Table of Contents. Cisco Password Recovery Procedure for the Cisco Aironet Equipment

Transcription

1 Table of Contents Password Recovery Procedure for the Cisco Aironet Equipment...1 To get Cisco Aironet drivers, firmware and utility software, follow this link to the Cisco Wireless Software Center...1 Introduction...1 Before You Begin...1 Conventions...2 Prerequisites...2 Access Point...2 Determine Which Operating System...2 Connecting to the AP...2 Resetting the Access Point VxWorks Versions before Resetting the Access Point VxWorks Versions and Newer...5 Resetting the Access Point IOS...7 Resetting the Access Point AP350 running IOS...7 Base Station...9 Setting Defaults with the Reset Button...9 Client Adapters...9 SSID...10 Setting Defaults...10 CEM Password...10 WEP Keys...11 Cisco Aironet 1410 Series Bridge...11 Cisco Aironet 350 Series Bridge...12 For Software Versions 11.xx and Later...12 Cisco Aironet 340 Series Bridge...13 For Software Versions 8.65 and Later...13 For Software Versions Earlier than Workgroup Bridge...14 Setting Defaults with the Reset Button...14 Related Information...15 i

2 Password Recovery Procedure for the Cisco Aironet Equipment To get Cisco Aironet drivers, firmware and utility software, follow this link to the Cisco Wireless Software Center. Introduction Before You Begin Conventions Prerequisites Access Point Determine Which Operating System Connecting to the AP Resetting the Access Point VxWorks Versions before Resetting the Access Point VxWorks Versions and Newer Resetting the Access Point IOS Resetting the Access Point AP350 running IOS Base Station Setting Defaults with the Reset Button Client Adapters SSID Setting Defaults CEM Password WEP Keys Cisco Aironet 1410 Series Bridge Cisco Aironet 350 Series Bridge For Software Versions 11.xx and Later Cisco Aironet 340 Series Bridge For Software Versions 8.65 and Later For Software Versions Earlier than 8.65 Workgroup Bridge Setting Defaults with the Reset Button Related Information Introduction When using Cisco Aironet Wireless LAN (WLAN) equipment, it may become necessary to perform a password recovery or to restore the default settings on the equipment. Note: Unlike other Cisco platforms, the Cisco Aironet hardware and software do not allow password recovery. You must instead return the equipment to its default state, from which it can be reconfigured. This document presents the proper methods for performing these procedures as appropriate for various WLAN components. Before You Begin

3 Conventions For more information on document conventions, see the Cisco Technical Tips Conventions. Prerequisites There are no specific prerequisites for this document. Access Point There are two operating systems currently in use on Cisco Aironet access points (APs). The operating system a unit is running determines which procedure to use for password recovery. Determine Which Operating System VxWorks operating system runs on: 340 Series Access Points some 350 Series Access Points some 1200 Series Access Points, also known as AP1220 Note: The graphical user interface (GUI) for VxWorks has yellow bands with black and red text, and the Cisco logo in the upper right corner of the page. Cisco IOS operating system runs on: 1100 Series Access Points some 1200 Series Access Points, also known as AP1230 some 350 Series Access Points Note: The GUI for IOS is predominantly green and gray with black and blue text, and the Cisco logo in the upper left corner of the page. The procedure to reset the AP configuration under VxWorks changed beginning in version In all versions of the AP software, you must first connect to the AP to perform the recovery and then perform the steps to reset the unit. Connecting to the AP To connect to the AP, follow the steps below: Note: The AP1100 does not have a console port, so these instructions do not apply. If you cannot obtain telnet or browser access, you must reset the unit to factory defaults and completely reconfigure it again. 1. Use a straight through cable with 9 pin male to 9 pin female connectors to connect the COM 1 or COM 2 port on your computer to the RS 232 port on the AP. On AP1200 series models, the console port is an RJ45 connector, and the same console cabling used for Cisco routers and switches can be used. For more information, see the Cabling Guide for Console and AUX Ports.

