Enable Secret not valid

[daytrippin]

Hi,

I have an 1841 router at another companies site which we use for a VPN connection to our kit located there.

They have updated their public IP gateway address and so I need to update the config on the router. As the changes have already been made by their ISP I'm unable to access the router remotely.

I have passed on the login details for the router so that they can update the config for me.

The problem I have is that they report that the enable secret is incorrect. I'm sure it's right though! They have tried a number of times but get the % Bad secrets message. I've asked them to ensure that they type it in correctly

What options are available to me? Without the enable access is there any other way of updating the config?

Thank you for any help or information you can provide....
Cheers, Nick.

 

[jneiberger]

If you have the right tool(s), SNMP with read-write access can update the config.

 

[daytrippin]

Hi jneiberger,

Thanks for the reply but could you please expand a little, are there some tools you recommend?

Cheers, Nick.

 

[jneiberger]

I haven't used any of those sorts of tools in a long time, so I'm not even sure what is available. I just did a quick search on "cisco router snmp config tool" and found this:

http://shareme.com/details/cisco-snmp-tool.html

 

[burtsbees]

The problem I have is that they report that the enable secret is incorrect. I'm sure it's right though! They have tried a number of times but get the % Bad secrets message.

Nope---someone had to have fatfingered it. Guarantee it. I'll be shocked if this is not the case. You may have to do a password recovery. Is there a username/password?
router(config)#username bla priv 15 secret blabla
If so, you can either http/https (if service ip http server is enabled), or use SDM.

Burt

 

[daytrippin]

Hi Burt,

Thanks for the advice....

I thought they had mis-typed too and I've asked them to try again but so far still no joy. The only difference is I am in the UK and they are in Poland, could there be some sort of key mapping peculiarity, the secret includes characters such as '@' but this can't be the problem can it?!?! They will be accessing the router via the console port from a Polish laptop though.


They have a username (priv 7) and p/w which they are logging on to the router with but are unable to access config mode via enable. In anycase http and https are disabled.

I will take a look at SDM, will this still access the router with the http disabled?

Cheers, Nick.

 

[jeter]

I agree with Burt, you may need to perform a password recovery.

Also try inserting a space behind the password.

I find that is the mistake made often...


SPC NVARNG
Tek-TIP Member 19,650

 

[daytrippin]

Thanks for the replies.

I had to access the statup config via the ROMMON prompt to edit the enable secret, as described here....

http://www.cisco.com/en/US/products...ducts_password_recovery09186a0080094773.shtml

Cheers, Nick.

 

[burtsbees]

Yup.

Burt