XE-SDWAN에서 비밀번호 복구
다운로드 옵션
업데이트:2023년 5월 8일
문서 ID:214980
편견 없는 언어
본 제품에 대한 문서 세트는 편견 없는 언어를 사용하기 위해 노력합니다. 본 설명서 세트의 목적상, 편견 없는 언어는 나이, 장애, 성별, 인종 정체성, 민족 정체성, 성적 지향성, 사회 경제적 지위 및 교차성에 기초한 차별을 의미하지 않는 언어로 정의됩니다. 제품 소프트웨어의 사용자 인터페이스에서 하드코딩된 언어, RFP 설명서에 기초한 언어 또는 참조된 서드파티 제품에서 사용하는 언어로 인해 설명서에 예외가 있을 수 있습니다. 시스코에서 어떤 방식으로 포용적인 언어를 사용하고 있는지 자세히 알아보세요.
이 번역에 관하여
Cisco는 전 세계 사용자에게 다양한 언어로 지원 콘텐츠를 제공하기 위해 기계 번역 기술과 수작업 번역을 병행하여 이 문서를 번역했습니다. 아무리 품질이 높은 기계 번역이라도 전문 번역가의 번역 결과물만큼 정확하지는 않습니다. Cisco Systems, Inc.는 이 같은 번역에 대해 어떠한 책임도 지지 않으며 항상 원본 영문 문서(링크 제공됨)를 참조할 것을 권장합니다.
소개
이 문서에서는 XE-SDWAN에서 비밀번호를 복구하는 절차에 대해 설명합니다.
사전 요구 사항
요구 사항
이 문서에 대한 특정 요건이 없습니다.
사용되는 구성 요소
이 문서의 정보는 특정 랩 환경의 디바이스를 토대로 작성되었습니다. 이 문서에 사용된 모든 디바이스는 초기화된(기본) 컨피그레이션으로 시작되었습니다. 현재 네트워크가 작동 중인 경우 모든 명령의 잠재적인 영향을 미리 숙지하시기 바랍니다.
문제
XE-SDWAN(버전 16.10.3 이후)에서는 보안 상의 이유로 인해 기본 일회용 관리자 비밀번호가 있으며, 이는 사용자가 쉽게 무시할 수 있으며 잠재적으로 사용자 잠금 상황을 초래할 수 있습니다.
이는 vManage 컨트롤러와의 제어 연결이 설정되지 않은 경우 초기 라우터 설정 중에 특히 위험합니다. 사용자 이름 및 비밀번호가 설정된 새 템플릿을 연결할 수 없습니다.
이 글은 복구 방법에 대한 자세한 절차를 제공합니다.
Username: admin Password: Router#
Sep 23 20:36:03.133: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed.
기본 admin/admin 자격 증명으로 로그인한 후 콘솔에 표시되는 새 메시지입니다.
참고: 이 절차에서는 현재 컨피그레이션을 지웁니다. 따라서 가능한 경우 컨피그레이션을 백업한 후 계속 진행하십시오.
솔루션
이는 디바이스가 콘솔 로그의 일회성 비밀번호 메시지를 무시하므로 디바이스가 잠기는 방법의 예입니다.
rommon 2 > boot bootflash:asr1000-ucmk9.16.10.3a.SPA.bin File size is 0x2f7f66c6 Located asr1000-ucmk9.16.10.3a.SPA.bin Image size 796878534 inode num 17, bks cnt 194551 blk size 8*512 ################################################################################################################################################################################################################################################################################################################################################################################################################################ Boot image size = 796878534 (0x2f7f66c6) bytes <<<<<<<< OUTPUT TRIMMED >>>>>>>>> Press RETURN to get started!
