口令shutdown重启

Cisco2900IntegratedServicesRouter的密码恢复流程ContentsIntroductionPrerequisitesRequirementsComponentsUsed相关产品Conventions逐步程序密码恢复流程示例RelatedInformationIntroduction本文档介绍了如何恢复enablepassword和enablesecret口令.
这些口令可对特权执行和配置模式的访问权限进行保护.
启用口令可以恢复,但是启用加密口令经过了加密,必须使用新口令进行替换.
请使用本文档介绍的过程替换enablesecret口令.
PrerequisitesRequirementsTherearenospecificrequirementsforthisdocument.
ComponentsUsed本文档中的信息基于以下硬件版本:Cisco2900SeriesIntegratedServicesRouter(ISR)qTheinformationinthisdocumentwascreatedfromthedevicesinaspecificlabenvironment.
Allofthedevicesusedinthisdocumentstartedwithacleared(default)configuration.
Ifyournetworkislive,makesurethatyouunderstandthepotentialimpactofanycommand.
相关产品有关如何恢复相关产品口令的信息,请参阅口令恢复过程.
ConventionsRefertoCiscoTechnicalTipsConventionsformoreinformationondocumentconventions.
逐步程序执行这些步骤为了恢复您的密码:任一个切断或关闭路由器.
1.
去除在路由器的后方的微型闪存.
此镜像显示2951路由器的后方:欲知更多信息,请参见Back面板Slot和连接器在Cisco2921和2951路由器.
2.
接通路由器.
3.
一旦路由器在ROMmon模式,请再插入微型闪存.
4.
在rommon1>提示符处键入confreg0x2142,以便从闪存启动.
此步骤将会跳过存储口令的启动配置.
5.
键入重置在rommon2>提示.
路由器重新启动,但是忽略已保存的配置.
6.
在每个设置问题后键入no或按Ctrl-C,跳过初始设置过程.
7.
键入enable(event)在Router>提示.
您将进入启用模式,此时应看到Router#提示符.
8.
键入configurememory或copystartup-configrunning-config,将非易失性RAM(NVRAM)复制到内存中.
警告:请勿输入copyrunning-configstartup-config也请勿写道.
这些erase命令您的启动配置.
9.
发出showrunning-config命令.
showrunning-config命令将会显示路由器的配置.
在此配置中,在所有接口下将会出现shutdown命令,显示当前关闭的所有接口.
另外,密码(特权密码、enablesecret、VTY和控制台密码)在加密或未加密的格式.
您能重新使用未加密的密码.
您必须更改加密的密码到一个新的密码.
10.
类型配置终端.
hostname(config)-提示出现.
11.
键入enablesecret,以更改enablesecret口令.
例如:hostname(config)#enablesecretcisco12.
在所用的每个接口上发出noshutdown命令.
如果发出showipinterfacebrief命令,则要使用的每个接口都应显示upup.
13.
键入config-register.
那里是值您在第2步或0x2102记录了.
例如:hostname(config)#config-register0x210214.
按Ctrl-z或end,离开配置模式.
提示出现.
15.
键入writememory或copyrunning-configstartup-config,以提交更改.
16.
密码恢复流程示例本部分提供了一个口令恢复过程的示例.
此示例用一个Cisco2900系列ISR创建了.
即使您不使用一个Cisco2900系列ISR,此输出提供什么的示例您在您的产品应该体验.
Router>enablePassword:Password:Password:%BadsecretsRouter>showversionCiscoIOSSoftware,C2900Software(C2900-UNIVERSALK9-M),Version15.
0(1)M1,RELEASESOFTWARE(fc1)TechnicalSupport:http://www.
cisco.
com/techsupportCopyright(c)1986-2009byCiscoSystems,Inc.
CompiledWed02-Dec-0915:23byprod_rel_teamROM:SystemBootstrap,Version15.
0(1r)M1,RELEASESOFTWARE(fc1)c2921-CCP-1-xfruptimeis2weeks,22hours,15minutesSystemreturnedtoROMbyreloadat06:06:52PCTimeMonApr21900Systemrestartedat06:08:03PCTimeMonApr21900Systemimagefileis"flash:c2900-universalk9-mz.
SPA.
150-1.
M1.
bin"Lastreloadreason:ReloadCommandThisproductcontainscryptographicfeaturesandissubjecttoUnitedStatesandlocalcountrylawsgoverningimport,export,transferanduse.
DeliveryofCiscocryptographicproductsdoesnotimplythird-partyauthoritytoimport,export,distributeoruseencryption.
Importers,exporters,distributorsandusersareresponsibleforcompliancewithU.
S.
andlocalcountrylaws.
Byusingthisproductyouagreetocomplywithapplicablelawsandregulations.
IfyouareunabletocomplywithU.
S.
andlocallaws,returnthisproductimmediately.
AsummaryofU.
S.
lawsgoverningCiscocryptographicproductsmaybefoundat:http://www.
cisco.
com/wwl/export/crypto/tool/stqrg.
htmlIfyourequirefurtherassistancepleasecontactusbysendingemailtoexport@cisco.
com.
