Cisco 2921 - Cracking password online (Not dodgy)

[Steve21]

Morning Guys,

 

Long story, but recently taken over this school and there's two Cisco switches in our main comms room, one is the SWGFL doing the internet connection, but they have no VLAN/IP routing on this. The other one is being claimed by no-one, LEA/SWGFL all deny knowledge, no-one in the school has any information or details on this one so bit stuck as this seems to be doing all the VLAN routing and IP Helpers.

 

Found a way to reset the passwords while offline, but is there any backdoor accounts for these while it's live? As obviously would take down the network while doing it.

 

Thanks,

Steve

[pow]

I've seen loads that aren't secured properly, have you tried telnetting and console-ing in?

[PotNoodleTech]

Double check it isn't a BT supplied product. Our LEA did that, they had one Cisco which was BT install and we didn't have any access too, then they put their own cisco router on top, which only they and not BT had access to.

 

I was like - surely one router can do the routing? BT were like, LEA can't have access sorry, LEA were like, BT can't have access sorry. Ended up with 2 x identical bits of kit both doing the same thing *sigh*

[Muz]

Try to console in - the console line might not be protected