이 문서에서는 Cisco IOS® System Software를 실행하는 Catalyst 6500/6000 Series 스위치 및 Cisco 7600 Series 라우터에서 비밀번호를 복구하는 방법에 대해 설명합니다.
이 문서에 대한 특정 요건이 없습니다.
이 문서는 Supervisor 1, Supervisor 2, Supervisor 720 및 VSS(Virtual Switching System) 1440 기반 시스템에 적용됩니다.Supervisor 720 기반 시스템의 경우 이 문서는 Cisco IOS Software 릴리스 12.2(17)SX 이상을 실행할 때 적용됩니다.Supervisor 720에서 이전 버전을 실행하는 경우 12.2(17)SX 이전 버전의 Supervisor 720 Running Cisco IOS System Software Software를 사용하는 Catalyst 6500의 비밀번호 복구 절차를 참조하십시오.
참고: VSS(Virtual Switching System) 1440 기반 시스템에 지원되는 소프트웨어는 Cisco IOS® Software 릴리스 12.2(33)SXH1 이상입니다.
Cisco IOS System Software를 실행하는 Catalyst 6500/6000과 Cisco 7200 Series Router의 부팅 순서는 하드웨어가 다르기 때문에 다릅니다.시스템 전원을 껐다가 켜면 스위치 프로세서(SP)가 먼저 부팅됩니다.짧은 시간(약 25~60초) 후에 콘솔 소유권을 RP(MSFC)로 전송합니다. RP는 계속 번들 소프트웨어 이미지를 로드합니다.SP가 RP에 대한 콘솔 제어 권한을 부여한 직후 Ctrl-brk를 눌러야 합니다.브레이크 시퀀스를 너무 빨리 전송하면 SP의 ROMMON이 됩니다. 이 SP는 이 위치에 있지 않습니다.콘솔에 이 메시지가 표시되면 브레이크 시퀀스를 보냅니다.
00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
이 시점 이후에는 비밀번호 복구가 일반 라우터와 동일합니다.
참고: 이 시점부터 Cisco IOS System Software를 실행하는 Catalyst 6000 Series 스위치를 라우터라고 합니다.
문서 규칙에 대한 자세한 내용은 Cisco 기술 팁 표기 규칙을 참조하십시오.
스위치에서 실행되는 운영 체제 때문에 스위치가 라우터처럼 구성됩니다.비밀번호 복구 절차는 Cisco 7200 Series Router와 동일한 단계를 따릅니다. 단, 브레이크 시퀀스를 시작하기 전에 약 25~60초 정도 더 기다려야 합니다.
터미널 에뮬레이션이 있는 터미널 또는 PC를 라우터의 콘솔 포트에 연결합니다.다음 터미널 설정 사용:
9600 baud rate No parity 8 data bits 1 stop bit No flow control
필요한 콘솔 케이블 사양은 Cable Specifications 문서에 설명되어 있습니다.콘솔 포트에 연결하는 방법에 대한 지침은 모듈 설치 가이드에 나와 있습니다.Connecting to the Console Port—Supervisor Engine Only(콘솔 포트에 연결 - Supervisor Engine 전용) 섹션에서는 유용한 정보를 제공합니다.
라우터에 계속 액세스할 수 있는 경우 show version 명령을 실행하고 컨피그레이션 레지스터의 설정을 기록합니다.일반적으로 0x2102 또는 0x102입니다. show version 명령의 출력을 보려면 여기를 클릭하십시오.
라우터에 대한 액세스 권한이 없는 경우(로그인 또는 TACACS 비밀번호 분실) 컨피그레이션 레지스터는 0x2102로 설정됩니다.
라우터를 끄고 전원 스위치의 도움을 받아 다시 켜십시오.
주의: 브레이크 시퀀스는 RP가 콘솔 포트의 제어를 얻은 후에만 시작해야 합니다.
RP가 콘솔 포트의 제어를 얻은 직후 터미널 키보드에서 Break를 누릅니다.Cisco IOS Software를 실행하는 Catalyst 6000에서 SP가 먼저 부팅됩니다.부팅한 후 RP로 제어됩니다.RP가 제어를 얻은 후 브레이크 시퀀스를 시작합니다.이 메시지가 표시되면 RP가 콘솔 포트를 제어합니다.(이 메시지가 표시될 때까지 브레이크 시퀀스를 시작하지 마십시오.)
