How to change the Default Password on AP1131AG

Answered Question
Jul 24th, 2012

Hi all :

I tried to change the default password Cisco to other by command line but the password cannot work out.

The command line I used are as below :

AP#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
AP(config)#enable pass
AP(config)#enable password 4dMINO123 ?
LINE    <cr>

AP(config)#enable password 4dMINO123
AP(config)#exit
AP#wr
*Mar  1 04:39:23.902: %SYS-5-CONFIG_I: Configured from console by console
Building configuration...
[OK]
AP#exit

This still cannot cahnge. Below I do again below commands :

AP(config)#enable secret
% Incomplete command.

AP(config)#enable secret ?
  0      Specifies an UNENCRYPTED password will follow
  5      Specifies an ENCRYPTED secret will follow
  LINE   The UNENCRYPTED (cleartext) 'enable' secret
  level  Set exec level password

AP(config)#enable secret 5
% Incomplete command.

AP(config)#enable secret 5 ?
  LINE  The ENCRYPTED 'enable' secret string

AP(config)#enable secret 5 LINE
ERROR: The secret you entered is not a valid encrypted secret.
To enter an UNENCRYPTED secret, do not specify type 5 encryption.
When you properly enter an UNENCRYPTED secret, it will be encrypted.

AP(config)#enable secret LINE
AP(config)#exit
AP#
*Mar  1 04:40:53.021: %SYS-5-CONFIG_I: Configured from console by console
AP#
AP#exit

After that when I access with >en again as below with correct password of 4dMINO123 and it always fails as below :

Can anybody help to provide correct way of changing the default password of Cisco to another password? Many thanks!

AP con0 is now available

Press RETURN to get started.

AP>en
Password:
Password:
Password:
% Bad secrets

AP>en 0
AP>en 5
% No password set
AP>en 15
Password:
Password:
% Password:  timeout expired!
Password:
% Bad secrets

AP>
AP>
AP>en
Password:
Password:

Password:
% Bad secrets

thanks and best regards,

tangsuan

I have this problem too.
0 votes
Correct Answer by Amjad Abdullah about 1 year 8 months ago

You are probably providing an encrypted password rather than unencrypted one.

Use this command:

enable secret 0

That should do it.

If you try to use "enable secret 5 " then the command expects an encrypted form of the secret, not a plain text secret. What you need to enter however on the prompt is the clear text secret.

HTH

Amjad

  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 5 (3 ratings)
Correct Answer
Amjad Abdullah Tue, 07/24/2012 - 23:32

You are probably providing an encrypted password rather than unencrypted one.

Use this command:

enable secret 0

That should do it.

If you try to use "enable secret 5 " then the command expects an encrypted form of the secret, not a plain text secret. What you need to enter however on the prompt is the clear text secret.

HTH

Amjad

pgasparovic Thu, 07/26/2012 - 06:39

Hi, I have even the worst problem,

that seems probably to to be never asked on Internet. After quick learning how to reset this creapy device, I can't get by no means the enable password in default config for this box, having read everywhere from Cisco guide through community pages to Google pages.. NOWHERE.

Question is : what else except Cisco, cisco, root, password... can solve this stupid issue?!? I expect some guru from responsible AP BU to answer this with definite answer, or someone from Cisco having mercy with me to contact such guy(s).

Here is my desperate situation :

Nothing from this page helped :

http://www.cisco.com/en/US/partner/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#reset_ap_newer

Situation after hard reset:

Xmodem file system is available.

flashfs[0]: 26 files, 8 directories

flashfs[0]: 0 orphaned files, 0 orphaned directories

flashfs[0]: Total bytes: 15998976

flashfs[0]: Bytes used: 6879232

flashfs[0]: Bytes available: 9119744

flashfs[0]: flashfs fsck took 43 seconds.

Base ethernet MAC Address: 00:22:55:9f:fc:a0

Initializing ethernet port 0...

Reset ethernet port 0...

Reset done!

ethernet link up, 100 mbps, full-duplex

Ethernet port 0 initialized: link is up

button pressed for 1 seconds

process_config_recovery: set IP address and config to default 10.0.0.1

Loading "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx"...#########################################################################################################################################################################

File "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx" uncompressed and installed, entry point: 0x3000

executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

(c) of the Commercial Computer Software - Restricted

Rights clause at FAR sec. 52.227-19 and subparagraph

(c) (1) (ii) of the Rights in Technical Data and Computer

Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.

           170 West Tasman Drive

           San Jose, California 95134-1706

Cisco IOS Software, C1130 Software (C1130-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Mon 17-Jul-06 11:38 by alnguyen

Image text-base: 0x00003000, data-base: 0x0035E440

Initializing flashfs...

flashfs[1]: 26 files, 8 directories

flashfs[1]: 0 orphaned files, 0 orphaned directories

flashfs[1]: Total bytes: 15998976

flashfs[1]: Bytes used: 6879232

flashfs[1]: Bytes available: 9119744

flashfs[1]: flashfs fsck took 6 seconds.

flashfs[1]: Initialization complete....done Initializing flashfs.

cisco AIR-LAP1131AG-E-K9   (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.

