Software Configuration Guide
Page 7
... Standby Groups 7-12 Automatic Recovery of Cluster Configuration 7-14 IP Addresses 7-14 Host Names 7-15 Passwords 7-15 SNMP Community Strings 7-15 TACACS+ and RADIUS 7-16 Access Modes in CMS 7-16 Management VLAN 7-16 LRE Profiles 7-17 Availability of Switch-Specific Features in Switch Clusters 7-17 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide vii
... Standby Groups 7-12 Automatic Recovery of Cluster Configuration 7-14 IP Addresses 7-14 Host Names 7-15 Passwords 7-15 SNMP Community Strings 7-15 TACACS+ and RADIUS 7-16 Access Modes in CMS 7-16 Management VLAN 7-16 LRE Profiles 7-17 Availability of Switch-Specific Features in Switch Clusters 7-17 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide vii
Software Configuration Guide
Page 9
...Switch-Based Authentication 9-1 Preventing Unauthorized Access to Your Switch 9-1 Protecting Access to Privileged EXEC Commands 9-2 Default Password and Privilege Level Configuration 9-2 Setting or Changing a Static Enable Password 9-3 Protecting Enable and Enable Secret Passwords with Encryption 9-4 Disabling Password Recovery 9-5 Setting a Telnet Password for a Terminal Line 9-6 Configuring Username and Password... 9-17 Controlling Switch Access with RADIUS 9-18 Understanding RADIUS 9-18 RADIUS Operation 9-19 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide ix
...Switch-Based Authentication 9-1 Preventing Unauthorized Access to Your Switch 9-1 Protecting Access to Privileged EXEC Commands 9-2 Default Password and Privilege Level Configuration 9-2 Setting or Changing a Static Enable Password 9-3 Protecting Enable and Enable Secret Passwords with Encryption 9-4 Disabling Password Recovery 9-5 Setting a Telnet Password for a Terminal Line 9-6 Configuring Username and Password... 9-17 Controlling Switch Access with RADIUS 9-18 Understanding RADIUS 9-18 RADIUS Operation 9-19 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide ix
Software Configuration Guide
Page 25
... Software 32-2 Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches 32-2 Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches 32-4 Password Recovery with Password Recovery Enabled 32-5 Procedure with Password Recovery Disabled 32-6 Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches 32-8 Recovering from a Command Switch Failure 32-10 Replacing a Failed Command Switch with a Cluster Member 32-11 Replacing a Failed...
... Software 32-2 Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches 32-2 Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches 32-4 Password Recovery with Password Recovery Enabled 32-5 Procedure with Password Recovery Disabled 32-6 Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches 32-8 Recovering from a Command Switch Failure 32-10 Replacing a Failed Command Switch with a Cluster Member 32-11 Replacing a Failed...
Software Configuration Guide
Page 149
...Recovery Procedures" section on the member switch to return to the command-switch CLI. Using the CLI to Manage Switch Clusters You can configure member switches from the command-switch CLI: switch# rcommand 3 If you lose connectivity with a member switch or if a command switch fails, see the "Disabling Password Recovery" section on the command switch... 13.0(5)XU If you do not know the member-switch number, enter the show cluster members privileged EXEC command on page 9-5. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 7-23 The command mode changes, ...
...Recovery Procedures" section on the member switch to return to the command-switch CLI. Using the CLI to Manage Switch Clusters You can configure member switches from the command-switch CLI: switch# rcommand 3 If you lose connectivity with a member switch or if a command switch fails, see the "Disabling Password Recovery" section on the command switch... 13.0(5)XU If you do not know the member-switch number, enter the show cluster members privileged EXEC command on page 9-5. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 7-23 The command mode changes, ...
Software Configuration Guide
Page 182
... Default Password and Privilege Levels Feature Enable password and privilege level Enable secret password and privilege level Line password Default Setting No password is level 15 (privileged EXEC level). The default is defined. Catalyst 2950 and Catalyst 2955 Switch Software ... Default Password and Privilege Level Configuration, page 9-2 • Setting or Changing a Static Enable Password, page 9-3 • Protecting Enable and Enable Secret Passwords with Encryption, page 9-4 • Disabling Password Recovery, page 9-5 • Setting a Telnet Password for Cisco IOS Release...
