F1000-G20防火墙console密码忘记

路由器Consle口设置的密码忘记

可以通过从BOOTROM中选择“忽略配置”启动路由器来获取和重新设备console的密码！

具体操作如下：

第一步:重启路由器，按Ctrl＋B进入BOOTROM菜单

Starting at 0x1c00000...

********************************************

* *

* Quidway Series Routers Boot ROM, V9.07 *

* *

********************************************

Copyright(C) 1997-2004 by HUAWEI TECH CO., LTD.

Compiled at 18:10:29 , Oct 14 2004.

Testing memory...OK!

128M bytes SDRAM

32768k bytes flash memory

Hardware Version is MTR 1.0

CPLD Version is CPLD 1.0

Press Ctrl-B to enter Boot Menu

Please input Bootrom password: /默认密码为空/

Boot Menu:

1: Download application program with XMODEM

2: Download application program with NET

3: Set application file type

4: Display applications in Flash

5: Clear application password

6: Start up and ignore configuration

7: Enter debugging environment

8: Boot Rom Operation Menu

9: Do not check the version of the software

a: Exit and reboot

Enter your choice(1-a):

第二步:选择第六项“6: Start up and ignore configuration”，并确认

Boot Menu:

1: Download application program with XMODEM

2: Download application program with NET

3: Set application file type

4: Display applications in Flash

5: Clear application password

6: Start up and ignore configuration

7: Enter debugging environment

8: Boot Rom Operation Menu

9: Do not check the version of the software

a: Exit and reboot

Enter your choice(1-a): 6

Start up and ignore configuration, Are you sure?[Y/N]y

Set Succeeds

第三步：选择a项重启系统

Boot Menu:

1: Download application program with XMODEM

2: Download application program with NET

3: Set application file type

4: Display applications in Flash

5: Clear application password

6: Start up and ignore configuration

7: Enter debugging environment

8: Boot Rom Operation Menu

9: Do not check the version of the software

a: Exit and reboot

Enter your choice(1-a): a

Exit and reboot,are you sure?[Y/N]y

Start to reboot...

第四步：当系统以空配置起来以后，使用“more config.cfg”查看配置脚本

dir

Directory of flash:/

0 -rw- 5748224 Nov 19 2004 17:23:05 main.bin

1 -rw- 5746199 Nov 30 2004 14:51:21 v330-0008.bin

2 -rw- 8650414 Nov 22 2004 12:26:57 system

3 -rw- 1053 Dec 15 2004 18:46:41 config.cfg

4 -rw- 8695261 Dec 15 2004 09:59:45 340-0006.bin

31877 KB total (3706 KB free)

more config.cfg

sysname RTA

#

FTP server enable

#

local-server nas-ip 127.0.0.1 key huawei

#

domain default enable system

#

radius scheme system

server-type huawei

primary authentication 127.0.0.1 1645

primary accounting 127.0.0.1 1646

user-name-format without-domain

#

domain system

access-limit disable

state active

#

local-user aaa

password cipher ;)<01%^&;YGQ=^Q`MAF4<1!!

service-type terminal

level 3

local-user admin

password cipher .]@USE=B,53Q=^Q`MAF4<1!!

service-type telnet terminal

level 3

service-type ftp

#

interface Aux0

async mode flow

link-protocol ppp

#

interface Ethernet0/0

ip address dhcp-alloc

#

interface Serial0/0

clock DTECLK1

link-protocol ppp

ip address ppp-negotiate

#

interface NULL0

#

user-interface con 0

authentication-mode scheme

user-interface aux 0

user-interface vty 0 4

authentication-mode scheme

#

return

如果是采用simple方式配置口令，则可以直接显示出密码。

如果是采用cipher方式配置口令，按照以下方法处理：

1）将查看到的配置文件复制保存成一个文本文件。

2）修改该文件中对应帐号的密码“password cipher ;)<01%^&;YGQ=^Q`MAF4<1!!”为类似“password simple aaa”的口令

3）将修改过的脚本，复制粘贴到当前路由器中

4）disp cur确认当前配置和以前的配置一致后，save配置后重新启动系统

5）重启后，就可以通过修改过的帐号口令登录系统

1、请注意设备的配置脚本和口令的备份保存。以免带来不必要的麻烦！