How to Reset Router Cisco

Resetting a Cisco router to its factory default state is a routine necessity for network engineers and systems administrators. Whether you are decommissioning enterprise hardware, wiping configurations before redeploying a branch router, troubleshooting corrupted system parameters, or recovering administrative access after losing credentials, executing the correct reset procedure ensures hardware stability and data security.

Because Cisco produces distinct router families—ranging from small-business hardware to modular enterprise appliances running classic Cisco IOS and Cisco IOS-XE—the method you use depends on your access level and hardware type. The following step-by-step procedures outline how to reset your Cisco router via the command-line interface (CLI), physical hardware buttons, and low-level ROM monitor (ROMMON) recovery modes, alongside default post-reset access standards and official documentation benchmarks.

Resetting a Cisco Router via the Command-Line Interface (CLI)

When administrative access to Privileged EXEC mode is available, resetting an enterprise Cisco router (such as an Integrated Services Router or Catalyst Edge device) to its factory configuration is straightforward. The procedure erases the contents of non-volatile random-access memory (NVRAM), clearing the startup configuration file so the device loads a clean operating state upon the next reboot.

Step 1: Access Privileged EXEC Mode

Connect to your router using a console cable or an authorized SSH/Telnet session. Move from User EXEC mode to Privileged EXEC mode:

Router> enable
Router#

If prompted, supply the current administrative password.

Step 2: Clear the Startup Configuration

Issue the write erase command (alternatively, erase startup-config). This command instructs the router to format the NVRAM file system storing your permanent settings:

Router# write erase
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]

Press Enter to confirm the operation. The router will output [OK] followed by Erase of nvram: complete.

Step 3: Clear Module and Switching Data (If Applicable)

If your Cisco router contains integrated EtherSwitch modules (such as an ESW or EHWIC-4ESG card), local VLAN databases are stored in flash memory rather than NVRAM. To remove these:

Router# delete flash:vlan.dat
Delete filename [vlan.dat]? 
Delete flash:/vlan.dat? [confirm]

Press Enter through the confirmation prompts. If no switch module is present, skip this step.

Step 4: Reload the Router

Restart the hardware to boot into an unconfigured state:

Router# reload

The system may detect that changes were made and prompt:

System configuration has been modified. Save? [yes/no]: no

Enter no. If you type “yes”, the router will copy its current running memory back into NVRAM, canceling out the wipe.

Finally, confirm the reboot:

Proceed with reload? [confirm]

Press Enter. Once the router finishes booting, it will display the initial System Configuration Dialog prompt (Would you like to enter the initial configuration dialog? [yes/no]:), indicating a complete factory reset.

Hardware Factory Reset Using the Physical Reset Button

While enterprise-grade Cisco routers omit physical reset buttons to prevent unauthorized physical tampering, Cisco Small Business devices (such as the RV Series: RV160, RV260, RV340) and cloud-managed Cisco Meraki security routers feature an external chassis pinhole reset button. This method restores default settings when administrative access to the web GUI or console is unavailable.

Step 1: Verify Hardware Status

Ensure the router is plugged into its power source and has completed its boot cycle. The Power LED on the front panel must be solid green (or white, depending on the model) before proceeding. Attempting a physical reset during an active boot cycle can corrupt the flash storage.

Step 2: Locate the Recessed Reset Button

Find the recessed Reset pinhole. On Cisco RV series routers, this is typically located on the rear I/O panel next to the WAN ports or on the side of the chassis.

Step 3: Depress and Hold the Reset Switch

1. Insert an unfolded paperclip or a SIM-eject tool straight into the pinhole until you feel the internal micro-switch depress.
2. Maintain firm, steady pressure for 10 to 15 seconds.
3. Watch the front diagnostic/power LEDs: release the button when the Power or Diag LED begins blinking rapidly or switches to an amber state.

Step 4: Allow the System to Reinitialize

Do not disconnect the power adapter while the router completes its reinitialization. The device will automatically clear its flash partitions and reboot. This cycle typically takes between 2 and 4 minutes. Once the front panel LEDs stabilize to their normal operational state, the router is accessible via its default management IP and factory credentials.

Factory Resetting via ROMMON Mode for Locked or Corrupted Routers

When managing an enterprise Cisco router (such as an ISR 1100, 4000, or ASR 1000 series) where credentials are lost and CLI access is barred, the device must be wiped through the ROM Monitor (ROMMON). This hardware-level diagnostic environment allows you to alter the system boot register to ignore the existing startup configuration.

Step 1: Establish a Direct Console Connection

Connect an RJ-45-to-DB9 rollover cable or a mini-USB/USB-C console cable directly from your workstation to the router’s console port. Open a terminal emulator (such as PuTTY, Tera Term, or Minicom) with the following serial parameters:
– Baud Rate: 9600 bps
– Data Bits: 8
– Parity: None
– Stop Bits: 1
– Flow Control: None

Step 2: Send the Break Signal During Power-On

Turn the router’s power switch off, wait 10 seconds, and turn it back on. Within the first 60 seconds of boot initialization, send a Break command via your terminal program:
– PuTTY: Right-click the terminal window title bar, navigate to Special Command, and select Break.
– Windows Keyboard: Press Ctrl + Break or Pause/Break.
– macOS / Linux Terminal: Press Ctrl + ] or use the escape character specific to your client.