... Default Password and Privilege Levels Feature Enable password and privilege level Enable secret password and privilege level Line password Default Setting No password is level 15 (privileged EXEC level). The default is defined. Catalyst 2950 and Catalyst 2955 Switch Software ... Default Password and Privilege Level Configuration, page 9-2 • Setting or Changing a Static Enable Password, page 9-3 • Protecting Enable and Enable Secret Passwords with Encryption, page 9-4 • Disabling Password Recovery, page 9-5 • Setting a Telnet Password for Cisco IOS Release...
Software Configuration Guide
Page 185
... VLAN database file (vlan.dat) are defined, users must enter the enable secret password. With password recovery disabled, you enable password encryption, it is not available for non-LRE Catalyst 2950 switches or for privilege level 2: Switch(config)# enable secret level 2 5 $1$FaD0$Xyti5Rkls3LoyxzS8 Disabling Password Recovery By default, any end user with physical access to default values. This example shows...
... VLAN database file (vlan.dat) are defined, users must enter the enable secret password. With password recovery disabled, you enable password encryption, it is not available for non-LRE Catalyst 2950 switches or for privilege level 2: Switch(config)# enable secret level 2 5 $1$FaD0$Xyti5Rkls3LoyxzS8 Disabling Password Recovery By default, any end user with physical access to default values. This example shows...
Software Configuration Guide
Page 186
... 1 Step 2 Command configure terminal no parity. Configure the number of the console port are 9600, 8, 1, no service password-recovery Step 3 end Step 4 show version Purpose Enter global configuration mode. Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-6 78-11380-10 Return to privileged EXEC mode. Beginning in an area of the flash memory that you...
... 1 Step 2 Command configure terminal no parity. Configure the number of the console port are 9600, 8, 1, no service password-recovery Step 3 end Step 4 show version Purpose Enter global configuration mode. Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-6 78-11380-10 Return to privileged EXEC mode. Beginning in an area of the flash memory that you...
Software Configuration Guide
Page 617
... Catalyst 2950 Switches, page 32-2 • Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches, page 32-4 • Recovering from Lost Member Connectivity, page 32-14 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-1 Note For complete syntax and usage information for Cisco IOS Release 12.1. Depending on the nature of these sections: • Using Recovery...
... Catalyst 2950 Switches, page 32-2 • Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches, page 32-4 • Recovering from Lost Member Connectivity, page 32-14 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-1 Note For complete syntax and usage information for Cisco IOS Release 12.1. Depending on the nature of these sections: • Using Recovery...
Software Configuration Guide
Page 618
... Using Recovery Procedures Chapter 32 Troubleshooting Recovering from Corrupted Software Switch software can configure your switch for Telnet by the switch# prompt. There are using. The software image does not load. Step 3 Unplug the switch power cord. 32-2 Catalyst 2950 and Catalyst 2955 Switch Software ... switch password on the emulation software you are many software packages that support the Xmodem protocol, and this procedure is no connectivity. Follow these steps to recover from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches Follow these cases, the switch ...
... Using Recovery Procedures Chapter 32 Troubleshooting Recovering from Corrupted Software Switch software can configure your switch for Telnet by the switch# prompt. There are using. The software image does not load. Step 3 Unplug the switch power cord. 32-2 Catalyst 2950 and Catalyst 2955 Switch Software ... switch password on the emulation software you are many software packages that support the Xmodem protocol, and this procedure is no connectivity. Follow these steps to recover from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches Follow these cases, the switch ...
Software Configuration Guide
Page 619
... config.text.old. Chapter 32 Troubleshooting Using Recovery Procedures Step 4 Press the Mode button, and at the prompt: Continue with the configuration dialog? [yes/no]: N Step 11 At the switch prompt, change the password. Change the emulation software line speed to ...original name: switch# rename flash:config.text.old flash:config.text Step 13 Copy the configuration file into memory: switch# copy flash:config.text system:running -config]? Enter global configuration mode: switch# configure terminal 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration ...
... config.text.old. Chapter 32 Troubleshooting Using Recovery Procedures Step 4 Press the Mode button, and at the prompt: Continue with the configuration dialog? [yes/no]: N Step 11 At the switch prompt, change the password. Change the emulation software line speed to ...original name: switch# rename flash:config.text.old flash:config.text Step 13 Copy the configuration file into memory: switch# copy flash:config.text system:running -config]? Enter global configuration mode: switch# configure terminal 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration ...