<<<<<<<< OUTPUT TRIMMED >>>>>>>>>
*Sep 23 20:35:33.558: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 2218 in vpn 0 *Sep 23 20:35:33.635: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting *Sep 23 20:35:33.725: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting *Sep 23 20:35:33.823: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting *Sep 23 20:35:33.953: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms *Sep 23 20:35:34.424: %Cisco-SDWAN-Router-FTMD-4-WARN-1000007: R0/0: FTMD: Connection to TTM came up. p_msgq 0x7fe1b3235500 p_ftm 0x9a3020 *Sep 23 20:35:41.475: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized. *Sep 23 20:35:44.975: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up *Sep 23 20:35:44.991: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144) *Sep 23 20:35:45.025: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr *Sep 23 20:35:45.025: Console Enabled *Sep 23 20:35:45.025: SDWAN INFO: PNP start, status: success *Sep 23 20:35:45.023: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state. *Sep 23 20:35:45.888: EXEC mode enabled on console User Access Verification Username: admin Password: Router# *Sep 23 20:36:03.133: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed. *Sep 23 20:36:03.240: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 14 Router#exit Press RETURN to get started. User Access Verification Username: admin Password: % Login invalid Press RETURN to get started. User Access Verification Username: Login incorrect Username:
1단계. 다음 단계로 프로세스를 시작합니다.
- 라우터의 전원을 껐다가 켜고 브레이크 시퀀스(ctrl+break, ctrl+c)를 사용하여 강제로 ROMmon 모드로 들어갑니다.
- 컨피그레이션 레지스터를 0xA102 또는 0x8000으로 변경합니다.
참고: 0xA102는 사용자 오류가 발생하기 쉽기 때문에 권장됩니다. 예를 들어 실수로 컨피그레이션 레지스터를 0x8000 대신 0x800으로 설정한 경우(3이 아닌 2개의 0) 콘솔 전송 속도는 컨피그레이션 우회 대신 4800으로 설정됩니다. 컨피그레이션 레지스터에 대한 자세한 내용은 다음을 참조하십시오. https://www.cisco.com/c/en/us/support/docs/routers/10000-series-routers/50421-config-register-use.html
참고: Cisco IOS® XE Software에서는 0x2142 컨피그레이션 레지스터로 컨피그레이션 우회를 수행할 수 없습니다. Cisco IOS® XE SD-WAN 소프트웨어는 플래시의 CDB(Configuration Data Base)에서 다른 방식으로 컨피그레이션을 저장하기 때문입니다. Cisco IOS® XE SD-WAN 소프트웨어 16.10.1에서 비트 15는 컨피그레이션을 우회하도록 1로 설정할 수 있습니다. 따라서 컨피그레이션 레지스터는 예를 들어 0xA102입니다. 이는 기본 레지스터 0x2102의 16진수 값과 함께 비트 15(0x8000)의 결과입니다.
3. 상자를 재설정합니다(명령의 출력 선택).
Initializing Hardware ... System integrity status: 90170400 12030117 U System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE Copyright (c) 1994-2016 by cisco Systems, Inc. Current image running: Boot ROM1 Last reset cause: PowerOn Warning: Octeon PCIe lanes not x2 width: sts=0x5011 ASR1001-HX platform with 16777216 Kbytes of main memory rommon 1 > confreg 0x8000 You must reset or power cycle for new config to take effect rommon 2 > i Reset ....... Initializing Hardware ... System integrity status: 90170400 12030117 Trixie configured CaveCreek Link Status reg: Bus/Dev/Func: 0/28/1, offset 0x52, status = 00003011Times left ms:0000005C Initializing DS31408... Read MB FPGA Version: 0x16051716 DS31408 locked to local Oscillator Taking Yoda out of reset... Yoda VID enabled... Crypto enabled... Warning: Octeon PCIe link width not x2: sts=00001001 requesting link retrain Astro enabled... Astro PLL/bandgap init... NP5c out of reset... U System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE Copyright (c) 1994-2016 by cisco Systems, Inc. CPLD Version: 16033009 ASR1001-HX Slot:0 Current image running: Boot ROM1 Last reset cause: LocalSoft Reading confreg 0x8000 Enabling interrupts Initializing SATA controller...done Checking for PCIe device presence... Warning: Octeon PCIe lanes not x2 width: sts=0x5011 done ASR1001-HX platform with 16777216 Kbytes of main memory autoboot entry: NVRAM VALUES: bootconf: 0x0, autobootstate: 0 autobootcount: 0, autobootsptr: 0x0
2단계. rommon에서 XE-SDWAN .bin 이미지를 부팅합니다.
rommon 3 > boot bootflash:asr1000-ucmk9.16.10.3a.SPA.bin Warning: filesystem is not clean File size is 0x2f7f66c6 Located asr1000-ucmk9.16.10.3a.SPA.bin Image size 796878534 inode num 17, bks cnt 194551 blk size 8*512 ####################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### File is comprised of 200 fragments (0%) <<<<<< OUTPUT TRIMMED >>>>>>>> Press RETURN to get started!
