Link to home
Start Free TrialLog in
Avatar of Jelonet
Jelonet

asked on

Cisco 2600 lockout

We implemented Radius(IAS) and now we are unable to do anything on one of our routers.  We can login but with limited access.  We are unable to do sh run or config t.  We get Command Authorization Failed.  The router is outside the Pix and I don't believe the router was ever communicating with the IAS because we were prompted for 2 passwords and only allowed to get to the # prompt with the enable login not the IAS domain login.  So, needless to say we are basically locked out.  How can we get back in to remove the aaa configurations in the router?
Avatar of Cyclops3590
Cyclops3590
Flag of United States of America image

Do you have physical access to the router?

You can console in and do a password recovery procedure.
Just turn off the router, turn it back on, hit ctrl-break.
I believe for the 2600 you type
confreg 0x2102
to bypass the startup config
then type
reload
go into enable and global mode
run copy start run
redo the lines you need, copy run start
then in global mode type (check on it, because I can't remember the exact syntax)
config-register 0x2142
then reload
you should be good again
Avatar of Jelonet
Jelonet

ASKER

Is ther a way I can recover the current config/IOS image? Do I have to completley reconfigure the router after the reload or just change/deleted the aaa stuff
ASKER CERTIFIED SOLUTION
Avatar of Cyclops3590
Cyclops3590
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Jelonet

ASKER

It is a 2600 and I'll give it a shot.  If it don't work I'll just have to reconfigure it.  Thanks for your help.