2022年brocade交换机密码丢失问题 .pdf

《2022年brocade交换机密码丢失问题 .pdf》由会员分享，可在线阅读，更多相关《2022年brocade交换机密码丢失问题 .pdf（12页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、Publication Number:53-1000114-01*53-1000114-01*Publication Date:3/13/2006Fabric OSPassword Recovery NotesSupporting Fabric OS v2.6.x,v3.1.x,v4.x,v5.x名师资料总结-精品资料欢迎下载-名师精心整理-第 1 页，共 12 页 -2 of 12Fabric OS Password Recovery NotesPublication Number:53-1000114-01Copyright?2006,Brocade Communications Syst

2、ems,Incorporated.ALL RIGHTS RESERVED.Publication Number:53-1000114-01Brocade,the Brocade B weave logo,Secure Fabric OS,and SilkWorm are registered trademarks of Brocade Communications Systems,Inc.,in the United States and/or in other countries.All other brands,products,or service names are or may be

3、 trademarks or service marks of,and are used to identify,products or services of their respective owners.Notice:The information in this document is provided“AS IS,”without warranty of any kind,including,without limitation,any implied warranty of merchantability,noninfringement or fitness for a parti

4、cular purpose.Disclosure of information in this material in no way grants a recipient any rights under Brocades patents,copyrights,trade secrets or other intellectual property rights.Brocade reserves the right to make changes to this document at any time,without notice,and assumes no responsibility

5、for its use.The authors and Brocade Communications Systems,Inc.shall have no liability or responsibility to any person or entity with respect to any loss,cost,liability,or damages arising from the information contained in this book or the computer programs that accompany it.Notice:The product descri

6、bed by this document may contain“open source”software covered by the GNU General Public License or other open source license agreements.To find out which open source software is included in Brocade products,view the licensing terms applicable to the open source software,and obtain a copy of the prog

7、ramming source code,please visit http:/ of technical data contained in this document may require an export license from the United States Government.Brocade Communications Systems,IncorporatedDocument HistoryThe following table lists all published versions of the Fabric OS Password Recovery Notes.Co

8、rporate HeadquartersBrocade Communications Systems,Inc.1745 Technology Drive San Jose,CA 95110 Tel:1-408-333-8000 Fax:1-408-333-8101 Email: Asia-Pacific HeadquartersBrocade Communications Singapore Pte.Ltd.9 Raffles Place#59-02 Republic Plaza 1Singapore 048619Tel:+65-6538-4700Fax:+65-6538-0302Email:

9、apac-European and Latin American HeadquartersBrocade Communications Switzerland SrlCentre SwissairTour A-2me tage29,Route de lAroportCase Postale 105CH-1215 Genve 15Switzerland Tel:+41 22 799 56 40Fax:+41 22 799 56 41Email:emea- Document TitlePublication NumberSummary of ChangesPublication DateFabri

10、c OS Password Recovery Notes53-10000114-01New document.March 2006名师资料总结-精品资料欢迎下载-名师精心整理-第 2 页，共 12 页 -Fabric OS Password Recovery Notes3 of 12Publication Number:53-1000114-01Password RecoveryThis document provides procedures for recovering the passwords on SilkWorm switches or directors.The followin

11、g topics are explained:?“Password Recovery on Linux-Based Switches”on page 3?“Password Recovery on VXWorks-Based Switches”on page 9Password Recovery on Linux-Based SwitchesThere are several ways to recover the passwords on a SilkWorm switch or director:?“Password Recovery Using Root Account”on page

12、3?“Password Recovery Using the Boot PROM”on page 4?“Obtaining the Boot PROM Recovery Password”on page 7?“Password Recovery for Fabric OS v4.4.0”on page 8If you have access to the root account you can reset the passwords for all other accounts on the system including:the factory,admin,and user accoun

13、ts.The root account can reset the root,factory,and admin accounts;admin can reset the user login.See“Password Recovery Using Root Account”on page 3.If you do not have access to the root account,you can use the Boot PROM password to reset the system passwords to default values.This option is only ava

14、ilable on Fabric OS v4.1 or greater,and you must have the Boot PROM password(unless no Boot PROM password was set).See“Password Recovery Using the Boot PROM”on page 4.If you do not have either the root or Boot PROM password,or your system is loaded with a version older than Fabric OS v4.1,contact yo

15、ur switch service provider for a Boot PROM recovery string to regain access to the switch.See“Obtaining the Boot PROM Recovery Password”on page 7.Password Recovery Using Root AccountIf you have access to the root account,you can reset the password for any admin,factory,and user accounts without know

16、ing the account s current password.To reset any account password from the root account:1.Open a CLI session(serial or telnet for an unsecured system and sectelnet for a secure system)to the switch.2.Log in as root.3.At the prompt,enter the passwd command,followed by the account name as shown below:s

17、witch:root passwd accountNoteWhen connected through a serial cable to the console,always save the output using the capture functionality under windows(or script functionality for UNIX or Linux).NoteIn a fabric with Secure Fabric OS enabled,you must log in to the primary FCS to perform these tasks.名师

