| Cisco Catalyst交換機密碼恢復策略
如果交換機的login密碼忘記了，別急別急,只要你有PC,有類似超級終端(Hyper Terminal)這樣是終端程序,連接到交換機的console口,那么密碼的恢復就N簡單了.
1.對于Catalyst 2900/3500XL系列來說:
拔下交換機的電源線,然后按住交換機的Mode按鈕,再重新插上交換機的電源線.直到端口Port 1x的LED熄滅之后釋放Mode按鈕.
2.對于Catalyst 2940/2950L系列來說:
拔下交換機的電源線,然后按住交換機的Mode按鈕,再重新插上交換機的電源線.直到STAT的LED熄滅之后釋放Mode按鈕.
3.對于Catalyst 2955系列來說:
Catalyst 2955沒有沒有外部的Mode按鈕,因此就不能使用之前的那種方法來進行密碼恢復.在交換機啟動時,對于Windows系列的PC,按下Ctrl+Break鍵;對于UNIX系列的工作站,按下Ctrl+C.如下:
C2955 Boot Loader (C2955−HBOOT−M) Version 12.1(0.0.514), CISCO DEVELOPMENT TEST
VERSION
Compiled Fri 13−Dec−02 17:38 by madison
WS−C2955T−12 starting...
Base ethernet MAC Address: 00:0b:be:b6:ee:00
Xmodem file system is available.
Initializing Flash...
flashfs[0]: 19 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 4510720
flashfs[0]: Bytes available: 3230720
flashfs[0]: flashfs fsck took 7 seconds.
...done initializing flash.
Boot Sector Filesystem (bs installed, fsid: 3
Parameter Block Filesystem (pb installed, fsid: 4
/---接下來交換機會在15秒內(nèi)自動啟動,
等出現(xiàn)該信息之后,按下Ctrl+Break鍵或Ctrl+C鍵----/
The system has been interrupted prior to initializing the flash file system to finish
loading the operating system software:
flash_init
load_helper
bootswitch: | 接下來輸入flash_init命令:
switch:flash_init
Initializing Flash...
flashfs[0]: 143 files, 4 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 3612672
flashfs[0]: Bytes used: 2729472
flashfs[0]: Bytes available: 883200
flashfs[0]: flashfs fsck took 86 seconds
....done Initializing Flash.
Boot Sector Filesystem (bs installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
switch: | 接著輸入load_helper命令:
switch:load_helper
switch: | 再輸入dir flash:命令顯示交換機的文件系統(tǒng):
switch:dir flash:
Directory of flash:/
2 −rwx 1803357 <date> c3500xl−c3h2s−mz.120−5.WC7.bin
4 −rwx 1131 <date> config.text
5 −rwx 109 <date> info
6 −rwx 389 <date> env_vars
7 drwx 640 <date> html
18 −rwx 109 <date> info.ver
403968 bytes available (3208704 bytes used)
switch:
| 把配置文件重命名:
switch:rename flash:config.text flash:config.old
switch: | 輸入boot命令啟動交換機:
switch:boot
Loading "flash:c3500xl−c3h2s−mz.120−5.WC7.bin"...###############################
################################################################################
######################################################################
File "flash:c3500xl−c3h2s−mz.120−5.WC7.bin" uncompressed and installed, entry po
int: 0x3000
executing... | 不進入setup模式:
−−− System Configuration Dialog −−−
At any point you may enter a question mark '?' for help.
Use ctrl−c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Continue with configuration dialog? [yes/no]: n | 進入特權(quán)模式,恢復原始的配置文件:
Switch#rename flash:config.old flash:config.text
Destination filename [config.text]
Switch# | 把配置文件保存在內(nèi)存里:
Switch#copy flash:config.text system:running−config
Destination filename [running−config]?
1131 bytes copied in 0.760 secs
Switch# | 進入全局配置模式,取消密碼設置:
Switch(config)#no enable secret | 保存配置:
Switch#write memory
Building configuration...
[OK]
Switch# | 4.對于Catalyst 3550/3750系列來說:
1.通過帶有支持Xmodem協(xié)議的超級終端程序的PC連接到交換機的console口,把波特率設置為9600.
2.拔掉交換機的電源.
3.按下交換機上的Mode按鈕,與此同時,重新插上交換機的電源線.當交換機端口1X上的LED熄滅后可以松開Mode按鈕1到2秒.之后將顯示一些指示信息:
The system has been interrupted prior to initializing the flash file system. The following
commands will initialize the flash file system, and finish loading the operating system
software:
flash_init
load_helper
boot
switch：
4.初始化flash文件系統(tǒng):
switch：flash_init
5.加載幫助文件:
switch：load_helper
6.顯示閃存里的內(nèi)容:
switch：dir flash:
7.重命名配置文件:
switch：rename flash:config.text flash:config.text.old
8.啟動系統(tǒng),并且如果提示進入setup模式,輸入N:
switch：boot
Continue with the configuration dialog? [yes/no]: N
9.進入特權(quán)模式,把配置文件名恢復為原始文件名:
Switch#rename flash:config.text.old flash:config.text
10.把配置文件寫進內(nèi)存:
Switch#copy flash:config.text system:running-config
Source filename [config.text]?
Destination filename [running-config]?
11.進入全局配置模式更改密碼:
Switch(config)#enable secret {password}
12.退出,并保存到startup-config文件里:
Switch(config)#copy running-config startup-config | 其實有的時候硬件安全比軟件安全還要重要些.不然人人都扛個本本,.連根線到console口去恢復密碼了-_- |
