可以通过从BOOTROM中选择“忽略配置”启动路由器来获取和重新设备console的密码!
具体操作如下:
【第一步 重启路由器,按Ctrl+B进入BOOTROM菜单】
Starting at 0x1c00000...
********************************************
* *
* Quidway Series Routers Boot ROM, V9.07 *
* *
********************************************
Copyright(C) 1997-2004 by HUAWEI TECH CO., LTD.
Compiled at 18:10:29 , Oct 14 2004.
Testing memory...OK!
128M bytes SDRAM
32768k bytes flash memory
Hardware Version is MTR 1.0
CPLD Version is CPLD 1.0
Press Ctrl-B to enter Boot Menu
Please input Bootrom password: /默认密码为空/
Boot Menu:
1: Download application program with XMODEM
2: Download application program with NET
3: Set application file type
4: Display applications in Flash
5: Clear application password
6: Start up and ignore configuration
7: Enter debugging environment
8: Boot Rom Operation Menu
9: Do not check the version of the software
a: Exit and reboot
Enter your choice(1-a):
【第二步 选择第六项“6: Start up and ignore configuration”,并确认】
Boot Menu:
1: Download application program with XMODEM
2: Download application program with NET
3: Set application file type
4: Display applications in Flash
5: Clear application password
6: Start up and ignore configuration
7: Enter debugging environment
8: Boot Rom Operation Menu
9: Do not check the version of the software
a: Exit and reboot
Enter your choice(1-a): 6
Start up and ignore configuration, Are you sure?[Y/N]y
Set Succeeds
【第三步 选择a项重启系统】
Boot Menu:
1: Download application program with XMODEM
2: Download application program with NET
3: Set application file type
4: Display applications in Flash
5: Clear application password
6: Start up and ignore configuration
7: Enter debugging environment
8: Boot Rom Operation Menu
9: Do not check the version of the software
a: Exit and reboot
Enter your choice(1-a): a
Exit and reboot,are you sure?[Y/N]y
Start to reboot...
【第四步 当系统以空配置起来以后,使用“more config.cfg”查看配置脚本】
<Quidway>dir
Directory of flash:/
0 -rw- 5748224 Nov 19 2004 17:23:05 main.bin
1 -rw- 5746199 Nov 30 2004 14:51:21 v330-0008.bin
2 -rw- 8650414 Nov 22 2004 12:26:57 system
3 -rw- 1053 Dec 15 2004 18:46:41 config.cfg
4 -rw- 8695261 Dec 15 2004 09:59:45 340-0006.bin
31877 KB total (3706 KB free)
<Quidway>more config.cfg
sysname RTA
#
FTP server enable
#
local-server nas-ip 127.0.0.1 key huawei
#
domain default enable system
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
access-limit disable
state active
#
local-user aaa
password cipher ;)<01%^&;YGQ=^Q`MAF4<1!!
service-type terminal
level 3
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0
ip address dhcp-alloc
#
interface Ethernet1/0
ip address dhcp-alloc
#
interface Ethernet1/1
ip address dhcp-alloc
#
interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address ppp-negotiate
#
interface NULL0
#
user-interface con 0
authentication-mode scheme
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
如果是采用simple方式配置口令,则可以直接显示出密码。
如果是采用cipher方式配置口令,按照以下方法处理:
1)将查看到的配置文件复制保存成一个文本文件。
2)修改该文件中对应帐号的密码“password cipher ;)<01%^&;YGQ=^Q`MAF4<1!!”为类似“password simple aaa”的口令
3)将修改过的脚本,复制粘贴到当前路由器中
4)disp cur确认当前配置和以前的配置一致后,save配置后重新启动系统
5)重启后,就可以通过修改过的帐号口令登录系统