使用enablediag排除SEG或SWA出廠重置故障
簡介
本文檔介紹如果使用enablediag身份驗證方法，如何重置SEG或SWA硬體裝置。
必要條件
採用元件
- Cisco Secure Email Gateway(SEG)AsyncOS 14.2.2或更高版本
- Cisco Secure Web Appliance(SWA)AsyncOS 14.5.1-008或更高版本
本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。
問題
如果升級失敗或服務損壞，則無法通過WebUI或網路訪問SEG/SWA，這將使RMA成為唯一的選項。此功能可將裝置重置為出廠預設設定並避免使用RMA。
解決方案
1.通過控制檯或乙太網終端會話訪問SEG/SWA。
2.使用以下憑據登入：
- 使用者名稱：enablediag
- 密碼：管理員密碼
3.運行resetappliance命令。
4.從顯示的清單中選擇所需的先前版本選項。
5.確認重置操作。
6.等待裝置清除所有設定為系統預設設定，包括刪除網路IP設定。
7.驗證SEG/SWA是否返回到乾淨的未配置狀態，並且已準備好進行設定。
完成resetappliance進程的輸出示例。
login: enablediag
> Log in with the enablediag account and provide the appropriate administrator credentials when prompted
AsyncOS 14.2.2 for Cisco C395 build 004
Welcome to the Cisco C395 Email Security Appliance
Available Commands:
help -- View this text.
quit -- Log out.
service -- Enable or disable access to the service system.
network -- Perform emergency configuration of the diagnostic network interface.
clearnet -- Resets configuration of the diagnostic network interface.
ssh -- Configure emergency SSH daemon on the diagnostic network interface.
clearssh -- Stop emergency SSH daemon on the diagnostic network interface.
tunnel -- Start up tech support tunnel to IronPort.
print -- Print status of the diagnostic network interface.
resetappliance -- Reset appliance reverts the appliance to chosen build with factory default settings with default IP. No network configuration would be preserved.
reboot -- Reboot the appliance.
S/N ABC12345678-00000000
Service Access currently disabled.
ironport.example.com> resetappliance
This command will revert the appliance to a previous version of AsyncOS.
Warning: Reverting the appliance is extremely destructive.
The following data will be destroyed in the process and should be backed up:
- current system configuration file
- all log files
- all reporting data (including saved scheduled and archived reports)
- any custom end user notification pages
- current network settings
Reverting the device will cause a reboot to take place.
After rebooting, the appliance reinitializes itself and reboots
again to the desired version, with default system configuration.
Would you like to continue [Y/N]?
y
Are you sure you want to continue [Y/N] ?
y
This command will revert the appliance to a previous version of AsyncOS.
WARNING: Reverting the appliance is extremely destructive.
The following data will be destroyed in the process:
- all configuration settings (including listeners)
- all log files
- all databases (including messages in Virus Outbreak and Policy quarantines)
- all reporting data (including saved scheduled reports)
- all message tracking data
- all IronPort Spam Quarantine message and end-user safelist/blocklist data
Before running this command, be sure you have:
- saved the configuration file of this appliance (with passwords unmasked)
- exported the IronPort Spam Quarantine safelist/blocklist database
to another machine (if applicable)
- waited for the mail queue to empty
Reverting the device causes an immediate reboot to take place.
After rebooting, the appliance reinitializes itself and reboots
again to the desired version.
Available versions
=================
1. 13.5.3-010
2. 13.5.4-038
3. 14.2.2-004
Please select an AsyncOS version [2]: 3
Do you want to continue? [N]> y
Are you sure you want to continue? [N]> y
You have selected "14.2.2-004".
mv: rename /data/pub/configuration/revert_netconfigwith_v6.xml to /data/pub/configuration/revert_netconfig.xml: No such file or directory
Reverting to "shipping" preconfigure install mode.
ls: /data/db/features/*.revert: No such file or directory
AsyncOS Amnesiac (cuau0)
login: admin
> Log in with the admin account and provide the appropriate administrator credentials when prompted
AsyncOS 14.2.2 for Cisco C395 build 004
Welcome to the Cisco C395 Email Security Appliance
NOTE: This session will expire if left idle for 30 minutes. Any uncommitted
configuration changes will be lost. Commit the configuration changes as soon
as they are made.
Warning!
You are currently using a demonstration certificate(Cisco ESA Certificate)
which is not secure and is not recommended for general use. Create or import
a certificate using the certconfig > CERTIFICATE option.
The features/services that are currently using the demonstration certificate
are:
default destination controls entry, LDAPS
Please run "systemsetup" or "sethostname" then "commit" before sending mail.
ironport.example.com>相關資訊
修訂記錄
| 修訂 | 發佈日期 | 意見 |
|---|---|---|
2.0 |
07-Jul-2026
|
重新認證 |
1.0 |
07-Aug-2023
|
初始版本 |
意見