Este documento descreve como recuperar uma senha em um Catalyst 6500 Series Switch com um Supervisor 720 que executa o software do Cisco IOS® System com uma versão anterior a 12.2(17)SX.
O motivo do procedimento ser diferente para as versões do Cisco IOS Software anteriores a 12.2(17)SX é o bug da Cisco ID CSCec36997 (somente clientes registrados) (A recuperação de senha no sup720-native leva a um travamento no processador do switch (SP)). Quando seu switch está sujeito a esse bug, você tem aproximadamente 10 segundos após entrar no RP ROMMON para alterar o registro de configuração para 0x2142. Após esses 10 segundos, o switch é recarregado com uma recarga forçada de software. No entanto, se você alterar o registro de configuração para esse valor antes do travamento, ele entrará em vigor após o recarregamento e você poderá continuar com o resto do procedimento.
Não existem requisitos específicos para este documento.
Este documento se aplica aos sistemas baseados no Supervisor 720 que executam as versões do software Cisco IOS anteriores à 12.2(17)SX. Se o supervisor 720 executar o Cisco IOS Software Release 12.2(17)SX ou posterior, consulte o documento Procedimento de Recuperação de Senha para os Catalyst 6000/6500 Series Switches com Cisco IOS System Software.
A sequência de inicialização é diferente no Catalyst 6500/6000 que executa o Cisco IOS do que no Cisco 7200 Series Router porque o hardware é diferente. Depois de desligar e desligar a caixa, a controladora de armazenamento é inicializada. Após aproximadamente 25 a 60 segundos, ele transfere a propriedade do console para o processador de rota (RP (MSFC)). O RP continua carregando a imagem do software em pacote. É crucial pressionar Ctrl-Break logo depois que a controladora de armazenamento entregar o controle do console ao RP. Se você enviar a sequência de interrupção muito cedo, acabará no ROMMON da controladora de armazenamento, que não é onde deveria estar. Envie a sequência de interrupção depois de ver esta mensagem no console:
00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
Após este ponto, a recuperação da senha é feita da mesma maneira que em um roteador normal.
Observação: desse ponto em diante, o Switch Catalyst 6500 Series que executa o software Cisco IOS é conhecido como roteador.
For more information on document conventions, refer to the Cisco Technical Tips Conventions.
O switch é configurado como um roteador porque o sistema operacional Cisco IOS é executado no switch. O procedimento de recuperação de senha segue as mesmas etapas de um Cisco 7200 Series Router. A exceção é que você precisa esperar cerca de 25 a 60 segundos mais antes de iniciar a sequência de interrupção.
Conecte um terminal ou PC com emulação de terminal à porta de console do roteador. Utilize estas configurações de terminal:
9600 baud rate No parity 8 data bits 1 stop bit No flow control
As especificações do cabo do console necessário estão descritas no documento Especificações do cabo. As instruções sobre como se conectar à porta do console estão no Guia de Instalação do Módulo. A seção Conexão com a porta do console - Supervisor Engine Only fornece informações úteis.
Se você ainda tem acesso ao roteador, emita o comando show version e registre a definição do registro de configuração. Geralmente é 0x2102 ou 0x102. Clique aqui para ver o exemplo de saída de um comando show version.
Se você não tiver acesso ao roteador (devido a um login perdido ou a uma senha TACACS), é seguro supor que seu registro de configuração está definido como 0x2102.
Desligue e ligue o roteador com a ajuda do switch de energia.
Pressione Break no teclado do terminal logo após o RP ganhar o controle da porta do console. No Catalyst 6500 que executa o Cisco IOS, o SP é inicializado primeiro. Em seguida, ele transfere o controle para o RP. Depois que o RP ganhar controle, inicie a sequência de interrupção. O RP ganhou o controle da porta do console quando você vê esta mensagem. (Não inicie a seqüência de break até ver esta mensagem):
00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor
Devido à ID de bug da Cisco CSCec36997 (somente clientes registrados) (recuperação de senha no sup720-nativo leva a um travamento no SP), você tem cerca de 10 segundos para concluir a Etapa 6 antes que o switch falhe.
