IOS XR Command to disable default cisco/cisco username/password

[mark.decastro]

Hi All,

I was in the middle of hardening our router's VTY login (access-class VTYs, limiting the VTY to 2 sessions),  then I found out username: cisco and password: cisco is working even it's not shown in the configuration. Does anyone  know the command  to disable/remove this user account. I've tried the 'no username' command but it didn't work.

BTW, the router is an ASR9K, with XR asr9k-ce-4.2.3 IOS code. Thanks in advance!

RP/0/RSP1/CPU0:RTR#sh run | i username
Mon Jun  2 13:31:39.848 GMT
Building configuration...
username admin
RP/0/RSP1/CPU0:RTR#

[mark.decastro]

I meant, when I issued the 'no username cisco password cisco', I could still telnet using the cisco/cisco user account.

RP/0/RSP1/CPU0:RTR(config)#no username cisco password cisco
RP/0/RSP1/CPU0:RTR(config)#commit
Mon Jun  2 13:39:55.575 GMT

Still works after removing the cisco/cisco:

User Access Verification

Username: cisco
Password:
Last switch-over Fri Mar 28 12:10:48 2014: 9 weeks, 3 days, 1 hour, 30 minutes ago

RP/0/RSP1/CPU0:RTR#

[Salman Aghayev · Accepted solution]

Hi, mark.decastro

hope these links will be helpful

http://blog.ine.com/tag/ios-xr/

http://ccie-in-3-months.blogspot.com/2010/09/how-to-get-full-root-access-in-ios-xr.html

[mark.decastro]

Thanks a lot Salman, the 2nd link helped me solved the issue. I had to go to admin mode and there I was able to edit the cisco user account. :-)

[Salman Aghayev]

Nice to hear that problem has been solved. 

Good luck