cisco 827 i dont know the webconsole user or pwd help plz!! 3

[syndon]

our cisco 827-h router was setup by a external party who had our support contract. now i am responsible for all things IT related and i have so far recieved some usr/pwd to ry from them

i can login thru hyperterminal
and then enable prompt #

they had turned off the http
i turned it back on

but when i try to connect to it thru a web browser
i get prompted for a usr/pwd i tried various combinations of the usr/pwds the former support company sent me but to no avail

is it possible to reset the webconsole login or add a new superuser? if so how exactly do i do it?

 

[ChrisAC]

If you can get to the enable prompt, why would you need a HTTP interface?

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************

 

[MTandSAV]

have you tried leaving the username empty and use the enable pw? That might work. Also in the config it should have something like username xxxx password xxxxx
if not configure it via hyperterminal and try to login.
Last thing, post your config -get public ip's out- and we might be able to help you.

CCNA, CCNP..partly

 

[syndon]

thanks guys for that. i dont know how to use the terminal part of the router so i would prefer to get web access to it temporarily so i can see the config and note what needs to be updated when we move to our new premises in a few weeks as well as update a port redirection my predecessor had setup

as for using the enable password i tired the one that got me to the enable prompt but it doesnt work on its own and i also tired 3 other standard passwords that the previous support guys would use.

i literally need a step by step guide on how to reset or even add a username/password for use in logging in via browser

once i am done i'll be turning off the "ip http server"

PS can ye tell me how to export the config from the device and ill post it as suggested

thanks

 

[MTandSAV]

router>enable
passord: xxxx
router#
router#conf t
router#(config)username cisco password cisco
router#(config)exit

If there are any other username xxxx password xxx commands in the config
To remove them do:

router#no username xxxx password xxxx

Obviously where the xxxx are put the username and password

Once you're in enable mode do a 'sh run'
and copy the running config to a text file and paste it here

hope this helps

CCNA, CCNP..partly

 

[syndon]

Username: admin
Password:

NTPF-827-01>enable
Password:
NTPF-827-01#sh run
Building configuration...

Current configuration : 2862 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname NTPF-827-01
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication enable default enable
aaa authentication ppp default local
aaa session-id common
enable secret 5 $1$A1Hj$e7Pw1DScrhAtNp82MYaof1
!
username calyxadmin privilege 15 secret 5 $1$LjlA$04ryWG5Y/1mLN6z496xbZ1
username admin password 7 011202095205
username calyx privilege 15 secret 5 $1$9WK7$v75eiTX19KhkzBgCHhnvd0
clock timezone GMT 0
ip subnet-zero
ip domain-name mydomain.ie
ip name-server 194.125.133.10
!
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
ip mtu adjust
!
!
!
!
interface Ethernet0
ip address 192.168.1.253 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
no cdp enable
hold-queue 100 out
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
!
interface Dialer1
ip address negotiated
ip access-group 110 in
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname mydsl mydslaccount@eircom.net
ppp chap password 7 044B0A14012440425B
!
ip nat inside source list 101 interface Dialer1 overload
ip nat inside source static tcp 192.168.1.1 3085 interface Dialer1 3085
ip nat inside source static tcp 192.168.1.102 443 interface Dialer1 443
ip nat inside source static udp 192.168.1.102 123 interface Dialer1 123
ip nat inside source static tcp 192.168.1.102 25 interface Dialer1 25
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
!
!
access-list 101 permit ip 192.168.0.0 0.0.255.255 any
access-list 110 deny ip 192.168.0.0 0.0.255.255 any
access-list 110 deny ip 172.16.0.0 0.15.255.255 any
access-list 110 deny ip 10.0.0.0 0.255.255.255 any
access-list 110 deny udp any any eq netbios-dgm
access-list 110 deny udp any any eq netbios-ns
access-list 110 deny udp any any eq netbios-ss
access-list 110 deny udp any any eq snmp
access-list 110 deny udp any any eq snmptrap
access-list 110 deny udp any any eq bootps
access-list 110 deny udp any any eq bootpc
access-list 110 deny udp any any eq 0
access-list 110 deny tcp any any eq 0
access-list 110 deny tcp any any eq telnet
access-list 110 deny tcp any any eq whois
access-list 110 deny tcp any any eq login
access-list 110 deny tcp any any eq finger
access-list 110 deny tcp any any eq exec
access-list 110 deny tcp any any eq cmd
access-list 110 permit ip any any
dialer-list 1 protocol ip permit
no cdp run
snmp-server community public RO
snmp-server community Calyx RW
!
line con 0
exec-timeout 120 0
logging synchronous
stopbits 1
line vty 0 4
exec-timeout 120 0
!
scheduler max-task-time 5000
sntp server 134.226.81.3
end

NTPF-827-01#

 

[syndon]

hi MTandSAv looking at the config above the username admin is the only one i know the password for


============================================
username calyxadmin privilege 15 secret 5 $1$LjlA$04ryWG5Y/1mLN6z496xbZ1
username admin password 7 011202095205
username calyx privilege 15 secret 5 $1$9WK7$v75eiTX19KhkzBgCHhnvd0
============================================

how can i add my own privilege 15 username and password?

and then once thats done and working how to remove the calyx and calyxadmin usernames?

 

[MTandSAV]

hey..ok basically login
PHE47E35>enable
password:xxx
PHE47E35#config t
PHE47E35#(config)no username calyxadmin privilege 15 secret 5 $1$LjlA$04ryWG5Y/1mLN6z496xbZ1

basically copy and paste those usernames and password and put 'no' in front. do that will all of them.
Then add another username and password for yourself.
Also remove the enable secret and create one by yourself.
if that all doesn't work...copy the whole config to a text file or tftp it to your pc and then erase the config, so you can start from scratch.

CCNA, CCNP..partly

 

[3wsparky]

The web login problems could be solved by doing the following:

copy and paste the following commands \/
config t
ip http server
no username calyxadmin privilege 15 secret 5 $1$LjlA$04ryWG5Y/1mLN6z496xbZ1
no username admin password 7 011202095205
no username calyx privilege 15 secret 5 $1$9WK7$v75eiTX19KhkzBgCHhnvd0

----------------------
end of paste
----------------------
then add your self your own username and password as follows
\/
username mrbloggs priv 15 secret flipflop

right that should gain you full access to your router
but we need to make sure the routers web security is looking in the right place for you to be able to agin access to it with the username and password you have created.

so you need to look at the following copy and paste
\/
config t
line con 0
login local
exit
line vty 0 4
login local
exit
-----------------
end of paste
-----------------

that should now allow you http access to it using the ip addresses you set on the interfaces.

using the mrbloggs username and flipflop password

keep me posted plz

[3w`Sparky]

 

[syndon]

hi all, things have now changed that i can reset it to its default out of the box settings.

So any ideas on how to?

 

[ChrisAC]

erase start

reboot

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************