Se a sequência de interrupção não funcionar, consulte as Combinações de Sequência de Teclas de Interrupção Padrão Durante a Recuperação de Senha para obter outras combinações de teclas.
Digite confreg 0x2142 no prompt ROMMON 1> para inicializar a partir da flash sem carregar a configuração.
O Switch trava com um travamento forçado do Software:
rommon 1 > 00:00:41: %SYS-SP-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure co. 00:00:41: %SYS-SP-2-INTSCHED: 't_idle' at level 7 -Process= "SCP Download Process", ipl= 7, pid= 57 -Traceback= 4013991C 401232B4 402827F4 40282994 40283010 405CB010 402A9858 4013C 00:00:41: %SYS-SP-2-INTSCHED: 't_idle' at level 7 -Process= "SCP Download Process", ipl= 7, pid= 57 -Traceback= 4013991C 401232B4 402827F4 40282994 40283010 405CB010 402A9858 4013C 00:00:41: %SYS-SP-2-INTSCHED: 't_idle' at level 7 -Process= "SCP Download Process", ipl= 7, pid= 57 -Traceback= 4013991C 401232B4 402827F4 40282994 40283010 405CB010 402A9858 4013C 00:00:41: %OIR-SP-6-CONSOLE: Changing console ownership to switch processor *** System received a Software forced crash *** signal= 0x17, code= 0x24, context= 0x4269f6f4 PC = 0x401370d8, Cause = 0x3020, Status Reg = 0x34008002
O roteador é reinicializado. No entanto, ele ignora sua configuração salva devido ao fato de que o registro de configuração está definido como 0x2142. Se você perceber que a configuração do roteador ainda está presente (ainda tem o nome de host anterior), ela indica que o registro de configuração não foi alterado em tempo para 0x2142 antes da pane. Se for esse o caso, comece novamente (Etapa 4). Se o registro de configuração for alterado corretamente para 0x2142, você obterá as perguntas de configuração inicial após o recarregamento.
Digite no depois de cada pergunta da configuração ou pressione Ctrl-C para pular o procedimento inicial de configuração.
Digite enable no prompt Router>. Você está no modo enable. O prompt Router# é exibido.
É importante emitir os comandos configure memory ou copy start running para copiar a RAM não volátil (NVRAM) na memória. Não emita o comando configure terminal.
Emita o comando write terminal ou show running. Estes comandos mostram a configuração do roteador. Nesta configuração, você verá o comando shutdown em todas as interfaces. Isso significa que todas as interfaces estão atualmente desligadas. Você vê as senhas em formato criptografado ou não criptografado.
Emita o comando configure terminal para entrar no modo de configuração global e fazer as alterações. O prompt agora é hostname(config)#.
Emita o comando enable secret <password> no modo de configuração global para alterar a habilitação de senha.
Emita o comando config-register 0x2102 ou o valor registrado na Etapa 2 em modo de configuração global (Router(config)#) para redefinir o valor da configuração para seu valor original.
Altere quaisquer senhas de terminal virtual, se presentes:
Router(config)#line vty 0 4 Router(config-line)#password cisco Router(config-line)#^Z Router#
Emita o comando no shutdown em todas as interfaces que estão normalmente em uso. Emita um comando show ip interface brief para ver uma lista de interfaces e seu status atual. Você deve estar em modo de habilitação (Roteador#) para executar o comando show ip interface brief. Aqui está um exemplo de uma interface:
Router#show ip interface brief Interface IP-Address OK? Method Status Prol Vlan1 172.17.10.10 YES TFTP administratively down dow Vlan10 10.1.1.1 YES TFTP administratively down dow GigabitEthernet1/1 unassigned YES unset administratively down dow GigabitEthernet1/2 unassigned YES TFTP administratively down dow GigabitEthernet2/1 unassigned YES TFTP administratively down dow GigabitEthernet2/2 unassigned YES TFTP administratively down dow FastEthernet3/1 172.16.84.110 YES TFTP administratively down dow <snip>... Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface fastEthernet 3/1 Router(config-if)#no shutdown Router(config-if)#exit Router(config)# <do other interfaces as necessary...>
Pressione Ctrl-Z para sair do modo de configuração. O prompt agora é hostname#.
