Recuperación de Contraseñas para Catalyst 4500/4900 Switches con Supervisor Engine

Introducción

Este documento describe cómo recuperar una contraseña perdida en un switch Catalyst 4500/4900 que tiene un Supervisor Engine que ejecuta Cisco IOS® Software.

Prerequisites

Requirements

No hay requisitos específicos para este documento.

Componentes Utilizados 

Este documento no tiene restricciones específicas en cuanto a versiones de software y de hardware.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. Si tiene una red en vivo, asegúrese de entender el posible impacto de cualquier comando.

Convenciones

Consulte Convenciones de Consejos TécnicosCisco para obtener más información sobre las convenciones del documento.

Antecedentes

Nota: En los Catalyst 4500/4000 Series Switches, Supervisor Engines II+, II+10GE, II+TS, III, IV, V y V-10GE soportan solamente el Cisco IOS Software y Supervisor Engines I y II soportan solamente el Catalyst OS Software. Para recuperar la contraseña en Supervisor Engines I o II, consulte Procedimiento de Recuperación de Contraseña para el Catalyst que Ejecuta CatOS.

Este documento describe cómo recuperar una contraseña perdida o desconocida en un switch Catalyst 4500/4000 con Supervisor Engine II-Plus (WS-X4013+), Supervisor Engine II-Plus-TS (WS-X4013+TS), Supervisor Engine II-Plus-10GE (WS-X4013+10GE), Supervisor Engine III (WS-X4014), Supervisor Engine IV (WS-X4515), Supervisor Engine V (WS-X4516), módulo de motor supervisor V-10GE (WS-X4516-10GE), switches Cisco Catalyst 4948, Cisco Catalyst 4948 10GE y Cisco Catalyst 4900M.

Proceso de configuración

Para recuperar su contraseña en el switch Catalyst 4500/4900:

Nota: Asegúrese de tener acceso físico al switch y de utilizar el acceso de consola al módulo Supervisor Engine mientras realiza estos pasos. Para obtener detalles sobre la conexión de la consola del switch, consulte Conexión de un Módem al Puerto de la Consola en Switches Catalyst.

Consejo: La configuración del switch no se pierde si se sigue el procedimiento mencionado. Como práctica recomendada, Cisco recomienda tener una copia de respaldo de la configuración de todos los dispositivos de Cisco en el servidor TFTP o en un servidor de administración de red.

1. Apague y encienda el dispositivo.

   Para apagar y encender el dispositivo, apáguelo y vuelva a encenderlo.

   Presione Ctrl-C dentro de los 5 segundos para evitar el inicio automático. Esta acción le coloca en el modo de mensaje del monitor ROM (ROMmon).

   
   !--- Here, you power cycle the switch.
   
   ********************************************************** 
   *                                                        * 
   * Welcome to ROM Monitor for WS-X4014 System.            * 
   * Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
   * All rights reserved.                                   * 
   *                                                        * 
   **********************************************************
    
    ROM Monitor Program Version 12.1(10r)EY(1.21) 
   
    Board type 1, Board revision 7
    Swamp FPGA revision 16, Dagobah FPGA revision 43 
    
    Timer interrupt test passed.
   
    MAC Address  : 00-02-b9-83-af-fe 
    IP Address   : 172.16.84.122 
    Netmask      : 255.255.255.0 
    Gateway      : 172.16.84.1 
    TftpServer   : Not set. 
    Main Memory  : 256 MBytes
   
   
    ***** The system will autoboot in 5 seconds *****  Type control-C to prevent autobooting. 
   
   !--- At this point, press Ctrl-C.  
   