<<<<<< OUTPUT TRIMMED >>>>>>>> *Sep 23 20:47:34.124: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon cfgmgr @ pid 5018 in vpn 0 *Sep 23 20:47:34.125: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon fpmd @ pid 5019 in vpn 0 *Sep 23 20:47:34.125: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ftmd @ pid 5020 in vpn 0 *Sep 23 20:47:34.126: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ompd @ pid 5021 in vpn 0 *Sep 23 20:47:34.127: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ttmd @ pid 5022 in vpn 0 *Sep 23 20:47:34.127: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 5023 in vpn 0 *Sep 23 20:47:34.214: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting *Sep 23 20:47:34.307: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting *Sep 23 20:47:34.382: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting *Sep 23 20:47:34.525: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms *Sep 23 20:47:41.143: %ONEP_BASE-6-CONNECT: [Element]: ONEP session Application:com.cisco.syncfd Host:Router ID:726 User:a has connected. *Sep 23 20:47:41.997: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized. *Sep 23 20:47:45.480: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up *Sep 23 20:47:45.495: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144) *Sep 23 20:47:45.534: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr *Sep 23 20:47:45.534: Console Enabled *Sep 23 20:47:45.534: SDWAN INFO: PNP start, status: success *Sep 23 20:47:45.531: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state. *Sep 23 20:47:45.945: EXEC mode enabled on console
3단계. 기본 관리자 자격 증명으로 로그인합니다.
User Access Verification Username: admin Password: Router# *Sep 23 20:48:16.659: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed. *Sep 23 20:48:16.767: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 14 Router#
Router#sh ver | i Configuration register
Configuration register is 0x8000
4단계. 이는 필수 단계입니다.
- 컨피그레이션 레지스터를 다시 0x2102로 변경하고 sdwan 소프트웨어 재설정을 수행합니다. 이렇게 하면 존재하는 모든 컨피그레이션이 지워집니다.
- 이 단계에서 라우터가 재부팅되고 packages.conf 컨피그레이션 파일에 지정된 소프트웨어로 부팅됩니다.
Router#request platform software sdwan software reset *Sep 23 20:52:17.400: %INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install activate bootflash:asr1000-ucmk9.16.10.3a.SPA.bin *Sep 23 20:52:23.919: %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram Router# *Sep 23 20:52:47.943: %INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install activate PACKAGESep 23 20:53:04.302: Initializing Hardware ... System integrity status: 90170400 12030117 U System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE Copyright (c) 1994-2016 by cisco Systems, Inc. Current image running: Boot ROM1 Last reset cause: LocalSoft Warning: Octeon PCIe lanes not x2 width: sts=0x5011 ASR1001-HX platform with 16777216 Kbytes of main memory File size is 0x00001a47 Located packages.conf Image size 6727 inode num 1120114, bks cnt 2 blk size 8*512 # File size is 0x01e7df8e Located asr1000-rpboot.16.10.3a.SPA.pkg Image size 31973262 inode num 1120126, bks cnt 7806 blk size 8*512 ######################################################################################################################################################################################################################################################################################################################## Boot image size = 31973262 (0x1e7df8e) bytes ROM:RSA Self Test Passed ROM:Sha512 Self Test Passed
<<<<<< OUTPUT TRIMMED >>>>>>>>