00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
이 시점부터 비밀번호 복구 절차는 다른 라우터와 동일합니다.브레이크 시퀀스가 작동하지 않을 경우 다른 키 조합은 비밀번호 복구 중 표준 브레이크 키 시퀀스 조합을 참조하십시오.
rommon 1> 프롬프트에 confreg 0x2142를 입력하여 컨피그레이션을 로드하지 않고 Flash에서 부팅합니다.
rommon 2> 프롬프트에 reset을 입력합니다.
라우터가 재부팅됩니다.그러나 저장된 컨피그레이션은 무시됩니다.
각 설정 질문 후 no를 입력하거나 Ctrl-C를 눌러 초기 설정 절차를 건너뜁니다.
Router > 프롬프트에 enable을 입력합니다.
활성화 모드에 있으며 Router# 프롬프트를 확인합니다.
중요:configure memory 또는 copy start running 명령을 실행하여 비휘발성 RAM(NVRAM)을 메모리에 복사합니다.configure terminal 명령을 실행하지 마십시오.
write terminal 또는 show running 명령을 실행합니다.
show running 및 write terminal 명령은 라우터의 컨피그레이션을 보여줍니다.이 컨피그레이션에서는 모든 인터페이스 아래에 shutdown 명령이 표시됩니다.이는 모든 인터페이스가 현재 종료되었음을 의미합니다.비밀번호는 암호화되거나 암호화되지 않은 형식으로 표시됩니다.
configure terminal 명령을 실행하여 전역 컨피그레이션 모드를 시작하고 변경합니다.
이제 프롬프트가 hostname(config)#입니다.
enable 비밀번호를 변경하려면 전역 컨피그레이션 모드에서 enable secret < password > 명령을 실행합니다.
config-register 0x2102 명령 또는 2단계에서 글로벌 컨피그레이션 모드(Router(config)#)에서 기록한 값을 실행하여 컨피그레이션 값을 원래 값으로 다시 설정합니다.
가상 터미널 비밀번호가 있는 경우 변경합니다.
Router(config)#line vty 0 4 Router(config-line)#password cisco Router(config-line)#^Z Router#
일반적으로 사용 중인 모든 인터페이스에서 no shutdown 명령을 실행합니다.인터페이스 목록 및 현재 상태를 보려면 show ip interface brief 명령을 실행합니다.show ip interface brief 명령을 실행하려면 enable 모드(Router#)여야 합니다.다음은 하나의 인터페이스에 대한 예입니다.
Router#show ip interface brief Interface IP-Address OK? Method Status Prol Vlan1 172.17.10.10 YES TFTP administratively down dow Vlan10 10.1.1.1 YES TFTP administratively down dow GigabitEthernet1/1 unassigned YES unset administratively down dow GigabitEthernet1/2 unassigned YES TFTP administratively down dow GigabitEthernet2/1 unassigned YES TFTP administratively down dow GigabitEthernet2/2 unassigned YES TFTP administratively down dow FastEthernet3/1 172.16.84.110 YES TFTP administratively down dow <snip>... Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface fastEthernet 3/1 Router(config-if)#no shutdown Router(config-if)#exit Router(config)# <do other interfaces as necessary...>
Ctrl-z를 눌러 컨피그레이션 모드를 종료합니다.
이제 프롬프트가 hostname#입니다.
write memory 또는 copy running startup 명령을 실행하여 변경 사항을 커밋합니다.
이 예에서는 실제 비밀번호 복구 절차를 보여줍니다.이 예는 Catalyst 6000 Series 스위치의 도움을 받아 생성됩니다.먼저 show version 및 show module 명령으로 시작하여 이 예에서 사용되는 구성 요소를 확인합니다.
