Recupere a senha no XE-SDWAN
Opções de download
Linguagem imparcial
O conjunto de documentação deste produto faz o possível para usar uma linguagem imparcial. Para os fins deste conjunto de documentação, a imparcialidade é definida como uma linguagem que não implica em discriminação baseada em idade, deficiência, gênero, identidade racial, identidade étnica, orientação sexual, status socioeconômico e interseccionalidade. Pode haver exceções na documentação devido à linguagem codificada nas interfaces de usuário do software do produto, linguagem usada com base na documentação de RFP ou linguagem usada por um produto de terceiros referenciado. Saiba mais sobre como a Cisco está usando a linguagem inclusiva.
Sobre esta tradução
A Cisco traduziu este documento com a ajuda de tecnologias de tradução automática e humana para oferecer conteúdo de suporte aos seus usuários no seu próprio idioma, independentemente da localização. Observe que mesmo a melhor tradução automática não será tão precisa quanto as realizadas por um tradutor profissional. A Cisco Systems, Inc. não se responsabiliza pela precisão destas traduções e recomenda que o documento original em inglês (link fornecido) seja sempre consultado.
Introdução
Este documento descreve o procedimento para recuperar a senha em XE-SDWAN.
Pré-requisitos
Requisitos
Não existem requisitos específicos para este documento.
Componentes Utilizados
As informações neste documento foram criadas a partir de dispositivos em um ambiente de laboratório específico. Todos os dispositivos utilizados neste documento foram iniciados com uma configuração (padrão) inicial. Se a rede estiver ativa, certifique-se de que você entenda o impacto potencial de qualquer comando.
Problema
No XE-SDWAN (versão 16.10.3 em diante), há uma senha de administrador ocasional padrão devido a razões de segurança que podem ser facilmente ignoradas pelo usuário e podem potencialmente entrar em uma situação de bloqueio do usuário.
Isso é especialmente perigoso durante a configuração inicial do roteador se a conexão de controle com o controlador vManage não estiver estabelecida; não é possível simplesmente anexar um novo modelo com o nome de usuário e a senha definidos.
Este artigo fornece um procedimento detalhado sobre como recuperar.
Username: admin Password: Router#
Sep 23 20:36:03.133: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed.
Esta é a nova mensagem no console após o login com as credenciais padrão de admin/admin.
Observação: este procedimento apaga a configuração atual, portanto, faça um backup da configuração, se possível, antes de prosseguir.
Solução
Este é um exemplo de como um dispositivo é bloqueado, pois ignora a mensagem de senha única dos logs de console.
rommon 2 > boot bootflash:asr1000-ucmk9.16.10.3a.SPA.bin File size is 0x2f7f66c6 Located asr1000-ucmk9.16.10.3a.SPA.bin Image size 796878534 inode num 17, bks cnt 194551 blk size 8*512 ################################################################################################################################################################################################################################################################################################################################################################################################################################ Boot image size = 796878534 (0x2f7f66c6) bytes <<<<<<<< OUTPUT TRIMMED >>>>>>>>> Press RETURN to get started!
<<<<<<<< OUTPUT TRIMMED >>>>>>>>>
*Sep 23 20:35:33.558: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 2218 in vpn 0 *Sep 23 20:35:33.635: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting *Sep 23 20:35:33.725: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting *Sep 23 20:35:33.823: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting *Sep 23 20:35:33.953: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms *Sep 23 20:35:34.424: %Cisco-SDWAN-Router-FTMD-4-WARN-1000007: R0/0: FTMD: Connection to TTM came up. p_msgq 0x7fe1b3235500 p_ftm 0x9a3020 *Sep 23 20:35:41.475: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized. *Sep 23 20:35:44.975: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up *Sep 23 20:35:44.991: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144) *Sep 23 20:35:45.025: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr *Sep 23 20:35:45.025: Console Enabled *Sep 23 20:35:45.025: SDWAN INFO: PNP start, status: success *Sep 23 20:35:45.023: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state. *Sep 23 20:35:45.888: EXEC mode enabled on console User Access Verification Username: admin Password: Router# *Sep 23 20:36:03.133: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed. *Sep 23 20:36:03.240: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 14 Router#exit Press RETURN to get started. User Access Verification Username: admin Password: % Login invalid Press RETURN to get started. User Access Verification Username: Login incorrect Username:
Etapa 1. Inicie o processo com estas etapas
- Desligue e ligue o roteador e force-o a entrar no modo ROMmon com sequência de interrupção (ctrl+break, ctrl+c).