   Autoboot cancelled......... please wait!!! 
   Autoboot cancelled......... please wait!!! 
   rommon 1 > [interrupt] 
   
   !--- The module ended in the ROMmon.  
   
   rommon 1 > [interrupt]

2. Ejecute el comando confreg comando en el rommon mensaje

   Seleccione las opciones que aparecen aquí en negrita para la recuperación de contraseña:

   rommon 1 > set
   

   rommon 1 > confreg
   
    Configuration Summary : 
    => load ROM after netboot fails
    => console baud: 9600
    => autoboot from: commands specified in 'BOOT' environment variable
   
    do you wish to change the configuration? y/n  [n]:  y
    enable  "diagnostic mode"? y/n  [n]:  n
    enable  "use net in IP bcast address"? y/n  [n]:  n
    disable "load ROM after netboot fails"? y/n  [n]:  n
    enable  "use all zero broadcast"? y/n  [n]:  n
    enable  "break/abort has effect"? y/n  [n]:  n
    enable  "ignore system config info"? y/n  [n]:  y
   
    change console baud rate? y/n  [n]:  n
   
    change the boot characteristics? y/n  [n]:  n
   
    Configuration Summary : 
    => load ROM after netboot fails
    => ignore system config info
    => console baud: 9600
    => autoboot from: commands specified in 'BOOT' environment variable
   
    do you wish to save this configuration? y/n  [n]:   y 
    You must reset or power cycle for new configuration to take effect
   

   Nota: También puede utilizar el confreg 0x2142en el prompt ROMmon para establecer el valor del registro de configuración para saltar la configuración de inicio almacenada en la NVRAM.

   rommon 1 > confreg 0x2142
   You must reset or power cycle for the new configuration to take effect.

3. Ejecute el comando reset para que el módulo se reinicie.

   Debido a los cambios realizados en el paso 2, el módulo se reinicia pero ignora la configuración guardada.

   rommon 2 > reset
   
   Resetting ....... 
   
   rommon 3 > 
   
   ********************************************************** 
   *                                                        * 
   * Welcome to ROM Monitor for WS-X4014 System.            * 
   * Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
   * All rights reserved.                                   * 
   *                                                        * 
   **********************************************************
   
   !--- Output suppressed.  
   
   Press RETURN to get started! 
   
   !--- Press Return.  
   
   00:00:21: %SYS-5-RESTART: System restarted --
   Cisco Internetwork Operating System Software 
   IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
      Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
   TAC Support: http://www.cisco.com/tac
   Copyright (c) 1986-2002 by cisco Systems, Inc.
   Compiled Thu 24-Jan-02 17:34 by ccai
   00:00:21: %SNMP-5-COLDSTART: SNMP agent on host Switch 
      is undergoing a cold start
   Switch>

4. Asegúrese de que el valor del registro de configuración sea 0x2142.

   Este valor hace que el módulo arranque desde Flash sin una carga de la configuración guardada. Ejecute el comando enable en el indicador Switch para ir al modo de habilitación. Luego, ejecute el comando show version para verificar el valor del registro de configuración.

   Switch>enable
   Switch#show version
   Cisco Internetwork Operating System Software 
   IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M),
      Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
   TAC Support: http://www.cisco.com/tac
   Copyright (c) 1986-2002 by cisco Systems, Inc.
   Compiled Thu 24-Jan-02 17:34 by ccai
   Image text-base: 0x00000000, data-base: 0x00AA2B8C
   
   ROM: 12.1(10r)EY(1.21)
   Switch uptime is 5 minutes
   System returned to ROM by reload
   Running default software 
   
   cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
   Processor board ID FOX04183666 
   Last reset from Reload 
   32 Gigabit Ethernet/IEEE 802.3 interface(s) 
   467K bytes of non-volatile configuration memory. 
   
   Configuration register is 0x2142 
   
   Switch#

5. Ejecute el comando configure memory o el comando copy startup-config running-config para copiar la NVRAM en la memoria.

   No ejecute el configure terminal , que muestra la configuración predeterminada del módulo.

   Switch#configure memory
   
   Uncompressed configuration from 1307 bytes to 3014 bytes
   Switch#
   00:13:52: %SYS-5-CONFIG_I: Configured from memory by console
   c-4006-SUPIII#

6. Ejecute el comando show ip interface brief   para asegurarse de que las interfaces que estaban en uso anteriormente muestran un estado up/up.

   Si alguna de las interfaces que estaban en uso antes de que la recuperación de contraseña se muestre abajo, ejecute el comando no shutdown en esa interfaz para activar la interfaz.