4 2. Open a terminal emulation program on your computer. Note: These instructions describe Microsoft HyperTeminal; other programs are similar. 3. In the Connection Description window, enter a name, select an icon for the connection, and click OK. 4. In the Connect To window, use the Connect using pull down menu to select the port to which the cable is connected, then click OK. 5. In the Port Settings window, make the following settings: Bits per second (baud): 9600 Data bits: 8 Parity: None Stop bits: 1 Flow Control: None 6. Click OK. 7. Press Enter. Resetting the Access Point VxWorks Versions before If you forget the password that allows you to configure the AP, you must reset the entire configuration to the factory default settings. Follow the steps below to reset the AP configuration and assign a new password. Note: The following steps do not recover an existing password; they delete the entire current configuration and return AP settings to the factory defaults while preserving the Installation Key, without which the AP will not function. Determining the Boot Block Version The steps you follow to reset the AP depend on the version of the boot blockof the AP. Follow the steps below to find out which boot block version is on your AP, then use the corresponding instructions for versions 1.01 and earlier or versions 1.02 or later. When you connect to the AP and the Summary Status screen appears, reboot the AP by pressing CTRL X or by unplugging and then replugging the power connector. As the AP reboots, introductory system information appears. The boot block version appears in the third line of this text and is labeled Bootstrap Ver. If your boot block version is 1.01, your introductory text might look like the following: System ID: D Motherboard: MPC860 50MHz, 2048KB FLASH, 16384KB DRAM, Revision 20 Bootstrap Ver. 1.01: FLASH, CRC 4143E410 (OK) Initialization: OK Resetting for Boot Block Versions 1.01 or Earlier Follow these steps to reset your AP if the boot block version on your AP is version 1.01 or earlier. 1. Connect to the AP, click OK, and press Enter. 2. When the Summary Status screen appears, reboot the AP by unplugging and then replugging the power connector, or by pressing CTRL X. An example of what the Summary Status Screen looks like follows:

5 3. When the following message appears, press ESC: Type <esc> within 5 seconds for menu 4. Copy the AP installation key to the AP DRAM by performing the following steps: a. Press C to select Copy file. b. Press 1 to select DRAM. c. Press the selection letter for AP Installation Key. Note: If the list of configuration files contains the file, VAR Installation Key, you must copy that file to DRAM along with the installation key. Copy the VAR installation key to DRAM by pressing C to select Copy file, then 1 to select DRAM, and then the selection letter for VAR Installation Key. 5. Reformat the AP configuration memory as follows: 6. a. Press! (SHIFT 1) to select FORMAT memory bank. b. Press 2 to select Config. c. Press upper case Y (SHIFT Y) to confirm the FORMAT command. Copy the installation key back to the configuration memory as follows: a. Press C to select Copy file b. Press 2 to select Config. c. Press the selection letter for AP Installation Key. 7. Run the AP firmware by pressing R to select Run and then selecting the letter for the firmware file that is displayed. The following message appears while the AP starts the firmware: Inflating <firmware file name> 8. When the Express Setup screen appears, begin reconfiguring the AP using the terminal emulator or an Internet browser. Resetting for Boot Block Versions 1.02 or Later Follow these steps to reset your AP if the boot block version on your AP is version 1.02 or later. 1. Having connected to the AP, click OK and press Enter. 2. When the Summary Status screen appears, reboot the AP by pressing CTRL X or by unplugging and then replugging the power connector. An example of what the Summary Status Screen looks like follows:

6 3. When the memory files are listed under the heading Memory:File, press CTRL W within five seconds to reach the boot block menu. 4. Copy the AP's installation key to the AP's DRAM by performing the following steps: a. Press C to select Copy file. b. Press 1 to select DRAM. c. Press the selection letter for AP Installation Key. Note: If the list of configuration files contains the file, VAR Installation Key, you must copy that file to DRAM along with the installation key. Copy the VAR installation key to DRAM by pressing C to select Copy file, then 1 to select DRAM, and then the selection letter for VAR Installation Key. 5. Reformat the AP's configuration memory by pressing CTRL Z to reach the hidden reformat menu. 6. a. Press! (SHIFT 1) to select FORMAT memory bank. b. Press 2 to select Config. c. Press upper case Y (SHIFT Y) to confirm the FORMAT command. Copy the installation key back to the configuration memory as follows: a. Press C to select Copy file b. Press 2 to select Config. c. Press the selection letter for AP Installation Key. 7. Run the AP firmware by pressing R to select Run and then select the letter for the firmware file that is displayed. The following message appears when the AP starts the firmware: Inflating <firmware file name>. 8. When the Express Setup screen appears, begin reconfiguring the AP using the terminal emulator or an Internet browser. Resetting the Access Point VxWorks Versions and Newer To reset the AP on version and newer, follow these instructions: 1. Connect to the AP. When the Summary Status screen appears, reboot the AP by unplugging and then replugging the power connector. An example of what the Summary Status Screen looks like follows:

7 2. When the AP reboots and the Summary Status screen reappears, type :resetall, and press Enter. Note: If you do not allow users to browse in a read only manner without logging in, then you do not see the Summary Status screen but are instead prompted for a username and password. At this point you can enter any username and password after which you see the following prompt: Authentication Failed Retry? (y/n). Answer n to this. You are now able to enter the :resetall command. To allow or dis allow users to browse in a read only manner, use the User Manager Setup, shown below: If at this point you are still not successfully entering the :resetallcommand, then as a last resort you can follow the steps documented above in the section called Resetting for Boot block Versions 1.02 and Later. 3. After entering the :resetall command, type yes, and press Enter to confirm the command. Note: Prior to the :resetall command is valid for only two minutes immediately after the AP reboots. If you do not enter and confirm the :resetall command during that two minutes, reboot the AP again. Starting with 12.01, the :resetall command is valid for 4 minutes.

8 4. After the AP reboots and the Express Setup screen appears, reconfigure the AP by using the terminal emulator or an Internet browser. Resetting the Access Point IOS To reset IOS based APs, follow these instructions: Note: IOS based APs have a default configuration that includes a username and password combination, both of which are Cisco (case sensitive.) After resetting to factory defaults, be prepared to give Cisco as both the username and password when prompted by either the GUI or the command line interface (CLI.) If the privileged command prompt is available (ap#) in the CLI, the commands write erase and reload erase the startup configuration and reset the unit. If the GUI is available, choose the System Software tab, then the System Configuration tab, and press the button labelled Reset to Defaults. If neither the GUI or CLI are available with sufficient privileges, the following instructions describe how to use the Mode button: 1. Disconnect power (the power jack for external power or the Ethernet cable for in line power) from the AP. 2. Press and hold the MODE button while you reconnect power to the AP. 3. Hold the MODE button until the Status LED turns amber (approximately one to two seconds), and release the button. 4. After the AP reboots, reconfigure the AP by using the Web browser interface, the Telnet interface, or IOS commands. Note: The AP is configured with the factory default values including the IP address (set to receive an IP address using DHCP) and the default username and password Cisco. Resetting the Access Point AP350 running IOS To reset an AP350 running IOS, follow these instructions: Note: IOS based APs have a default configuration that includes a username and password combination, both of which are Cisco (case sensitive). After resetting to factory defaults, give Cisco as the username and password when prompted by the GUI or the command line interface (CLI). If the privileged command prompt is available (ap#) in the CLI, the commands write erase and reload erase the startup configuration and reset the unit. If the GUI is available, select in this order: 1. System Software tab 2. System Configuration tab 3. Reset to Defaults button If neither the GUI or CLI are available with sufficient privileges, follow these instructions to use the Mode button:

9 1. Disconnect power (the Ethernet cable for in line power) from the AP, then reconnect to reboot the AP When the AP350 begins to boot, press ESC. Xmodem file system is available. flashfs[0]: filesystem check interrupted! The system has been interrupted, or encountered an error during initializion of the flash filesystem. The following commands will initialize the flash filesystem, and finish loading the operating system software: flash_init ether_init tftp_init boot ap: 3. At the ap: prompt, issue the command flash_init. 4. ap: flash_init Initializing Flash... flashfs[0]: 142 files, 6 directories flashfs[0]: 0 orphaned files, 0 orphaned directories flashfs[0]: Total bytes: flashfs[0]: Bytes used: flashfs[0]: Bytes available: flashfs[0]: flashfs fsck took 0 seconds....done initializing Flash. View the contents of flash by using the command dir flash: and find the configuration file config.txt. ap: dir flash: Directory of flash:/ 3 rwx 223 <date> env_vars 4 rwx 2190 <date> config.txt 5 rwx 27 <date> private config 150 drwx 320 <date> c350 k9w7 mx JA bytes available ( bytes used) 5. Rename the config.txt file to config.old. ap: rename flash:config.txt flash:config.old 6. Reboot the AP350 using the command reset. ap: reset Are you sure you want to reset the system (y/n)?y System resetting..xmodem file system is available. flashfs[0]: 142 files, 6 directories flashfs[0]: 0 orphaned files, 0 orphaned directories flashfs[0]: Total bytes: flashfs[0]: Bytes used: flashfs[0]: Bytes available: flashfs[0]: flashfs fsck took 0 seconds. Reading cookie from flash parameter block...done. Base ethernet MAC Address: 00:40:96:41:e4:df Loading "flash:/c350 k9w7 mx JA/c350 k9w7 mx JA"...########

