Este original descreve como recuperar a senha da possibilidade e as senhas secretas "enable" (habilitação). Essas senhas protegem o acesso aos modos EXEC privilegiado e de configuração. A senha senha da possibilidade pode ser recuperada, mas a senha secreta "enable" (habilitação) é cifrada e deve ser substituída com uma senha nova. Use o procedimento descrito neste original a fim substituir a senha secreta "enable" (habilitação).
Não existem requisitos específicos para este documento.
A informação neste documento é baseada nestas versões de hardware:
Roteador dos Serviços integrados do Cisco 2900 Series (ISR)
As informações neste documento foram criadas a partir de dispositivos em um ambiente de laboratório específico. Todos os dispositivos utilizados neste documento foram iniciados com uma configuração (padrão) inicial. Se a sua rede estiver ativa, certifique-se de que entende o impacto potencial de qualquer comando.
Refira procedimentos de recuperação de senha para obter informações sobre de como recuperar senhas para produtos relacionados.
Consulte as Convenções de Dicas Técnicas da Cisco para obter mais informações sobre convenções de documentos.
Execute estas etapas a fim recuperar a sua senha:
Um ou outro desligar ou fechado o roteador.
Remova o flash compacto que está na parte traseira do roteador. Esta imagem mostra a parte traseira do 2951 Router:
Para mais informação, refira entalhes e conectores do painel traseiro nos Cisco 2921 e 2951 Router.
Ligue o roteador.
Uma vez que o roteador está no modo ROMMON, reintroduza o flash compacto.
Datilografe o confreg 0x2142 no alerta do rommon 1> a fim carreg do flash.
Este passo ignora a configuração de inicialização onde as senhas são armazenadas.
Datilografe a restauração no alerta do rommon 2>.
As repartições do roteador, mas ignoram a configuração salva.
Datilografe não após cada pergunta da instalação, ou pressione o Ctrl-c a fim saltar o procedimento de instalação inicial.
O tipo permite no alerta de Router>.
Você está no modo enable e deve ver o prompt Router#.
O tipo configura a memória ou a executar-configuração do copy startup-config a fim copiar o RAM não-volátil (NVRAM) na memória.
aviso: Não incorpore a partida-configuração da executar-configuração da cópia nem escreva-a. Estes comandos erase sua configuração de inicialização.
Emita o comando show running-config.
O comando show running-config mostra a configuração do roteador. Nesta configuração, o comando shutdown aparece sob todas as relações, que indica que todas as relações estão fechadas atualmente. Além, as senhas (permita a senha, permita o segredo, vty, e as senhas de console) são no um ou outro um formato criptografado ou não criptografado. Você pode reutilizar senhas não criptografadas. No entanto, as senhas criptografadas devem ser alteradas para um novo valor.
O tipo configura o terminal.
O prompt hostname(config)# é exibido.
O tipo permite o <password> secreto a fim mudar a senha secreta "enable" (habilitação). Por exemplo:
hostname(config)#enable secret cisco
Emita o comando no shutdown em cada relação que você se usa.
Se você emite um comando show ip interface brief, cada relação que você quer usar deve indicar acima acima.
Datilografe o <configuration_register_setting> do configuração-registro. Onde o <configuration_register_setting> é o valor você gravou na etapa 2 ou 0x2102. Por exemplo:
hostname(config)#config-register 0x2102
Pressione o Ctrl-z ou termine-o a fim deixar o modo de configuração.
O prompt hostname# é exibido.
O tipo escreve a partida-configuração da executar-configuração da memória ou da cópia a fim comprometer as mudanças.
Esta seção fornece um exemplo do procedimento de recuperação de senhas. Este exemplo foi criado com um Cisco 2900 Series ISR. Mesmo se você não usa um Cisco 2900 Series ISR, esta saída fornece um exemplo do que você deve experimentar em seu produto.