Press RETURN to get started. Router>enable Password: Router#show version Cisco Internetwork Operating System Software IOS (tm) c6sup1_rp Software (c6sup1_rp-JSV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by cisco Systems, Inc. Compiled Sat 17-Mar-01 00:14 by eaarmas Image text-base: 0x60020950, data-base: 0x6165E000 ROM: System Bootstrap, Version 12.0(3)XE, RELEASE SOFTWARE BOOTFLASH: MSFC Software (C6MSFC-BOOT-M), Version 12.1(6)E, EARLY DEPLOYMENT RE) Router uptime is 14 minutes System returned to ROM by power-on (SP by reload) System image file is "sup-bootflash:c6sup11-jsv-mz.121-6.E" Cisco Catalyst 6000 (R5000) processor with 114688K/16384K bytes of memory. Processor board ID SAD04281AF6 R5000 CPU at 200Mhz, Implementation 35, Rev 2.1, 512KB L2 Cache Last reset from power-on Bridging software. X.25 software, Version 3.0.0. SuperLAT software (copyright 1990 by Meridian Technology Corp). TN3270 Emulation software. 24 Ethernet/IEEE 802.3 interface(s) 2 Virtual Ethernet/IEEE 802.3 interface(s) 48 FastEthernet/IEEE 802.3 interface(s) 4 Gigabit Ethernet/IEEE 802.3 interface(s) 381K bytes of non-volatile configuration memory. 4096K bytes of packet SRAM memory. 16384K bytes of Flash internal SIMM (Sector size 256K). Configuration register is 0x2102 Router# Router#show module Slot Ports Card Type Model Serial Number ---- ----- ----------------------------------------- --------------------- ----------- 1 2 Cat 6000 sup 1 Enhanced QoS (active) WS-X6K-SUP1A-2GE SAD043301JS 2 2 Cat 6000 sup 1 Enhanced QoS (standby) WS-X6K-SUP1A-2GE SAD03510114 3 48 48 port 10/100 mb RJ45 WS-X6348-RJ-45 SAD04230FB6 6 24 24 port 10baseFL WS-X6024-10FL-MT SAD03413322 Slot MAC addresses Hw Fw Sw ---- ---------------------------------- ----- ------------ ---------- 1 00d0.c0d2.5540 to 00d0.c0d2.5541 3.2 unknown 6.1(0.105)OR 2 00d0.bcf1.9bb8 to 00d0.bcf1.9bb9 3.2 unknown 6.1(0.105)OR 3 0002.7ef1.36e0 to 0002.7ef1.370f 1.1 5.3(1) 1999- 6.1(0.105)OR 6 00d0.9738.5338 to 00d0.9738.534f 0.206 5.3(1) 1999- 6.1(0.105)OR Router# Router#reload Proceed with reload? [confirm] !--- Here you turn off the power and then turn it back on. !--- Here it is done with a reload instead of a hard power-cycle. 00:15:28: %SYS-SP-3-LOGGER_FLUSHING: System pausing to ensure console debugging. 00:15:27: %C6KPWR-SP-4-DISABLED: power to module in slot 2 set off (admin reque) 00:15:28: %C6KPWR-SP-4-DISABLED: power to module in slot 3 set off (admin reque) 00:15:28: %C6KPWR-SP-4-DISABLED: power to module in slot 6 set off (admin reque) 00:15:28: %OIR-SP-6-CONSOLE: Changing console ownership to switch processor 00:15:28: %SYS-SP-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure co. 00:15:30: %SYS-SP-3-LOGGER_FLUSHING: System pausing to ensure console debugging. *** *** --- SHUTDOWN NOW --- *** 00:15:30: %SYS-SP-5-RELOAD: Reload requested 00:15:30: %OIR-SP-6-CONSOLE: Changing console ownership to switch processor 00:15:30: %SYS-SP-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure co. 00:15:31: %OIR-SP-6-REMCARD: Card removed from slot 1, interfaces disabled !--- First, the switch processor comes up. System Bootstrap, Version 5.3(1) Copyright (c) 1994-1999 by cisco Systems, Inc. c6k_sup1 processor with 65536 Kbytes of main memory Autoboot executing command: "boot bootflash:c6sup11-jsv-mz.121-6.E" Self decompressing the image : ################################################] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. Cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software IOS (TM) c6sup1_sp Software (c6sup1_sp-SPV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by cisco Systems, Inc. Compiled Sat 17-Mar-01 00:52 by eaarmas Image text-base: 0x60020950, database: 0x605FC000 Start as Primary processor 00:00:03: %SYS-3-LOGGER_FLUSHING: System pausing to ensure console debugging ou. 00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor !--- The RP now has control of the console. !--- This is when you send the break sequence. System Bootstrap, Version 12.0(3)XE, RELEASE SOFTWARE Copyright (c) 1998 by cisco Systems, Inc. *** Address Error (Load/Fetch) Exception *** Access address = 0x5e PC = 0x5e, Cause = 0x10, Status Reg = 0x3040d003 ROM Monitor Can Not Recover From Exception A Board Reset Is Issued *** Software NMI *** PC = 0xbfc0b6b0, SP = 0x00002a90 Cat6k-MSFC platform with 131072 Kbytes of main memory Self decompressing the image : ################################################] *** System received an abort due to Break Key *** signal= 0x3, code= 0x0, context= 0x6049ed68 PC = 0x601011ac, Cause = 0x20, Status Reg = 0x34008002 !