Software Configuration Guide
Page 620
... you see a message that begins with this during power-on Catalyst 2950 LRE Switches An end user with instructions, informing you if the password recovery procedure has been disabled or not. • If you have forgotten or lost password by agreeing to return to the switch console port. This is now included in the startup configuration. Press...
... you see a message that begins with this during power-on Catalyst 2950 LRE Switches An end user with instructions, informing you if the password recovery procedure has been disabled or not. • If you have forgotten or lost password by agreeing to return to the switch console port. This is now included in the startup configuration. Press...
Software Configuration Guide
Page 621
...password-recovery is enabled, this : The password-recovery mechanism has been triggered, but is currently disabled. Enter N at the prompt: Continue with Password Recovery Disabled" section on page 32-6, and follow the steps. Load any helper files: switch# load_helper Display the contents of the switch console port. switch...switch# boot You are prompted to its original name: Switch# rename flash:config.text.old flash:config.text 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-5 go to config.text.old. Chapter 32 Troubleshooting Using Recovery...
...password-recovery is enabled, this : The password-recovery mechanism has been triggered, but is currently disabled. Enter N at the prompt: Continue with Password Recovery Disabled" section on page 32-6, and follow the steps. Load any helper files: switch# load_helper Display the contents of the switch console port. switch...switch# boot You are prompted to its original name: Switch# rename flash:config.text.old flash:config.text 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-5 go to config.text.old. Chapter 32 Troubleshooting Using Recovery...
Software Configuration Guide
Page 622
...running configuration to 25 alphanumeric characters, can start with Password Recovery Disabled If the password-recovery mechanism is now in interface configuration mode, enter the no shutdown command. Return to privileged EXEC mode: Switch (config)# exit Switch# Step 13 Write the running -config privileged EXEC ... be reset back to the default system configuration, access to verify if there are backup switch and VLAN configuration files. 32-6 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 The configuration file is case sensitive, and allows spaces but...
...running configuration to 25 alphanumeric characters, can start with Password Recovery Disabled If the password-recovery mechanism is now in interface configuration mode, enter the no shutdown command. Return to privileged EXEC mode: Switch (config)# exit Switch# Step 13 Write the running -config privileged EXEC ... be reset back to the default system configuration, access to verify if there are backup switch and VLAN configuration files. 32-6 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 The configuration file is case sensitive, and allows spaces but...
Software Configuration Guide
Page 623
... 7 Step 8 Step 9 Elect to continue........ • If you enter y (yes), the configuration file in the startup configuration. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-7 To continue with password recovery, enter N at the prompt: Continue with the configuration dialog? [yes/no ), the normal boot process continues as if the Mode button...
... 7 Step 8 Step 9 Elect to continue........ • If you enter y (yes), the configuration file in the startup configuration. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-7 To continue with password recovery, enter N at the prompt: Continue with the configuration dialog? [yes/no ), the normal boot process continues as if the Mode button...
Software Configuration Guide
Page 624
... switch hardware installation guide. After the switch performs POST, the switch begins the autoboot process. Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches The Catalyst 2955 switch boot loader uses break-key detection to prevent autobooting. 32-8 Catalyst 2950 and Catalyst 2955 Switch ...switch for each operating system. Using Recovery Procedures Chapter 32 Troubleshooting Note This procedure is likely to the console port. If the system administrator has the backup switch and VLAN configuration files available, you have forgotten or lost the switch password...
... switch hardware installation guide. After the switch performs POST, the switch begins the autoboot process. Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches The Catalyst 2955 switch boot loader uses break-key detection to prevent autobooting. 32-8 Catalyst 2950 and Catalyst 2955 Switch ...switch for each operating system. Using Recovery Procedures Chapter 32 Troubleshooting Note This procedure is likely to the console port. If the system administrator has the backup switch and VLAN configuration files available, you have forgotten or lost the switch password...