*Sep 23 20:57:13.347: %ONEP_BASE-6-CONNECT: [Element]: ONEP session Application:com.cisco.syncfd Host:Router ID:8029 User:a has connected. *Sep 23 20:57:15.226: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon cfgmgr @ pid 4435 in vpn 0 *Sep 23 20:57:15.227: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon fpmd @ pid 4436 in vpn 0 *Sep 23 20:57:15.228: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ftmd @ pid 4437 in vpn 0 *Sep 23 20:57:15.229: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ompd @ pid 4438 in vpn 0 *Sep 23 20:57:15.229: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ttmd @ pid 4439 in vpn 0 *Sep 23 20:57:15.230: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 4440 in vpn 0 *Sep 23 20:57:15.308: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting *Sep 23 20:57:15.391: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting *Sep 23 20:57:15.484: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting *Sep 23 20:57:15.620: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms *Sep 23 20:57:16.092: %Cisco-SDWAN-Router-FTMD-4-WARN-1000007: R0/0: FTMD: Connection to TTM came up. p_msgq 0x7f5815c35500 p_ftm 0x9a3020 *Sep 23 20:57:27.380: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized. *Sep 23 20:57:35.032: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up *Sep 23 20:57:35.048: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144) *Sep 23 20:57:35.081: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr *Sep 23 20:57:35.081: Console Enabled *Sep 23 20:57:35.081: SDWAN INFO: PNP start, status: success *Sep 23 20:57:35.079: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state. *Sep 23 20:57:35.682: EXEC mode enabled on console
5단계. 이제 다시 한 번 1회 관리자 자격 증명을 묻는 메시지가 표시됩니다. 이 단계 후에는 기본 비밀번호를 변경하는 것을 잊지 마십시오. 또한 사용자를 추가하는 것이 좋습니다. 이 단계를 놓쳐 잠기면 모든 단계를 다시 반복해야 합니다.
User Access Verification Username: admin Password: Router# *Sep 23 20:58:18.048: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed. *Sep 23 20:58:18.155: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 18 Router#confi Router#config-tr System is still initializing. Wait for PnP to be completed or terminate PnP with the command: pnpa service discovery stop Router#pnpa service discovery stop PNP-EXEC-DISCOVERY (1): Stopping PnP Discovery... Waiting for PnP discovery cleanup .. Router# *Sep 23 20:58:48.997: %PNP-6-PNP_DISCOVERY_ABORT_ON_CLI: PnP Discovery abort on CLI input *Sep 23 20:58:48.999: %DMI-5-SYNC_START: R0/0: syncfd: External change to running configuration detected. The running configuration will be synchronized to the NETCONF running data store. *Sep 23 20:58:54.955: %DMI-5-SYNC_COMPLETE: R0/0: syncfd: The running configuration has been synchronized to the NETCONF running data store. *Sep 23 20:58:54.955: %DMI-5-ACTIVE: R0/0: syncfd: process is in steady state. *Sep 23 20:58:55.150: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 181 *Sep 23 20:58:55.676: %Cisco-SDWAN-Router-SYSMGR-5-NTCE-200050: R0/0: SYSMGR: System status solid green (reason: All daemons up) Router# *Sep 23 20:59:00.083: %INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install commit PACKAGE *Sep 23 20:59:00.327: %INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install commit PACKAGE Router#sh ver | i register Configuration register is 0x2102 Router#sh sdwan ver *Sep 23 20:59:12.640: %PNP-6-PNP_DISCOVERY_ABORT_ON_CLI: PnP Discovery abort on CLI input *Sep 23 20:59:12.640: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Discovery Aborted)16.10.3a Router# Router#sh sdwan ver 16.10.3a Router# Router#conf Router#config-tr admin connected from 127.0.0.1 with console on Router Router(config)# username admin privilege 15 secret <your password> Router(config)# username sdwan privilege 15 secret <your password> Router(config)# comm Commit complete. Router(config)# *Sep 23 21:00:59.270: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by admin, transaction-id 204 Router(config)# end
6단계. 새로 생성한 사용자 이름 및 비밀번호로 디바이스에 계속 액세스할 수 있는지 확인합니다.
Router#exit Router con0 is now available Press RETURN to get started. User Access Verification Username: admin Password: Router>en Router# Router#exit Router con0 is now available Press RETURN to get started. User Access Verification Username: sdwan Password: Router>en Router#
개정 이력
| 개정 | 게시 날짜 | 의견 |
|---|---|---|
3.0 |
08-May-2023 |
재인증 |
1.0 |
21-Oct-2019 |
최초 릴리스 |
피드백