--- You are now in ROMMON mode on the RP. Continue the password !--- recovery procedure just as on any router. Changing the configuration !--- register from 0x2102 to 0x2142 causes the router to ignore the existing !--- configuration. You want it to be ignored because it has passwords that you do not !--- know. rommon 1 > confreg 0x2142 You must reset or power cycle for new config to take effect rommon 2 > reset System Bootstrap, Version 12.0(3)XE, RELEASE SOFTWARE Copyright (c) 1998 by cisco Systems, Inc. Cat6k-MSFC platform with 131072 Kbytes of main memory Self decompressing the image : ################################################] Attempt to download 'sup-bootflash:c6sup11-jsv-mz.121-6.E' ... okay Starting download of 'sup-bootflash:c6sup11-jsv-mz.121-6.E': 8722810 bytes!!!!!! Chksum: Verified! Self decompressing the image : ################################################] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. Cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software IOS (TM) c6sup1_RP Software (c6sup1_rp-JSV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by Cisco Systems, Inc. Compiled Sat 17-Mar-01 00:14 by eaarmas Image text-base: 0x60020950, database: 0x6165E000 Cisco Catalyst 6000 (R5000) processor with 114688K/16384K bytes of memory. Processor board ID SAD04281AF6 R5000 CPU at 200Mhz, Implementation 35, Rev 2.1, 512KB L2 Cache Last reset from power-on Bridging software. X.25 software, Version 3.0.0. SuperLAT software (copyright 1990 by Meridian Technology Corp). TN3270 Emulation software. 24 Ethernet/IEEE 802.3 interface(s) 1 Virtual Ethernet/IEEE 802.3 interface(s) 48 FastEthernet/IEEE 802.3 interface(s) 4 Gigabit Ethernet/IEEE 802.3 interface(s) 381K bytes of nonvolatile configuration memory. 4096K bytes of packet SRAM memory. 16384K bytes of Flash internal SIMM (Sector size 256K). --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: n !--- The router ignores the saved configuration and enters !--- the initial configuration mode. Press RETURN to get started! 00:00:03: %SYS-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure conso. 00:00:04: %C6KPWR-4-PSINSERTED: power supply inserted in slot 1. 00:00:04: %C6KPWR-4-PSOK: power supply 1 turned on. 00:02:08: %SYS-SP-5-RESTART: System restarted -- Cisco Internetwork Operating System Software IOS (TM) c6sup1_SP Software (c6sup1_sp-SPV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by cisco Systems, Inc. Compiled Sat 17-Mar-01 00:52 by eaarmas 00:02:13: L3-MGR: l2 flush entry installed 00:02:13: L3-MGR: l3 flush entry installed 00:02:14: %SYS-5-RESTART: System restarted -- Cisco Internetwork Operating System Software IOS (TM) c6sup1_RP Software (c6sup1_rp-JSV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by Cisco Systems, Inc. Compiled Sat 17-Mar-01 00:14 by eaarmas 00:02:17: %C6KPWR-SP-4-DISABLED: power to module in slot 1 set off (admin reque) 00:02:18: %C6KPWR-SP-4-ENABLED: power to module in slot 3 set on 00:02:18: %C6KPWR-SP-4-ENABLED: power to module in slot 6 set on 00:02:28: sm_set_moduleFwVersion: nonexistent module (1) 00:02:38: %SNMP-5-MODULETRAP: Module 1 [Up] Trap 00:02:38: %OIR-SP-6-INSCARD: Card inserted in slot 1, interfaces are now online 00:02:56: %SNMP-5-MODULETRAP: Module 6 [Up] Trap 00:02:56: %OIR-SP-6-INSCARD: Card inserted in slot 6, interfaces are now online 00:02:59: SP: SENDING INLINE_POWER_DAUGHTERCARD_MSG SCP MSG 00:02:59: %SNMP-5-MODULETRAP: Module 3 [Up] Trap 00:02:59: %OIR-SP-6-INSCARD: Card inserted in slot 3, interfaces are now online Router>enable Router# !--- You go right into privilege mode without needing a password. !--- At this point, the configuration running-config is a default configuration !--- with all the ports administratively down (shutdown). Router#copy startup-config running-config Destination filename [running-config]? <press enter> !--- This pulls in the original configuration. Since you are already in privilege !