思科NEXUS设备忘记密码重置方法

思科NEXUS设备忘记密码重置方法

思科NEXUS系列交换机忘记密码，您可以通过重启设备的方式来重置密码，有两种方式，第一种会清空配置，第二种会保留之前配置。

如果有异议的地方请优先按英文文档中的描述为主。

 

1、清除配置恢复（破坏性恢复）

首先重启设备

(c) Copyright 2016, Cisco Systems.

N5K-C5672UP BIOS v.2.1.7, Thu 06/16/2016

 

Booting kickstart image: bootflash:/n6000-uk9-kickstart.7.3.6.N1.1.bin

 

...............................................................................

..........................Image verification OK

 

Booting kernel

IT: [   13.335003] val:4, count7 .

[   13.368226] TCO_TMR val:1023, SMI_EN= 0x42033  NMI_STS_CNT_REG = 0x2d count7 .

devmemfd:0x7fea0e98

phys->virt: 0x7fea0ddc7fea0e98-->0x0

devmemfd:0x7fea0ed8

phys->virt: 0xa44000087fea0ed8-->0x0

devmemfd:0x7fea0ed8

phys->virt: 0xa44000087fea0ed8-->0x0

devmemfd:0x7fea0ed8

phys->virt: 0xa44000087fea0ed8-->0x0

Starting system POST.....

P(0x102) board

  Executing Mod 1 1 SEEPROM Test:

...done (0 sec, 175 msec, 858 usec)

  Executing Mod 1 1 GigE Port Test:

....done (16 sec, 86 msec, 528 usec)

  Executing Mod 1 1 PCIE Test:

........done (0 sec, 1 msec, 192 usec)

  Mod 1 1 Post Completed Successfully

POST is completed

can't create lock file /var/lock/mtab~308: No such file or directory (use -n flag to override)

nohup: redirecting stderr to stdout

Executing /etc/rc.d/rcS.d/S07firmware-upgrade-eusb

eUSB firmware upgrade not required

autoneg unmodified, ignoring

autoneg unmodified, ignoring

Checking all filesystems.^]...r. done.    <<<< 卡好时间在此位置按Ctrl+] 

^]^]^]^]^]^]Loading system software

INIT: ^]^]^]

switch(boot)# write erase 

Warning: This command will erase the startup-configuration.  <<< 清除当前设备所有配置

Do you wish to proceed anyway? (y/n) [N] y

switch(boot)# ex                   <<<< 退出boot模式，设备正常启动

INIT: Sending all processes the TERM signal...   

Abort Power On Auto Provisioning and continue with normal setup ?(yes/no)[n]: y

         ---- System Admin Account Setup ----

 

 

Do you want to enforce secure password standard (yes/no): n

 

  Enter the password for "admin":            <<<< 输入新密码即可，进入设备后可观察到设备所有配置被清除

  Confirm the password for "admin":    

 

2.、非破坏性恢复

首先同1的方法进入boot模式

switch(boot)# config terminal

Enter configuration commands, one per line.  End with CNTL/Z.

switch(boot)(config)# admin-password cisco@123  <<< 输入新密码

WARNING! Enabling local authentication for login through console due to password recovery

switch(boot)(config)# ex

switch(boot)# dir bootflash:      <<< 在该步骤找到本设备之前的system版本，需要与设备之前运行版本完全匹配（重启过程可见）， Lab中版本匹配时重置密码行为生效。

switch(boot)# load bootflash:n6000-uk9.7.3.6.N1.1.bin    <<<< 此处版本仅作范例

加载system版本后系统顺利运行，登录输入新密码：

Nexus 6000 Switch

login: admin

Password:

N5K-C5672UP-1#  <<<< 顺利开机，show run配置未丢失