Factory Reset Cisco Catalyst Switches Before You Sell
Unplugging a switch does not clear it. Your configuration, keys and logs stay in its memory, and a quick config wipe often leaves some of them behind.
Preparing switches for sale? Message +971 52 857 3495 or use our network switch selling page.
If you need to factory reset and clear the config on Cisco Catalyst 9200, 9300 or 9500 switches before selling, you probably wonder:
- Is deleting the startup config enough?
- What else is stored on the switch?
- What happens to the licenses?
- What if nobody knows the password?
What Stays on the Switch
A powered-off switch keeps its stored data. Configuration, VLAN files, logs and certificates all live in memory that survives a shutdown.
Network gear holds more than people expect. Typical items include the saved configuration with shared secrets and keys, VLAN data in a separate file, event logs, crash files and certificates. A basic erase of the saved configuration does not always clear the others.
Before you wipe anything, record what you are selling. Capture the model and serial number with the usual inventory commands, and save a copy of the configuration if you need it. After the wipe, you cannot read it.
Tip: write down the model, serial and any installed modules before the reset. A wiped switch tells you very little.
Use the Factory Reset Feature
Newer IOS XE releases include a factory reset feature that clears much more than a manual erase. Use it where your software supports it.
The factory-reset command family has options, from clearing only the configuration to wiping everything, and a secure option that overwrites storage. Which options exist depends on the model and release, so read Cisco’s factory reset guide for your version before running anything. Some options also remove licensing information, and others keep it, so choose deliberately.
On a stack, decide whether to reset every member or one at a time. Check the guide for the stack syntax.
What to Clear
| Item | Where it lives | Cleared by |
|---|---|---|
| Saved configuration | NVRAM | Any reset option |
| VLAN file | Flash | Full factory reset, or manual delete |
| Logs and crash files | Flash | Full factory reset |
| Certificates and keys | NVRAM, flash | Full factory reset |
| Licensing state | Switch and Cisco account | Deregister, then reset |
| Cloud and PnP links | Cisco account | Remove in the portal |
Older Releases
If the switch runs an older release without the feature, you have to clear each item by hand. Follow Cisco’s documentation for that exact version.
A manual wipe covers the saved configuration, the VLAN file and stored certificates, followed by a reload without saving. The list is easy to get wrong, because commands differ by release. Do not guess. . Cisco documents both the 9300 and 9200 lines in its data sheets, and the support pages link the right guide for each release.
For regulated data, follow NIST SP 800-88. The UTHSC guidelines show how an organisation applies it.
Licenses and Lost Passwords
Release licenses and cloud links before the switch leaves. Only recover a password on a switch you own.
Licenses and smart account registrations sit in Cisco’s systems as well as on the switch. Deregister the device so it does not remain tied to your account, and remove it from any cloud management or provisioning service. Whether a license can transfer to the next owner depends on Cisco’s terms, so check with Cisco or your reseller before promising anything to a buyer.
If nobody knows the password on a switch you own, Cisco documents a recovery procedure for each platform. Use the official guide. If you cannot prove ownership of a switch, do not attempt to get in.
Next Steps
After the reset, label each switch as wiped and keep a record. To see how switches are valued, read our Catalyst valuation guide. Clearing a full office? Use office IT equipment buyback. Terms are on our inspection and payment page. Email: info@selltechdubai.com.
