MCP-PW

Checking the PW for C100 or 5000 BH

You need to have physically access to the switch. You cannot do this remotely. This seems to be wanted for security reasons.

connecting via Hyperterminal / COM port to the MCP port,
using the CLI, you see:

"name-of-the switch": Command >
type "eng"
here the pw is "debug"
typing "what"
now you see :
"name-of-the switch": what?

First try this :
at the what? prompt, type "d 0bfc60000"

continue dumping (d <CR ) until 0bfc607FF

(To continue dumping type only a d at the what prompt)

what?d

Somewhere towards the end of this dump or the next one you will find a double 12C pattern. Approximately 12 bytes before this is the password in hex.

Example: for rev 2.1 (this one was our first C100)

BFC70480: 00000000 00000000 00000000 00000000
BFC70490: 00000000 00000000 00000000 00000000
BFC704A0: 00000000 00000000 00000000 00006261
BFC704B0: 796E6574 00000000 00000000 00000400
BFC704C0: 0000012C 0000012C 00000000 00000000
BFC704D0: 00000000 00000000 00000000 00000000

6261796E6574 is the password here. Go to the hex table and convert the hex to ascii.

If it is not at the fist addresses,

goto next try : d 0bfc70000

Continue dumping until 0bfc707FF

To leave the debug mode, type ctrl x.

NOTE: In version 2.0.2, password recovery from the CLI is not possible. Access to the engineering or what? Prompt requires the user password. The solution is to get the flash reprogrammed.

any suggestions ? any hints ? :

Char	Hex	Description
SP	20	Space
!	21	Exclamationmark
"	22	Quotationmark ("inHTML)
#	23	Crosshatch (numbersign)
$	24	Dollarsign
%	25	Percentsign
&	26	Ampersand
`	27	closing single quote(apostrophe)
(	28	Opening parentheses
)	29	Closing parentheses
*	2a	Asterisk (star,multiply)
+	2b	Plus
,	2c	Comma
-	2d	Hyphen,dash,minus
.	2e	Period
/	2f	Slant (forward slash,divide)
0	30	Zero
1	31	One
2	32	Two
3	33	Three
4	34	Four
5	35	Five
6	36	Six
7	37	Seven
8	38	Eight
9	39	Nine
:	3a	Colon
;	3b	Semicolon
<	3c	Less than sign(<inHTML)
=	3d	Equalssign
	3e	Greater than sign (inHTML)
?	3f	Question mark
@	40	At-sign
A	41	Uppercase	A
B	42	Uppercase	B
C	43	Uppercase	C
D	44	Uppercase	D
E	45	Uppercase	E
F	46	Uppercase	F
G	47	Uppercase	G
H	48	Uppercase	H
I	49	Uppercase	I
J	4a	Uppercase	J
K	4b	Uppercase	K
L	4c	Uppercase	L
M	4d	Uppercase	M
N	4e	Uppercase	N
O	4f	Uppercase	O
P	50	Uppercase	P
Q	51	Uppercase	Q
R	52	Uppercase	R
S	53	Uppercase	S
T	54	Uppercase	T
U	55	Uppercase	U
V	56	Uppercase	V
W	57	Uppercase	W
X	58	Uppercase	X
Y	59	Uppercase	Y
Z	5a	Uppercase	Z
[	5b	Opening square bracket
\	5c	Reverse slant (Backslash)
]	5d	Closing square bracket
^	5e	Caret (Circumflex)
_	5f	Underscore
`	60	Opening single quote
a	61	Lowercase	a
b	62	Lowercase	b
c	63	Lowercase	c
d	64	Lowercase	d
e	65	Lowercase	e
f	66	Lowercase	f
g	67	Lowercase	g
h	68	Lowercase	h
i	69	Lowercase	i
j	6a	Lowercase	j
k	6b	Lowercase	k
l	6c	Lowercase	l
m	6d	Lowercase	m
n	6e	Lowercase	n
o	6f	Lowercase	o
p	70	Lowercase	p
q	71	Lowercase	q
r	72	Lowercase	r
s	73	Lowercase	s
t	74	Lowercase	t
u	75	Lowercase	u
v	76	Lowercase	v
w	77	Lowercase	w
x	78	Lowercase	x
y	79	Lowercase	y
z	7a	Lowercase	z
{	7b	Opening curly brace
\|	7c	Vertical line
}	7d	Closing curly brace
~	7e	Tilde (approximate)