Switching

We have two EX2200's here at the moment.

I set them up and configured them as I needed.

Now I just wanted to default them.

The only problem is the password will not reset back to standard.

By this I mean username of Root and no Password as delivered.

I have tried "zeroize" and I have tried "factory default" but neither have worked properly.

The password still remains.

Other than formatting the unit is there another way to reset the password?

You can reset the device to factory default using the LCD front panel display and navigating to the "Maintenance Menu".  This should allow you to reset the device with no root password.

HTHs.

I have reset many units this way.

Normally it does a good job and resets the password.

The only problem I have is the 2200 does not have an LCD Panel.

See linl below for 360 view.

http://www.juniper.net/in/en/products-services/switching/ex-series/ex2200/

I have tried the factory reset from the CLI as well.

If you load factory-default, you can't commit the config until you set a root password. You won't be able to save a blank password on the device. I'd recommend just setting an easy to remember password if you're trying to save it as a blank switch.

Please check the password recovery procedure link given below:

http://kb.juniper.net/InfoCenter/index?page=content&id=KB17126&cat=EX_SERIES&actp=LIST&smlogin=true

Shaf, I have read this documentation amongst other previously.  I did want to avoid formatting the unit but it looks like I will have to.

Thank you.

Toucanzoo, I believe the documentation gave examples to either manually deleting the config (thereby manually loading the factory default) OR re-formatting.

From the above link:

lab@EX2200> start shell user root 
Password:
root@EX2200% cd /config
root@EX2200% rm -rf juniper.conf*
root@EX2200% cd /config/db/config
root@EX2200% rm -rf juniper.conf.*
root@EX2200% reboot

Thanks all,

I managed to get it done in the end.

Wiped the config as suggested.

I found this as well which was useful.

• Obtain console access
• Power off the system and boot it up in single user mode. This is done by typing "-s" at the boot: prompt.
  
  Example:

        >> BOOT @ 0x10000: 639/64512 k of memory, serial/dual console
        Boot default: 0:wd(0,a)kernel
        Usage: bios_drive:interface(unit,partition)kernel_name options
            interface    fd, wd or sd
            unit         0, 1, ...
            partition    a, c, ...
            kernel_name  name of kernel, or ? for list of files in root directory
            options      -c (userconfig) -s (single user) -v (verbose)
                        -D (dual consoles) -h (alternate console) -P (probe kbd)
  
  
        boot: -s    <====== Type "-s"
  
  

• Next, the system will run the normal bootup process. When prompted for pathnameenter:

       /usr/libexec/ui/recovery-mode

  This will run a script for password recovery.

        Enter pathname of shell or RETURN for sh: /usr/libexec/ui/recovery-mode  
  
  

• The system will finish booting up and display the  root>prompt.

        ...
        ...
        NOTE: the system
        Starting CLI ... 
        root> 
  
  

• Enter configuration mode and edit or delete the root authentication password.

         root> configure 
         Entering configuration mode
  
         [edit]
         root# delete system root-authentication 
  
         [edit]
         root# commit and-quit 
         commit complete
         Exiting configuration mode
  
  

• Finally, reboot the system.

        root@congo3> request system reboot 
        Reboot the system ? [yes,no] (no) yes 

Even better, I have found that code version 11.2r1.2 fixes the zeroize issue.

I zeroized the boxes after I upgraded them and this removed the password as well as the config.

Excellent!

Robert, I have though of this idea and it would be useful normally but we send these units to customers.  When they receive the unit we will have to send a note with the unit to say the password which I did not want to do.

It would be ideal if I could reset it completely back to factory default with out having to format but it looks like my only option.