恢復採用Supervisor Engine的Catalyst 4500/4900交換器的密碼

簡介

本文說明如何在具有執行Cisco IOS®軟體的Supervisor Engine的Catalyst 4500/4900交換器上復原遺失的密碼。

必要條件

需求

本文件沒有特定需求。

採用元件 

Catalyst 4500/4000交換器

• 管理引擎II-Plus(WS-X4013+)
• 管理引擎II-Plus-TS(WS-X4013+TS)
• 管理引擎II-Plus-10GE(WS-X4013+10GE)
• 管理引擎III(WS-X4014)
• 管理引擎IV(WS-X4515)
• 管理引擎V(WS-X4516)
• 管理引擎V-10GE(WS-X4516-10GE)模組

Cisco Catalyst 4948 交換器

Cisco Catalyst 4948 10GE交換器

Cisco Catalyst 4900M交換器

本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。

慣例

如需文件慣例的詳細資訊，請參閱思科技術提示慣例。

背景資訊

附註：在Catalyst 4500/4000系列交換器中，Supervisor Engine II+、II+10GE、II+TS、III、IV、V和V-10GE僅支援Cisco IOS軟體。

配置流程

在Catalyst 4500/4900交換器上復原密碼：

附註：在執行這些步驟時，請確保您對交換機具有物理訪問權，並且使用控制檯訪問Supervisor Engine模組。如需交換器主控台連線的詳細資訊，請參閱將資料機連線到Catalyst交換器上的主控台連線埠。

提示：如果按照上述步驟操作，交換機配置不會丟失。作為最佳實踐，思科建議您在TFTP伺服器或網路管理伺服器上擁有所有思科裝置配置的備份副本。

1. 重新通電。

   要重新通電，請關閉裝置，然後重新開啟。

   在5秒內按Ctrl-C可阻止自動啟動。此操作將您置於ROM監控(ROMmon)提示模式。

    !--- Here, you power cycle the switch. 
   ********************************************************** 
   *                                                        * 
   * Welcome to ROM Monitor for WS-X4014 System.            * 
   * Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
   * All rights reserved.                                   * 
   *                                                        * 
   **********************************************************
    
    ROM Monitor Program Version 12.1(10r)EY(1.21) 
   
    Board type 1, Board revision 7
    Swamp FPGA revision 16, Dagobah FPGA revision 43 
    
    Timer interrupt test passed.
   
    MAC Address  : 00-02-b9-83-af-fe 
    IP Address   : 172.16.84.122 
    Netmask      : 255.255.255.0 
    Gateway      : 172.16.84.1 
    TftpServer   : Not set. 
    Main Memory  : 256 MBytes
   
   
    ***** The system will autoboot in 5 seconds *****  Type control-C to prevent autobooting. 
   
   !--- At this point, press Ctrl-C.  
   
   Autoboot cancelled......... please wait!!! 
   Autoboot cancelled......... please wait!!! 
   rommon 1 > [interrupt] 
   
   !--- The module ended in the ROMmon.  
   
   rommon 1 > [interrupt]

2. 在提示 confreg 時發出命 rommon 令。

   選擇此處以粗體顯示的內容，以便進行密碼恢復：

   rommon 1 > set
   

   rommon 1 > confreg
   
    Configuration Summary : 
    => load ROM after netboot fails
    => console baud: 9600
    => autoboot from: commands specified in 'BOOT' environment variable
   
    do you wish to change the configuration? y/n  [n]:  y
    enable  "diagnostic mode"? y/n  [n]:  n
    enable  "use net in IP bcast address"? y/n  [n]:  n
    disable "load ROM after netboot fails"? y/n  [n]:  n
    enable  "use all zero broadcast"? y/n  [n]:  n
    enable  "break/abort has effect"? y/n  [n]:  n
    enable  "ignore system config info"? y/n  [n]:  y
   
    change console baud rate? y/n  [n]:  n
   
    change the boot characteristics? y/n  [n]:  n
   
    Configuration Summary : 
    => load ROM after netboot fails
    => ignore system config info
    => console baud: 9600
    => autoboot from: commands specified in 'BOOT' environment variable
   
    do you wish to save this configuration? y/n  [n]:   y 
    You must reset or power cycle for new configuration to take effect
   

   附註：您還可以在ROMmon提confreg 0x2142示符時使用命令，以設定配置暫存器值以繞過NVRAM中儲存的啟動配置。

   rommon 1 > confreg 0x2142
   You must reset or power cycle for the new configuration to take effect.