10 7. Note: The AP is configured with the factory default values including the IP address (set to receive an IP address using DHCP) and the default username and password Cisco. Once the full IOS is loaded and connectivity is re established, you can delete the config.old file from flash by issuing the IOS command, del flash:config.old, at an enabled prompt from the CLI.. Base Station ap#del flash:config.old Delete filename [config.old] Delete flash:config.old [confirm] ap# Setting Defaults with the Reset Button The Reset button is in a small hole on the back panel of the base station and is used to reset the base station configuration parameters to the default values. To activate the Reset button, insert a straightened paper clip into the small hole and press until all LEDs are solid. Remove the paper clip. The Status LED blinks amber to show the base station has the following default parameter values: Radio Network Name tsunami WEP Encryption Key Network Type Infrastructure Data Rate Auto Encryption Enabled Authentication Type Open Encryption 128 bit Encryption Association Mixed Cells Allowed Refer to Configuring the Base Station for instructions on setting the base station configuration parameters to desired values by using a wireless PC. Client Adapters Even though there is no password for the client adapter, there are other parameters that can be important for proper operation, including the Service Set Identifier (SSID), the Client Encryption Manager (CEM) password, and the Wired Equivalent Privacy (WEP) keys. If it becomes necessary to reset these parameters, follow the procedures below.

11 SSID The SSID can be reset in the same manner as it was originally set. Using the Aironet Client Utility (ACU), follow these steps: 1. Click the Commands menu. 2. Select Edit Properties. 3. Under the System Parameters tab, type the correct value(s) for the SSID. Check with your network administrator to get the correct SSID. 4. Click OK to save your configuration changes. Setting Defaults To set the client adapter to its defaults, select the System Parameters tab and on the bottom right corner of the panel, click the Defaults button. CEM Password A password is required to run CEM to permit addition or modification of WEP keys. If this password is lost or forgotten, try the default password Cisco. On older versions of CEM, try the default password Aironet. If the default passwords do not work, you must reinstall the CEM utility. Windows Systems For instructions on installing the utilities on Windows systems, refer to the following documents.

12 Installing Windows 95 Drivers and Utilities for the Cisco Aironet 340/350 Series Client Adapters Installing Windows 2000 Drivers and Utilities for the Cisco Aironet 340/350 Series Client Adapters Cisco Aironet 340, 350, and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows Linux Systems For instructions on installing the utilities on Linux systems, see Cisco Aironet Wireless LAN Adapters Installation and Configuration Guide for Linux. Note: CEM functionality is included in ACU on computers running version of the Linux driver/utility package. If you are running this version, you must reinstall ACU in order to restore CEM functionality. WEP Keys When first configured, WEP keys are written to nonvolatile RAM on the client adapter card. The keys cannot be viewed or erased, but they can be overwritten with new keys. If you need to reenter the WEP keys, contact your network administrator for the correct keys to use to connect to the wireless network. For instructions on configuring the WEP keys, see Configuring Wired Equivalent Privacy (WEP). Cisco Aironet 1410 Series Bridge To reset IOS based bridges, follow these instructions: Note: IOS based bridges have a default configuration that includes a username and password combination, both of which are Cisco (case sensitive.) After resetting to factory defaults, be prepared to give Cisco as both

