exit configuration mode and return to the EXEC command interpreter.

Step 6 Save the new configuration to NVRAM as follows:

Router# copy running-config startup-config
[OK]
 

Router# copy running-config startup-config
 

This command saves the configuration settings that you created in the router using configuration mode and the setup facility. If you fail to save the configuration setting, your configuration will be lost the next time you reload the router.

To check the value of the settings you have entered before they are saved to NVRAM, use the show running-config command. The following example shows a sample output from the show running-config command:

Router# show running-config 
Building configuration...
 
Current configuration:
!
version 12.0(6)T
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
no service dhcp
!
hostname Router
!
enable password egr
!

ip subnet-zero
ip host Router 10.0.0.0
ip host router 10.0.0.0
ip domain-name cisco.com
!
!
!
 
interface FastEthernet0/0
 ip address 10.0.0.0 255.0.0.0
 no ip directed-broadcast
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 10.0.0.0 255.255.0.0
 ip broadcast-address 255.255.0.0
 no ip directed-broadcast
 shutdown
 duplex auto
 speed auto
!
interface Serial1/0
 no ip address
 no ip directed-broadcast
 shutdown
 framing c-bit
 cablelength 10
 dsu bandwidth 44210
!
interface Serial1/1
 no ip address
 no ip directed-broadcast
 shutdown
 framing c-bit
 cablelength 10
 dsu bandwidth 44210
!
interface FastEthernet4/0
 no ip address
 no ip directed-broadcast
 shutdown
!
router igrp 200
 network 10.0.0.0
!
ip classless
no ip http server
!
!
map-list atm1
!
!
line con 0
 exec-timeout 0 0
 transport input none
line aux 0
line vty 0 4
 login
!
end

The following examples show the display for the Fast Ethernet port 0 in slot 0:

Router# show interfaces fastethernet 0/0
FastEthernet0/0 is up, line protocol is up 
  Hardware is DEC21140A, address is 0050.73ff.6300 (bia 0050.73ff.6300)
  Internet address is 10.0.0.0
  MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, 
     reliablility 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Half-duplex, 10Mb/s, 100BaseTX/FX
  ARP type:ARPA, ARP Timeout 04:00:00
  Last input 00:00:04, output 00:00:03, output hang never
  Last clearing of "show interface" counters never
  Queueing strategy:fifo
  Output queue 0/40, 0 drops; input queue 0/75, 0 drops
  5 minute input rate 2000 bits/sec, 1 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     134 packets input, 41451 bytes
     Received 134 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast
     0 input packets with dribble condition detected
     26 packets output, 5281 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out

The following sample output of the show version command shows that the router is running Cisco IOS Release 12.0(4)XE:

Router# show version
Cisco Internetwork Operating System Software 
IOS (tm) EGR Software (c7100-P-M), Released Version 12.0(4)XE
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Mon 07-Jun-99 17:49 by biff
Image text-base:0x600088F8, data-base:0x60A54000
 
ROM:System Bootstrap, Version 12.0(4)XE, RELEASED SOFTWARE
BOOTFLASH:EGR Software (c7100-BOOT-M), Released Version 12.0(1990607:041101)
 
Router uptime is 19 minutes
System restarted by reload
System image file is "c7100-p-mz"
 
cisco 7120-T3 (EGR) processor with 61440K/69632K bytes of memory.
R527x CPU at 225Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache
Last reset from power-on
X.25 software, Version 3.0.0.
3 FastEthernet/IEEE 802.3 interface(s)
1 Serial network interface(s)
125K bytes of non-volatile configuration memory.
          
4096K bytes of Flash internal SIMM (Sector size 256K).
Configuration register is 0x2000
 

The following example shows the show diag command output from a Cisco 7120-T3:

Router# show diag
Slot 0:
        10/100 Fast-ethernet with RJ45 Integrated port adapter, 2 ports
        Integrated port adapter is analyzed 
        EEPROM contents at hardware discovery:
        Hardware revision 1.0               Board revision A0
        EEPROM format version 1
        EEPROM contents (hex):
          0x20:01 D3 01 00 00 A4 19 EC 49 06 98 04 00 00 00 00
          0x30:50 00 00 00 98 10 21 00 FF FF FF FF FF FF FF FF
 
Slot 1:
        T3 PA Integrated port adapter, 1 port
        Integrated port adapter is analyzed 
        EEPROM contents at hardware discovery:
        Hardware revision 1.0           Board revision A0
        EEPROM format version 1
        EEPROM contents (hex):
          0x20:01 70 01 00 00 BD 14 80 49 0A 38 02 00 00 00 00
          0x30:50 00 00 00 99 03 09 00 FF FF FF FF FF FF FF FF
 