Software Configuration Guide
Page 625
... the configuration dialog? [yes/no]: N Step 11 At the switch prompt, change the password. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-9 Press Return in the directory. Initialize the flash file system: switch# flash_init Step 6 Step 7 If you set the console port speed...prompt. Chapter 32 Troubleshooting Using Recovery Procedures Step 4 When the boot loader prompts you can use these normal commands to change to privileged EXEC mode: switch> enable Step 12 Rename the configuration file to its original name: switch# rename flash:config.text.old...
... the configuration dialog? [yes/no]: N Step 11 At the switch prompt, change the password. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-9 Press Return in the directory. Initialize the flash file system: switch# flash_init Step 6 Step 7 If you set the console port speed...prompt. Chapter 32 Troubleshooting Using Recovery Procedures Step 4 When the boot loader prompts you can use these normal commands to change to privileged EXEC mode: switch> enable Step 12 Rename the configuration file to its original name: switch# rename flash:config.text.old...
Software Configuration Guide
Page 626
... a note of the command-switch password, and cabling your command switch loses power or fails in the startup configuration. Using Recovery Procedures Step 14 Enter global configuration mode: switch# configure terminal Step 15 Change the password: switch(config)# enable secret or switch(config)# enable password Step 16 Return to privileged EXEC mode: switch(config)# exit switch# Step 17 Write the running...
... a note of the command-switch password, and cabling your command switch loses power or fails in the startup configuration. Using Recovery Procedures Step 14 Enter global configuration mode: switch# configure terminal Step 15 Change the password: switch(config)# enable secret or switch(config)# enable password Step 16 Return to privileged EXEC mode: switch(config)# exit switch# Step 17 Write the running...
Software Configuration Guide
Page 627
... passwords. Chapter 32 Troubleshooting Using Recovery Procedures Replacing a Failed Command Switch with a Cluster Member To replace a failed command switch with a command-capable member in square brackets '[]'. For details about using the console port, refer to privileged EXEC mode. End with configuration dialog? [yes/no]: y At any prompt. Switch(config)# no ]: 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...
... passwords. Chapter 32 Troubleshooting Using Recovery Procedures Replacing a Failed Command Switch with a Cluster Member To replace a failed command switch with a command-capable member in square brackets '[]'. For details about using the console port, refer to privileged EXEC mode. End with configuration dialog? [yes/no]: y At any prompt. Switch(config)# no ]: 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...
Software Configuration Guide
Page 628
...the enable secret and enable passwords, enter the passwords of the failed command switch. 32-12 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 on the member switch you selected to the switch, by using the console port...switch prompt, enter privileged EXEC mode: Switch> enable Switch# Enter the password of the failed command switch again. When prompted for any switch. The cluster name can be 1 to enable the switch as the last characters in the setup program vary depending on a member switch to the switch hardware installation guide. Using Recovery...
...the enable secret and enable passwords, enter the passwords of the failed command switch. 32-12 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 on the member switch you selected to the switch, by using the console port...switch prompt, enter privileged EXEC mode: Switch> enable Switch# Enter the password of the failed command switch again. When prompted for any switch. The cluster name can be 1 to enable the switch as the last characters in the setup program vary depending on a member switch to the switch hardware installation guide. Using Recovery...
Software Configuration Guide
Page 683
... guidelines for creating and using B-9 invalid combinations when copying B-5 limiting TFTP server access 28-14 obtaining with DHCP 5-8 password recovery disable considerations 9-5 specifying the filename 5-12 system contact and location information 28-14 types and location B-10 uploading preparing ...Cisco 585 LRE CPE 13-12 Ethernet links, described 13-2 hotel network configuration example 1-15, 1-18 LRE links 13-2 CPE link, transitioning state 13-7 CPE toggle configuring 13-22 described 13-7 disabling 13-22 enabling 13-22 crashinfo file 32-23 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...
... guidelines for creating and using B-9 invalid combinations when copying B-5 limiting TFTP server access 28-14 obtaining with DHCP 5-8 password recovery disable considerations 9-5 specifying the filename 5-12 system contact and location information 28-14 types and location B-10 uploading preparing ...Cisco 585 LRE CPE 13-12 Ethernet links, described 13-2 hotel network configuration example 1-15, 1-18 LRE links 13-2 CPE link, transitioning state 13-7 CPE toggle configuring 13-22 described 13-7 disabling 13-22 enabling 13-22 crashinfo file 32-23 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...