Cisco 1710 Security Router Hardware Installation Guide
Troubleshooting

Table Of Contents

Troubleshooting

Contacting Your Reseller

Recovering a Lost Password

Changing the Configuration Register

Resetting the Router

Resetting the Password

Resetting the Configuration Register Value

Problem Solving

Using OK LED Diagnostics

Troubleshooting the Power System


Troubleshooting


Use the information in this chapter to help isolate problems you might encounter with the Cisco 1710 Security router or to rule out the router as the source of the problem.

This chapter contains the following sections:

Contacting Your Reseller

Recovering a Lost Password

Problem Solving

Contacting Your Reseller

If you cannot locate the source of a problem, contact your local reseller for advice. Before you call, you should have the following information ready:

Chassis type and serial number

Maintenance agreement or warranty information

Type and version number of the Cisco IOS installed on your router

Date you received the router

Brief description of the problem

Brief description of the steps you have taken to isolate the problem

Output from the show tech-support command

Recovering a Lost Password

This section describes how to recover a lost enable or enable secret password. The process of recovering a password consists of the following major steps:

Changing the Configuration Register

Resetting the Router

Resetting the Password (for lost enable secret passwords only)

Resetting the Configuration Register Value


Note See the "Technical Support Help" section on Cisco.com for additional information on replacing enable secret passwords.


Changing the Configuration Register

Perform the following steps to change the configuration register:


Step 1 Connect an ASCII terminal or a PC running a terminal-emulation program to the CONSOLE port on the back panel of the router. See "Connecting a PC" in Chapter 2, "Installing the 1710 Security Router."

Step 2 Configure the terminal to operate at 9600 baud, 8 data bits, no parity, and 1 stop bit.

Step 3 Reboot the router by pressing the power switch to the off position, and then pressing it to the on ( | ) position.

Step 4 At the user EXEC prompt (Router>), enter the show version command to display the existing configuration register value (shown at the end of this example output). You will see output similar to the following:

1710#show version
Cisco Internetwork Operating System Software 
IOS (tm) C1700 Software (C1700-BK9NO3R2SY7-M), Experimental Version 
12.2(20010418:203826) [lyhuang-sonic 141]
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Fri 27-Apr-01 17:23 by lyhuang
Image text-base: 0x800080E0, data-base: 0x80EA267C
ROM: System Bootstrap, Version 12.2(1r) XE1, RELEASE SOFTWARE (fc1)
uut_1 uptime is 2 days, 4 hours, 21 minutes
System returned to ROM by power-on
System image file is "flash:Imxiang/c1700-bk9no3r2sy7-mz.0427"
cisco 1710 (MPC855T) processor (revision 0x201) with 29492K/32768K 
bytes of memory.
Processor board ID JAB051004JX (986636533), with hardware revision 
0000
MPC855T processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
1 Ethernet/IEEE 802.3 interface(s)
1 FastEthernet/IEEE 802.3 interface(s)
1 Virtual Private Network (VPN) module(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x0

Step 5 Record the setting of the configuration register. The setting is usually 0x2102 or 0x102.

Step 6 Record the break setting.

Break enabled—bit 8 is set to 0.

Break disabled (default setting)—bit 8 is set to 1.


Note To enable break, enter the config-register 0x01 EXEC command.



Resetting the Router

Perform the following steps to reset the router:


Step 1 Do one of the following:

If break is enabled, go to Step 2.

If break is disabled, turn the router off, wait 5 seconds, and turn it on again. Within 60 seconds, press the Break key. The terminal displays the ROM monitor prompt. Go to Step 3.


Note Some terminal keyboards have a key labeled Break. If your keyboard does not have a Break key, refer to the documentation that came with the terminal for instructions on how to send a break. To send a break in Windows HyperTerminal, press Ctrl-Break.


Step 2 Send a break. The terminal displays the following prompt:

rommon 2>

Step 3 Enter confreg 0x142 as follows to reset the configuration register:

rommon 2> confreg 0x142

Step 4 Initialize the router by entering the reset command:

rommon 2> reset

The router resets, and the configuration register is set to 0x142. The router boots the system image in Flash memory and displays the following:

--- System Configuration Dialog --- 

Step 5 Enter no in response to the prompts until the following message is displayed:

Press RETURN to get started! 