Processor board ID FCZ1238Q0HK

PowerPCElvis CPU at 262Mhz, revision number 0x0950

Last reset from power-on

LWAPP image version 3.0.51.0

1 FastEthernet interface

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:22:55:9F:FC:A0

Part Number                          : 73-8962-14

PCA Assembly Number                  : 800-24818-13

PCA Revision Number                  : A0

PCB Serial Number                    : FOC12354426

Top Assembly Part Number             : 800-29144-03

Top Assembly Serial Number           : FCZ1238Q0HK

Top Revision Number                  : A0

Product/Model Number                 : AIR-LAP1131AG-E-K9 

Press RETURN to get started!

*Mar  1 00:00:08.354: %CDP_PD-4-POWER_OK: Full power - AC_ADAPDOWN: Line protocol on Interface FastEthernet0, changed state to up

Press>en

Password:

Password:

Password:

*Mar  1 00:00:27.393: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY

% Bad secrets

Press>en

Password:

Password:

Password:

% Bad secrets

Press>

*Mar  1 00:00:36.530: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 192.168.1.2, mask 255.255.255.0, hostname Press

Press>en

Password:

Password:

Press>sho ver

Cisco IOS Software, C1130 Software (C1130-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Mon 17-Jul-06 11:38 by alnguyen

ROM: Bootstrap program is C1130 boot loader

BOOTLDR: C1130 Boot Loader (C1130-BOOT-M) Version 12.3(8)JEA, RELEASE SOFTWARE (fc2)

Press uptime is 17 minutes

System returned to ROM by power-on

System image file is "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx"

cisco AIR-LAP1131AG-E-K9   (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.

Processor board ID FCZ1238Q0HK

PowerPCElvis CPU at 262Mhz, revision number 0x0950

Last reset from power-on

LWAPP image version 3.0.51.0

1 FastEthernet interface

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:22:55:9F:FC:A0

Part Number                          : 73-8962-14

PCA Assembly Number                  : 800-24818-13

PCA Revision Number                  : A0

PCB Serial Number                    : FOC12354426

Top Assembly Part Number             : 800-29144-03

Top Assembly Serial Number           : FCZ1238Q0HK

Top Revision Number                  : A0

Product/Model Number                 : AIR-LAP1131AG-E-K9 

Configuration register is 0xF

Press>

Amjad Abdullah Thu, 07/26/2012 - 06:53

you must've been kidding!!
You did not mention that you use a lightweight AP. I was thinking it is a standalone one.

You can reset the default setting for this AP form controller.

Thd default username and password (for telnet and enable) is Cisco (C capital).

If you have changed something from the AP side then this is not supported by Cisco. You should have changed whatever you want from the controller side.
If you have configured a password for the AP from the controller then that is the password. Or you can reset to factory settings. If you don't have a controller and you want the AP to be standalone (autonomous) AP you need to convert it to a standalone mode. Here is a useful link about how to do so:

http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp161272

HTH

Amjad

Stephen Rodriguez Thu, 07/26/2012 - 07:26

Amjad,

     The first poster has an IOS AP.  The second poster has a lightweight one.

HTH,
Steve

-----------------------------------------
Please remember to rate useful posts, and mark questions as answered

pgasparovic Thu, 07/26/2012 - 08:14

That's the reason I ended up stuck "in the middle".. Thank you both for reactions and explanation. I'm not any Wifi designer, even not have a plan to do some extra configuration - just wanted to recover some box in our lab here that noone knew what the user/pass could be..  to update it's WAN config a bit - so I had to reset it to defaults. Uff..

Shall I definitevely try that TFTP process, does it work? Because there is a note :

The lightweight 1300 series access points can only be converted back to autonomous mode using a wireless LAN controller.

Please.just confirm this works - and then I will perfom it. Regards

Peter

Stephen Rodriguez Thu, 07/26/2012 - 08:16

yes, the process works.

HTH,
Steve

-----------------------------------------
Please remember to rate useful posts, and mark questions as answered

pgasparovic Fri, 07/27/2012 - 01:11

Yes, performed - IT'S DONE!

Thanks a lot guys for giving me an instant help, otherwise I would get into delay with some customer project, now have 1-2 days to elaborate my stuff. Will know for future, to spread the knowledge

Unfortunately I can't add you portal points with correct answers, just stars.. but I definitely send private msg to guy who opened this to close it. All the question about default  AP passwords are decisively answered here.

tangsuan123 Mon, 07/30/2012 - 00:53

Hi Amjad :

Thanks to your reply!

From your reply and also my trial, I managed to solve this problem.

The trick is the first command :

enable passwork XXXXXX  --> the XXXXX is your Telnet password.

and the second command :

enable secret YYYYYYYY --> the YYYYYYYY is your enable password. You do not need to put 0 to 5 after enable secret.

The two passwords will be encryted automaticaly after these two commands. The enable passward also set to secret 5 automatically.

regards,

tangsuan

Actions

Login or Register to take actions

This Discussion

Posted July 24, 2012 at 9:48 PM
Stats:
Replies:10 Avg. Rating:5
Views:3521 Votes:0
Shares:0

Related Content

Discussions Leaderboard