- Altere o registro de configuração para 0xA102 ou 0x8000.
Observação: recomendamos 0xA102 porque ele é menos propenso a erros do usuário. Por exemplo, se você definir o registro de configuração por engano como 0x800 em vez de 0x8000 (dois zeros em vez de três), a taxa de baud do console será definida como 4800 em vez do desvio de configuração. Para obter mais informações sobre registros de configuração, consulte https://www.cisco.com/c/en/us/support/docs/routers/10000-series-routers/50421-config-register-use.html
Observação: No software Cisco IOS® XE, o desvio de configuração não pode ser feito com o registro de configuração 0x2142 porque o software Cisco IOS® XE SD-WAN armazena a configuração de uma maneira diferente no banco de dados de configuração (CDB) na flash. A partir do software Cisco IOS® XE SD-WAN 16.10.1, o bit 15 pode ser definido como 1 para ignorar a configuração, portanto o registro de configuração é, por exemplo, 0xA102. Este é um resultado do bit 15 at (0x8000) em combinação com o valor hexadecimal do registro padrão 0x2102.
3. Reinicialize a caixa (verifique a saída do comando).
Initializing Hardware ... System integrity status: 90170400 12030117 U System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE Copyright (c) 1994-2016 by cisco Systems, Inc. Current image running: Boot ROM1 Last reset cause: PowerOn Warning: Octeon PCIe lanes not x2 width: sts=0x5011 ASR1001-HX platform with 16777216 Kbytes of main memory rommon 1 > confreg 0x8000 You must reset or power cycle for new config to take effect rommon 2 > i Reset ....... Initializing Hardware ... System integrity status: 90170400 12030117 Trixie configured CaveCreek Link Status reg: Bus/Dev/Func: 0/28/1, offset 0x52, status = 00003011Times left ms:0000005C Initializing DS31408... Read MB FPGA Version: 0x16051716 DS31408 locked to local Oscillator Taking Yoda out of reset... Yoda VID enabled... Crypto enabled... Warning: Octeon PCIe link width not x2: sts=00001001 requesting link retrain Astro enabled... Astro PLL/bandgap init... NP5c out of reset... U System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE Copyright (c) 1994-2016 by cisco Systems, Inc. CPLD Version: 16033009 ASR1001-HX Slot:0 Current image running: Boot ROM1 Last reset cause: LocalSoft Reading confreg 0x8000 Enabling interrupts Initializing SATA controller...done Checking for PCIe device presence... Warning: Octeon PCIe lanes not x2 width: sts=0x5011 done ASR1001-HX platform with 16777216 Kbytes of main memory autoboot entry: NVRAM VALUES: bootconf: 0x0, autobootstate: 0 autobootcount: 0, autobootsptr: 0x0
Etapa 2. Inicialize a imagem .bin do XE-SDWAN a partir do rommon.
rommon 3 > boot bootflash:asr1000-ucmk9.16.10.3a.SPA.bin Warning: filesystem is not clean File size is 0x2f7f66c6 Located asr1000-ucmk9.16.10.3a.SPA.bin Image size 796878534 inode num 17, bks cnt 194551 blk size 8*512 ####################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### File is comprised of 200 fragments (0%) <<<<<< OUTPUT TRIMMED >>>>>>>> Press RETURN to get started!
