Untitled
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339
Subject: Reconfiguring Cisco ISR C1111-4P Router
Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL)
Country: Singapore
Date: 7 March 2022 Monday Singapore Time
Type of Publication: Plain Text
Document Version: 20220307.01
START OF GUIDE
===============
This is the guide which I followed to reset the password on the Cisco ISR C1111-4P router because nobody knows the password to login.
Reference guide: How to Recover Password on Cisco IOS Router?
Link: https://blog.router-switch.com/2014/09/how-to-recover-password-on-cisco-ios-router/
The following section shows the configuration BEFORE I reconfigured the Cisco ISR C1111-4P router.
-----BEGIN OF ORIGINAL ROUTER CONFIG-----
Using 2887 out of 33554432 bytes
!
! Last configuration change at 04:25:10 UTC Tue Jun 9 2020 by admin
!
version 16.9
service timestamps debug datetime msec
service timestamps log datetime msec
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
!
hostname Teo-En-Ming-Cisco-C1111-4P-Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
ip name-server 165.21.83.88 165.21.100.88
no ip domain lookup
ip domain name teo-en-ming-corp.com
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-608216465
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-608216465
revocation-check none
rsakeypair TP-self-signed-608216465
!
crypto pki trustpoint TP-self-signed-2987554221
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2987554221
revocation-check none
rsakeypair TP-self-signed-2987554221
!
crypto pki trustpoint TP-self-signed-191796919
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-191796919
revocation-check none
rsakeypair TP-self-signed-191796919
!
!
crypto pki certificate chain TP-self-signed-608216465
certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
crypto pki certificate chain TP-self-signed-2987554221
crypto pki certificate chain TP-self-signed-191796919
!
license udi pid C1111-4P sn <snipped>
no license smart enable
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
username admin privilege 15 secret 5 encrypted-password
!
redundancy
mode none
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
description Wan
ip address A.B.C.174 255.255.255.252
ip nat outside
speed 1000
no negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface Vlan1
description Lan
ip address 192.168.11.1 255.255.255.0 secondary
ip address 192.168.10.4 255.255.255.0 secondary
ip address X.Y.Z.49 255.255.255.240
ip nat inside
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip nat inside source static 192.168.11.4 X.Y.Z.50
ip nat inside source static 192.168.11.3 X.Y.Z.51
ip nat inside source static 192.168.11.2 X.Y.Z.52
ip nat inside source list 110 interface GigabitEthernet0/0/0 overload
ip route 0.0.0.0 0.0.0.0 A.B.C.173
ip route X.Y.Z.48 255.255.255.240 A.B.C.173
!
!
ip access-list extended 110
permit ip 192.168.11.0 0.0.0.255 any
!
!
!
!
control-plane
!
!
line con 0
logging synchronous
login local
transport input none
stopbits 1
line vty 0 3
privilege level 15
login local
line vty 4
privilege level 15
login local
transport input telnet
!
!
!
!
!
!
end
-----END OF ORIGINAL ROUTER CONFIG-----
The following section shows the final configuration AFTER I have reconfigured the Cisco ISR C1111-4P router.
-----BEGIN OF FINAL ROUTER CONFIG-----
Building configuration...
Current configuration : 4286 bytes
!
! Last configuration change at 04:44:17 UTC Thu Mar 3 2022 by teo-en-ming
!
version 16.9
service timestamps debug datetime msec
service timestamps log datetime msec
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
!
hostname Teo-En-Ming-Cisco-C1111-4P-Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
ip name-server 165.21.83.88 165.21.100.88
no ip domain lookup
ip domain name teo-en-ming-corp.com
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-608216465
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-608216465
revocation-check none
rsakeypair TP-self-signed-608216465
!
crypto pki trustpoint TP-self-signed-2987554221
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2987554221
revocation-check none
rsakeypair TP-self-signed-2987554221
!
crypto pki trustpoint TP-self-signed-191796919
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-191796919
revocation-check none
rsakeypair TP-self-signed-191796919
!
!
crypto pki certificate chain TP-self-signed-608216465
certificate self-signed 01
<---snipped--->
quit
crypto pki certificate chain TP-self-signed-2987554221
crypto pki certificate chain TP-self-signed-191796919
!
license udi pid C1111-4P sn <snipped>
no license smart enable
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
username teo-en-ming privilege 15 secret 5 encrypted-password
!
redundancy
mode none
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
description Wan
ip address A.B.C.174 255.255.255.252
speed 1000
no negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface Vlan1
description Lan
ip address X.Y.Z.49 255.255.255.240
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip route 0.0.0.0 0.0.0.0 A.B.C.173
!
!
!
!
!
!
control-plane
!
!
line con 0
logging synchronous
login local
transport input none
stopbits 1
line vty 0 3
privilege level 15
login local
line vty 4
privilege level 15
login local
transport input telnet
!
!
!
!
!
!
end
-----END OF FINAL ROUTER CONFIG-----
Mr. Turritopsis Dohrnii Teo En Ming, 44 years old as of 7 March 2022, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a Systems Integrator (SI)/computer firm in Singapore. He is an IT enthusiast.
REFERENCES
===========
[1] https://pastebin.com/raw/p5sXyV4r
[2] https://textbin.net/raw/ja5gcwhjte
[3] https://www.toptal.com/developers/hastebin/opewopucaf.http
Plaintext
INFO