How to change the Default Password on AP1131AG

Answered Question
Jul 24th, 2012
User Badges:

Hi all :


I tried to change the default password Cisco to other by command line but the password cannot work out.


The command line I used are as below :


AP#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
AP(config)#enable pass
AP(config)#enable password 4dMINO123 ?
LINE    <cr>

AP(config)#enable password 4dMINO123
AP(config)#exit
AP#wr
*Mar  1 04:39:23.902: %SYS-5-CONFIG_I: Configured from console by console
Building configuration...
[OK]
AP#exit


This still cannot cahnge. Below I do again below commands :


AP(config)#enable secret
% Incomplete command.

AP(config)#enable secret ?
  0      Specifies an UNENCRYPTED password will follow
  5      Specifies an ENCRYPTED secret will follow
  LINE   The UNENCRYPTED (cleartext) 'enable' secret
  level  Set exec level password

AP(config)#enable secret 5
% Incomplete command.

AP(config)#enable secret 5 ?
  LINE  The ENCRYPTED 'enable' secret string

AP(config)#enable secret 5 LINE
ERROR: The secret you entered is not a valid encrypted secret.
To enter an UNENCRYPTED secret, do not specify type 5 encryption.
When you properly enter an UNENCRYPTED secret, it will be encrypted.

AP(config)#enable secret LINE
AP(config)#exit
AP#
*Mar  1 04:40:53.021: %SYS-5-CONFIG_I: Configured from console by console
AP#
AP#exit

After that when I access with >en again as below with correct password of 4dMINO123 and it always fails as below :


Can anybody help to provide correct way of changing the default password of Cisco to another password? Many thanks!


AP con0 is now available


Press RETURN to get started.


AP>en
Password:
Password:
Password:
% Bad secrets

AP>en 0
AP>en 5
% No password set
AP>en 15
Password:
Password:
% Password:  timeout expired!
Password:
% Bad secrets

AP>
AP>
AP>en
Password:
Password:

Password:
% Bad secrets


thanks and best regards,

tangsuan

Correct Answer by Amjad Abdullah about 4 years 8 months ago

You are probably providing an encrypted password rather than unencrypted one.


Use this command:


enable secret 0


That should do it.


If you try to use "enable secret 5 " then the command expects an encrypted form of the secret, not a plain text secret. What you need to enter however on the prompt is the clear text secret.


HTH


Amjad

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Correct Answer
Amjad Abdullah Tue, 07/24/2012 - 23:32
User Badges:
  • Blue, 1500 points or more

You are probably providing an encrypted password rather than unencrypted one.


Use this command:


enable secret 0


That should do it.


If you try to use "enable secret 5 " then the command expects an encrypted form of the secret, not a plain text secret. What you need to enter however on the prompt is the clear text secret.


HTH


Amjad

pgasparovic Thu, 07/26/2012 - 06:39
User Badges:

Hi, I have even the worst problem,

that seems probably to to be never asked on Internet. After quick learning how to reset this creapy device, I can't get by no means the enable password in default config for this box, having read everywhere from Cisco guide through community pages to Google pages.. NOWHERE.


Question is : what else except Cisco, cisco, root, password... can solve this stupid issue?!? I expect some guru from responsible AP BU to answer this with definite answer, or someone from Cisco having mercy with me to contact such guy(s).


Here is my desperate situation :


Nothing from this page helped :

http://www.cisco.com/en/US/partner/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#reset_ap_newer



Situation after hard reset:


Xmodem file system is available.

flashfs[0]: 26 files, 8 directories

flashfs[0]: 0 orphaned files, 0 orphaned directories

flashfs[0]: Total bytes: 15998976

flashfs[0]: Bytes used: 6879232

flashfs[0]: Bytes available: 9119744

flashfs[0]: flashfs fsck took 43 seconds.

Base ethernet MAC Address: 00:22:55:9f:fc:a0

Initializing ethernet port 0...

Reset ethernet port 0...

Reset done!

ethernet link up, 100 mbps, full-duplex

Ethernet port 0 initialized: link is up

button pressed for 1 seconds

process_config_recovery: set IP address and config to default 10.0.0.1

Loading "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx"...#########################################################################################################################################################################


File "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx" uncompressed and installed, entry point: 0x3000

executing...


              Restricted Rights Legend


Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

(c) of the Commercial Computer Software - Restricted

Rights clause at FAR sec. 52.227-19 and subparagraph

(c) (1) (ii) of the Rights in Technical Data and Computer

Software clause at DFARS sec. 252.227-7013.


           cisco Systems, Inc.

           170 West Tasman Drive

           San Jose, California 95134-1706




Cisco IOS Software, C1130 Software (C1130-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Mon 17-Jul-06 11:38 by alnguyen

Image text-base: 0x00003000, data-base: 0x0035E440


Initializing flashfs...


flashfs[1]: 26 files, 8 directories

flashfs[1]: 0 orphaned files, 0 orphaned directories

flashfs[1]: Total bytes: 15998976

flashfs[1]: Bytes used: 6879232

flashfs[1]: Bytes available: 9119744

flashfs[1]: flashfs fsck took 6 seconds.

flashfs[1]: Initialization complete....done Initializing flashfs.

cisco AIR-LAP1131AG-E-K9   (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.

