思科3850交接机密码恢复

思科3850交接机密码恢复

在交换机完全启动后，即可以输入enable命令状态下，按住前面板的mode健不放，直到上面一排灯一起这起来，再放开按键，即可清除所有密码。

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-3/configuration_guide/b_163_consolidated_3850_cg.html

思科交换机3850密码恢复- Cisco IOS XE Denali 16.3.x (Catalyst 3850 Switches).pdf

Recovering from a Lost or Forgotten Password
The default configuration for the switch allows an end user with physical access to the switch to recover from a lost password by interrupting the boot process during power-on and by entering a new password. These recovery procedures require that you have physical access to the switch.

从丢失或遗忘的密码中恢复

交换机的默认配置允许物理访问交换机的最终用户通过在上电期间中断启动过程并输入新密码来恢复丢失的密码。这些恢复过程要求您有对交换机的物理访问权。

Step 1 Connect a terminal or PC to the switch.
•Connect a terminal or a PC with terminal-emulation software to the switch console port. If you are recovering the password for a switch stack, connect to the console port of the active switch or
•Connect a PC to the Ethernet management port. If you are recovering the password for a switch stack, connect to the Ethernet management port of a stack member .
Step 2 Set the line speed on the emulation software to 9600 baud.
Step 3 Power off the standalone switch or the entire switch stack.
Step 4 Reconnect the power cord to the or the active switch. Within 15 seconds, press the Mode button while the System LED is still flashing green. Continue pressing the Mode button until all the system LEDs turn on and remain solid; then release the Mode button.

操作步骤步骤1连接终端或PC与交换机。
•将安装有终端仿真软件的终端或PC机连接到交换机的console口。如果您正在恢复交换机堆叠的密码，请连接主交换机的console口或
•连接PC到以太网管理网口。如果是恢复交换机堆叠密码，请连接堆叠成员的以太网管理网口。
步骤2在仿真软件上设置线速度为9600波特。
步骤3下电单机交换机或整个交换机堆叠。
步骤4重新连接主交换机的电源线。在15秒内，按下模式键，同时系统LED仍闪烁绿色。继续按下模式按钮，直到所有系统led打开并保持固态;然后释放模式按钮。

Step 5 After recovering the password, reload the switch or the active switch .
On a switch:
Switch> reload
Proceed with reload? [confirm] y
On the active switch:
Switch> reload slot <stack-active-member-number>
Proceed with reload? [confirm] y

步骤5恢复密码后，重新加载交换机或主交换机。
开关:
开关>重新加载
进行重新加载呢?[确认]y
主交换机:
Switch> reload slot <stack-active-member-number>
进行重新加载呢?[确认]y

Step 6 Power on the remaining switches in the stack.
步骤6上电堆叠中其余交换机。

Procedure with Password Recovery Enabled
If the password-recovery operation is enabled, this message appears:
启用密码恢复的过程
如果启用了密码恢复操作，将显示此消息:

Step 1 Initialize the flash file system.
Device: flash_init
Step 2 Ignore the startup configuration with the following command:
Device: SWITCH_IGNORE_STARTUP_CFG=1
Step 3 Boot the switch with the packages.conf file from flash.
Device: boot flash:packages.conf

步骤1初始化flash文件系统。
设备:flash_init
步骤2使用如下命令忽略启动配置:
设备:SWITCH_IGNORE_STARTUP_CFG=1
步骤3使用flash中的packages.conf文件启动交换机。
设备:flash引导:packages.conf

Step 4 Terminate the initial configuration dialog by answering No.
Would you like to enter the initial configuration dialog? [yes/no]: No
Step 5 At the switch prompt, enter privileged EXEC mode.
Device> enable
Switch#
步骤4回答“否”，结束初始化配置对话框。
是否进入初始化配置对话框?(是/否):没有
步骤5在switch提示符下，进入特权EXEC模式。
设备>使
开关#