3. 發出命 reset 令，讓模組重新啟動。

   由於您在步驟2中所做的更改，模組將重新啟動，但會忽略儲存的配置。

   rommon 2 > reset
   
   Resetting ....... 
   
   rommon 3 > 
   
   ********************************************************** 
   *                                                        * 
   * Welcome to ROM Monitor for WS-X4014 System.            * 
   * Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
   * All rights reserved.                                   * 
   *                                                        * 
   **********************************************************
   
   !--- Output suppressed.  
   
   Press RETURN to get started! 
   
   !--- Press Return.  
   
   00:00:21: %SYS-5-RESTART: System restarted --
   Cisco Internetwork Operating System Software 
   IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
      Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
   TAC Support: http://www.cisco.com/tac
   Copyright (c) 1986-2002 by cisco Systems, Inc.
   Compiled Thu 24-Jan-02 17:34 by ccai
   00:00:21: %SNMP-5-COLDSTART: SNMP agent on host Switch 
      is undergoing a cold start
   Switch>

4. 確保配置暫存器值為0x2142。

   此值使模組從快閃記憶體開機，而不載入儲存的組態。在Switch提示時發出enable命令以進入啟用模式。然後，發出show version命令以檢查配置暫存器值。

   Switch>enable
   Switch#show version
   Cisco Internetwork Operating System Software 
   Cisco IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M),
      Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
   TAC Support: https://www.cisco.com/tac
   Copyright (c) 1986-2002 by cisco Systems, Inc.
   Compiled Thu 24-Jan-02 17:34 by ccai
   Image text-base: 0x00000000, data-base: 0x00AA2B8C
   
   ROM: 12.1(10r)EY(1.21)
   Switch uptime is 5 minutes
   System returned to ROM by reload
   Running default software 
   
   cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
   Processor board ID FOX04183666 
   Last reset from Reload 
   32 Gigabit Ethernet/IEEE 802.3 interface(s) 
   467K bytes of non-volatile configuration memory. 
   
   Configuration register is 0x2142 
   
   Switch#

5. 發出 configure memory 命令或命令 copy startup-config running-config ，將NVRAM複製到記憶體中。

   不要發出 configure terminal 命令，該命令顯示模組上的預設配置。

   Switch#configure memory
   
   Uncompressed configuration from 1307 bytes to 3014 bytes
   Switch#
   00:13:52: %SYS-5-CONFIG_I: Configured from memory by console
   c-4006-SUPIII#

6. 發出 show ip interface brief 命令，以確保之前使用的介面顯示為up/up狀態。

   如果在口令恢復之前使用的任何介面顯示down，請在該介面上發出no shutdown命令以啟用該介面。

7. 發出write terminal命令或show running-config命令以顯示模組上儲存的配置。

   c-4006-SUPIII# show running-config   
   Building configuration... 
   
   Current configuration : 3014 bytes 
   ! 
   version 12.1 
   no service pad 
   service timestamps debug uptime 
   service timestamps log uptime 
   no service password-encryption 
   service compress-config 
   ! 
   hostname c-4006-SUPIII 
   ! 
   boot system flash bootflash: 
   ! 
   vtp mode transparent 
   
   !--- Output suppressed.  
   
   line con 0
    stopbits 1
   line vty 0 4
    login
   ! 
   end 
   
   c-4006-SUPIII#

   現在，您可以更改模組上的密碼了。

8. 發出以下命令更改密碼：

   c-4006-SUPIII#configure terminal 
   Enter configuration commands, one per line.  End with CNTL/Z.
   c-4006-SUPIII(config)#no enable secret
   
   !--- This step is necessary if the switch had an enable secret password.
   
   c-4006-SUPIII(config)#enable secret < password > 
   [Choose a strong password with at least one capital letter,
    one number, and one special character.]
   
   !--- This command sets the new password.
   

9. 請確保將配置暫存器值更改回0x2102。

   在configprompt(配置提示符)下完成這些步驟，以更改並驗證配置暫存器值。

   c-4006-SUPIII(config)#config-register 0x2102
   c-4006-SUPIII(config)# ^Z
   c-4006-SUPIII#
   00:19:01: %SYS-5-CONFIG_I: Configured from console by console
   c-4006-SUPIII#write memory 
   
   !--- This step saves the configuration.
   
    Building  configuration... 
   Compressed configuration from 3061 bytes to 1365 bytes[OK] 
   c-4006-SUPIII#show version 
   
   !--- This step verifies the value change.  
   
   Cisco Internetwork Operating System Software 
   Cisco IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
      Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
   TAC Support: https://www.cisco.com/tac 
   Copyright (c) 1986-2002 by cisco Systems, Inc. 
   Compiled Thu 24-Jan-02 17:34 by ccai 
   Image text-base: 0x00000000, database: 0x00AA2B8C 
   
   ROM: 12.1(10r)EY(1.21) 
   c-4006-SUPIII uptime is 20 minutes 
   System returned to ROM by reload 
   Running default software 
   
   cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
   Processor board ID FOX04183666 
   Last reset from Reload 
   32 Gigabit Ethernet/IEEE 802.3 interface(s) 
   467K bytes of nonvolatile configuration memory. 
   
