Locked Out? Ruckus ICX Password Recovery Guide Without Losing Your Configuration

Every network administrator fears this scenario: you need to make a critical configuration change, but your SSH credentials fail. Default credentials, backups, or previously documented passwords don’t work. You are locked out of your Ruckus ICX switch.
Your first instinct might be a Factory Reset—stop! A factory reset wipes your configuration: VLANs, routing tables, ACLs, and interface settings. Rebuilding from scratch is time-consuming and risky.
This guide explains how to recover admin access without losing your configuration, covering standard ICX models, FOS 9.x firmware, and legacy Brocade devices.

Table of Contents

• Part 1: Prerequisites – Prepare Before Recovery
• Part 2: Non-Destructive Password Recovery
• Part 3: When Recovery Fails – Hard/Factory Reset
• Part 4: Post-Recovery Best Practices
• Part 5: Legacy Brocade ICX Recovery Scenarios
• Conclusion: Smart Recovery & Lifecycle Management

Part 1: Prerequisites – Prepare Before Recovery

Before you begin, ensure the following:

• Physical Access: Must manually power cycle the switch.
• Console Cable: RJ45-to-DB9 or USB-C depending on ICX model.
• Terminal Emulator: PuTTY, SecureCRT, or TeraTerm.
• Serial Settings: Baud 9600, 8 data bits, no parity, 1 stop bit, no flow control.

⚠️ Note: Physical access ensures security and prevents unauthorized remote password bypass.

Part 2: Non-Destructive Password Recovery

Method 1: passwd admin (CLI Recovery, Requires Root or SecurityAdmin)

Best for: Elevated users who can log in but forgot admin password.
Supported Firmware: General ICX, FOS pre-9.x

1. Log in with root/SecurityAdmin account.
2. Run the following command:

passwd admin

3. Enter a new strong password. Follow length/character requirements; avoid colon : and repeated/sequential patterns.
4. Verify access by logging in with the new password.

Advantage: No reboot, config fully preserved.
Note: FOS 9.x disables root by default; use reset_login or console recovery if root unavailable.

Method 2: Console & Bootloader Recovery (When Completely Locked Out)

Best for: Forgotten admin password, no access via CLI or SSH.
Supported Models: ICX 7150/7250/7450/7650 and legacy 6000 series.

Step 1: Interrupt Boot Sequence

1. Connect console cable and start terminal session.
2. Power cycle the switch.
3. Watch console output; when prompted:
   Enter 'b' to stop at boot monitor
4. Press b immediately.
5. You now see the bootloader prompt:
   

   ICX7150-Boot>

Step 2: Bypass Password Check

1. At bootloader prompt, type:

   no password

2. Boot into primary flash:

   boot system flash primary

Step 3: Set a New Password

1. Enter privileged mode:

   enable

2. Enter global config and set new password:

   configure terminal
   username admin password 
   enable super-user-password 
   write memory

3. Verify your VLANs, routing, and ACLs remain intact:

   show running-config

✅ This preserves all configuration and restores full access.

Method 3: reset_login (FOS 9.0.10+)

1. Press Ctrl+Y at the console to enter OS prompt.
2. Execute:

   reset_login

3. Exit and log in using temporary credentials:
   • Username: super
   • Password: sp-admin
4. Immediately set a permanent password:

   username super password 
   write memory

Advantage: No reboot required, config preserved.

Part 3: When Recovery Fails – Hard/Factory Reset

If password recovery is impossible (bootloader protected or flash corruption), a full factory reset is required:

1. Locate reset button on switch faceplate.
2. Power on the switch and hold the button ~10 seconds until System LED turns amber.
3. Release; the switch boots to factory defaults.

⚠️ Warning: All config, VLANs, routing, and licenses are erased. Only use as last resort.

Part 4: Post-Recovery Best Practices

• Change Default Credentials Immediately (admin / password or super / sp-admin).
• Reapply Licenses if performing hard reset.
• Verify Critical Configurations: VLANs, IP addresses, ACLs, routing.
• Firmware Upgrade: Pre-08.0.90h firmware is prone to flash corruption; upgrade to stable release (e.g., 08.0.95s).
• Monitor Hardware Health: Boot loops, fan noise, or repeated resets indicate aging or failing hardware.

Part 5: Legacy Brocade ICX Recovery Scenarios

• Brocade 4/24 SAN Switch: Contact HPE support for password recovery.
• Internal Serial Port: Connect via OA CLI; use connect interconnect to access switch.
• Web Tools Login Failure: Reset via telnet session or console to resolve credential conflicts.

Conclusion: Smart Recovery & Lifecycle Management

• Mastering Ruckus ICX password recovery prevents downtime while preserving your configuration. Always: Prefer non-destructive recovery first (passwd admin, reset_login, bootloader bypass).
• Understand the risks of physical reset (license/configuration loss).
• Upgrade firmware and monitor aging devices proactively.

For hardware replacement, upgrades, or support, Router-switch provides tangible advantages:

• Verified Inventory: Original Ruckus/Brocade devices with verifiable serial numbers.
• Real-Time Stock & Fast Delivery: Many models shipped within 1–5 days globally.
• Expert Configuration Support: Assistance from our experienced network engineers.
• Simplified Multi-Vendor Procurement: Quick access to complementary devices for complex deployments.

Tip: Combine these recovery practices with regular backups and network monitoring to minimize downtime and protect your network.