Aironet 1200 1

[rn4it]

We have an Aironet 1200, which was rebooted from console. We have a local ID which is used, the global ID has been removed by using the web consoles option in the Administrator Authenticated by, local user list only selected. Does this mean that whoever logged in from console new the local admin id and pw? The local cisco id had been removed, by using the web console. Or is the console still open?

 

[JOAMON]

Have a 1231 on my desk right now with same login local setup. Have also deleted default admin username "Cisco". I cannot login on the console without one of the local account names.

 

[rn4it]

Joamon,
Thanks, that's what I suspected, but I don't have a spare at my desk and I don't have physical access to the one that was rebooted.

 

[rn4it]

These are the log entries on the routers, there is only 3 people who know the id and pwd. None of whom said they rebooted. Could this have also been caused by a power failure?

SNMP agent on host <hostname> is undergoing a cold start
System restarted --
Configured from memory by console

 

[JOAMON]

Configured from memory by console
This does not mean it was rebooted from console
I get the following on mine during startup
*Mar 1 00:00:07.474: %SYS-5-CONFIG_I: Configured from memory by console
Probably just a power failure or someone maybe unplugged it.

 

[rn4it]

Thanks, as I started looking further into it and noticed that another device went down at the same time, I've started suspecting a power disruption of some type.