Step 6 Press Return. The following prompt appears:

Router>

Step 7 Enter the enable command to enter privileged EXEC mode. Configuration changes can be made only in this mode:

Router> enable

The prompt changes to the privileged EXEC prompt:

Router#

Step 8 Enter the show startup-config command to display an enable password in the configuration file:

Router# show startup-config


If you are recovering an enable secret password, it is not displayed in the show startup-config command output. Complete the password recovery process by performing the steps in the following section, "Resetting the Password."

If you are recovering an enable password, skip the following section, "Resetting the Router," and complete the password recovery process by performing the steps in the next section, "Resetting the Configuration Register Value."

Resetting the Password


Step 1 Enter the configure terminal command to enter configuration mode:

Router# configure terminal

Step 2 Enter the enable secret command to reset the enable secret password in the router:

Router(config)# enable secret gobbledegook

Step 3 Enter the config-register command and the original configuration register value that you recorded in Step 5 in "Changing the Configuration Register."

Step 4 Press Ctrl-Z to exit configuration mode.

Router(config)# Ctrl-Z 

Step 5 Save your configuration changes:

Router# copy running-config startup-config


Resetting the Configuration Register Value

Once you have recovered or reconfigured a password, you need to reset the configuration register value. Follow these steps:


Step 1 Enter the configure terminal command to enter configuration mode:

Router# configure terminal

Step 2 Enter the config-register command and the original configuration register value that you recorded in Step 5 in "Changing the Configuration Register."

Step 3 Press Ctrl-Z to exit configuration mode:

Router(config)# Ctrl-Z

Step 4 Reboot the router, and enter the recovered password.


Problem Solving

The key to problem solving is to isolate the problem to a specific subsystem by comparing what the router is doing to what it should be doing.

In problem solving, consider the following subsystems of the router:

Cables—Check all the external cables that connect the router to the network.

Power system—Check the external power source, power cable, router power supply, and circuit breaker. Check for inadequate ventilation or air circulation that might cause overheating.

VPN hardware encryption module—See the LED on the router back panel to help identify a failure.

xDSL/cable modem configuration—Make certain that your xDSL or cable modem is configured and functioning properly.

Using OK LED Diagnostics

Use the front panel OK LED to determine any problems with the router. When the router first boots up, it performs a power-on self-test (POST). If the router detects a problem during the POST, the OK LED blinks in different patterns, depending on the problem. A pattern consists of a specific number of blinks that is repeated until the router is turned off. If the router experiences any of these problems, contact your Cisco reseller. Table 3-1 describes the blinking patterns that you might observe on the OK LED.


Note If the router is in ROMMON mode, the OK LED will blink continuously, rather than in any of the patterns described in Table 3-1.


Table 3-1 OK LED Blinking Patterns 

Number of Blinks
Meaning

2

The MPC855T processor dual-port random-access memory (DPRAM) failed.

3

The parameter RAM area of the MPC855T DPRAM failed.

4

The MPC855T system protection control register has a write failure.

5

The router cannot detect the dynamic random-access memory (DRAM).

6

The user-programmable machine has a write failure.

9

The router DRAM failed.


Troubleshooting the Power System

If the external power supply for the router fails, it should be returned to your Cisco reseller. Table 3-2 list symptoms and possible causes of power problems.

Table 3-2 Troubleshooting the Power System 

Symptom
Possible Cause(s)

Router shuts down after being on a short time.

Make sure that the area in which the router is installed meets the environmental site requirements in Appendix A, "Technical Specifications," later in this guide, and in the "Site Requirements" section in the Regulatory Compliance and Safety Information for the Cisco 1700 Routers, which comes with your router.

If the front panel PWR LED is not on, the power supply has failed.

The router attempts to boot, but all the LEDs remain off.

The power supply has failed.

The router is on, but the front panel PWR LED is off.

The power supply has failed.

The front panel PWR LED is on, the front panel OK LED is off, and the router does not pass console or physical layer transmission data.

The power supply has failed.