最佳答案
用户已经成功登录到了设备上,并希望以后通过Console口/USB Console口登录设备时采用密码认证,以提高设备的安全性。
表3-4 配置用户通过Console口/USB Console口登录设备时采用密码认证
操作 | 命令 | 说明 |
进入系统视图 | system-view | - |
进入Console/AUX用户线视图 | line { aux | console } first-number [ last-number ] | 二者选其一 用户线视图下的配置优先于用户线类视图下的配置 用户线视图下的配置只对该用户线生效 用户线类视图下的配置修改不会立即生效,当用户下次登录后所修改的配置值才会生效 用户线视图下的属性配置为缺省值时,将采用用户线类视图下配置的值 |
进入Console/AUX用户线类视图 | line class { aux | console } | |
设置登录用户的认证方式为密码认证 | authentication-mode password | 非FIPS模式:缺省情况下,用户通过Console口登录,认证方式为none;用户通过USB Console口登录,认证方式为password FIPS模式:缺省情况下,用户登录设备的认证方式为scheme |
设置认证密码 | set authentication password { hash | simple } password | 缺省情况下,未设置认证密码 |
配置从当前用户线登录设备的用户角色 | user-role role-name | 缺省情况下,对于缺省MDC,通过Console口登录设备的用户角色为network-admin 对于非缺省MDC,不支持Console口/USB Console口登录方式 |
(0)
通过conlse线和crt软件连接并登陆设备,然后把设备断电重启。控制台上会打印如下信息,当出现“press Ctrl+B”的时候快速按住“Ctrl+B” 进入botroom菜单
System is starting...
Press Ctrl+D to access BASIC-BOOTWARE MENU
Booting Normal Extend BootWare
The Extend BootWare is
self-decompressing.......................Done!
BootWare Validating...
Press Ctrl+B to enter extended boot menu...
BotWare password: Not required. Please press Enter to continue.
Password recovery capability is enabled.
Note: The current operating device is flash
Enter < Storage Device Operation > to select device.
按住“Ctrl+B”进入如下菜单。选择“<6> Skip Current System Configuration”跳过当前配置启动,不同设备可能不是数字6,
===========================<EXTEND-BOOTWARE MENU>===========================
|<1> Boot System |
|<2> Enter Serial SubMenu |
|<3> Enter Ethernet SubMenu |
|<4> File Control |
|<5> Restore to Factory Default Configuration |
|<6> Skip Current System Configuration |
|<7> BootWare Operation Menu |
|<8> Clear Super Password |
|<9> Storage Device Operation |
|<0> Reboot |
============================================================================
Ctrl+Z: Access EXTEND-ASSISTANT MENU
Ctrl+F: Format File System
Enter your choice(0-9): 6
Flag Set Success.
然后输入0重启设备
===========================<EXTEND-BOOTWARE MENU>===========================
|<1> Boot System |
|<2> Enter Serial SubMenu |
|<3> Enter Ethernet SubMenu |
|<4> File Control |
|<5> Restore to Factory Default Configuration |
|<6> Skip Current System Configuration |
|<7> BootWare Operation Menu |
|<8> Clear Super Password |
|<9> Storage Device Operation |
|<0> Reboot |
============================================================================
Ctrl+Z: Access EXTEND-ASSISTANT MENU
Ctrl+F: Format File System
Enter your choice(0-9): 0
System is starting...
Press ENTER to get started.
操作步骤:跳过启动文件后直接保存当前配置,再重启。
<H3C>save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):(输入回车)
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Configuration is saved to device successfully.
<H3C>reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
Current configuration may be lost after the reboot, save current configuration? [Y/N]:y
This command will reboot the device. Continue? [Y/N]:y
<H3C>
#Apr 26 12:02:07:166 2000 H3C SHELL/4/LOGIN:
Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.1<hh3cLogIn>: login from Console
%Apr 26 12:02:07:306 2000 H3C SHELL/5/SHELL_LOGIN: Console logged in from aux0.
<H3C>dir %查看设备配置文件
Directory of flash:/
1 drw- - Apr 26 2000 12:00:20 logfile
2 -rw- 1666 Apr 26 2000 12:05:39 startup.cfg
3 -rw- 1556 Apr 26 2000 12:05:33 _startup_bak.cfg
4 -rw- 151 Apr 26 2000 12:05:30 system.xml
29106 KB total (16876 KB free)
给设备和电脑配置成同网段IP地址(举例:WAC配置成192.168.100.1,电脑配置成192.168.100.2),在电脑上通过3CD软件搭建tftp服务器。
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]interface Vlan-interface 1
[H3C-Vlan-interface1]ip address 192.168.100.1 24
[H3C-Vlan-interface1]quit
[H3C]ping 192.168.100.2
PING 192.168.100.2: 56 data bytes, press CTRL_C to break
Reply from 192.168.100.2: bytes=56 Sequence=1 ttl=128 time=7 ms
Reply from 192.168.100.2: bytes=56 Sequence=2 ttl=128 time=2 ms
<H3C>tftp 192.168.100.2 put startup.cfg
File will be transferred in binary mode
Sending file to remote TFTP server. Please wait...
|
TFTP: 1666 bytes sent in 0 second(s).
File uploaded successfully.
<H3C>
下载成功:
可以到本地相关路径(此例子中是E盘)查看到相关文件。
需要恢复之前配置
解决方法:删除密码恢复之前配置文件
使用记事本打开startup.cfg文件
删除aux0口下的认证方式和密码并保存文件
覆盖当前配置文件
<H3C>tftp 192.168.100.20 get startup.cfg
The file startup.cfg exists. Overwrite it? [Y/N]:y
Verifying server file...
Deleting the old file, please wait...
...
File will be transferred in binary mode
Downloading file from remote TFTP server, please wait....
TFTP: 1166 bytes received in 0 second(s)
File downloaded successfully.
<H3C>reboot
Start to check configuration with next startup configuration file, please wait.........DONE!
Current configuration may be lost after the reboot, save current configuration? [Y/N]:n 不保存配置
This command will reboot the device. Continue? [Y/N]:y 确定继续重启
(1)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论