Router> enable Password: Password: Password: % Bad secrets Router> show version Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Wed 02-Dec-09 15:23 by prod_rel_team ROM: System Bootstrap, Version 15.0(1r)M1, RELEASE SOFTWARE (fc1) c2921-CCP-1-xfr uptime is 2 weeks, 22 hours, 15 minutes System returned to ROM by reload at 06:06:52 PCTime Mon Apr 2 1900 System restarted at 06:08:03 PCTime Mon Apr 2 1900 System image file is "flash:c2900-universalk9-mz.SPA.150-1.M1.bin" Last reload reason: Reload Command This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco CISCO2921/K9 (revision 1.0) with 475136K/49152K bytes of memory. Processor board ID FHH1230P04Y 1 DSL controller 3 Gigabit Ethernet interfaces 9 terminal lines 1 Virtual Private Network (VPN) Module 1 Cable Modem interface 1 cisco Integrated Service Engine-2(s) Cisco Foundation 2.2.1 in slot 1 DRAM configuration is 64 bits wide with parity enabled. 255K bytes of non-volatile configuration memory. 248472K bytes of ATA System CompactFlash 0 (Read/Write) 62720K bytes of ATA CompactFlash 1 (Read/Write) Technology Package License Information for Module:'c2900' ---------------------------------------------------------------- Technology Technology-package Technology-package Current Type Next reboot ----------------------------------------------------------------- ipbase ipbasek9 Permanent ipbasek9 security securityk9 Permanent securityk9 uc uck9 Permanent uck9 data datak9 Permanent datak9 Configuration register is 0x2102 Router> !--- Execute Steps 1 through 4 from Step-by-Step Procedure. ! rommon 1 > confreg 0x2142 You must reset or power cycle for new config to take effect rommon 2 > reset System Bootstrap, Version 15.0(1r)M1, RELEASE SOFTWARE (fc1) Copyright (c) 2009 by cisco Systems, Inc. TAC:Home:SW:IOS:Specials for info C2900 platform with 524288 Kbytes of main memory program load complete, entry point: 0x80008000, size: 0x6fdb4c Self decompressing the image : ############################### ############################################################## ############################################################## ############################################################## ############################### [OK] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Wed 02-Dec-09 15:23 by prod_rel_team Cisco CISCO2921/K9 (revision 1.0) with 475136K/49152K bytes of memory. Processor board ID FHH1230P04Y 1 DSL controller 3 Gigabit Ethernet interfaces 9 terminal lines 1 Virtual Private Network (VPN) Module 1 Cable Modem interface 1 cisco Integrated Service Engine-2(s) Cisco Foundation 2.2.1 in slot 1 DRAM configuration is 64 bits wide with parity enabled. 255K bytes of non-volatile configuration memory. 248472K bytes of ATA System CompactFlash 0 (Read/Write) 62720K bytes of ATA CompactFlash 1 (Read/Write) --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: n Press RETURN to get started! 00:00:19: %LINK-3-UPDOWN: Interface BRI0/0, changed state to up 00:00:19: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up 00:00:19: %LINK-3-UPDOWN: Interface Ethernet0/1, changed state to up 00:00:19: %LINK-3-UPDOWN: Interface Serial0/0, changed state to down 00:00:19: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down 00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0, changed state to down 00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to up Router> 00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/1, changed state to up 00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to down 00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state to down 00:00:50: %SYS-5-RESTART: System restarted -- Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Wed 02-Dec-09 15:23 by prod_rel_team 00:00:50: %LINK-5-CHANGED: Interface BRI0/0, changed state to administratively down 00:00:52: %LINK-5-CHANGED: Interface Ethernet0/0, changed state to administratively down 00:00:52: %LINK-5-CHANGED: Interface Serial0/0, changed state to administratively down 00:00:52: %LINK-5-CHANGED: Interface Ethernet0/1, changed state to administratively down 00:00:52: %LINK-5-CHANGED: Interface Serial0/1, changed state to administratively down 00:00:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to down 00:00:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/1, changed state to down Router> Router>enable Router#copy startup-config running-config Destination filename [running-config]? 