Config files renamed

[r-vaughan]

We have this old WS-C2950T on our network that had all the flash: configuration files re-named. config.text, private-config.text, and vlan.dat, all had ".renamed" appended to the end of the file names. Has anyone seen this, and do you know what could have done it? (other than someone manually changing the names?) Thanks.

[jbrenesj]

Are normal files present and also the "renamed" files? Or only the renamed

I have never seen the vlan.dat changing its name because of any feature/process done by/to the switch

The config files could be modified by external apps like snmp or cna, it sometimes happens but I doubt the vlan database will be renamed ever

[r-vaughan]

Only the ".renamed" files were present, no other config.text file was there. I suspect someone went in and renamed them, but no one will admit to it.

[Leo Laohoo]

Nope. Files being renamed has to be done manually. Check your RADIUS or AAA server for any hints base on the time and date of the files.

[Darren Ramsey · Accepted solution]

This is part of the express setup. If the mode button gets pushed and held for a few seconds, then the files are renamed and the switch reboots to default. I've seen patch cables push against the mode button and this occur. Just rename the files and reload.

http://supportwiki.cisco.com/ViewWiki/index.php/Catalyst_3550_switch_reloads_and_gives_the_%22EXPRESS_SETUP-6-CONFIG_IS_RESET%22_error_message_when_the_mode_button_is_pressed_for_a_longer_time_during_a_password_recovery

[Peter Paluch]

Darren,

Now this is a thing... I must admit I never heard of this before but surely I will test it in the lab. Thanks you!

Best regards,

Peter

[jimmysands73_2]

I learn something all the time at a ridiculous hour that I cant sleep, good stuff.

[davy.timmermans]

You can disable this feature with the following command:

no setup express

As far as I know all switches with a mode button has this feature, and enabled by default.