13 the username and password when prompted by either the GUI or the command line interface (CLI.) If the privileged command prompt is available (bridge#) in the CLI, the commands write erase and reload erase the startup configuration and reset the unit. If the GUI is available, choose the System Software tab, then the System Configuration tab, and press the button labelled Reset to Defaults. If neither the GUI or CLI are available with sufficient privileges, the following instructions describe how to use the Mode button: 1. Disconnect power (the power jack for external power) from the bridge's power injector. 2. Press and hold the MODE button while you reconnect power to the bridge's power injector. 3. Hold the MODE button until the Status LED turns amber (approximately one to two seconds), and release the button. 4. After the bridge reboots, reconfigure the bridge by using the Web browser interface, the Telnet interface, or IOS commands. Note: The bridge is configured with the factory default values including the IP address (set to receive an IP address using DHCP) and the default username and password Cisco. Cisco Aironet 350 Series Bridge For Software Versions 11.xx and Later If you forget the password that allows you to configure the 350 Bridge through the console port, you must completely reset the configuration. Follow these steps to delete the current configuration and return all settings to the factory defaults: 1. Use a straight through cable with 9 pin male to 9 pin female connectors to connect the COM 1 or COM 2 port on your computer to the RS 232 port on the bridge. For more information, see the Cabling Guide for Console and AUX Ports. 2. Open a terminal emulation program on your computer. Note: These instructions describe Microsoft HyperTeminal; other programs are similar. 3. In the Connection Description window, enter a name, select an icon for the connection, and click OK. 4. In the Connect To window, use the Connect using pull down menu to select the port to which the cable is connected, and click OK. 5. In the Port Settings window, make the following settings: Bits per second (baud): 9600 Data bits: 8 Parity: None Stop bits: 1 Flow Control: None 6. Click OK. 7. Press Enter. 8. When the Main Menu screen appears, reboot the bridge by turning the unit off and then turning it back on. 9. When the bridge reboots and the Summary Status screen reappears, type :resetall, and press Enter. 10. Type YES, and press Enter to confirm the command.

14 11. After the bridge reboots and the Express Setup screen appears, reconfigure the bridge by using the terminal emulator or an Internet browser Note: The :resetall command is valid for only two minutes immediately after the bridge reboots. If you do not enter and confirm the :resetall command during that two minutes, reboot the bridge again. Cisco Aironet 340 Series Bridge For Software Versions 8.65 and Later If you forget the password that allows you to configure the 340 Bridge through the console port, you must completely reset the entire configuration. Follow these steps to delete the current configuration and return all settings to the factory defaults: 1. Use a straight through cable with 9 pin male to 9 pin female connectors to connect the COM 1 or COM 2 port on your computer to the RS 232 port on the AP. For more information, please see the Cabling Guide for Console and AUX Ports. 2. Open a terminal emulation program on your computer. Note: These instructions describe Microsoft HyperTeminal; other programs are similar. 3. In the Connection Description window, enter a name, select an icon for the connection, and click OK. 4. In the Connect To window, use the Connect using pull down menu to select the port to which the cable is connected, and click OK. 5. In the Port Settings window, make the following settings: Bits per second (baud): 9600 Data bits: 8

15 Parity: None Stop bits: 1 Flow Control: None 6. Click OK. 7. Press Enter. 8. When the Main Menu screen appears, reboot the bridge by turning the unit off and then turning it back on. 9. When the bridge reboots and the Main Menu screen reappears, type 2 to select Reset and press Enter. 10. Type YES and press Enter to confirm the command. 11. After the bridge reboots, reconfigure it by using the terminal emulator or an Internet browser. For Software Versions Earlier than 8.65 If the passwords for the Cisco Aironet 340 series Ethernet Bridge are lost, the unit must be returned to Cisco Systems for servicing. Note: In some instances, a bridge connecting to the one with the lost password is accessible. Make sure that the accessible bridge is running version 8.65 or later, and use the Distribute Firmware command to upgrade the one with the lost password. The above instructions would then apply, avoiding the lost downtime of an RMA. Registered users can open a technical support case online with the Technical Assistance Center. All users can contact the Technical Assistance Center using e mail and telephone through the Cisco Worldwide Contacts. Workgroup Bridge The Cisco Aironet Workgroup Bridge (WGB) allows as many as eight hosts on an isolated wired LAN segment to share a single wireless connection to an AP in order to access other portions of the network. Setting Defaults with the Reset Button The Reset button is in a small hole on the back panel of the workgroup bridge and is used to reset the workgroup bridge configuration parameters to the default values. To activate the Reset button, insert a straightened paper clip into the small hole and press until all LEDs are solid. Remove the paper clip. The Status LED blinks amber to show the workgroup bridge has the following

16 default parameter values: Radio Network Name tsunami WEP Encryption Key (none) Network Type Infrastructure Data Rate Auto Encryption Disabled Authentication Type Open Association Mixed Cells Allowed Related Information Technical Support Cisco Systems All contents are Copyright Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.