Cisco Password Recovery - 2900 and ASA

===========For 2900 Series======

Reboot the router and press the "Break key" to interrupt the boot sequence.

1.) Either switch off or shut down the router.
1a.) Take out flash card and switch on the router.
1b.) Once the router is on Rommon mode, reinsert the compact flash.

For break key sequences, refer to this Cisco link: http://www.cisco.com/en/US/products/hw/routers/ps133/products_tech_note0.
 
alt+b for teraterm

1.) Type "confreg 0x2142".  ====This tells the router to bypass NVRAM during bootup.  In other words, your existing configuration won't be loaded.  The good news is that it won't be deleted either.
 
2.) Type "reset" to reboot the router. 

Answer "No" when prompted to run setup.

2a.)  type "enable" to get into enable mode.
 
3.) "copy **startup-config** running".  ========This loads your startup configuration into memory.  Now, if you type a show run config, ou'll see the router configuration.  Also, you should notice that your router name is now in the prompt instead of the default “Router”.

4.) conf t === Change the enable- “enable password new_password”
and (config)#enable secret cisco

4b.)  username

5.) Change the register back to 0x2102:
 (config)#config-register 0x2102
 
6.) "exit" and Save the password so that it will be persistent during reboots, type "copy run start" or wr mem.
 
7.) Reboot the router by typing reload at the enable prompt.

========================================================================


========================***** ASA Password Recovery ***** ============

1.) Power off the security appliance, and then power it on.

2.) During the startup messages, press the Escape key when prompted to enter ROMMON.

3.) rommon #1> confreg
 and asks if you want to change the value:

Current Configuration Register: 0x00000001 === note this

Configuration Summary: 
Do you wish to change this configuration? y/n [n]: y

  Take all defaults except:

Do you wish to change this configuration? y/n [n]:

The security appliance prompts you for new values.

4.)  Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y.


5.) Reload the security appliance by entering the following command:

rommon #2> boot


The security appliance loads a default configuration instead of the startup configuration.

6.) Enter privileged EXEC mode by entering the following command:

hostname> enable


7.) When prompted for the password, press Return.

The password is blank.

8.) hostname# copy startup-config running-config


9.) hostname# configure terminal


10. hostname(config)# username name password password pri 15


11.) Change the configuration register to load the startup configuration at the next reload by entering the following command:

hostname(config)# config-register value

Where value is the configuration register value you noted in Step 5 and 0x1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference.

12.) hostname(config)# copy running-config startup-config