18、资料总结-精品资料欢迎下载-名师精心整理-第 3 页，共 12 页 -4 of 12Fabric OS Password Recovery NotesPublication Number:53-1000114-014.Follow the prompts to reset the password for the selected account.For example:Password Recovery Using the Boot PROMIf you know the Boot PROM password or none was set on your system,use this p

19、rocedure to reset the passwords to default values on the switch or director.The current Fabric OS level of the switch or director must be v4.1 or greater.To reset the root password to default using the Boot PROM password:1.Connect to the serial console port of the switch(SilkWorm 200E,3250,3850,3900

20、,4100,4900 or 7500 switch)or the standby CP of a director(SilkWorm 12000,24000,or 48000).Use the hashow command to see which CP is active and which is standby.2.Enter the reboot command.3.Press ESC at the message“Press escape within 4 seconds.”The Boot PROM menu is displayed with the following optio

21、ns:-1)Start systemUsed to reboot the system.-2)Recover password.Used to generate a character string for your support provider to recover the Boot PROM password.-3)Enter command shell.Used to enter the command shell,to reset all passwords on the system.switch:root passwd adminChanging password for ad

22、minEnter new password:xxxxxxxRe-type new password:xxxxxxxpasswd:all authentication tokens updated successfullySaving password to stable storage.Password saved to stable storage successfully.NoteThis procedure is disruptive to traffic on the SilkWorm 200E,3250,3850,3900,4100,4900 and 7500 switches,be

23、cause it requires you to reboot the switch;traffic resumes after the switch is rebooted.On a SilkWorm 12000,24000,or 48000 director,you can reset the passwords without disruption by performing this procedure on the standby CP.NoteIf you are attempting to recover passwords for Fabric OS v4.4.0,you mu

24、st review“Password Recovery for Fabric OS v4.4.0”on page 8 prior to beginning this procedure.名师资料总结-精品资料欢迎下载-名师精心整理-第 4 页，共 12 页 -Fabric OS Password Recovery Notes5 of 12Publication Number:53-1000114-014.Type 3 at the prompt to open the command shell.5.Type the Boot PROM password,if prompted,then pr

25、ess Enter.The Boot PROM has a password only if one was defined earlier.6.Run the printenv command,then save the output to a file.You will need to refer to this output later in the procedure.7.Locate the first memory address;it is the string after OSLoader=in the printenv output.8.Run the boot comman

26、d with the first memory address and the s option.For example:9.For a SilkWorm 200E,3250,3850,3900,4100,4900,or 7500 switch,perform the following steps:a.Enter the mount command with the following parameters:mount-o remount,rw,noatime/This will remount the root partition as read/write.b.Enter the mou

27、nt command with the following parameters where hda is followed by the second partition value(such as 1 or 2)from OSRootPartition in the printenv output:mount/dev/hda2/mnt The system is coming up,please wait.Checking system RAM-press any key to stop test01a00000System RAM check terminated by keyboard

28、System RAM check completePress escape within 4 seconds to enter boot interface.1)Start system.2)Recover password.3)Enter command shell.Option?31)Start system.2)Recover password.3)Enter command shell.Option?3Boot PROM password has not been set.printenvAutoLoad=yesENET_MAC=0060696019B4InitTest=MEM()Lo

29、adIdentifiers=Fabric Operating System;Fabric Operating SystemOSBooted=MEM()0 xF0000000OSLoadOptions=quiet;quietOSLoader=MEM()0 xF0000000;MEM()0 xF0800000OSRootPartition=hda1;hda2SkipWatchdog=yes boot MEM()0 xF0000000-sBooting Manually selected OS image.Entry point at 0 x00800000.名师资料总结-精品资料欢迎下载-名师精心

30、整理-第 5 页，共 12 页 -6 of 12Fabric OS Password Recovery NotesPublication Number:53-1000114-01c.Enter the passwddefault command,as follows:/sbin/passwddefaultThis resets all account passwords to the default values.If there were additional user accounts created,they are deleted and only the default accoun

31、ts and passwords remain.d.Reboot the switch using the reboot f command.reboot-fTraffic flow resumes when the switch completes rebooting.If you do not use the f you will have to manually reboot the switch.e.Log in as root to the switch by serial or telnet and set new passwords for all accounts.The pr

32、ocess is now complete.10.For a SilkWorm 12000,24000,or 48000 director,perform the following stepsa.From the serial connection to the standby CP,determine the hostname of the CPs.This can be done using the#/bin/cat/etc/hosts command:b.From the serial connection to the standby CP,set the appropriate h

33、ostname to the CP.Use the hostname displayed in the previous step.In the above example mycp0 is the standby CP.hostname c.Start networking on the standby CP:/etc/init.d/network startd.Perform one of the following according to which slot the CP card is in:-If the standby CP card is in slot 5(CP0),ent

34、er:rsh 10.0.0.6/sbin/passwddefault-If the standby CP card is in slot 6(CP1),enter:rsh 10.0.0.5/sbin/passwddefaulte.Reboot the standby CP using the reboot f command.reboot fIf you do not use the f option you will have to manually reset the CP by moving the slider switch to the off and then on positio

