Cisco Catalyst交换机密码恢复策略－应用技巧(2)

不进入setup模式:

−−− System Configuration Dialog −−−

At any point you may enter a question mark '?' for help.

Use ctrl−c to abort configuration dialog at any prompt.

Default settings are in square brackets '[]'.

Continue with configuration dialog? [yes/no]: n

进入特权模式,恢复原始的配置文件:

Switch#rename flash:config.old flash:config.text

Destination filename [config.text]

Switch#

把配置文件保存在内存里:

Switch#copy flash:config.text system:running−config

Destination filename [running−config]?

1131 bytes copied in 0.760 secs

Switch#

进入全局配置模式,取消密码设置:

Switch(config)#no enable secret

保存配置:

Switch#write memory

Building configuration...

[OK]

Switch#

4.对于Catalyst 3550/3750系列来说:

1.通过带有支持Xmodem协议的超级终端程序的PC连接到交换机的console口,把波特率设置为9600.

2.拔掉交换机的电源.

3.按下交换机上的Mode按钮,与此同时,重新插上交换机的电源线.当交换机端口1X上的LED熄灭后可以松开Mode按钮1到2秒.之后将显示一些指示信息:

The system has been interrupted prior to initializing the flash file system. The following

commands will initialize the flash file system, and finish loading the operating system

software:

flash_init

load_helper

boot

switch#

4.初始化flash文件系统:

switch#flash_init

5.加载帮助文件:

switch#load_helper

6.显示闪存里的内容:

switch#dir flash:

7.重命名配置文件:

switch#rename flash:config.text flash:config.text.old

8.启动系统,并且如果提示进入setup模式,输入N:

switch#boot

Continue with the configuration dialog? [yes/no]: N

9.进入特权模式,把配置文件名恢复为原始文件名:

Switch#rename flash:config.text.old flash:config.text

10.把配置文件写进内存:

Switch#copy flash:config.text system:running-config

Source filename [config.text]?

Destination filename [running-config]?

11.进入全局配置模式更改密码:

Switch(config)#enable secret

12.退出,并保存到startup-config文件里:

Switch(config)#copy running-config startup-config

其实有的时候硬件安全比软件安全还要重要些.不然人人都抗个本本,.连根线到console口去恢复密码了-_-