CiscoCISCO2921/K9(revision1.
0)with475136K/49152Kbytesofmemory.
ProcessorboardIDFHH1230P04Y1DSLcontroller3GigabitEthernetinterfaces9terminallines1VirtualPrivateNetwork(VPN)Module1CableModeminterface1ciscoIntegratedServiceEngine-2(s)CiscoFoundation2.
2.
1inslot1DRAMconfigurationis64bitswidewithparityenabled.
255Kbytesofnon-volatileconfigurationmemory.
248472KbytesofATASystemCompactFlash0(Read/Write)62720KbytesofATACompactFlash1(Read/Write)TechnologyPackageLicenseInformationforModule:'c2900'TechnologyTechnology-packageTechnology-packageCurrentTypeNextrebootipbaseipbasek9Permanentipbasek9securitysecurityk9Permanentsecurityk9ucuck9Permanentuck9datadatak9Permanentdatak9Configurationregisteris0x2102Router>!
---ExecuteSteps1through4fromStep-by-StepProcedure.
!
rommon1>confreg0x2142Youmustresetorpowercyclefornewconfigtotakeeffectrommon2>resetSystemBootstrap,Version15.
0(1r)M1,RELEASESOFTWARE(fc1)Copyright(c)2009byciscoSystems,Inc.
TAC:Home:SW:IOS:SpecialsforinfoC2900platformwith524288Kbytesofmainmemoryprogramloadcomplete,entrypoint:0x80008000,size:0x6fdb4cSelfdecompressingtheimageOK]RestrictedRightsLegendUse,duplication,ordisclosurebytheGovernmentissubjecttorestrictionsassetforthinsubparagraph(c)oftheCommercialComputerSoftware-RestrictedRightsclauseatFARsec.
52.
227-19andsubparagraph(c)(1)(ii)oftheRightsinTechnicalDataandComputerSoftwareclauseatDFARSsec.
252.
227-7013.
ciscoSystems,Inc.
170WestTasmanDriveSanJose,California95134-1706CiscoIOSSoftware,C2900Software(C2900-UNIVERSALK9-M),Version15.
0(1)M1,RELEASESOFTWARE(fc1)TechnicalSupport:http://www.
cisco.
com/techsupportCopyright(c)1986-2009byCiscoSystems,Inc.
CompiledWed02-Dec-0915:23byprod_rel_teamCiscoCISCO2921/K9(revision1.
0)with475136K/49152Kbytesofmemory.
ProcessorboardIDFHH1230P04Y1DSLcontroller3GigabitEthernetinterfaces9terminallines1VirtualPrivateNetwork(VPN)Module1CableModeminterface1ciscoIntegratedServiceEngine-2(s)CiscoFoundation2.
2.
1inslot1DRAMconfigurationis64bitswidewithparityenabled.
255Kbytesofnon-volatileconfigurationmemory.
248472KbytesofATASystemCompactFlash0(Read/Write)62720KbytesofATACompactFlash1(Read/Write)---SystemConfigurationDialog---Wouldyouliketoentertheinitialconfigurationdialog[yes/no]:nPressRETURNtogetstarted!
00:00:19:%LINK-3-UPDOWN:InterfaceBRI0/0,changedstatetoup00:00:19:%LINK-3-UPDOWN:InterfaceEthernet0/0,changedstatetoup00:00:19:%LINK-3-UPDOWN:InterfaceEthernet0/1,changedstatetoup00:00:19:%LINK-3-UPDOWN:InterfaceSerial0/0,changedstatetodown00:00:19:%LINK-3-UPDOWN:InterfaceSerial0/1,changedstatetodown00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0/0,changedstatetodown00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/0,changedstatetoupRouter>00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/1,changedstatetoup00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/0,changedstatetodown00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/1,changedstatetodown00:00:50:%SYS-5-RESTART:Systemrestarted--CiscoIOSSoftware,C2900Software(C2900-UNIVERSALK9-M),Version15.
0(1)M1,RELEASESOFTWARE(fc1)TechnicalSupport:http://www.
cisco.
com/techsupportCopyright(c)1986-2009byCiscoSystems,Inc.
CompiledWed02-Dec-0915:23byprod_rel_team00:00:50:%LINK-5-CHANGED:InterfaceBRI0/0,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceEthernet0/0,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceSerial0/0,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceEthernet0/1,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceSerial0/1,changedstatetoadministrativelydown00:00:53:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/0,changedstatetodown00:00:53:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/1,changedstatetodownRouter>Router>enableRouter#copystartup-configrunning-configDestinationfilename[running-config]1324bytescopiedin2.
35secs(662bytes/sec)Router#00:01:24:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0/0:1,changedstatetodown00:01:24:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0/0:2,changedstatetodownRouter#configureterminalEnterconfigurationcommands,oneperline.
EndwithCNTL/Z.
Router(config)#enablesecretRouter(config)#^Z00:01:54:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter#showipinterfacebriefInterfaceIP-AddressOKMethodStatusProtocolEthernet0/010.
200.
40.