35、n.#/bin/cat/etc/hosts127.0.0.1 localhost10.64.148.23 swd77#sw0 255.255.240.010.64.148.24 swd76#sw1 255.255.240.010.64.148.25 mycp0#cp0 255.255.240.0 CP0 SLOT 510.64.148.26 cp1#cp1 255.255.240.0 CP1 SLOT 60.0.0.0 fc0#fc0 0.0.0.00.0.0.0 fc1#fc1 0.0.0.010.0.0.5 cp_0_inteth#cp_0_internaleth10.0.0.6 cp_1

36、_inteth#cp_1_internalethNoteThe hostname for CP0 or CP1 are user definable,and may be different for each installation.名师资料总结-精品资料欢迎下载-名师精心整理-第 6 页，共 12 页 -Fabric OS Password Recovery Notes7 of 12Publication Number:53-1000114-01f.Log in to the active CP as admin from a telnet or serial connection,and

37、 enter Ctrl+C to bypass the request to modify passwords.g.Log in to either logical switch by serial or telnet as admin and set new passwords for all accounts.The password recovery procedure is now complete.Obtaining the Boot PROM Recovery PasswordThis section explains how to gather the information y

38、ou need to send to your switch support provider in order to get a Boot PROM recovery password.Once you have received the Boot PROM recovery password,and gained access to the Boot PROM,you reset the passwords using“Password Recovery Using the Boot PROM”on page4.To obtain the Boot PROM recovery passwo

39、rd from your switch support provider:1.Connect to the serial port interface of the switch or standby CP.2.Reboot the switch or standby CP.3.Press ESC within four seconds after the message“Press escape within 4 seconds.”.4.Enter 2 at the prompt.A character string is displayed.5.Send the character str

40、ing to your switch support provider to obtain a Boot PROM recovery password.6.Perform the appropriate steps to set the Boot PROM password if it was not set,as prompted:Recovery password is NOT set.Please set it now.7.Enter the Recovery Password that is generated from your support provider when promp

41、ted.8.When prompted with“New password:”,enter the new Boot PROM password and re-enter when prompted.9.Record the new password for future reference.10.Enter the saveenv command.1)Start system.2)Recover password.3)Enter command shell.Option?2Send the following string to Customer Support for password r

42、ecovery:/uasLR1raCqT3FToqy0ZjA=Enter the supplied recovery password.Recovery Password:YnfG9DDrlFMDVkNM0RkPtg=saveenv名师资料总结-精品资料欢迎下载-名师精心整理-第 7 页，共 12 页 -8 of 12Fabric OS Password Recovery NotesPublication Number:53-1000114-01Password Recovery for Fabric OS v4.4.0In Fabric OS v4.4.0,you must take add

43、itional steps prior to and after performing the“Password Recovery Using the Boot PROM”on page 4.Otherwise,the switch is left in single-user mode.Password Recovery Steps Before Root Command1.Connect to the serial port of the switch or the standby CP.2.Reboot the switch and press ESC within 4 seconds

44、after the message Press escape within 4 seconds.3.Enter the Boot PROM password.4.Enter 3 at the prompt to enter the command shell.5.Enter the printenv command and save the output.For example:6.From the output of the printenv,record the value for OSLoader.OSLoader _Password Recovery Steps After Root

45、CommandAfter you have recovered the passwords:1.Connect to the serial port interface of the switch or standby CP.2.Reboot the switch and press ESC within 4 seconds after the message Press escape within 4 seconds.displays.Enter Boot PROM interface:3.Enter the Boot PROM password.4.Enter 3 at the promp

46、t to enter the command shell.The system is coming up,please wait.Checking system RAM-press any key to stop testChecking memory address:01300000System RAM check terminated by keyboardSystem RAM check completePress escape within 4 seconds to enter boot interface.1)Start system.2)Recover password.3)Ent

47、er command shell.Option?3Password:printenvAutoLoad=yesENET_MAC=006069602BD6InitTest=MEM()LoadIdentifiers=Fabric Operating System;Fabric Operating SystemOSLoader=MEM()0 xF0000000;MEM()0 xF0800000OSLoadOptions=quiet;quietOSRootPartition=hda1;hda2SkipWatchdog=yes名师资料总结-精品资料欢迎下载-名师精心整理-第 8 页，共 12 页 -Fab

48、ric OS Password Recovery Notes9 of 12Publication Number:53-1000114-015.Enter the following command strings,one at a time,to reset the passwords:unsetenv OSBootedsetenv LoadIdentifiers=Fabric Operating System;Fabric Operating Systemsetenv OSLoadOptions=quiet;quietsetenv OSLoader=MEM()0 xF0000000;MEM(

49、)0 xF0800000saveenvprintenvresetPassword Recovery on VXWorks-Based SwitchesThis procedure requires Password Recovery firmware,available from your switch support provider.The Password Recovery firmware is effective only for the first time it is launched.You cannot use the Password Recovery firmware t

50、o perform any other switch functions.These procedures require switch downtime.Brocade recommends removing the switch from the fabric and rejoining it after the recovery process is complete.In order to complete the steps in this section you need the following:?Password Recovery firmware:Send the swit