7. Ejecute el comando write terminal o el comando show running-config para mostrar la configuración guardada en el módulo.

   c-4006-SUPIII# show running-config   
   Building configuration... 
   
   Current configuration : 3014 bytes 
   ! 
   version 12.1 
   no service pad 
   service timestamps debug uptime 
   service timestamps log uptime 
   no service password-encryption 
   service compress-config 
   ! 
   hostname c-4006-SUPIII 
   ! 
   boot system flash bootflash: 
   ! 
   vtp mode transparent 
   
   !--- Output suppressed.  
   
   line con 0
    stopbits 1
   line vty 0 4
    login
   ! 
   end 
   
   c-4006-SUPIII#

   Ahora ya puede cambiar la contraseña en el módulo.

8. Ejecute estos comandos para cambiar la contraseña:

   c-4006-SUPIII#configure terminal 
   Enter configuration commands, one per line.  End with CNTL/Z.
   c-4006-SUPIII(config)#no enable secret
   
   !--- This step is necessary if the switch had an enable secret password.
   
   c-4006-SUPIII(config)#enable secret < password > 
   [Choose a strong password with at least one capital letter,
    one number, and one special character.]
   
   !--- This command sets the new password.
   

9. Asegúrese de volver a cambiar el valor del registro de configuración a 0x2102.

   Complete estos pasos en elprompt de configuración para cambiar y verificar el valor del registro de configuración.

   c-4006-SUPIII(config)#config-register 0x2102
   c-4006-SUPIII(config)# ^Z
   c-4006-SUPIII#
   00:19:01: %SYS-5-CONFIG_I: Configured from console by console
   c-4006-SUPIII#write memory 
   
   !--- This step saves the configuration.
   
    Building  configuration... 
   Compressed configuration from 3061 bytes to 1365 bytes[OK] 
   c-4006-SUPIII#show version 
   
   !--- This step verifies the value change.  
   
   Cisco Internetwork Operating System Software 
   IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
      Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
   TAC Support: http://www.cisco.com/tac 
   Copyright (c) 1986-2002 by cisco Systems, Inc. 
   Compiled Thu 24-Jan-02 17:34 by ccai 
   Image text-base: 0x00000000, database: 0x00AA2B8C 
   
   ROM: 12.1(10r)EY(1.21) 
   c-4006-SUPIII uptime is 20 minutes 
   System returned to ROM by reload 
   Running default software 
   
   cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
   Processor board ID FOX04183666 
   Last reset from Reload 
   32 Gigabit Ethernet/IEEE 802.3 interface(s) 
   467K bytes of nonvolatile configuration memory. 
   
   Configuration register is 0x2142 (will be 0x2102 at next reload) 
   
   c-4006-SUPIII#

   En este momento, ha cambiado la contraseña.

Ejemplo de configuración y salida

Este ejemplo de resultado es el resultado del procedimiento de recuperación de contraseña en un Catalyst 4000 Supervisor Engine III.

c-4006-SUPIII> enable
Password: 
Password: 
Password: 
% Bad secrets 

!--- Here, you power cycle the switch.

********************************************************** 
*                                                        * 
* Welcome to ROM Monitor for WS-X4014 System.            * 
* Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
* All rights reserved.                                   * 
*                                                        * 
**********************************************************
 
 ROM Monitor Program Version 12.1(10r)EY(1.21) 

 Board type 1, Board revision 7
 Swamp FPGA revision 16, Dagobah FPGA revision 43 
 
 Timer interrupt test passed.

 MAC Address  : 00-02-b9-83-af-fe 
 IP Address   : 172.16.84.122 
 Netmask      : 255.255.255.0 
 Gateway      : 172.16.84.1 
 TftpServer   : Not set. 
 Main Memory  : 256 Mbytes


 ***** The system  will  autoboot in 5 seconds ***** 

Type control-C to prevent autobooting. 

!--- At this point, press Ctrl-C.  