Slot 3:
        Fast-ethernet (TX-ISL) Port adapter, 1 port
        Port adapter is analyzed 
        Port adapter insertion time 00:20:37 ago
        EEPROM contents at hardware discovery:
        Hardware revision 1.0           Board revision A0
        Serial number     10754540      Part number    73-1688-04
        Test history      0x0           RMA number     00-00-00
        EEPROM format version 1
        EEPROM contents (hex):
          0x20:01 11 01 00 00 A4 19 EC 49 06 98 04 00 00 00 00
          0x30:50 00 00 00 98 10 21 00 FF FF FF FF FF FF FF FF
 

Use the show c7100 command to show the contents of the EPROM. The show c7100 command is used mainly for diagnostic purposes. Following is show c7100 command sample output from a Cisco 7140-2T3:

Router# show c7100
Network IO Interrupt Throttling:
 throttle count=0, timer count=0
 active=0, configured=0
 netint usec=4000, netint mask usec=200
 
C7140-2T3 CPU EEPROM:
        Hardware revision 2.0           Board revision A0
        Serial number     11605417      Part number    73-FIXX-ME
        Test history      0x0           RMA number     00-00-00
        EEPROM format version 1
        EEPROM contents (hex):
          0x20:01 D4 02 00 00 B1 15 A9 49 0D 51 02 00 00 00 00
          0x30:50 00 00 00 98 12 30 00 00 00 FF FF FF FF FF 00
 
C7140-2T3 Extension EEPROM:
        MAC Address block size   :128
        Chassis MAC Address      :0050.73ff.6300
        Number of Slots          :1
        Model                    :7140-2T3
        Power Supply Type        :AC
        Platform features        :00 80 01 09 00 8E 00 16 
                                   00 91 00 05 
        EEPROM contents (hex):
          0x00:43 00 80 C3 06 00 50 73 FF 63 00 01 01 40 00 05
          0x10:CB 12 37 31 34 30 2D 32 54 33 00 00 00 00 37 31
          0x20:34 30 2D 32 0B 00 C9 0C 00 80 01 09 00 8E 00 16
          0x30:00 91 00 05 C7 1C 45 53 00 46 00 40 00 4B 00 48
          0x40:00 88 00 74 00 84 00 7F 00 84 00 84 00 00 00 00
          0x50:B8 97 FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 
TLB entries :
Virt Address range      Phy Address range       Attributes
0x4B000000:0x4B1FFFFF   0x4B000000:0x4B1FFFFF   CacheMode=2, RW, Invalid
0x4B200000:0x4B3FFFFF   0x4B200000:0x4B3FFFFF   CacheMode=2, RW, Invalid
 

For specific information on the show diag and other software commands, refer to the modular configuration and modular command reference publications in the Cisco IOS software configuration documentation set that corresponds to the software release installed on your Cisco hardware.

1. If you can log in to the router, enter the show version command to determine the existing configuration register value.

2. Press the Break key within 60 seconds to get to the bootstrap program prompt (ROM monitor). You might need to reload the system image by power cycling the router.

3. Change the configuration register so the following functions are enabled: Break, ignore startup configuration, and boot from Flash memory.

Router> show version
 

Step 4 Press the Break key or send a Break from the console terminal. If Break is enabled, the router enters the ROM monitor, indicated by the ROM monitor prompt (rommon1>). Proceed to Step 6. If Break is disabled, power cycle the router (turn the router off or unplug the power cord, and then restore power). Then proceed to Step 5.

rommon1> confreg
 

Step 7 Answer yes to the "enable ignore system config info?" question and note the current configuration register settings.

rommon2> reset
 

The router initializes, the configuration register is set to 0x142, and the router boots the system image from Flash memory and enters the System Configuration Dialog (setup) as follows:

--- System Configuration Dialog --
 

Step 9 Enter no in response to the System Configuration Dialog prompts until the following message is displayed:

Press RETURN to get started!
 

Step 10 Press Return. The user EXEC prompt is displayed as follows:

Router>
 

Router# show startup-config
 

Step 12 Scan the configuration file display looking for the passwords (the enable passwords are usually near the beginning of the file, and the console login or user EXEC password is near the end). The passwords displayed look something like this:

enable secret 5 $1$ORPP$s9syZt4uKn3SnpuLDrhuei
enable password 23skiddoo
.
.
line con 0
 password onramp
 

The enable secret password is encrypted and cannot be recovered; it must be replaced. The enable and console passwords may be encrypted or clear text. Proceed to the next step to replace an enable secret, console login, or enable password. If there is no enable secret password, note the enable and console login passwords, if they are not encrypted, and proceed to Step 16.

Caution Do not execute the next step unless you have determined you must change or replace the enable, enable secret, or console login passwords. Failure to follow the steps as shown might cause you to erase your router configuration.

Router# configure memory
 

Hostname# configure terminal
 

Step 15 Change all three passwords using the following commands:

Step 21 Log in to the router with the new or recovered passwords.

This completes the steps for recovering or replacing a lost enable, enable secret, or console login password.