Cisco VPN 3002
Cisco VPN 3005
Cisco VPN 3015
Cisco VPN 3030
Cisco VPN 3060
Cisco VPN 3080

Note: For concentrators running code version 2.5 or earlier, contact the Cisco TAC for password recovery assistance.

Default Password
The factory default passwords for the Cisco VPN 3000 Series are:
username: admin
password: admin

Step-by-Step Procedure

Follow the steps below to recover a password.

• Connect a PC to the VPN Concentrator via a straight-through RS-232 serial cable between the console port on the VPN Concentrator and the COM1 or serial port on the PC (Cisco supplies the cable with the system).
• Start a terminal emulator (HyperTerminal) on the PC. Configure a connection on COM1 with port settings of:
  • 9600 bits per second
  • 8 data bits
  • no parity
  • 1 stop bit
  • hardware flow control
  • Set the emulator for VT100 emulation, or let it auto-detect the emulation type.
• When the Concentrator boots, and after the power-up diagnostics check is complete, a line of three dots (…) appears on the console, a sample of which is shown below for reference. Press Ctrl-C within 3 seconds after seeing these dot. This displays a menu that lets you reset the system passwords to their defaults.

Boot-ROM Initializing...
Boot configured 128Mb of RAM.
...
Loading image ..........
Verifying image checksum ...........
Active image loaded and verified...
Starting loaded image...
Starting power-up diagnostics...
...

!— At this second set of three dots, press Ctrl-C.

Main Menu Options
-----------------
1 - Reset Passwords
Q - Quit Main Menu

Another benefit to using NTP on Cisco PIX firewalls is found in a dynamic LAN to LAN VPN tunnel where the NTP request and response generates enough traffic to avoid the sometimes troublesome inactivity timeout.

Assuming that your NTP server (10.0.0.1) is accessible through the inside interface:

clock timezone EST -5
clock summer-time EDT recurring first Sunday April 2:00 last Sunday October 2:00 60
ntp server 10.0.0.1 source inside

You can then verify the NTP association with:

• CST -6
• CST -6
• CST -6

You can then verify the NTP association with:
show ntp association detail

You can also verify the PIX clock with:
show clock detail