How to Recover Password from Cisco Catalyst 3850 Series Switches

Chris Morris
3 min readJul 14, 2020

On the off chance that you are locked out of your Cisco Catalyst 3850 switch and need to perform password recovery on a Cisco Catalyst 3850 switch this short instructional exercise will help you from scratch. You will need:

· One Cisco Catalyst 3850 switch or switch stack which you have forgotten or don’t have a clue about the password for.

· A laptop with a console cable

· An assistant to help (if the switch is in a rack)

Steps for Password Recovery of Cisco Catalyst 3850 Series Switches

Below are the steps which you need to follow to recover password from Cisco 3850 series switches:

Step 1

Connect your console cable to the 3850 and guarantee you can get a command prompt.

The initial step is to power your switch off, on the off chance that you are running a Cisco 3850 series stack guarantee to expel all power cables and if utilizing stack power separate the stack power so you can isolate the top switch of the stack.

You should have the option to power on one switch and hold down the mode button simultaneously, if the switch is in a rack you may require somebody to assist you with this bit!

Step 2

Presently you have powered off your switch/switches and found the Mode Button and got an aide (if necessary) to help with the power you are set.

Hold the Mode Button down and connect the power — after around 12 seconds the SYST LED will go Amber alongside the various four LEDS. Release the Mode Button

In the event that this progression has worked out in a good way, you ought to be taking a gander at the following on your laptop:

The system has been interrupted prior to initializing some

filesystems and loading the operating system software.

Console will be reset to 9600 baud rate, need to change terminal setting first.

The following commands will initialize the remaining filesystems,

and finish loading the operating system software:

flash_init

boot

switch:

You presently need to enter the two following command:

switch: SWITCH_IGNORE_STARTUP_CFG=1

Next reboot the switch with the following command

switch: boot — — System Configuration Dialog — -

Enable secret warning

— — — — — — — — — — — — — — — — —

In order to access the device manager, an enable secret is required

If you enter the initial configuration dialog, you will be prompted for the enable secret

If you choose not to enter the intial configuration dialog, or if you exit setup without setting the enable secret,

please set an enable secret using the following CLI in configuration mode-

enable secret 0

— — — — — — — — — — — — — — — — —

Would you like to enter the initial configuration dialog? [yes/no]:

Answer No to this and you should be looking at a blank switch config

Switch>

Step 3

You currently need to copy your startup-config to the running-config with the goal that you keep the configuration on the switch.

Use the command

copy startup-config running-config

You should now see the hostname of your switch and all the configuration should be there.

Now you either need to add another username

username roger privilige 15 password <your password here>

or change the enable secret

enable secret <new enable secret password>

Or disable AAA

no aaa new-model

When you have played out those steps you simply need to tell the Catalyst 3850 to check it’s startup config on the next boot once more, you do this with the command you utilized before to disregard it.

conf t

no system ignore startupconfig switch all

Save the running config to the startup

copy run start

or

wr m

At this point reload your switch and you ought to have the option to log back in with your recently made password.

The command to reload the switch is simply

reload

HTH

Roger

--

--

Chris Morris

Technical Content writing is my passion. I have broad experience in writing for the technical field. I started my writing at the age of sixteen.