HP Procurve 2610-24 Switch Default Web Interface User and Pass

Status
Not open for further replies.
Hi,

We had to clear the passwords on one of our HP Procurve 2610 switches and now I cannot get into the "Security" section of the web interface. I've scoured the web to find what the default username and password are (the credentials we had set before the clear no longer work) and have tried numerous combinations such as:
admin/
admin/admin
admin/Admin
Admin/
Admin/admin
Admin/Admin
Manager/
manager/

Also both the username and password blocks empty to no avail. Does anyone know of a way I can get into this section?

PS: I haven't tried restarting the switch as people here will freak if they lose Internet for the 30 seconds that the switch will be down. If I can't get into it by EoB today, I'll powercycle it.
 

Paladin

Ars Legatus Legionis
32,285
Subscriptor
Here is the manual.
According to that, the process of clearing the config requires a reboot so if you haven't rebooted, you haven't cleared the config.
There is a suggestion for a backdoor here. That also requires you to remove all cables and connect a cable between 2 ports in a special way, and causes a reboot I think. The official method seems to block all access but the serial console so if you are not already on the console, try going there and see if you can get in and set the password the way you want.
 

Lurch

Ars Praefectus
3,456
Subscriptor
A 2610 would have shipped with no password enabled and it would go straight into Manager(Enabled) mode via the console port. You add a named account in via "password manager user-name [name]" in a config context from looking at a 2610-24 I have. I would telnet/SSH into the switch and see if you can grab the config and then reboot it. If you can't get into the Security tab (where it would tell you what you have set for Read-Write Access) after a reboot then I'd do a full factory reset and restore the config. As a wilder guess, the switches can be locked down to specific IPs/IP ranges for management functions so that could be blocking you...

edit: HTTP is enabled by default but requires Java, you have generate crypto keys if you want to turn on SSL/TLS
 
Here is the manual.
According to that, the process of clearing the config requires a reboot so if you haven't rebooted, you haven't cleared the config.
There is a suggestion for a backdoor here. That also requires you to remove all cables and connect a cable between 2 ports in a special way, and causes a reboot I think. The official method seems to block all access but the serial console so if you are not already on the console, try going there and see if you can get in and set the password the way you want.

Ended up having to reboot it like the manual says. I had read in quite a few places that if I was just doing a clear, a reboot wouldn't be required, and it did work for the backend (telnet) and all areas of the web UI save the Security tab. Thank you.
 
Status
Not open for further replies.