CCNA Enterprise Networking and Automation v7  Lab 10.6.13 - Answers should be based on Router 1941

 

Lab - Research Password Recovery Procedures

1. Objectives

Part 1: Research the Configuration Register

• Identify the purpose of the configuration register.
• Describe router behavior for different configuration register values.

Part 2: Document the Password Recovery Procedure for a Specific Cisco Router

• Research and record the process for password recovery on a specific Cisco router.
• Answer questions based on the researched procedure.

1. Background / Scenario

The purpose of this lab is to research the procedure for recovering or resetting the enable password on a specific Cisco router. The enable password protects access to privileged EXEC and configuration mode on Cisco devices. The enable password can be recovered, but the enable secret password is encrypted and would need to be replaced with a new password.

In order to bypass a password, a user must be familiar with the ROM monitor (ROMMON) mode, as well as the configuration register setting for Cisco routers. ROMMON is basic CLI software stored in ROM that can be used to troubleshoot boot errors and recover a router when an IOS is not found.

In this lab, you will begin by researching the purpose and settings of the configuration register for Cisco devices. You will then research and detail the exact procedure for password recovery for a specific Cisco router.

1. Required Resources

• Device with internet access

1. Instructions
   1. Research the Configuration Register   Router 1941

To recover or reset an enable password, a user will utilize the ROMMON interface to instruct the router to ignore the startup configuration when booting. When booted, the user will access privilege EXEC mode, overwrite the running configuration with the saved startup configuration, recover or reset the password, and restore the router's boot process to include the startup configuration.

The router's configuration register plays a vital role in the process of password recovery. In the first part of this lab, you will research the purpose of a router's configuration register and the meaning of certain configuration register values.

1. Describe the purpose of the configuration register.

Questions:

What is the purpose of the configuration register?

 

What command changes the configuration register in global configuration mode?

 

 

What command changes the configuration register in ROMMON mode?

 

1. Determine configuration register values and their meanings.

Questions:

Research and list the router behavior for the following configuration register values.

0x2102

 

0x2142

 

What is the difference between these two configuration register values?

 

 

1. Document the Password Recovery Procedure for a Specific Cisco Router - Router 1941

For Part 2, you will describe the exact procedure for recovering or resetting a password from a specific Cisco router and answer questions based on your research. Your instructor will provide you with the exact router model to research.

1. Detail the process to recover a password on a specific Cisco router. - Router 1941

Research and list the steps and commands that you need to recover or reset the enable or enable secret password from your Cisco router. Summarize the steps in your own words.

Type your answers here.

1. Answer questions about the password recovery procedure.

Using the process for password recovery, answer the following questions. (Router 1941)

Questions:

Describe how to find the current setting for your configuration register.

 

 

Describe the process for entering ROMMON mode.

 

 

What commands do you need to enter the ROMMON interface?

 

 

What message would you expect to see when the router boots?

 

Why is it important to load the startup configuration into the running configuration?

 

 

Why is it important to change the configuration register back to the original value after recovering password?

 

1. Reflection Question

Why is it of critical importance that a router be physically secured to prevent unauthorized access?