Autoboot cancelled......... please wait!!! 
Autoboot cancelled......... please wait!!! 
rommon 1 > [interrupt] 

rommon 1 > [interrupt] 

rommon 1 > confreg 

Configuration Summary : 
=> load ROM after netboot fails 
=> console baud: 9600 
=> autoboot from: commands specified in 'BOOT' environment variable 

do you wish to change the configuration? y/n [n]: y 
enable "diagnostic mode"? y/n [n]: n 
enable "use net in IP bcast address"? y/n [n]: n 
disable "load ROM after netboot fails"? y/n [n]: n 
enable "use all zero broadcast"? y/n [n]: n 
enable "break/abort has effect"? y/n [n]: n 
enable "ignore system config info"? y/n [n]: y 

change console baud rate? y/n [n]: n 

change the boot characteristics? y/n [n]: n 

Configuration Summary : 
=> load ROM after netboot fails 
=> ignore system config info 
=> console baud: 9600 
=> autoboot from: commands specified in 'BOOT' environment variable 

do you wish to save this configuration? y/n [n]: y 
You must reset or power cycle for new configuration to take effect 

rommon 2 > reset 

Resetting ....... 

rommon 3 > 

********************************************************** 
*                                                        * 
* Welcome to ROM Monitor for WS-X4014 System.            * 
* Copyright (c) 1999-2000, 2001 by Cisco Systems, Inc.   * 
* All rights reserved.                                   * 
*                                                        * 
**********************************************************

ROM Monitor Program Version 12.1(10r)EY(1.21) 
Board type 1, Board revision 7 
Swamp FPGA revision 16, 
Dagobah FPGA revision 43 

Timer interrupt test passed. 

MAC Address : 00-02-b9-83-af-fe 
IP Address : 172.16.84.122 
Netmask : 255.255.255.0 
Gateway : 172.16.84.1 
TftpServer : Not set.
Main Memory : 256 Mbytes 

***** The system will autoboot in 5 seconds ***** 

Type control-C to prevent autobooting. 
. . . . . 

******** The system will autoboot now ******** 


config-register = 0x2142  
Autobooting using BOOT variable specified file..... 

Current BOOT file is --- bootflash: 

Rommon reg: 0x2B004180 
Decompressing the image : ########################### 
##################################################### 
####################################### [OK] 

k2diags version 1.6 

prod: WS-X4014 part: 73-6854-07 serial: JAB0546060Z 

Power-on-self-test for Module 1: WS-X4014 
Status: (. = Pass, F = Fail) 

Traffic using serdes loopback (L2; one port at a time)... 
switch port 0: . switch port 1: . switch port 2: . 
switch port 3: . switch port 4: . switch port 5: . 
switch port 6: . switch port 7: . switch port 8: . 

!--- Output suppressed.  

Module 1 Passed 


Exiting to ios... 

Rommon reg: 0x2B000180 
Decompressing the image : ########################## 

!--- Output suppressed.  

######################################################### [OK] 

              Restricted Rights Legend  

Use, duplication, or disclosure by the Government is 
subject to restrictions as set forth in subparagraph 
(c) of the Commercial Computer Software - Restricted 
Rights clause at FAR sec. 52.227-19 and subparagraph 
(c) (1) (ii) of the Rights in Technical Data and Computer 
Software clause at DFARS sec. 252.227-7013. 

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco Internetwork Operating System Software 
IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M),
   Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Thu 24-Jan-02 17:34 by ccai
Image text-base: 0x00000000, database: 0x00AA2B8C


cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
Processor board ID FOX04183666 
Last reset from Reload 
32 Gigabit Ethernet/IEEE 802.3 interface(s) 
467K bytes of nonvolatile configuration memory. 


Press RETURN to get started! 

