Cisco

Cisco WS-C2960-48TT-S Password Recovery

Step-by-step password recovery for the Cisco WS-C2960-48TT-S (Catalyst 2960 Classic). Console access required.

Overview

This guide provides step-by-step instructions for resetting lost or forgotten administrative passwords on enterprise networking hardware. Follow the procedure below carefully to regain access while preserving your device configuration.

Prerequisites

Before proceeding with password recovery, ensure you have a console cable, terminal emulation software configured to 9600 baud, and physical access to the device.

Step 1: Establish Console Connection

Connect your terminal cable to the console port of the device and open your serial terminal session.

Step 2: Interrupt the Boot Sequence

Power cycle the hardware and issue a Break key sequence during initial system startup to enter ROMMON mode.

Step 3: Reset Password & Configuration

Bypass startup configuration loading, boot into system software, set your new credentials, and save changes back to non-volatile memory.

Overview

This procedure recovers administrator access to the Cisco Catalyst 2960-48TT-S when the enable secret or user passwords are lost. The startup configuration is preserved (renamed, not erased), so all VLANs, interfaces, and settings survive.

Prerequisites

Console cable (RJ-45 to DB-9 or USB-serial) with a terminal session at 9600 baud, 8 data bits, no parity, 1 stop bit (8N1). Physical access to the switch to power-cycle it and press the Mode button. Note: this procedure applies to Catalyst 2960, 2960-S, 2960-X, 2960-XR, 3560, 3560-E, 3560-X, 3750, 3750-E, and 3750-X series running classic IOS.

Recovery Procedure — Mode Button Method

Connect the console cable and open a terminal session (9600 8N1).
Power-cycle the switch (unplug power, wait 5 seconds, reconnect).
Within 15 seconds of power-on, press and HOLD the Mode button on the front panel (right side). Keep holding until the STAT (system) LED starts blinking — typically 10–15 seconds. A brief press does nothing; you must hold through the LED change.
Release the Mode button. The switch enters the boot loader and displays the switch: prompt.
Initialize flash: flash_init
Load the boot helper: load_helper
List the flash contents: dir flash: — locate the configuration file (config.text on standalone units; config.text-1, config.text-2, etc. on stacked units).
Rename the configuration so the switch boots without it: rename flash:config.text flash:config.text.old (use the correct per-stack-member name if applicable).
Boot the switch: boot. It boots to the CLI with an empty configuration.
Enter privileged mode: enable (press Enter at any password prompt — there is none).
Restore the saved configuration: copy flash:config.text.old system:running-config — when asked for the source filename, enter flash:config.text.old.
Enter configuration mode: configure terminal.
Set a new enable secret: enable secret <new-password>.
Set line passwords: line vty 0 15 then password <new-password> and login; repeat for line console 0.
Exit and save: end, then write memory (or copy running-config startup-config).
Reboot and verify: reload. Confirm you can log in with the new passwords.

Important Notes

The configuration is not erased — it is renamed and restored. If you skip step 11, the switch keeps running with an empty config after reload; always restore and re-save.
On stacked switches, each member has its own config file (config.text-1, config.text-2, ...). Rename and restore each member's file; show switch lists member numbers.
If the Mode button method fails, the switch may have no service password-recovery configured — in that case the config cannot be bypassed and only a factory reset is possible.
The baud rate is 9600 for the console on these models — do not use 115200.

Protecting Your Configuration

Back up the running config before any work: copy running-config tftp://<server>/<filename> or copy running-config usbflash0:. After recovery, verify show startup-config contains the expected configuration and re-save with write memory.