简介
本文档介绍如何恢复FirePOWER 9300/4100系列设备的管理引擎管理输入输出(MIO)密码。
先决条件
要求
本文档没有任何特定的要求。
使用的组件
本文档中的信息基于以下硬件版本：
· Cisco Firepower 4100系列和9300设备。
本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始（默认）配置。如果您使用的是真实网络，请确保您已经了解所有命令的潜在影响。
背景信息
当用户忘记Supervisor MIO密码时，将执行密码恢复程序。为此，在执行口令恢复过程时，所有数据库文件和配置都将重置为出厂默认设置。
注意：不应使用此过程重置已知口令。
口令逐步恢复过程
要恢复Supervisor MIO的口令，请执行以下步骤：
步骤1.使用提供的控制台电缆将PC连接到控制台端口，并使用终端仿真器连接到控制台，该仿真器设置为9600波特、8个数据位、无奇偶校验、1个停止位、无流量控制。有关控制台电缆的详细信息，请查看思科Firepower 9300硬件安装指南。
注意：口令恢复需要通过Console访问FXOS Supervisor。
步骤 2关闭系统电源，然后打开电源。
第 3 步：启动时，请在提示进入ROMMON模式时按ESC 或CTRL + L 键。
!! Rommon image verified successfully !!
Cisco System ROMMON, Version 1.0.09, RELEASE SOFTWARE
Copyright (c) 1994-2015 by Cisco Systems, Inc.
Compiled Thu 05/28/2015 17:21:39.46 by gilchen
Current image running: Boot ROM0
Last reset cause: ResetRequest
DIMM Slot 0 : Present
DIMM Slot 1 : Present
No USB drive !!
BIOS has been locked !!
Platform FPR9K-SUP with 16384 Mbytes of main memory
MAC Address: b0:aa:77:2f:93:74
find the string ! boot bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.3.14.69.SPA bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
Use BREAK, ESC or CTRL+L to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.
rommon 1 >
第4步：记录启动映像和上面突出显示的系统映像。
bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.3.14.69.SPA
bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
第五步： 在rommon提示符处输入boot (kickstart image name)命令时，加载启动映像。
rommon 1 > boot bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.3.14.69.SPA
!! Kickstart Image verified successfully !!
Linux version: 2.6.27.47 (security@cisco.com) #1 SMP Tue Nov 24 12:10:28 PST 2015
[ 0.000000] Fastboot Memory at 0c100000 of size 201326592
Usage: init 0123456SsQqAaBbCcUu
INIT: POST INIT Starts at Wed Jun 1 13:46:33 UTC 2016
can't create lock file /var/lock/mtab~302: No such file or directory (use -n flag to override)
S10mount-ramfs.supnuovaca Mounting /isan 3000m
Mounted /isan
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2015, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
switch(boot)#
第六步：在switch(boot)#提示符处，输入config terminal命令以导航到配置模式，然后输入admin-password erase命令以重置密码。稍后，系统将提示用户进行确认。
警告：如果在此提示符下选择Y，则会清除所有配置并将系统恢复为出厂默认配置。
switch(boot)#
switch(boot)# config terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(boot)(config)# admin-password erase
Your password and configuration will be erased!
Do you want to continue? (y/n) [n] y
步骤 7.退出到switch(boot)#提示符 并加载之前保存的系统映像，以完成此过程。
switch(boot)(config)# exit
switch(boot)# load bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
Uncompressing system image: bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.3.14.69.SPA
<lines ommitted>
---- Basic System Configuration Dialog ----
This setup utility will guide you through the basic configuration of
the system. Only minimal configuration including IP connectivity to
the Fabric interconnect and its clustering mode is performed through these steps.
Type Ctrl-C at any time to abort configuration and reboot system.
To back track or make modifications to already entered values,
complete input till end of section and answer no when prompted
to apply configuration.
You have chosen to setup a new Security Appliance. Continue? (y/n): y
Enforce strong password? (y/n) [y]: n
Enter the password for "admin":
Confirm the password for "admin":
Enter the system name: FF09-FPR9300-1
Physical Switch Mgmt0 IP address : 192.168.10.10
Physical Switch Mgmt0 IPv4 netmask : 255.255.255.0
IPv4 address of the default gateway : 192.168.10.1
Configure the DNS Server IP address? (yes/no) [n]: n
Configure the default domain name? (yes/no) [n]: n
Following configurations will be applied:
Switch Fabric=A
System Name=FF09-FPR9300-1
Enforced Strong Password=no
Physical Switch Mgmt0 IP Address=192.168.10.1
Physical Switch Mgmt0 IP Netmask=255.255.255.0
Default Gateway=192.168.10.1
Ipv6 value=0
Apply and save the configuration (select 'no' if you want to re-enter)? (yes/no): yes
Applying configuration. Please wait.
Configuration file - Ok
Cisco FPR Series Security Appliance
FF09-FPR9300-1 login:
相关信息
反馈