1324 bytes copied in 2.35 secs (662 bytes/sec) Router# 00:01:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0:1, changed state to down 00:01:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0:2, changed state to down Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#enable secret < password > Router(config)#^Z 00:01:54: %SYS-5-CONFIG_I: Configured from console by console Router#show ip interface brief Interface IP-Address OK? Method Status Protocol Ethernet0/0 10.200.40.37 YES TFTP administratively down down Serial0/0 unassigned YES TFTP administratively down down BRI0/0 193.251.121.157 YES unset administratively down down BRI0/0:1 unassigned YES unset administratively down down BRI0/0:2 unassigned YES unset administratively down down Ethernet0/1 unassigned YES TFTP administratively down down Serial0/1 unassigned YES TFTP administratively down down Loopback0 193.251.121.157 YES TFTP up up Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface Ethernet0/0 Router(config-if)#no shutdown Router(config-if)# 00:02:14: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up 00:02:15: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to up Router(config-if)#interface BRI0/0 Router(config-if)#no shutdown Router(config-if)# 00:02:26: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to down 00:02:26: %LINK-3-UPDOWN: Interface BRI0/0:2, changed state to down 00:02:26: %LINK-3-UPDOWN: Interface BRI0/0, changed state to up 00:02:115964116991: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, TEI 68 changed to up Router(config-if)#^Z Router# 00:02:35: %SYS-5-CONFIG_I: Configured from console by console Router#copy running-config startup-config Destination filename [startup-config]? Building configuration... [OK] Router#show version Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Wed 02-Dec-09 15:23 by prod_rel_team ROM: System Bootstrap, Version 15.0(1r)M1, RELEASE SOFTWARE (fc1) c2921-CCP-1-xfr uptime is 2 weeks, 22 hours, 15 minutes System returned to ROM by reload at 06:06:52 PCTime Mon Apr 2 1900 System restarted at 06:08:03 PCTime Mon Apr 2 1900 System image file is "flash:c2900-universalk9-mz.SPA.150-1.M1.bin" Last reload reason: Reload Command Cisco CISCO2921/K9 (revision 1.0) with 475136K/49152K bytes of memory. Processor board ID FHH1230P04Y 1 DSL controller 3 Gigabit Ethernet interfaces 9 terminal lines 1 Virtual Private Network (VPN) Module 1 Cable Modem interface 1 cisco Integrated Service Engine-2(s) Cisco Foundation 2.2.1 in slot 1 DRAM configuration is 64 bits wide with parity enabled. 255K bytes of non-volatile configuration memory. 248472K bytes of ATA System CompactFlash 0 (Read/Write) 62720K bytes of ATA CompactFlash 1 (Read/Write) Configuration register is 0x2102 Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#config-register 0x2102 Router(config)#^Z 00:03:20: %SYS-5-CONFIG_I: Configured from console by console Router#show version Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Wed 02-Dec-09 15:23 by prod_rel_team ROM: System Bootstrap, Version 15.0(1r)M1, RELEASE SOFTWARE (fc1) c2921-CCP-1-xfr uptime is 2 weeks, 22 hours, 15 minutes System returned to ROM by reload at 06:06:52 PCTime Mon Apr 2 1900 System restarted at 06:08:03 PCTime Mon Apr 2 1900 System image file is "flash:c2900-universalk9-mz.SPA.150-1.M1.bin" Last reload reason: Reload Command Cisco CISCO2921/K9 (revision 1.0) with 475136K/49152K bytes of memory. Processor board ID FHH1230P04Y 1 DSL controller 3 Gigabit Ethernet interfaces 9 terminal lines 1 Virtual Private Network (VPN) Module 1 Cable Modem interface 1 cisco Integrated Service Engine-2(s) Cisco Foundation 2.2.1 in slot 1 DRAM configuration is 64 bits wide with parity enabled. 255K bytes of non-volatile configuration memory. 248472K bytes of ATA System CompactFlash 0 (Read/Write) 62720K bytes of ATA CompactFlash 1 (Read/Write) Configuration register is 0x2142 (will be 0x2102 at next reload) Router#
Nota: A fim recuperar a sua senha quando a funcionalidade da recuperação de senha é desabilitada, refira a recuperação de uma seção do dispositivo de nenhuma recuperação de senha do serviço.