Emita os comandos write memory ou copy running startup para confirmar as alterações.
O exemplo aqui mostra um procedimento real de recuperação de senha. Este exemplo é criado com a ajuda de um switch Catalyst 6500 Series. Comece com os comandos show version e show module para ver os componentes usados neste exemplo.
Press RETURN to get started. sup720>enable Password: sup720# sup720#show version Cisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:40 by ccai Image text-base: 0x40008C10, data-base: 0x41ACE000 ROM: System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1) BOOTLDR: s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) sup720 uptime is 18 minutes Time since sup720 switched to active is 17 minutes System returned to ROM by power-on (SP by reload) System image file is "disk0:s72033-ps-mz.122-14.SX1.bin" cisco Catalyst 6000 (R7000) processor with 458752K/65536K bytes of memory. Processor board ID SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache Last reset from power-on X.25 software, Version 3.0.0. Bridging software. 3 Virtual Ethernet/IEEE 802.3 interface(s) 96 FastEthernet/IEEE 802.3 interface(s) 58 Gigabit Ethernet/IEEE 802.3 interface(s) 1917K bytes of non-volatile configuration memory. 8192K bytes of packet buffer memory. 65536K bytes of Flash internal SIMM (Sector size 512K). Configuration register is 0x2102 sup720# sup720#show module Mod Ports Card Type Model Serial No. --- ----- -------------------------------------- ------------------ ----------- 1 16 16 port GE RJ45 WS-X6316-GE-TX SAD04100A9R 2 48 48 port 10/100 mb RJ-45 ethernet WS-X6248-RJ-45 SAD041402P9 4 16 SFM-capable 16 port 1000mb GBIC WS-X6516A-GBIC SAL0705CD7X 5 2 Supervisor Engine 720 (Active) WS-SUP720-BASE SAD070600MU 7 24 aCEF720 24 port 1000mb SFP WS-X6724-SFP SAD0725035Y 9 48 48-port 10/100 mb RJ45 WS-X6148-RJ45V SAL06282HGE Mod MAC addresses Hw Fw Sw Status --- ---------------------------------- ------ ------------ ------------ ------- 1 00d0.9738.702a to 00d0.9738.7039 0.202 5.3(1) 7.7(0.74)APP Ok 2 0001.9709.5c90 to 0001.9709.5cbf 1.2 5.1(1)CSX 7.7(0.74)APP Ok 4 0009.11f6.aa28 to 0009.11f6.aa37 1.0 7.2(1) 7.7(0.74)APP Ok 5 000c.3042.844c to 000c.3042.844f 1.0 7.7(1) 12.2(14)SX1 Ok 7 0030.f272.2666 to 0030.f272.267d 1.0 12.2(14r)S5 12.2(14)SX1 PwrDown 9 0009.127c.8d40 to 0009.127c.8d6f 1.0 5.4(2) 7.7(0.74)APP Ok Mod Sub-Module Model Serial Hw Status --- --------------------------- ------------------ ------------ ------- ------- 5 Policy Feature Card 3 WS-F6K-PFC3A SAD070601DR 1.0 Ok 5 MSFC3 Daughterboard WS-SUP720 SAD070500YF 1.0 Ok 7 unknown FRU type (major = 0 WS-F6700-CFC SAD073201KC 1.0 PwrDown 9 Inline Power Module WS-F6K-PWR 1.0 Ok Mod Online Diag Status --- ------------------- 1 Pass 2 Pass 4 Pass 5 Pass 7 Unknown 9 Pass sup720# sup720# sup720#reload Proceed with reload? [confirm] !--- Here you turn off the power and then turn it back on. !--- Here it is done with a reload instead of a hard power-cycle. *Sep 29 04:21:13: %SYS-5-RELOAD: Reload requested by console. *Sep 29 04:21:16: %OIR-SP-6-CONSOLE: Changing console ownership to switch procer *Sep 29 04:21:18: %SYS-SP-5-RELOAD: Reload requested *Sep 29 04:21:18: %OIR-SP-6-CONSOLE: Changing console ownership to switch procer *** *** --- SHUTDOWN NOW --- *** !--- First, the switch processor comes up. System Bootstrap, Version 7.7(1) Copyright (c) 1994-2003 by cisco Systems, Inc. Cat6k-Sup720/SP processor with 524288 Kbytes of main memory Autoboot executing command: "boot disk0:s72033-ps-mz.122-14.SX1.bin" Self decompressing the image : ################################################] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software IOS (tm) s72033_sp Software (s72033_sp-SP-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:48 by ccai Image text-base: 0x40020C10, data-base: 0x40B98000 00:00:03: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor 00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor !--- The RP now has control of the console. !--- This is when you send the break sequence. System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1) TAC Support: http://www.cisco.com/tac Copyright (c) 2003 by cisco Systems, Inc. Cat6k-Sup720/RP platform with 524288 Kbytes of main memory Download Start *** Mistral Interrupt on line 4 *** System memory 1 bit ECC correctable error interrupt .. PC = 0x8000841c, SP = 0x80007f00, RA = 0x80008488 Cause Reg = 0x00004400, Status Reg = 0x3041c003 rommon 1 > !--- You are now in ROMMON mode on the RP. Continue the password !--- recovery procedure just as on any router. Changing the configuration !--- register from 0x2102 to 0x2142 causes the router to ignore the existing !--- configuration. It needs to be ignored because it has passwords that are not !--- known. Due to Cisco bug ID CSCec36997 : Password recovery on sup720-native leads to crash !--- on SP. You have about 10 seconds to change the configuration register to 0x2142. !--- After these 10 seconds, the SP crashes. If the config register is not changed !--- in time, start again. rommon 1 > confreg 0x2142 You must reset or power cycle for new config to take effect. rommon 2 > !--- Without any intervention, the switch crashes in about 10 seconds !--- after you break into RP ROMMON. 00:00:31: %SYS-SP-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure co. 00:00:31: %SYS-SP-2-INTSCHED: 't_idle' at level 7 -Process= "SCP Download Process", ipl= 7, pid= 57 -Traceback= 4013991C 401232B4 402827F4 40282994 40283010 405CB010 402A9858 4013C 00:00:31: %SYS-SP-2-INTSCHED: 't_idle' at level 7 -Process= "SCP Download Process", ipl= 7, pid= 57 -Traceback= 4013991C 401232B4 402827F4 40282994 40283010 405CB010 402A9858 4013C 00:00:31: %SYS-SP-2-INTSCHED: 't_idle' at level 7 -Process= "SCP Download Process", ipl= 7, pid= 57 -Traceback= 4013991C 401232B4 402827F4 40282994 40283010 405CB010 402A9858 4013C 00:00:31: %OIR-SP-6-CONSOLE: Changing console ownership to switch processor *** System received a Software forced crash *** signal= 0x17, code= 0x24, context= 0x4269f6f4 PC = 0x401370d8, Cause = 0x3020, Status Reg = 0x34008002 System Bootstrap, Version 7.7(1) Copyright (c) 1994-2003 by cisco Systems, Inc. Cat6k-Sup720/SP processor with 524288 Kbytes of main memory Autoboot executing command: "boot disk0:s72033-ps-mz.122-14.SX1.bin" Self decompressing the image : ################################################] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software IOS (tm) s72033_sp Software (s72033_sp-SP-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:48 by ccai Image text-base: 0x40020C10, data-base: 0x40B98000 00:00:03: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor 00:00:03: %OIR-6-CONSOLE: Changing console ownership to route processor System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1) TAC Support: http://www.cisco.com/tac Copyright (c) 2003 by cisco Systems, Inc. Cat6k-Sup720/RP platform with 524288 Kbytes of main memory Download Start !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Download Completed! Booting the image. Self decompressing the image : ################################################] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:40 by ccai Image text-base: 0x40008C10, data-base: 0x41ACE000 cisco Catalyst 6000 (R7000) processor with 458752K/65536K bytes of memory. Processor board ID SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache Last reset from power-on X.25 software, Version 3.0.0. Bridging software. 1 Virtual Ethernet/IEEE 802.3 interface(s) 96 FastEthernet/IEEE 802.3 interface(s) 58 Gigabit Ethernet/IEEE 802.3 interface(s) 1917K bytes of non-volatile configuration memory. 8192K bytes of packet buffer memory. 65536K bytes of Flash internal SIMM (Sector size 512K). --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: n !--- The router ignores the saved configuration and enters !--- the initial configuration mode. Press RETURN to get started! 00:00:03: %SYS-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure conso. 00:00:46: curr is 0x10000 00:00:46: RP: Currently running ROMMON from F1 region 00:01:00: %SYS-5-RESTART: System restarted -- Cisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:40 by ccai 00:01:00: %SNMP-5-COLDSTART: SNMP agent on host Router is undergoing a cold stat 00:01:00: %SYS-6 Router>-BOOTTIME: Time taken to reboot after reload = 1807 seconds Firmware compiled 19-May-03 10:54 by integ Build [100] 00:00:54: %SPANTREE-SP-5-EXTENDED_SYSID: Extended SysId enabled for type vlan 00:00:54: SP: SP: Currently running ROMMON from F1 region 00:01:00: %SYS-SP-5-RESTART: System restarted -- Cisco Internetwork Operating System Software IOS (tm) s72033_sp Software (s72033_sp-SP-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:48 by ccai 00:01:01: %OIR-SP-6-INSPS: Power supply inserted in slot 1 00:01:01: %C6KPWR-SP-4-PSOK: power supply 1 turned on. 00:01:01: %OIR-SP-6-INSPS: Power supply inserted in slot 2 00:01:01: %C6KPWR-SP-4-PSOK: power supply 2 turned on. 00:01:01: %C6KPWR-SP-4-PSREDUNDANTBOTHSUPPLY: in power-redundancy mode, system . 00:01:05: %FABRIC-SP-5-FABRIC_MODULE_ACTIVE: the switching fabric module in sloe 00:01:06: %DIAG-SP-6-RUN_MINIMUM: Module 5: Running Minimum Diagnostics... Router> Router> 00:01:18: %DIAG-SP-6-DIAG_OK: Module 5: Passed Online Diagnostics 00:01:18: %OIR-SP-6-INSCARD: Card inserted in slot 5, interfaces are now online 00:01:21: %DIAG-SP-6-RUN_MINIMUM: Module 4: Running Minimum Diagnostics... Router> Router> Router> 00:01:36: %DIAG-SP-6-RUN_MINIMUM: Module 9: Running Minimum Diagnostics... Router> Router> 00:01:42: %DIAG-SP-6-RUN_MINIMUM: Module 1: Running Minimum Diagnostics... 00:01:44: %DIAG-SP-6-DIAG_OK: Module 4: Passed Online Diagnostics 00:01:45: %OIR-SP-6-INSCARD: Card inserted in slot 4, interfaces are now online 00:01:54: %DIAG-SP-6-DIAG_OK: Module 9: Passed Online Diagnostics 00:01:54: %OIR-SP-6-INSCARD: Card inserted in slot 9, interfaces are now online 00:01:57: %DIAG-SP-6-DIAG_OK: Module 1: Passed Online Diagnostics 00:01:57: %OIR-SP-6-INSCARD: Card inserted in slot 1, interfaces are now online 00:02:06: %DIAG-SP-6-RUN_MINIMUM: Module 2: Running Minimum Diagnostics... 00:02:15: %DIAG-SP-6-DIAG_OK: Module 2: Passed Online Diagnostics 00:02:15: %OIR-SP-6-INSCARD: Card inserted in slot 2, interfaces are now online Router> Router>enable Router# !--- You go right into privilege mode without needing a password. !--- At this point, the configuration running-config is a default configuration !--- with all the ports administratively down (shutdown). Router#copy startup-config running-config Destination filename [running-config]? <press enter> !--- This pulls in your original configuration. Since you are already in privilege !--- mode, the passwords in this configuration (that are not known) do not affect you. 4864 bytes copied in 2.48 secs (2432 bytes/sec) sup720# sup720#configure terminal Enter configuration commands, one per line. End with CNTL/Z. sup720(config)#enable secret < password > [Choose a strong password with at least one capital letter, one number, and one special character.] !--- Overwrite the password that you do not know. This is your new enable password. sup720#show ip interface brief Interface IP-Address OK? Method Status Prol Vlan1 10.48.72.142 YES TFTP administratively down dow Vlan500 10.1.1.1 YES TFTP administratively down dow Vlan501 10.2.2.1 YES TFTP administratively down dow GigabitEthernet1/1 unassigned YES TFTP administratively down dow GigabitEthernet1/2 unassigned YES TFTP administratively down dow GigabitEthernet1/3 unassigned YES TFTP administratively down dow GigabitEthernet1/4 unassigned YES TFTP administratively down dow GigabitEthernet1/5 unassigned YES TFTP administratively down dow GigabitEthernet1/6 unassigned YES TFTP administratively down dow GigabitEthernet1/7 unassigned YES TFTP administratively down dow <snip>... !--- Issue the no shut command on all interfaces that you want to bring up. sup720#configure terminal Enter configuration commands, one per line. End with CNTL/Z. sup720(config)#interface gig 1/1 sup720(config-if)#no shut sup720(config-if)#^Z sup720# !--- Overwrite the virtual terminal passwords. sup720#configure terminal sup720(config)#line vty 0 4 sup720(config-line)#password XXX sup720(config-line)#^Z sup720# !--- Restore the configuration register to its normal state !--- so that it no longer ignores the stored configuration file. sup720#show version Cisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:40 by ccai Image text-base: 0x40008C10, data-base: 0x41ACE000 ROM: System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1) BOOTLDR: s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) sup720 uptime is 4 minutes Time since sup720 switched to active is 4 minutes System returned to ROM by power-on (SP by error - a Software forced crash, PC 0) System image file is "disk0:s72033-ps-mz.122-14.SX1.bin" cisco Catalyst 6000 (R7000) processor with 458752K/65536K bytes of memory. Processor board ID SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache Last reset from power-on X.25 software, Version 3.0.0. Bridging software. 3 Virtual Ethernet/IEEE 802.3 interface(s) 96 FastEthernet/IEEE 802.3 interface(s) 58 Gigabit Ethernet/IEEE 802.3 interface(s) 1917K bytes of non-volatile configuration memory. 8192K bytes of packet buffer memory. 65536K bytes of Flash internal SIMM (Sector size 512K). Configuration register is 0x2142 sup720# sup720#configure terminal Enter configuration commands, one per line. End with CNTL/Z. sup720(config)#config-register 0x2102 sup720(config)# !--- Verify that the configuration register is changed for the next reload. sup720#show version Cisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY) TAC Support: http://www.cisco.com/tac Copyright (c) 1986-2003 by cisco Systems, Inc. Compiled Tue 27-May-03 20:40 by ccai Image text-base: 0x40008C10, data-base: 0x41ACE000 ROM: System Bootstrap, Version 12.2(14r)S9, RELEASE SOFTWARE (fc1) BOOTLDR: s72033_rp Software (s72033_rp-PS-M), Version 12.2(14)SX1, EARLY DEPLOY sup720 uptime is 4 minutes Time since sup720 switched to active is 4 minutes System returned to ROM by power-on (SP by error - a Software forced crash, PC 0) System image file is "disk0:s72033-ps-mz.122-14.SX1.bin" cisco Catalyst 6000 (R7000) processor with 458752K/65536K bytes of memory. Processor board ID SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache Last reset from power-on X.25 software, Version 3.0.0. Bridging software. 3 Virtual Ethernet/IEEE 802.3 interface(s) 96 FastEthernet/IEEE 802.3 interface(s) 58 Gigabit Ethernet/IEEE 802.3 interface(s) 1917K bytes of non-volatile configuration memory. 8192K bytes of packet buffer memory. 65536K bytes of Flash internal SIMM (Sector size 512K). Configuration register is 0x2142 (will be 0x2102 at next reload) sup720# sup720#copy running-config startup-config Destination filename [startup-config]?Building configuration... [OK] sup720# !--- Optional: If you want to test that the router operates properly and that you have changed the passwords, !--- reload and test. sup720#reload Proceed with reload? [confirm]
Revisão | Data de publicação | Comentários |
---|---|---|
1.0 |
10-Apr-2006 |
Versão inicial |