簡介
本文檔介紹如何恢復FirePOWER 9300/4100系列裝置的Supervisor管理輸入輸出(MIO)密碼。
必要條件
需求
本文件沒有特定需求。
採用元件
本檔案中的資訊是根據以下硬體版本：
· Cisco Firepower 4100系列和9300裝置。
本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路正在作用，請確保您已瞭解任何指令可能造成的影響。
背景資訊
當使用者忘記管理引擎MIO口令時，執行口令恢復過程。若要達到此目的，當您執行密碼復原程式時，所有資料庫檔案和組態都會重設為出廠預設值。
注意：不應使用此過程重置已知口令。
密碼逐步復原程式
要恢復Supervisor MIO的口令，請執行以下步驟：
步驟1.使用提供的控制檯電纜將PC連線到控制檯埠，並使用設定為9600波特、8個資料位、無奇偶校驗、1個停止位和無流量控制的終端模擬器連線到控制檯。有關控制檯電纜的詳細資訊，請檢視Cisco Firepower 9300硬體安裝指南。
注意：口令恢復需要控制檯訪問FXOS Supervisor。
步驟 2.關閉系統電源，然後開啟電源。
步驟 3.啟動時，請在提示您進入ROMMON模式時按ESC 或CTRL + L 鍵。
!! Rommon image verified successfully !!
Cisco System ROMMON, Version 1.0.09, RELEASE SOFTWARE
Copyright (c) 1994-2015 by Cisco Systems, Inc.
Compiled Thu 05/28/2015 17:21:39.46 by gilchen
Current image running: Boot ROM0
Last reset cause: ResetRequest
DIMM Slot 0 : Present
DIMM Slot 1 : Present
No USB drive !!
BIOS has been locked !!
Platform FPR9K-SUP with 16384 Mbytes of main memory
MAC Address: b0:aa:77:2f:93:74
find the string ! boot bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.3.14.69.SPA bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
Use BREAK, ESC or CTRL+L to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.
rommon 1 >
步驟4. 記下啟動映像和上面突出顯示的系統映像。
bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.3.14.69.SPA
bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
步驟 5. 在rommon提示符處輸入boot (kickstart image name)命令時，載入kickstart映像。
rommon 1 > boot bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.3.14.69.SPA
!! Kickstart Image verified successfully !!
Linux version: 2.6.27.47 (security@cisco.com) #1 SMP Tue Nov 24 12:10:28 PST 2015
[ 0.000000] Fastboot Memory at 0c100000 of size 201326592
Usage: init 0123456SsQqAaBbCcUu
INIT: POST INIT Starts at Wed Jun 1 13:46:33 UTC 2016
can't create lock file /var/lock/mtab~302: No such file or directory (use -n flag to override)
S10mount-ramfs.supnuovaca Mounting /isan 3000m
Mounted /isan
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2015, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
switch(boot)#
步驟 6.在switch(boot)#提示符處，輸入config terminal命令以導航到配置模式，然後輸入admin-password erase命令以重置口令。稍後會提示使用者確認。
警告：如果在此提示符下選擇Y，則會清除所有配置並將系統恢復為出廠預設配置。
switch(boot)#
switch(boot)# config terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(boot)(config)# admin-password erase
Your password and configuration will be erased!
Do you want to continue? (y/n) [n] y
步驟 7.退出到switch(boot)#提示符 並載入之前儲存的系統影像以完成程式。
switch(boot)(config)# exit
switch(boot)# load bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
Uncompressing system image: bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
<lines ommitted>
---- Basic System Configuration Dialog ----
This setup utility will guide you through the basic configuration of
the system. Only minimal configuration including IP connectivity to
the Fabric interconnect and its clustering mode is performed through these steps.
Type Ctrl-C at any time to abort configuration and reboot system.
To back track or make modifications to already entered values,
complete input till end of section and answer no when prompted
to apply configuration.
You have chosen to setup a new Security Appliance. Continue? (y/n): y
Enforce strong password? (y/n) [y]: n
Enter the password for "admin":
Confirm the password for "admin":
Enter the system name: FF09-FPR9300-1
Physical Switch Mgmt0 IP address : 192.168.10.10
Physical Switch Mgmt0 IPv4 netmask : 255.255.255.0
IPv4 address of the default gateway : 192.168.10.1
Configure the DNS Server IP address? (yes/no) [n]: n
Configure the default domain name? (yes/no) [n]: n
Following configurations will be applied:
Switch Fabric=A
System Name=FF09-FPR9300-1
Enforced Strong Password=no
Physical Switch Mgmt0 IP Address=192.168.10.1
Physical Switch Mgmt0 IP Netmask=255.255.255.0
Default Gateway=192.168.10.1
Ipv6 value=0
Apply and save the configuration (select 'no' if you want to re-enter)? (yes/no): yes
Applying configuration. Please wait.
Configuration file - Ok
Cisco FPR Series Security Appliance
FF09-FPR9300-1 login:
相關資訊
意見