<<<<<< OUTPUT TRIMMED >>>>>>>> *Sep 23 20:47:34.124: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon cfgmgr @ pid 5018 in vpn 0 *Sep 23 20:47:34.125: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon fpmd @ pid 5019 in vpn 0 *Sep 23 20:47:34.125: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ftmd @ pid 5020 in vpn 0 *Sep 23 20:47:34.126: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ompd @ pid 5021 in vpn 0 *Sep 23 20:47:34.127: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ttmd @ pid 5022 in vpn 0 *Sep 23 20:47:34.127: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 5023 in vpn 0 *Sep 23 20:47:34.214: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting *Sep 23 20:47:34.307: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting *Sep 23 20:47:34.382: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting *Sep 23 20:47:34.525: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms *Sep 23 20:47:41.143: %ONEP_BASE-6-CONNECT: [Element]: ONEP session Application:com.cisco.syncfd Host:Router ID:726 User:a has connected. *Sep 23 20:47:41.997: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized. *Sep 23 20:47:45.480: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up *Sep 23 20:47:45.495: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144) *Sep 23 20:47:45.534: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr *Sep 23 20:47:45.534: Console Enabled *Sep 23 20:47:45.534: SDWAN INFO: PNP start, status: success *Sep 23 20:47:45.531: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state. *Sep 23 20:47:45.945: EXEC mode enabled on console
Etapa 3. Faça login com as credenciais de administrador padrão.
User Access Verification Username: admin Password: Router# *Sep 23 20:48:16.659: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed. *Sep 23 20:48:16.767: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 14 Router#
Router#sh ver | i Configuration register
Configuration register is 0x8000
Etapa 4. Essa é uma etapa obrigatória.
- Altere o registro de configuração de volta para 0x2102 e execute uma reinicialização de software sdwan. Isso apaga toda a configuração existente.
- O roteador é reinicializado nesta etapa e inicializado com o software especificado no arquivo de configuração packages.conf.
Router#request platform software sdwan software reset *Sep 23 20:52:17.400: %INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install activate bootflash:asr1000-ucmk9.16.10.3a.SPA.bin *Sep 23 20:52:23.919: %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram Router# *Sep 23 20:52:47.943: %INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install activate PACKAGESep 23 20:53:04.302: Initializing Hardware ... System integrity status: 90170400 12030117 U System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE Copyright (c) 1994-2016 by cisco Systems, Inc. Current image running: Boot ROM1 Last reset cause: LocalSoft Warning: Octeon PCIe lanes not x2 width: sts=0x5011 ASR1001-HX platform with 16777216 Kbytes of main memory File size is 0x00001a47 Located packages.conf Image size 6727 inode num 1120114, bks cnt 2 blk size 8*512 # File size is 0x01e7df8e Located asr1000-rpboot.16.10.3a.SPA.pkg Image size 31973262 inode num 1120126, bks cnt 7806 blk size 8*512 ######################################################################################################################################################################################################################################################################################################################## Boot image size = 31973262 (0x1e7df8e) bytes ROM:RSA Self Test Passed ROM:Sha512 Self Test Passed
<<<<<< OUTPUT TRIMMED >>>>>>>>
*Sep 23 20:57:13.347: %ONEP_BASE-6-CONNECT: [Element]: ONEP session Application:com.cisco.syncfd Host:Router ID:8029 User:a has connected. *Sep 23 20:57:15.226: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon cfgmgr @ pid 4435 in vpn 0 *Sep 23 20:57:15.227: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon fpmd @ pid 4436 in vpn 0 *Sep 23 20:57:15.228: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ftmd @ pid 4437 in vpn 0 *Sep 23 20:57:15.229: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ompd @ pid 4438 in vpn 0 *Sep 23 20:57:15.229: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ttmd @ pid 4439 in vpn 0 *Sep 23 20:57:15.230: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 4440 in vpn 0 *Sep 23 20:57:15.308: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting *Sep 23 20:57:15.391: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting *Sep 23 20:57:15.484: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting *Sep 23 20:57:15.620: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms *Sep 23 20:57:16.092: %Cisco-SDWAN-Router-FTMD-4-WARN-1000007: R0/0: FTMD: Connection to TTM came up. p_msgq 0x7f5815c35500 p_ftm 0x9a3020 *Sep 23 20:57:27.380: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized. *Sep 23 20:57:35.032: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up *Sep 23 20:57:35.048: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144) *Sep 23 20:57:35.081: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr *Sep 23 20:57:35.081: Console Enabled *Sep 23 20:57:35.081: SDWAN INFO: PNP start, status: success *Sep 23 20:57:35.079: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state. *Sep 23 20:57:35.682: EXEC mode enabled on console
Etapa 5. Agora, mais uma vez, você é solicitado a fornecer credenciais de administrador únicas. Após essa etapa, não se esqueça de alterar a senha padrão. É recomendável adicionar um usuário adicional também. Se você perder esta etapa e ficar bloqueado, então você precisa repetir todas as etapas novamente.
