If your image is in bootflash you should be able to just enter "boot bootflash: at the rommon prompt then hit enter and it should load the image . Depending on how the config register is set you may have to enter a boot statement to the config once the image loads . If you use 0x2102 you will need a boot statement , if you use 0x2101 it should automatically find the first image in bootflash and load it .
I managed to auto-boot up the first image by 0x2101. I tried also to disable the username and password prompt by 0x2141 ( enable the 0 1 2 3 4 5 6th bit ) for bypassing the password, it does not work. ( I have tried also 0x2142 and it doesn't work too ).
How to disable the prompting of username and password in the startup config?
if you watch the boot process, you see that it is a two stage boot up. loads IOS to the switching module first and then loads it to the MFSC card. the config is saved on the MFSC. so let the switch load first and the do your break sequence before the MFSC load.
that will get you into the rommon of the mfsc card. thats where you set the confreg to 2141. that should bypass the password
it should boot to a blank config . You then do a copy start run
command which will load the startup into running config. You then should be able to just go into config mode and do a "no username . Change config register back to 0x2101 , write mem then reload . Make sure you have passwords on the vty's and a enable secret password configured before reloading. If you cannot send a control break or c then thats usually an issue with the terminal emulator you are using , try something like Tera Term for an emulator.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...