Processor board ID FCZ1238Q0HK

PowerPCElvis CPU at 262Mhz, revision number 0x0950

Last reset from power-on

LWAPP image version 3.0.51.0

1 FastEthernet interface


32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:22:55:9F:FC:A0

Part Number                          : 73-8962-14

PCA Assembly Number                  : 800-24818-13

PCA Revision Number                  : A0

PCB Serial Number                    : FOC12354426

Top Assembly Part Number             : 800-29144-03

Top Assembly Serial Number           : FCZ1238Q0HK

Top Revision Number                  : A0

Product/Model Number                 : AIR-LAP1131AG-E-K9 




Press RETURN to get started!



*Mar  1 00:00:08.354: %CDP_PD-4-POWER_OK: Full power - AC_ADAPDOWN: Line protocol on Interface FastEthernet0, changed state to up

Press>en

Password:

Password:

Password:

*Mar  1 00:00:27.393: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY

% Bad secrets


Press>en

Password:

Password:

Password:

% Bad secrets


Press>

*Mar  1 00:00:36.530: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 192.168.1.2, mask 255.255.255.0, hostname Press


Press>en

Password:

Password:


Press>sho ver

Cisco IOS Software, C1130 Software (C1130-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Mon 17-Jul-06 11:38 by alnguyen


ROM: Bootstrap program is C1130 boot loader

BOOTLDR: C1130 Boot Loader (C1130-BOOT-M) Version 12.3(8)JEA, RELEASE SOFTWARE (fc2)


Press uptime is 17 minutes

System returned to ROM by power-on

System image file is "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx"


cisco AIR-LAP1131AG-E-K9   (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.

Processor board ID FCZ1238Q0HK

PowerPCElvis CPU at 262Mhz, revision number 0x0950

Last reset from power-on

LWAPP image version 3.0.51.0

1 FastEthernet interface


32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:22:55:9F:FC:A0

Part Number                          : 73-8962-14

PCA Assembly Number                  : 800-24818-13

PCA Revision Number                  : A0

PCB Serial Number                    : FOC12354426

Top Assembly Part Number             : 800-29144-03

Top Assembly Serial Number           : FCZ1238Q0HK

Top Revision Number                  : A0

Product/Model Number                 : AIR-LAP1131AG-E-K9 


Configuration register is 0xF


Press>

Stephen Rodriguez Thu, 07/26/2012 - 06:50
User Badges:
  • Purple, 4500 points or more

The AP you have is running the CAPWAP recovery image.  With the recovery image the only thing the AP will do is try to join a WLC.


http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918



HTH,
Steve

-----------------------------------------
Please remember to rate useful posts, and mark questions as answered

Amjad Abdullah Thu, 07/26/2012 - 06:53
User Badges:
  • Blue, 1500 points or more

you must've been kidding!!
You did not mention that you use a lightweight AP. I was thinking it is a standalone one.

You can reset the default setting for this AP form controller.

Thd default username and password (for telnet and enable) is Cisco (C capital).

If you have changed something from the AP side then this is not supported by Cisco. You should have changed whatever you want from the controller side.
If you have configured a password for the AP from the controller then that is the password. Or you can reset to factory settings. If you don't have a controller and you want the AP to be standalone (autonomous) AP you need to convert it to a standalone mode. Here is a useful link about how to do so:

http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp161272


HTH


Amjad

Stephen Rodriguez Thu, 07/26/2012 - 07:26
User Badges:
  • Purple, 4500 points or more

Amjad,

     The first poster has an IOS AP.  The second poster has a lightweight one.



HTH,
Steve

-----------------------------------------
Please remember to rate useful posts, and mark questions as answered

pgasparovic Thu, 07/26/2012 - 08:14
User Badges:

That's the reason I ended up stuck "in the middle".. Thank you both for reactions and explanation. I'm not any Wifi designer, even not have a plan to do some extra configuration - just wanted to recover some box in our lab here that noone knew what the user/pass could be..  to update it's WAN config a bit - so I had to reset it to defaults. Uff..


Shall I definitevely try that TFTP process, does it work? Because there is a note :

The lightweight 1300 series access points can only be converted back to autonomous mode using a wireless LAN controller.


Please.just confirm this works - and then I will perfom it. Regards

Peter

Stephen Rodriguez Thu, 07/26/2012 - 08:16
User Badges:
  • Purple, 4500 points or more

yes, the process works.



HTH,
Steve

-----------------------------------------
Please remember to rate useful posts, and mark questions as answered

pgasparovic Fri, 07/27/2012 - 01:11
User Badges:

Yes, performed - IT'S DONE!


Thanks a lot guys for giving me an instant help, otherwise I would get into delay with some customer project, now have 1-2 days to elaborate my stuff. Will know for future, to spread the knowledge


Unfortunately I can't add you portal points with correct answers, just stars.. but I definitely send private msg to guy who opened this to close it. All the question about default  AP passwords are decisively answered here.

Tang-Suan Tan Mon, 07/30/2012 - 00:53
User Badges:

Hi Amjad :


Thanks to your reply!


From your reply and also my trial, I managed to solve this problem.


The trick is the first command :


enable passwork XXXXXX  --> the XXXXX is your Telnet password.


and the second command :


enable secret YYYYYYYY --> the YYYYYYYY is your enable password. You do not need to put 0 to 5 after enable secret.


The two passwords will be encryted automaticaly after these two commands. The enable passward also set to secret 5 automatically.


regards,

tangsuan

Amjad Abdullah Mon, 07/30/2012 - 01:03
User Badges:
  • Blue, 1500 points or more

Hi Tangsuan,

Glad to hear that it worked.

Actions

This Discussion

Related Content