   Configuration register is 0x2142 (will be 0x2102 at next reload) 
   
   c-4006-SUPIII#

   此時，您已更改密碼。

組態與輸出範例

此範例輸出是Catalyst 4000 Supervisor Engine III上的密碼復原程式的結果。

c-4006-SUPIII> enable
Password: 
Password: 
Password: 
% Bad secrets 

!--- Here, you power cycle the switch. 
********************************************************** 
*                                                        * 
* Welcome to ROM Monitor for WS-X4014 System.            * 
* Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
* All rights reserved.                                   * 
*                                                        * 
**********************************************************
 
 ROM Monitor Program Version 12.1(10r)EY(1.21) 

 Board type 1, Board revision 7
 Swamp FPGA revision 16, Dagobah FPGA revision 43 
 
 Timer interrupt test passed.

 MAC Address  : 00-02-b9-83-af-fe 
 IP Address   : 172.16.84.122 
 Netmask      : 255.255.255.0 
 Gateway      : 172.16.84.1 
 TftpServer   : Not set. 
 Main Memory  : 256 Mbytes


 ***** The system  will  autoboot in 5 seconds ***** 

Type control-C to prevent autobooting. 

!--- At this point, press Ctrl-C.  

Autoboot cancelled......... please wait!!! 
Autoboot cancelled......... please wait!!! 
rommon 1 > [interrupt] 

rommon 1 > [interrupt] 

rommon 1 > confreg 

Configuration Summary : 
=> load ROM after netboot fails 
=> console baud: 9600 
=> autoboot from: commands specified in 'BOOT' environment variable 

do you wish to change the configuration? y/n [n]: y 
enable "diagnostic mode"? y/n [n]: n 
enable "use net in IP bcast address"? y/n [n]: n 
disable "load ROM after netboot fails"? y/n [n]: n 
enable "use all zero broadcast"? y/n [n]: n 
enable "break/abort has effect"? y/n [n]: n 
enable "ignore system config info"? y/n [n]: y 

change console baud rate? y/n [n]: n 

change the boot characteristics? y/n [n]: n 

Configuration Summary : 
=> load ROM after netboot fails 
=> ignore system config info 
=> console baud: 9600 
=> autoboot from: commands specified in 'BOOT' environment variable 

do you wish to save this configuration? y/n [n]: y 
You must reset or power cycle for new configuration to take effect 

rommon 2 > reset 

Resetting ....... 

rommon 3 > 

********************************************************** 
*                                                        * 
* Welcome to ROM Monitor for WS-X4014 System.            * 
* Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
* All rights reserved.                                   * 
*                                                        * 
**********************************************************

ROM Monitor Program Version 12.1(10r)EY(1.21) 
Board type 1, Board revision 7 
Swamp FPGA revision 16, 
Dagobah FPGA revision 43 

Timer interrupt test passed. 

MAC Address : 00-02-b9-83-af-fe 
IP Address : 172.16.84.122 
Netmask : 255.255.255.0 
Gateway : 172.16.84.1 
TftpServer : Not set.
Main Memory : 256 Mbytes 

***** The system will autoboot in 5 seconds ***** 

Type control-C to prevent autobooting. 
. . . . . 

******** The system will autoboot now ******** 


config-register = 0x2142  
Autobooting using BOOT variable specified file..... 

Current BOOT file is --- bootflash: 

Rommon reg: 0x2B004180 
Decompressing the image : ########################### 
##################################################### 
####################################### [OK] 

k2diags version 1.6 

prod: WS-X4014 part: 73-6854-07 serial: JAB0546060Z 

Power-on-self-test for Module 1: WS-X4014 
Status: (. = Pass, F = Fail) 

Traffic using serdes loopback (L2; one port at a time)... 
switch port 0: . switch port 1: . switch port 2: . 
switch port 3: . switch port 4: . switch port 5: . 
switch port 6: . switch port 7: . switch port 8: . 

!--- Output suppressed.  

Module 1 Passed 


Exiting to ios... 

Rommon reg: 0x2B000180 
Decompressing the image : ########################## 

!--- Output suppressed.  

######################################################### [OK] 

              Restricted Rights Legend  

Use, duplication, or disclosure by the Government is 
subject to restrictions as set forth in subparagraph 
(c) of the Commercial Computer Software - Restricted 
Rights clause at FAR sec. 52.227-19 and subparagraph 
(c) (1) (ii) of the Rights in Technical Data and Computer 
Software clause at DFARS sec. 252.227-7013. 