User Access Verification Username: admin Password: Router# *Sep 23 20:58:18.048: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed. *Sep 23 20:58:18.155: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 18 Router#confi Router#config-tr System is still initializing. Wait for PnP to be completed or terminate PnP with the command: pnpa service discovery stop Router#pnpa service discovery stop PNP-EXEC-DISCOVERY (1): Stopping PnP Discovery... Waiting for PnP discovery cleanup .. Router# *Sep 23 20:58:48.997: %PNP-6-PNP_DISCOVERY_ABORT_ON_CLI: PnP Discovery abort on CLI input *Sep 23 20:58:48.999: %DMI-5-SYNC_START: R0/0: syncfd: External change to running configuration detected. The running configuration will be synchronized to the NETCONF running data store. *Sep 23 20:58:54.955: %DMI-5-SYNC_COMPLETE: R0/0: syncfd: The running configuration has been synchronized to the NETCONF running data store. *Sep 23 20:58:54.955: %DMI-5-ACTIVE: R0/0: syncfd: process is in steady state. *Sep 23 20:58:55.150: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 181 *Sep 23 20:58:55.676: %Cisco-SDWAN-Router-SYSMGR-5-NTCE-200050: R0/0: SYSMGR: System status solid green (reason: All daemons up) Router# *Sep 23 20:59:00.083: %INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install commit PACKAGE *Sep 23 20:59:00.327: %INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install commit PACKAGE Router#sh ver | i register Configuration register is 0x2102 Router#sh sdwan ver *Sep 23 20:59:12.640: %PNP-6-PNP_DISCOVERY_ABORT_ON_CLI: PnP Discovery abort on CLI input *Sep 23 20:59:12.640: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Discovery Aborted)16.10.3a Router# Router#sh sdwan ver 16.10.3a Router# Router#conf Router#config-tr admin connected from 127.0.0.1 with console on Router Router(config)# username admin privilege 15 secret <your password> Router(config)# username sdwan privilege 15 secret <your password> Router(config)# comm Commit complete. Router(config)# *Sep 23 21:00:59.270: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by admin, transaction-id 204 Router(config)# end
Etapa 6. Verifique se você ainda tem acesso ao dispositivo com o nome de usuário e a senha recém-criados.
Router#exit Router con0 is now available Press RETURN to get started. User Access Verification Username: admin Password: Router>en Router# Router#exit Router con0 is now available Press RETURN to get started. User Access Verification Username: sdwan Password: Router>en Router#
Histórico de revisões
| Revisão | Data de publicação | Comentários |
|---|---|---|
3.0 |
08-May-2023 |
Recertificação |
1.0 |
21-Oct-2019 |
Versão inicial |
Colaborado por engenheiros da Cisco
- Chandu GuttiEngenharia da Cisco
- Eugene KhabarovEngenheiro do Cisco TAC
FeedbackContate a Cisco
- Abrir um caso de suporte
- (É necessário um Contrato de Serviço da Cisco)