Password Recovery for all 3COM superstack switches 2

[IceDragon2000]

I have the answer to everyones problem. Thanks to 3COM for such an easy way to reset their switches. Anyone and their mom will be able to reset the config on these switches. At least it only works with the console port. This works on any superstack switch from 3com, so even with the chit chat.

Login: 3comcso
Password: RIP000

Boom that's it.

 

[dljones]

An if that don't work you can reload or update your firmware to reset the passwords, you will need
1. firmware (for a Superstack II 3000 like I have) the url is

http://support.3com.com/software/superstack_ii_switch_3000.htm

2. a null modem cable
3. a TFTP Server software you can download it from 3com called 3CServer (make sure you set the TFTP folder where the firmware file is located)

Once you have all this in hand do the following.
1. Connect the null-modem cable, configure Hyper Terminal for windows users to the com port you have connected, normal com setting N-8-1 none and VT100, connect to switch (login should appear if not don't worry console may be disable)
2. configure and start your TFTP Server
3. on the switch push the reset button 2 seconds
4. wait 3 seconds
5. push reset button again for 1 second
6. you should see the prompt after a few seconds at the prompt line type the following commands
F ls3k3_23.slx (firmware file name) "press enter"
B IPAddress of TFTP Server "press enter"
After firmware update the switch will reboot and the passwods will fall back to factory default.

 

[thirdeg]

Thanks IceDragon2000 you have stoped me having to send off a switch to 3Com, how where did you find that little pearl of wisdom?

 

[cloonie]

Hi !

This is an impossible solution for my problem ...

I´ve an 3com Superstack II 9300 2-LX/10-SX (3C93011) SWITCH.

My Problem is: I could not login to reconfigure. My pal is walk out around the world and the 3com-support is over, because the machine was bought from 2001, and it´s to old since registration (just 2-year-free-support-help).
They gave me the offer to pay lot of money for help me here. - No thanks ! I haven´t !

Here are all my tried backdoors w/o effect (used serial-console):

adm/(none)
admin/synnet
admin/admin
admin/(blank)
admin/nopass
debug/synnet
write/synnet

... always "incorrect password" !
--------------
and:

root/(blank)
root/manger
security/(blank)
security/security
manager/manager
recover/recover
tech/tech
monitor/monitor
3comcso/RIP000
force/force

... always ".. is not a valid access level"

and here is NO reset-button on my machine ...

Maybe anyone got a quick idea ?! The delivered handbooks (the customer+admin handbooks) have no details for this case...

Does anyone have any idea or answer ?!

Greetings,

Phil (cloonie)

 

[dw1ght]

3comcso/RIP000 did nto work on all of ours, althought sspifadmin as a password seemed to on some

 

[mrashburn]

Been here done this - LOL The firmware update (posted by dljones) will/does work. It's the only reliable way to get the job done that I'm aware of. 3COM also has a utility to push (ok - that's not really a strong enough word - SHOVE is more descriptive) a new f/w version onto the switch (actually 3300s are all I have ever used it with). You know - "Ensure power is not disrupted during file transfer" about 20 seconds before it goes completely dark and your stuck? I can't think of the name of the utility, just email me if you need the name and I can look it up.

mashburn@envsci.com

 

[1239227]

dljones

Cheers for the info on the firmware loading. I have done this twice and loaded to different versions of my linkswitch 1000 firmware, but I still can't login. I have a thought though. when you type in the user you can see what you type. When you put in the password normally you get the stars that apper showing how many letters you have typed this dosn't happen.

Any thoughts

Cheers

 

[Speed01]

The password doesn't show up. When you log in, what username / password are you using? You should be able to log in as admin with a blank password.

Speed

 

[1239227]

Well I was trying all the passwords etc from the manual and those I have found online. For some reason the only way I could get the unit to reset was to load the oldest firmware and then a new one?

Thanks all as I have now got into the switch, and yes in the end admin and "blank" password got me in.

cheers all!

 

[lukaszeczek]

hello I have in my network SuperStack II Swith 3000 I've try some backdor passwords, it works, manager / manager . So easy and clean

 

[worker99]

You will find that 3comcso/RIP000 works on:
1100
3300 s2/s3
ps hubs

on 1000/3000 uploading a s/w does not erase the psswd
u follow the procedure set out by djones

dljones (IS/IT--Manageme) May 24, 2003
An if that don't work you can reload or update your firmware to reset the passwords, you will need
1. firmware (for a Superstack II 3000 like I have) the url is

http://support.3com.com/software/superstack_ii_switch_3000.htm

;
2. a null modem cable
3. a TFTP Server software you can download it from 3com called 3CServer (make sure you set the TFTP folder where the firmware file is located)

Once you have all this in hand do the following.
1. Connect the null-modem cable, configure Hyper Terminal for windows users to the com port you have connected, normal com setting N-8-1 none and VT100, connect to switch (login should appear if not don't worry console may be disable)
2. configure and start your TFTP Server
3. on the switch push the reset button 2 seconds
4. wait 3 seconds
5. push reset button again for 1 second
6. you should see the prompt after a few seconds at the prompt line type the following commands
F ls3k3_23.slx (firmware file name) "press enter"
B IPAddress of TFTP Server "press enter"
After firmware update the switch will reboot and the passwods will fall back to factory default.