The boot sequence will halt, dropping you to the ROMMON command prompt (rommon 1 >).

Step 3: Modify the Configuration Register

Instruct the router to bypass the startup configuration file stored in NVRAM during the next boot cycle:

rommon 1 > confreg 0x2142

Note on modern Cisco IOS-XE routers (e.g., ISR 4000 series): If the traditional confreg command is unsupported, set the ignore variable directly:

rommon 1 > SWITCH_IGNORE_STARTUP_CFG=1

Step 4: Boot into Clean Memory

Instruct the router to reload its operating system image:

rommon 2 > reset

The router will load the Cisco IOS image without reading the startup configuration from NVRAM. When prompted with Would you like to enter the initial configuration dialog? [yes/no]:, type no and hit Enter.

Step 5: Wipe NVRAM and Restore the Normal Boot Register

You now have unauthenticated access to Privileged EXEC mode. Wipe the old configuration and restore the standard boot behavior so subsequent boots load valid configurations:

Router> enable
Router# write erase
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete

Router# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)# config-register 0x2102
Router(config)# exit

(On IOS-XE platforms that used the environment variable, run Router(config)# no boot manual or verify the variable is cleared).

Finally, restart the router:

Router# reload
Proceed with reload? [confirm]

The router is now completely wiped and returned to standard factory operational settings.

Cisco Router Password Recovery Without Losing Existing Configuration

In scenarios where administrative credentials are forgotten but the active production configuration must be preserved, you can leverage the same ROMMON configuration register bypass technique used above without executing a write erase. This process loads the active configuration into running memory, allowing you to overwrite user credentials while preserving all routing, interface, and policy settings.

+---------------------------------------------------------------+
|                    ROMMON BOOT INTERRUPT                     |
|                   Send Break Sequence at Boot                 |
|                     (rommon 1 > confreg 0x2142)               |
+------------------------------+--------------------------------+
                               |
                               v
+---------------------------------------------------------------+
|                    BYPASS STARTUP-CONFIG                      |
|                Boot ignores NVRAM configuration               |
|                   Bypasses enable password                   |
+------------------------------+--------------------------------+
                               |
                               v
+---------------------------------------------------------------+
|                    CRITICAL: MERGE SETTINGS                   |
|              Router# copy startup-config running-config       |
|            (Preserves all interfaces, VLANs, and IPs)        |
+------------------------------+--------------------------------+
                               |
                               v
+---------------------------------------------------------------+
|                    RESET PASSWORDS & REGISTER                 |
|             Router(config)# enable secret <new_password>      |
|             Router(config)# config-register 0x2102           |
+------------------------------+--------------------------------+
                               |
                               v
+---------------------------------------------------------------+
|                      COMMIT TO PERMANENCE                     |
|              Router# copy running-config startup-config       |
+---------------------------------------------------------------+

Step 1: Enter ROMMON and Bypass NVRAM

Follow the steps outlined in the ROMMON section above: establish a console connection, power cycle the hardware, send the Break signal, set confreg 0x2142, and issue reset.

Step 2: Decline the Initial Configuration Dialog

When the router initializes, answer no to the configuration dialog prompt:

Would you like to enter the initial configuration dialog? [yes/no]: no
Router>

Step 3: Copy Startup Configuration into Running Memory

Enter Privileged EXEC mode (which requires no password due to register 0x2142). Do not enter configuration mode yet. You must load your existing configuration from NVRAM into volatile RAM:

Router> enable
Router# copy startup-config running-config
Destination filename [running-config]? 

Press Enter. Once complete, the router prompt changes from Router# to your original configured hostname (e.g., BranchGateway#), confirming your interfaces, routes, and services are loaded into active memory.

Step 4: Overwrite Administrative Passwords

Enter global configuration mode and specify replacement credentials:

BranchGateway# configure terminal
BranchGateway(config)# enable secret NewSecurePassword123!
BranchGateway(config)# username admin privilege 15 secret AdminSecurePassword456!

Step 5: Reset the Configuration Register

Restore the standard boot register (0x2102) so the router reads the startup configuration on all future reboots:

BranchGateway(config)# config-register 0x2102
BranchGateway(config)# exit

Step 6: Bring Interfaces Up and Save

When an unconfigured router loads existing configuration data, interfaces often remain in an administratively down state. Verify and re-enable operational interfaces if necessary, then write the running configuration back to NVRAM:

BranchGateway# copy running-config startup-config
Building configuration...
[OK]

The router now retains all original network configurations, policies, and IP mappings with your updated credentials intact.

