password recovery for a 7750 switch

[chillath]

hello

im trying to take access to a 7750 switch either with a console or telnet without knowing the password. Is there any guide for recovery password for that device ?

thanks

 

[cknipe]

Probably not without taking the site down. But on the upside, you have a lot of dagerous fun that you ge to have in this process. I have posted istructions for stiff-arming te boot up process to get what you need (see below):



There is no single file to delete allowing one to recover the password. One has to
break the boot up process
TFTP the configuration file to server
delete the existing configuration file from flash memory
boot the SW7750
Reload the configuration file back to SW7750


Fix: Here is the full process:

====================================
Restart
====================================

Starting......
RAMLine.....OK
System is booting....................

******************************************
* *
* Switch 7750 BOOTROM, Version 527 *
* *
******************************************

Copyright (c) 2004-2006 3Com Corporation and its licensors. All rights reserved.
Creation date : Aug 16 2006, 14:48:52
CPU type : MPC8245
CPU Clock Speed : 300Mhz
BUS Clock Speed : 33Mhz
BOOT_FLASH type : AMD29LV040B
Flash Size : 32MB
Memory Size : 256MB

FAB96 self testing..........................................
SDRAM Data lines Selftest.................................OK!
SDRAM Address lines Selftest..............................OK!
SDRAM fast selftest.......................................OK!
Please check LEDs.....................LEDs selftest finished!
CPLD selftest.............................................OK!
FPGA selftest.............................................OK!
The switch Mac address is .....................0020.9C69.813E

Press Ctrl+B to enter Boot Menu... 4 <---------Ctrl+B Here
password:

BOOT MENU

1. Download application file
2. Select application file to boot
3. Display all files in flash
4. Delete file from flash
5. Modify bootrom password
0. Reboot

Enter your choice(0-5): 3

Flash:/
File Number File Size(bytes) File Name
========================================================
1(-). 12774575 77503_02_00s168rec08.app
2. 4 snmpboots
3. 248 manuinfo.txt
4. 4893 sw7750.cfg
5(*). 12785451 77503_02_00s168rep02.app
6. 1120695 sw77_boot519.btm
Flash Free Space : 5949440 bytes

The current application file is: flash:/77503_02_00s168rep02.app
The backup application file is: flash:/77503_02_00s168rec08.app


BOOT MENU

1. Download application file
2. Select application file to boot
3. Display all files in flash
4. Delete file from flash
5. Modify bootrom password
0. Reboot

==================================================
Upload configuration file
==================================================

Enter your choice(0-5): <-------------------Ctrl+Y here

Please set application file upload protocol parameter:

1. Set TFTP protocol parameter:
0. Return to boot menu
Enter your choice(0-1): 1
Load File name :S6500-VRP310-R3020.APP sw7750.cfg File to be uploaded
Switch IP address :192.168.0.7 152.67.101.74
Server IP address :192.168.0.6 152.67.101.208
Are you sure you want to upload file from flash? Yes or No(Y/N) y

Prepare for transmitting....................................OK!
Loading...done!


BOOT MENU

1. Download application file
2. Select application file to boot
3. Display all files in flash
4. Delete file from flash
5. Modify bootrom password
0. Reboot

Enter your choice(0-5): 4

Flash:/
File Number File Size(bytes) File Name
========================================================
1(-). 12774575 77503_02_00s168rec08.app
2. 4 snmpboots
3. 248 manuinfo.txt
4. 4893 sw7750.cfg
5(*). 12785451 77503_02_00s168rep02.app
6. 1120695 sw77_boot519.btm
Flash Free Space : 5949440 bytes

The current application file is: flash:/77503_02_00s168rep02.app
The backup application file is: flash:/77503_02_00s168rec08.app

Please input the file number to delete :4
The file you selected is flash:/sw7750.cfg, delete it? Yes or No(Y/N)y
Deleting file...done


BOOT MENU

1. Download application file
2. Select application file to boot
3. Display all files in flash
4. Delete file from flash
5. Modify bootrom password
0. Reboot

Enter your choice(0-5): 0
Rebooting...

Starting......
RAMLine.....OK
System is booting....................



Note: Reconfigure the switch according to the configuration file uploaded.

 

[chillath]

hi and thanks for the reply , but i would like to ask how i can use the configuration file as a single file alone? if i reload the file back tha unkown passwords will be placed back.

 

[cknipe]

you'll have to clear out the password info from the config file before you load it back in. Who knows, maybe you'll get lucky and the passwords are in clear (simple) text.

here is a snippet from one of my switches:



#
sysname OfficeCore
#
super password level 3 simple Joker123 <----- logon info
#
domain default enable system
#
dhcp-server 1 ip 192.168.1.10
#
router id 192.168.1.1
#
temperature-limit 0 10 70
temperature-limit 1 10 70
temperature-limit 2 10 70
temperature-limit 3 10 70
temperature-limit 6 10 70
#
poe power max-value 1200
poe enable slot 1
poe power-management auto slot 1
poe max-power 400 slot 1
poe enable slot 2
poe power-management auto slot 2
poe max-power 400 slot 2
#
ip unreachables
#
password-control login-attempt 10 exceed unlock
#
udp-helper enable
#
multicast routing-enable
#
radius scheme system
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
vlan-assignment-mode integer
access-limit disable
state active
idle-cut disable
self-service-url disable
messenger time disable
#
local-user npiadmin <---------logon info
password simple dell2020
service-type lan-access
service-type telnet terminal
level 3