BUT before pressing b to begin s/w download
type RIP0000
then b

This will erase the password.

 

[caliguy32]

Thanks to DLJONES - but just another tip while you do his steps to waiting the three seconds, If you actually look at the face of your Superstack II 3000 after you press the reset button for 2 seconds, watch the Management link light, wait till it flashes 3 times, then press the reset button again for 1 second. I had a lot of trouble getting the prompt to come up to type the flash file name untill I discovered that... I must have been counting too fast for the three seconds, lol. Thanks a million for this tip. It worked great for me again for the 3com SuperStack II 3000.

 

[thickair]

HELP!

We just bought a Super Stack 1000. I was able to RIP0000 at the upgrade screen and get access to the manager account. I need admin though.

I'm doing everything through the serial.
The 3comcso/RIP000 (mentioned above) just gives me an invalid log in.

I would love to try "tftping" a newer version of firmware (mentioned above), but 3com has discontinued it. I tried it with newer versions of firmware and it didn't work.

--Phil

 

[gunzo]

Download upgrades for SSII 1000 from

http://www.3com.com/products/en_US/result.jsp?selected=6&sort=effdt&sku=3C16900A&order=desc

This worked for me....
I first loaded the oldest ls1k2_00 and after that ls1k3_21.
When done admin/blank works.

 

[saabstory]

I have a SSII Desktop Switch (3C16902). admin/blank does not get me in. using the reset button, I got to the prompt. I started a TFTP server session on a remote machine, set the ip and file info correctly for the upgrades, but get an update status id of 8 (load server not responding) when trying to do the upgrade with the "b" command. again, all of this is through the console port. I have what I believe to be the correct firmware from ftp.3com.com.

I assume I have a settings problem w/ the gateway / IP info. My question is: is my computer connected to the console port the gateway for the switch? Or do I use the same gateway settings that my computer has to my router? Technically the switch is not connected directly to my router, but is rather going through my computer to the router.

Any other advice or details on getting successfully connected to the TFTP server?

 

[saabstory]

Solved the Status 8 errors.  The switch needs to be MANAGED via the console port, but any data transferred (TFTP in this case) needs to be done over one of the ethernet ports.  I read somewhere that, to be safe, don't use the module port(s), but stick to one of the 24 default ports.  Now when attempting the TFTP, I instead am getting Status 10 errors (record length mismatch).

This must be due to me having the incorrect files.  As a clarification from those that have successfully upgraded, should the upgrade files be ".exe" executables?  I noticed that someone was upgrading with a ".slx" file.  The only files at 3com for my switch are executables.  

Again, this is a SSII Desktop Switch (3C16902), and the files available are: dt3_10.exe, dt3_21.exe, etc.  Any other input from those that have successfully upgraded?

 

[nshank]

After trying for about a week, I'm not getting any joy. I've tried everything I've read, and everything else I can think of, short of taking the switch apart, and looking for a jumper or chip that I can remove... If anyone has any other ideas, I'd be glad to try them.
Thanks,
Nick


Nick Shank
Quorum Systems.

S.M.P. Its not just an architecture, its a way of life.

 

[pounder222]

Hey Guys,

Some great info here, but I am in the same boat as nshank.

I have tried various versions of the bios, but I can't seem to make the bios loader console react to the RIP000 or RIP0000 command prior to the b command.

The R in RIP is interpreted as reset serial port and it immediately gets stuck with the y/n prompt for that with any response resulting in a restart of the switch with no change in password status.

Worker99 if you are out there - what prom version does the bios loader console have for yours ? Mine is 2.10 What is yours as well nshank ?


Thanks in advance guys.

Jon

 

[worker99]

Pounder222,

AT the same point try RIP 000 or RIP 0000, I'm sorry I haven't worked on these for sometime. But if I remeber correctly RIP 000 should work.

For switches 1000/1100 - same method
switches 3300/hub 24 etc - 3comcso RIP000
switc 9300/3900 - admin/lanplex

Hope it helps.

 

[pounder222]

Worker99 - You are the 3com switch God !

Yes the all important space between RIP and 0000 did the trick !

For good measure last time the switch was apart I accidentally jammed the fans during reassembly, so it may also have thought I just decided to fry its little brain since it would not let me in