Cisco

Cisco IOS Recovery (Switches & Routers)

Recover lost enable/line passwords on Cisco IOS and IOS-XE devices via the ROMMON break sequence or the mode-button boot menu.

Overview

This guide provides step-by-step instructions for resetting lost or forgotten administrative passwords on enterprise networking hardware. Follow the procedure below carefully to regain access while preserving your device configuration.

Prerequisites

Before proceeding with password recovery, ensure you have a console cable, terminal emulation software configured to 9600 baud, and physical access to the device.

Step 1: Establish Console Connection

Connect your terminal cable to the console port of the device and open your serial terminal session.

Step 2: Interrupt the Boot Sequence

Power cycle the hardware and issue a Break key sequence during initial system startup to enter ROMMON mode.

Step 3: Reset Password & Configuration

Bypass startup configuration loading, boot into system software, set your new credentials, and save changes back to non-volatile memory.

Overview

This guide covers password recovery for Cisco Ios Switch Router equipment. The correct procedure depends on the exact platform and operating system — the links below point to the model-specific guides in this library.

Find Your Platform

Cisco Catalyst 2960/3560/3750 (classic IOS) — Mode button method: hold the Mode button during power-up until the STAT LED blinks, then flash_init → rename config.text → boot at the switch: prompt.
Cisco Catalyst 3650/3850/9000 (IOS-XE) — Mode button until the system LED turns solid amber, then the same switch: prompt procedure.
Cisco Catalyst 4500/6500/6800 — ROMMON break (Ctrl+Break) + confreg 0x2142.
Cisco Nexus (NX-OS) — Ctrl+C at boot → delete bootflash:startup-config → reload (config erased).
Cisco ISR/ASR routers — ROMMON break + confreg 0x2142 → copy startup-config running-config.
Cisco ASA — break (or Esc on 5506-X/5508-X/5516-X) → ROMMON confreg 0x41 → restore config.
Cisco Firepower FTD — FXOS connect local-mgmt → passwd admin.
Cisco Meraki — cloud-managed; use the dashboard account recovery or factory reset + re-adoption.
Juniper EX/QFX/MX/SRX/ACX — Space bar at boot → boot -s → passwd root.
Fortinet FortiGate — "Press any key" at boot → Config console → Reset Administrator password.
HPE Aruba ProVision — Clear button during power-up → boot with defaults.
HPE Aruba CX — 115200 console → boot loader password recovery.
HPE Comware — Ctrl+B at boot → Skip current configuration.
Extreme XOS / NOS — boot menu → default config or recovery option.
Ubiquiti UniFi — factory reset + re-adoption (no local password).
Ubiquiti EdgeOS — U-Boot boot -s single-user or reset button.
Palo Alto PAN-OS — boot menu → Maintenance → Password Recovery.
Dell OS10 — GRUB single-user (single kernel flag) → passwd admin.
Dell FTOS/OS6 — boot prompt → boot-without-config.
MikroTik RouterOS — reset button (release at first LED flash for v7 config-preserving reset).
Check Point Gaia — GRUB single-user → passwd admin.
F5 BIG-IP — GRUB single-user → passwd root + passwd admin.
SonicWall SonicOS — boot menu → Safe Mode → password cleared.
Netgear ProSAFE — reset button → factory defaults → restore config.
Arista EOS — Aboot Ctrl+C → boot -s → passwd admin.

General Rules

Always use the correct console baud rate (9600 for most platforms; 115200 for Aruba CX, Arista, EdgeOS, Check Point, Dell S/Z, SonicWall TZ, F5 iSeries).
Back up the running configuration before any recovery — most procedures preserve it, but a factory reset erases it.
If the exact model isn't listed above, search this library for the model name — each guide covers its specific family.

Protecting Your Configuration

Maintain current configuration backups for every device (TFTP/SCP/USB), keep console credentials documented in a password manager, and test recovery procedures on lab equipment before relying on them in production.