--- mode, the passwords in this configuration do not affect you. 4864 bytes copied in 2.48 secs (2432 bytes/sec) Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#enable secret < password > [Choose a strong password with at least one capital letter, one number, and one special character.] !--- Overwrite the password that you do not know. This is your new enable password. Router(config)#^Z Router# Router#show ip interface brief Interface IP-Address OK? Method Status Prol Vlan1 172.17.10.10 YES TFTP administratively down dow Vlan10 10.1.1.1 YES TFTP administratively down dow GigabitEthernet1/1 unassigned YES unset administratively down dow GigabitEthernet1/2 unassigned YES TFTP administratively down dow GigabitEthernet2/1 unassigned YES TFTP administratively down dow GigabitEthernet2/2 unassigned YES TFTP administratively down dow FastEthernet3/1 172.16.84.110 YES TFTP administratively down dow <snip>... !--- Issue the no shut command on all interfaces that you want to bring up. Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface fastEthernet 3/1 Router(config-if)#no shutdown Router(config-if)#exit !--- Overwrite the virtual terminal passwords. Router(config)#line vty 0 4 Router(config-line)#password cisco Router(config-line)#^Z Router# !--- Restore the configuration register to its normal state so that it !--- no longer ignores the stored configuration file. Router#show version Cisco Internetwork Operating System Software IOS (tm) c6sup1_rp Software (c6sup1_rp-JSV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by cisco Systems, Inc. Compiled Sat 17-Mar-01 00:14 by eaarmas Image text-base: 0x60020950, data-base: 0x6165E000 ROM: System Bootstrap, Version 12.0(3)XE, RELEASE SOFTWARE BOOTFLASH: MSFC Software (C6MSFC-BOOT-M), Version 12.1(6)E, EARLY DEPLOYMENT RE) Router uptime is 7 minutes System returned to ROM by power-on (SP by reload) System image file is "sup-bootflash:c6sup11-jsv-mz.121-6.E" Cisco Catalyst 6000 (R5000) processor with 114688K/16384K bytes of memory. Processor board ID SAD04281AF6 R5000 CPU at 200Mhz, Implementation 35, Rev 2.1, 512KB L2 Cache Last reset from power-on Bridging software. X.25 software, Version 3.0.0. SuperLAT software (copyright 1990 by Meridian Technology Corp). TN3270 Emulation software. 24 Ethernet/IEEE 802.3 interface(s) 2 Virtual Ethernet/IEEE 802.3 interface(s) 48 FastEthernet/IEEE 802.3 interface(s) 4 Gigabit Ethernet/IEEE 802.3 interface(s) 381K bytes of non-volatile configuration memory. 4096K bytes of packet SRAM memory. 16384K bytes of Flash internal SIMM (Sector size 256K). Configuration register is 0x2142 Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#config-register 0x2102 Router(config)#^Z Router# !--- Verify that the configuration register is changed for the next reload. Router#show version Cisco Internetwork Operating System Software IOS (tm) c6sup1_rp Software (c6sup1_rp-JSV-M), Version 12.1(6)E, EARLY DEPLOYME) TAC Support: http://www.cisco.com/cgi-bin/ibld/view.pl?i=support Copyright (c) 1986-2001 by cisco Systems, Inc. Compiled Sat 17-Mar-01 00:14 by eaarmas Image text-base: 0x60020950, data-base: 0x6165E000 ROM: System Bootstrap, Version 12.0(3)XE, RELEASE SOFTWARE BOOTFLASH: MSFC Software (C6MSFC-BOOT-M), Version 12.1(6)E, EARLY DEPLOYMENT RE) Router uptime is 8 minutes System returned to ROM by power-on (SP by reload) System image file is "sup-bootflash:c6sup11-jsv-mz.121-6.E" Cisco Catalyst 6000 (R5000) processor with 114688K/16384K bytes of memory. Processor board ID SAD04281AF6 R5000 CPU at 200Mhz, Implementation 35, Rev 2.1, 512KB L2 Cache Last reset from power-on Bridging software. X.25 software, Version 3.0.0. SuperLAT software (copyright 1990 by Meridian Technology Corp). TN3270 Emulation software. 24 Ethernet/IEEE 802.3 interface(s) 2 Virtual Ethernet/IEEE 802.3 interface(s) 48 FastEthernet/IEEE 802.3 interface(s) 4 Gigabit Ethernet/IEEE 802.3 interface(s) 381K bytes of non-volatile configuration memory. 4096K bytes of packet SRAM memory. 16384K bytes of Flash internal SIMM (Sector size 256K). Configuration register is 0x2142 (will be 0x2102 at next reload) Router# Router#copy running-config startup-config Destination filename [startup-config]? <press enter> Building configuration... [OK] Router# !--- Optional: If you want to test that the router !--- operates properly and that you have changed !--- the passwords, then reload and test. Router#reload Proceed with reload? [confirm] <press enter>