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco Internetwork Operating System Software 
Cisco IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M),
   Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Thu 24-Jan-02 17:34 by ccai
Image text-base: 0x00000000, database: 0x00AA2B8C


cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
Processor board ID FOX04183666 
Last reset from Reload 
32 Gigabit Ethernet/IEEE 802.3 interface(s) 
467K bytes of nonvolatile configuration memory. 


Press RETURN to get started! 

00:00:21: %SYS-5-RESTART: System restarted -- 
Cisco Internetwork Operating System Software
Cisco IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M),
   Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
TAC Support: https://www.cisco.com/tac 
Copyright (c) 1986-2002 by cisco Systems, Inc. 
Compiled Thu 24-Jan-02 17:34 by ccai 
00:00:21: %SNMP-5-COLDSTART: SNMP agent on host Switch is undergoing a cold start 

Switch>enable 
Switch#show version 
Cisco Internetwork Operating System Software 
Cisco IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
Version 12.1(8a)EW, RELEASE SOFTWARE (fc1) 
TAC Support: https://www.cisco.com/tac 
Copyright (c) 1986-2002 by cisco Systems, Inc. 
Compiled Thu 24-Jan-02 17:34 by ccai 
Image text-base: 0x00000000, database: 0x00AA2B8C 

ROM: 12.1(10r)EY(1.21) 
Switch uptime is 5 minutes 
System returned to ROM by reload 
Running default software 

cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
Processor board ID FOX04183666 
Last reset from Reload 
32 Gigabit Ethernet/IEEE 802.3 interface(s) 
467K bytes of nonvolatile configuration memory. 

Configuration register is 0x2142 

Switch# 

Switch#configure memory 

Uncompressed configuration from 1307 bytes to 3014 bytes 
c-4006-SUPIII# 
00:13:52: %SYS-5-CONFIG_I: Configured from memory by console 
c-4006-SUPIII#show running-config  
Building configuration... 

Current configuration : 3014 bytes 
! 
version 12.1 
no service pad 
service timestamps debug uptime 
service timestamps log uptime 
no service password-encryption 
service compress-config 
! 
hostname c-4006-SUPIII 
! 
boot system flash bootflash: 
! 
vtp mode transparent 
!
vlan 20
  private-vlan primary
!
vlan 100
!
vlan 202
  private-vlan association 440
!         
vlan 440
  private-vlan isolated
!
vlan 500
ip subnet-zero
no ip domain-lookup
!
ip multicast-routing
!
!
interface GigabitEthernet1/1
 no switchport
 ip address 10.1.1.1 255.255.255.0
 ip pim dense-mode
!
interface GigabitEthernet1/2
 no switchport
 ip address 10.2.2.2 255.255.255.0
! 

!--- Output suppressed.  

! 
interface Vlan1
 ip address 172.16.84.140 255.255.255.0
 ip pim dense-mode
!
interface Vlan2
 no ip address
 shutdown
!
interface Vlan20
 no ip address
 shutdown
! 

!--- Output suppressed.  

! 
line con 0
 stopbits 1
line vty 0 4
 login
! 
end 

c-4006-SUPIII#configure terminal  
Enter configuration commands, one per line. End with CNTL/Z. 
c-4006-SUPIII(config)#no enable secret

!--- This step is necessary if the switch had an enable secret password. 

c-4006-SUPIII(config)#enable secret < password >
[Choose a strong password with at least one capital letter, 
one number, and one special character.] 
c-4006-SUPIII(config)#config-register 0x2102 
c-4006-SUPIII(config)#^Z 
c-4006-SUPIII#write memory 
Building configuration... 
Compressed configuration from 3061 bytes to 1365 bytes[OK] 
c-4006-SUPIII#show version 
Cisco Internetwork Operating System Software 
Cisco IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
   Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
TAC Support: https://www.cisco.com/tac 
Copyright (c) 1986-2002 by cisco Systems, Inc. 
Compiled Thu 24-Jan-02 17:34 by ccai 
Image text-base: 0x00000000, database: 0x00AA2B8C 

ROM: 12.1(10r)EY(1.21) 
c-4006-SUPIII uptime is 20 minutes 
System returned to ROM by reload 
Running default software 

cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
Processor board ID FOX04183666 
Last reset from Reload 
32 Gigabit Ethernet/IEEE 802.3 interface(s) 
467K bytes of nonvolatile configuration memory. 

Configuration register is 0x2142 (will be 0x2102 at next reload) 

c-4006-SUPIII#

相關資訊

• 密碼復原期間的標準Break按鍵順序組合
• LAN交換器產品支援
• 思科技術支援與下載