Cisco Router Default IP Addresses and Credentials Post-Reset

After completing a factory reset, you must establish an initial management session. The default addressing and credential schemes vary substantially depending on the hardware architecture.

Frequently Asked Questions

What is the default IP address of a Cisco router after a factory reset?

• Cisco RV Series (Small Business): Defaults to 192.168.1.1 on local LAN ports, running an active DHCP server delivering leases in the 192.168.1.100–192.168.1.254 range.
• Cisco Enterprise Routers (ISR / Catalyst Edge): There is no default IP address. All physical interfaces are placed in an administratively down state without Layer 3 addressing. Initial access must be performed out-of-band via the serial/USB Console port.
• Cisco Meraki MX Series: Automatically set to DHCP client mode on the internet (WAN) uplink. The local LAN interface defaults to 192.168.128.1 with active DHCP.

What are the default factory login credentials?

• Cisco RV Series:
• Username: cisco
• Password: cisco
  (The web interface prompts for an immediate, mandatory credential update upon initial login).
• Cisco Enterprise IOS / IOS-XE:
• There are no default usernames or passwords. Connecting via the console port drops the administrator directly into an unauthenticated prompt (Router>).
• Cisco Meraki (Local Status Page):
• Username: Router serial number (including hyphens, e.g., Q2XX-XXXX-XXXX) or left blank depending on the firmware revision.
• Password: Blank (no password).

How do I access the router’s web management interface post-reset?

For Cisco RV devices:
1. Connect an Ethernet cable from your workstation to any LAN port (typically ports 1 through 4).
2. Configure your workstation’s network adapter to Obtain an IP address automatically (DHCP) or assign a static IP address of 192.168.1.50 with a subnet mask of 255.255.255.0.
3. Open a browser and navigate to https://192.168.1.1. Accept the self-signed SSL certificate warning to load the administrative setup wizard.

Why does my enterprise Cisco router prompt for a password immediately after a factory reset?

If an enterprise router still requests an enable password or login credentials after a reset attempt, one of three conditions occurred:
1. The write erase command was executed, but you answered “yes” to saving system modifications prior to the reload, which wrote the active configuration back to NVRAM.
2. The configuration register is still set to 0x2142, but the device encountered an automated Zero-Touch Provisioning (ZTP), Cisco Plug and Play (PnP), or AutoInstall sequence via DHCP that re-applied a network configuration file from a local TFTP/HTTP server.
3. A connected USB flash drive contains an automated provisioning script (ciscortr.cfg) that was parsed during initialization.

Official Cisco Documentation Standards and Hardware Reference Guides

Cisco Systems maintains strict, validated engineering documentation detailing disaster recovery, configuration register values, and memory registers. When performing procedures on production hardware, refer to the technical reference architectures mapped below.

Cisco Configuration Register Architecture Reference

The software configuration register is a 16-bit value stored in non-volatile memory that dictates how the router boots, interprets console speeds, and treats NVRAM contents.

Hardware Platform Recovery Mapping

The procedures outlined across this guide align with specific Cisco Technical Assistance Center (TAC) validated documentation profiles:

1. Cisco ISR 1000 and 4000 Series (IOS-XE Platforms)

• Official Architecture Document: ROMMON Configuration Guide for Cisco ISR 4000 Series Routers (Document ID: EDCS-1158145).
• Technical Variation: Unlike legacy platforms where the break signal is sent indiscriminately, Cisco IOS-XE routers require the break sequence sent specifically while the system outputs the message: Preparing to autoboot. Press Ctrl+Break to interrupt.
• Register Architecture: IOS-XE hardware supports direct manipulation of the configuration register via confreg 0x2142, but also leverages unified ROMMON environment variables (SWITCH_IGNORE_STARTUP_CFG=1).

2. Cisco Legacy Integrated Services Routers (ISR 800, 1900, 2900, 3900 Series)

• Official Architecture Document: Password Recovery Procedure for the Cisco Router (Cisco TAC Document ID: 107-10).
• Technical Variation: Standard classic Cisco IOS implementation. Wiping is accomplished exclusively via write erase from Privileged EXEC or confreg 0x2142 within standard ROMMON.

3. Cisco Small Business RV Series (RV160, RV260, RV340, RV345)

• Official Architecture Document: Cisco Small Business RV Series Administration and Hardware Installation Guides.
• Technical Variation: Pin-switch hardware implementation. Requires a continuous 10-to-15-second mechanical depress. Recovery through console CLI uses the restore factory-default command in place of write erase.

Executing a clean reset on a Cisco router requires identifying the target platform’s architecture and choosing the appropriate method. For standard hardware repurposing, the CLI commands write erase and reload remain the industry-standard approach. For hardware lockout situations or disaster recovery, manipulating the configuration register via ROMMON provides complete administrative recovery without risking physical hardware damage. Following any reset, always ensure the configuration register is verified at 0x2102 to guarantee reliable, secure operations upon subsequent system reboots.

Please follow and like us: