Cisco

Cisco Catalyst 2960 / 3560 / 3750 Switch Password Recovery

Recover a lost enable password on Catalyst 2960/3560/3750 switches using the classic IOS config-register 0x2142 procedure over the console port.

Overview

This guide provides step-by-step instructions for resetting lost or forgotten administrative passwords on enterprise networking hardware. Follow the procedure below carefully to regain access while preserving your device configuration.

Prerequisites

Before proceeding with password recovery, ensure you have a console cable, terminal emulation software configured to 9600 baud, and physical access to the device.

Step 1: Establish Console Connection

Connect your terminal cable to the console port of the device and open your serial terminal session.

Step 2: Interrupt the Boot Sequence

Power cycle the hardware and issue a Break key sequence during initial system startup to enter ROMMON mode.

Step 3: Reset Password & Configuration

Bypass startup configuration loading, boot into system software, set your new credentials, and save changes back to non-volatile memory.

Overview

Catalyst 2960/3560/3750 run classic Cisco IOS. The recovery method is the standard IOS password-recovery procedure: boot with the configuration register set to 0x2142 so the switch ignores its startup configuration, then merge it back.

Prerequisites

Recovery Steps

  1. Connect the console, then power-cycle the switch.
  2. Within the first few seconds of boot, send the Break sequence to reach the switch: prompt.
  3. Initialise flash and force the configuration register to ignore the startup config:
    switch: flash_init
    switch: load_helper
    switch: confreg 0x2142
  4. Boot the switch:
    switch: boot
  5. The switch starts with an empty configuration. Enter privileged EXEC (no password needed), then merge the saved configuration back:
    Switch> enable
    Switch# copy startup-config running-config
  6. Set the new password:
    Switch(config)# enable secret <new-password>
  7. Restore normal boot behaviour and save:
    Switch(config)# config-register 0x2102
    Switch(config)# end
    Switch# write memory
    Switch# reload

Note

If copy startup-config running-config reports errors, the saved configuration may contain commands the temporary image does not support — the passwords will still be cleared, and you can restore the rest from a backup.