Recovering a Lost Enable Password
This section describes how to recover a password that you configured with the enable command (enable password).


------------------------------------------------------------­--------------------
Note You can recover a lost enable password but not a password that you configured with the enable secret command (enable secret password). This password is encrypted and must be replaced with a new enable secret password. See the "Hot Tips" section on Cisco Connection Online (CCO) for information on replacing enable secret passwords.

--------------------------------------------------------------------------------

Follow these steps to recover a lost enable password:


--------------------------------------------------------------------------------
Step 1 Connect an ASCII terminal or a PC running a terminal emulation program to the Console port. For more information, see the Cisco 800 Series Routers Hardware Installation Guide.

Step 2 Configure the terminal at 9600 baud, 8 data bits, no parity, and 1 stop bit.

Step 3 Reboot the router.

Step 4 From the user EXEC mode, display the existing configuration register value:

Router> show version



Step 5 Record the setting of the configuration register.

The setting is usually 0x2102 or 0x102.

Step 6 Record the break setting.


Break enabled—bit 8 is set to 0.


Break disabled (default setting)—bit 8 is set to 1.


--------------------------------------------------------------------------------
Note To enable break, enter the config-register 0x01 global configuration command.

--------------------------------------------------------------------------------

Step 7 Do one of the following:


If break is enabled, go to Step 8.


If break is disabled, turn the router off, wait 5 seconds, and turn it on again. Before the terminal displays Boot..., press Escape or Control-C. The terminal displays the ROM monitor prompt (boot#).
Go to Step 9.


--------------------------------------------------------------------------------
Note Some terminal keyboards have a key labeled Break. If your keyboard does not have a Break key, refer to the documentation that came with the terminal for instructions on how to send a break.

--------------------------------------------------------------------------------

Step 8 Send a break. The terminal displays the following prompt:

boot#


Step 9 Reset the configuration register:

boot# set ios-conf = 142



Step 10 Initialize the router:

boot# boot [flash]


The router cycles its power, and the configuration register is set to 0x142. The router uses the boot ROM system image, indicated by the system configuration dialog:

--- System Configuration Dialog ---


Step 11 Enter no in response to the prompts until the following message is displayed:

Press RETURN to get started!


Step 12 Press Return. The following prompt appears:

router>


Step 13 Enter privileged EXEC mode:

router> enable



The prompt changes to the privileged EXEC prompt:

router#


Step 14 Display the enable password in the configuration file:

router# show startup-config



Step 15 Enter configuration mode:

router# configure terminal



Step 16 Reset the configuration register:

router# config-register value



Specify the value that you recorded in Step 5 (usually 0x2102 or 0x102).

Step 17 Press Ctrl-Z to exit configuration mode.


--------------------------------------------------------------------------------
Note To return to the configuration being used before recovering the lost enable password, do not save the configuration changes before rebooting the router.

--------------------------------------------------------------------------------

Step 18 Reboot the router and enter the recovered password.