00:00:21: %SYS-5-RESTART: System restarted -- 
Cisco Internetwork Operating System Software
IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M),
   Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac 
Copyright (c) 1986-2002 by cisco Systems, Inc. 
Compiled Thu 24-Jan-02 17:34 by ccai 
00:00:21: %SNMP-5-COLDSTART: SNMP agent on host Switch is undergoing a cold start 
Switch>enable 
Switch#show version 
Cisco Internetwork Operating System Software 
IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
Version 12.1(8a)EW, RELEASE SOFTWARE (fc1) 
TAC Support: http://www.cisco.com/tac 
Copyright (c) 1986-2002 by cisco Systems, Inc. 
Compiled Thu 24-Jan-02 17:34 by ccai 
Image text-base: 0x00000000, database: 0x00AA2B8C 

ROM: 12.1(10r)EY(1.21) 
Switch uptime is 5 minutes 
System returned to ROM by reload 
Running default software 

cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
Processor board ID FOX04183666 
Last reset from Reload 
32 Gigabit Ethernet/IEEE 802.3 interface(s) 
467K bytes of nonvolatile configuration memory. 

Configuration register is 0x2142 

Switch# 

Switch#configure memory 

Uncompressed configuration from 1307 bytes to 3014 bytes 
c-4006-SUPIII# 
00:13:52: %SYS-5-CONFIG_I: Configured from memory by console 
c-4006-SUPIII#show running-config  
Building configuration... 

Current configuration : 3014 bytes 
! 
version 12.1 
no service pad 
service timestamps debug uptime 
service timestamps log uptime 
no service password-encryption 
service compress-config 
! 
hostname c-4006-SUPIII 
! 
boot system flash bootflash: 
! 
vtp mode transparent 
!
vlan 20
  private-vlan primary
!
vlan 100
!
vlan 202
  private-vlan association 440
!         
vlan 440
  private-vlan isolated
!
vlan 500
ip subnet-zero
no ip domain-lookup
!
ip multicast-routing
!
!
interface GigabitEthernet1/1
 no switchport
 ip address 10.1.1.1 255.255.255.0
 ip pim dense-mode
!
interface GigabitEthernet1/2
 no switchport
 ip address 10.2.2.2 255.255.255.0
! 

!--- Output suppressed.  

! 
interface Vlan1
 ip address 172.16.84.140 255.255.255.0
 ip pim dense-mode
!
interface Vlan2
 no ip address
 shutdown
!
interface Vlan20
 no ip address
 shutdown
! 

!--- Output suppressed.  

! 
line con 0
 stopbits 1
line vty 0 4
 login
! 
end 

c-4006-SUPIII#configure terminal  
Enter configuration commands, one per line. End with CNTL/Z. 
c-4006-SUPIII(config)#no enable secret

!--- This step is necessary if the switch had an enable secret password. 

c-4006-SUPIII(config)#enable secret < password >
[Choose a strong password with at least one capital letter, 
one number, and one special character.] 
c-4006-SUPIII(config)#config-register 0x2102 
c-4006-SUPIII(config)#^Z 
c-4006-SUPIII# 
00:19:01: %SYS-5-CONFIG_I: Configured from console by console 
c-4006-SUPIII#write memory 
Building configuration... 
Compressed configuration from 3061 bytes to 1365 bytes[OK] 
c-4006-SUPIII#show version 
Cisco Internetwork Operating System Software 
IOS (TM) Catalyst 4000 L3 Switch Software (cat4000-IS-M), 
   Version 12.1(8a)EW,  RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac 
Copyright (c) 1986-2002 by cisco Systems, Inc. 
Compiled Thu 24-Jan-02 17:34 by ccai 
Image text-base: 0x00000000, database: 0x00AA2B8C 

ROM: 12.1(10r)EY(1.21) 
c-4006-SUPIII uptime is 20 minutes 
System returned to ROM by reload 
Running default software 

cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory. 
Processor board ID FOX04183666 
Last reset from Reload 
32 Gigabit Ethernet/IEEE 802.3 interface(s) 
467K bytes of nonvolatile configuration memory. 

Configuration register is 0x2142 (will be 0x2102 at next reload) 

c-4006-SUPIII#

Información Relacionada

• Combinaciones de Secuencias Estándar de Teclas de Interrupción Durante la Recuperación de Contraseña
• Procedimientos para Recuperación de Contraseñas
• Soporte Técnico al switch LAN
• Soporte Técnico y Documentación - Cisco Systems