37YESTFTPadministrativelydowndownSerial0/0unassignedYESTFTPadministrativelydowndownBRI0/0193.
251.
121.
157YESunsetadministrativelydowndownBRI0/0:1unassignedYESunsetadministrativelydowndownBRI0/0:2unassignedYESunsetadministrativelydowndownEthernet0/1unassignedYESTFTPadministrativelydowndownSerial0/1unassignedYESTFTPadministrativelydowndownLoopback0193.
251.
121.
157YESTFTPupupRouter#configureterminalEnterconfigurationcommands,oneperline.
EndwithCNTL/Z.
Router(config)#interfaceEthernet0/0Router(config-if)#noshutdownRouter(config-if)#00:02:14:%LINK-3-UPDOWN:InterfaceEthernet0/0,changedstatetoup00:02:15:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/0,changedstatetoupRouter(config-if)#interfaceBRI0/0Router(config-if)#noshutdownRouter(config-if)#00:02:26:%LINK-3-UPDOWN:InterfaceBRI0/0:1,changedstatetodown00:02:26:%LINK-3-UPDOWN:InterfaceBRI0/0:2,changedstatetodown00:02:26:%LINK-3-UPDOWN:InterfaceBRI0/0,changedstatetoup00:02:115964116991:%ISDN-6-LAYER2UP:Layer2forInterfaceBR0/0,TEI68changedtoupRouter(config-if)#^ZRouter#00:02:35:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter#copyrunning-configstartup-configDestinationfilename[startup-config]Buildingconfiguration.
.
.
[OK]Router#showversionCiscoIOSSoftware,C2900Software(C2900-UNIVERSALK9-M),Version15.
0(1)M1,RELEASESOFTWARE(fc1)TechnicalSupport:http://www.
cisco.
com/techsupportCopyright(c)1986-2009byCiscoSystems,Inc.
CompiledWed02-Dec-0915:23byprod_rel_teamROM:SystemBootstrap,Version15.
0(1r)M1,RELEASESOFTWARE(fc1)c2921-CCP-1-xfruptimeis2weeks,22hours,15minutesSystemreturnedtoROMbyreloadat06:06:52PCTimeMonApr21900Systemrestartedat06:08:03PCTimeMonApr21900Systemimagefileis"flash:c2900-universalk9-mz.
SPA.
150-1.
M1.
bin"Lastreloadreason:ReloadCommandCiscoCISCO2921/K9(revision1.
0)with475136K/49152Kbytesofmemory.
ProcessorboardIDFHH1230P04Y1DSLcontroller3GigabitEthernetinterfaces9terminallines1VirtualPrivateNetwork(VPN)Module1CableModeminterface1ciscoIntegratedServiceEngine-2(s)CiscoFoundation2.
2.
1inslot1DRAMconfigurationis64bitswidewithparityenabled.
255Kbytesofnon-volatileconfigurationmemory.
248472KbytesofATASystemCompactFlash0(Read/Write)62720KbytesofATACompactFlash1(Read/Write)Configurationregisteris0x2102Router#configureterminalEnterconfigurationcommands,oneperline.
EndwithCNTL/Z.
Router(config)#config-register0x2102Router(config)#^Z00:03:20:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter#showversionCiscoIOSSoftware,C2900Software(C2900-UNIVERSALK9-M),Version15.
0(1)M1,RELEASESOFTWARE(fc1)TechnicalSupport:http://www.
cisco.
com/techsupportCopyright(c)1986-2009byCiscoSystems,Inc.
CompiledWed02-Dec-0915:23byprod_rel_teamROM:SystemBootstrap,Version15.
0(1r)M1,RELEASESOFTWARE(fc1)c2921-CCP-1-xfruptimeis2weeks,22hours,15minutesSystemreturnedtoROMbyreloadat06:06:52PCTimeMonApr21900Systemrestartedat06:08:03PCTimeMonApr21900Systemimagefileis"flash:c2900-universalk9-mz.
SPA.
150-1.
M1.
bin"Lastreloadreason:ReloadCommandCiscoCISCO2921/K9(revision1.
0)with475136K/49152Kbytesofmemory.
ProcessorboardIDFHH1230P04Y1DSLcontroller3GigabitEthernetinterfaces9terminallines1VirtualPrivateNetwork(VPN)Module1CableModeminterface1ciscoIntegratedServiceEngine-2(s)CiscoFoundation2.
2.
1inslot1DRAMconfigurationis64bitswidewithparityenabled.
255Kbytesofnon-volatileconfigurationmemory.
248472KbytesofATASystemCompactFlash0(Read/Write)62720KbytesofATACompactFlash1(Read/Write)Configurationregisteris0x2142(willbe0x2102atnextreload)Router#Note:为了恢复您的密码,当,请参见恢复设备部分没有Noservicepassword-recovery.
RelatedInformation密码恢复流程q控制台和Aux端口的布线指南q连接终端到在Catalyst交换机的控制台端口q将终端连接到Catalyst2948G-L3、4908G-L3和4840G系列交换机qTechnicalSupport&Documentation-CiscoSystemsq