Might want to take a look at this link. courtesy of Adam Quiggle, who used
to spend a lot of time here.
http://home.nc.rr.com/quiggle/ConfigReg.xls
CCIE candidates, anyway, should be familiar with the config register values.
Manipulating them can provide one part of a router security program.
Chuck
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John
Neiberger
Sent: Friday, June 01, 2001 7:23 AM
To: [EMAIL PROTECTED]
Subject: RE: VERY strange 2621 behavior [7:6636]
I discovered that somehow the configuration register was changed to
0x3922! What the heck does that do?? I was watching the person who
initially booted the router and he did absolutely nothing that would
alter the configuration register; it just seems to have done it during
a reload because we didn't notice this odd behavior until we did a warm
reboot.
Very bizarre. But, since I changed the config register back to 0x2102
it seems to be working normally. I can think of nothing that would
cause an unexpected configuration register change like that. Oh well,
another weird issue in the books. I think I'll be upgrading the IOS on
that pretty quickly!
John
>>> Daniel Cotts 5/31/01 12:36:51 PM >>>
Time to change your terminal emulation software to different speeds
until
you find the correct one.
I have heard that with Hyperterminal that you need to completely close
down
the application for each speed change. Others may comment from
experience.
BTW Do you have a SmartNet service contract on that box?
> -----Original Message-----
> From: John Neiberger [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, May 31, 2001 12:41 PM
> To: [EMAIL PROTECTED]
> Subject: VERY strange 2621 behavior [7:6636]
>
>
> This is exceptionally strange....
>
> We just received a used 2621 running 12.0(7)T. Initially it booted
> just fine and we got a prompt. While in priveleged mode we did a
show
> run and intertwined with the output was a portion of a message. The
> readable portion said something about "environment write to NVRAM
> failed". We saw this three or four times.
>
> So, after poking around a bit we did a reload. During the reload we
> saw the error again. Toward the end of the reload we
> received a warning
> message that said something like this: "This action will disable
> password recovery. Be sure that you have alternatives to password
> recovery before continuing. Continue with operation [yes/no]? "
>
> I have absolutely no idea what that means, I have never seen
anything
> like it before. We answered no, of course. At this point the
router
> locked up and it appears that the console baud rate has changed but
so
> far we're unable to figure out what it changed to. I've rebooted
the
> router several times to no avail. Nothing but gibberish on
> my terminal
> screen.
>
> Any thoughts? I've searched CCO and have yet to see anything about
> this behavior yet.
>
> Thanks,
> John
> Report misconduct
> and Nondisclosure violations to [EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6889&t=6636
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