Step 6 Copy the startup configuration to running configuration.
Device# copy startup-config running-config Destination filename [running-config]?
Press Return in response to the confirmation prompts. The configuration file is now reloaded, and you can
change the password.
Step 7 Enter global configuration mode and change the enable password.
Device# configure terminal
Device(config)#
Step 8 Write the running configuration to the startup configuration file.
Device# copy running-config startup-config
Step 9 Confirm that manual boot mode is enabled.
Device# show boot
BOOT variable = flash:packages.conf;
Manual Boot = yes
Enable Break = yes

步骤6拷贝启动配置到运行配置中。
设备# copy startup-config run -config目标文件名[running-config]?
按Return以响应确认提示。现在可以重新加载配置文件了
更改密码。
步骤7进入全局配置模式，修改启用密码。
#配置终端设备
设备(配置)#
步骤8将当前配置写入启动配置文件。
启动启动配置
步骤9确认启动手动启动方式。
#显示启动设备
BOOT变量= flash:packages.conf;
手动启动=是
启用Break = yes

Step 10 Reload the device.
Device# reload
Step 11 Return the Bootloader parameters (previously changed in Steps 2 and 3) to their original values.
Device: switch: SWITCH_IGNORE_STARTUP_CFG=0
Step 12 Boot the device with the packages.conf file from flash.
Device: boot flash:packages.conf
步骤10重新加载设备。
设备#重新加载
步骤11返回Bootloader参数(之前在步骤2和3中更改过)的原始值。
设备:开关:SWITCH_IGNORE_STARTUP_CFG=0
步骤12使用flash中的packages.conf文件启动设备。
设备:flash引导:packages.conf

Step 13 After the device boots up, disable manual boot on the device.
Device(config)# no boot manual
步骤13设备启动完成后，关闭设备的手动启动。
设备(配置)#没有启动手册



禁用密码恢复的过程
如果密码恢复机制被禁用，则出现此消息:
Procedure with Password Recovery Disabled
If the password-recovery mechanism is disabled, this message appears:

The password-recovery mechanism has been triggered, but is currently disabled. Access to the boot loader prompt
through the password-recovery mechanism is disallowed at this point. However, if you agree to let the system be
reset back to the default system configuration, access to the boot loader prompt can still be allowed.
Would you like to reset the system back to the default configuration (y/n)?
密码恢复机制已经启动，但是目前是禁用的。访问引导加载程序提示符
通过密码恢复机制是不允许的这一点。但是，如果你同意让这个系统复位到系统默认配置，访问仍然可以允许引导加载程序提示符。
是否将系统重置为默认配置(y/n)?

Returning the Device to the default configuration results in the loss of all existing configurations. We recommend that you contact your system administrator to verify if there are backup Device and VLAN configuration files.
如果将设备恢复为默认配置，将导致所有现有配置丢失。我们建议联系系统管理员，确认是否存在备份设备和VLAN配置文件。

•If you enter n (no), the normal boot process continues as if the Mode button had not been pressed;
you cannot access the boot loader prompt, and you cannot enter a new password. You see the message:
Press Enter to continue........
•If you enter y (yes), the configuration file in flash memory and the VLAN database file are deleted.
When the default configuration loads, you can reset the password.
•如果你输入n (no)，正常的启动过程继续，就像没有按下模式按钮;
您不能访问引导加载程序提示符，也不能输入新密码。你看到的信息是:
按Enter继续........
•输入“y (yes)”，会删除flash中的配置文件和VLAN数据库文件。
当缺省配置加载时，可以重置密码。


Step 1 Choose to continue with password recovery and delete the existing configuration:
Would you like to reset the system back to the default configuration (y/n)? Y
Step 2 Display the contents of flash memory:
Device: dir flash:
The Device file system appears.
Directory of flash:/
.
15494 drwx 4096 Jan 1 2000 00:20:20 +00:00 kirch
15508 -rw- 258065648 Sep 4 2013 14:19:03 +00:00
cat3k_caa-universalk9.SSA.03.12.02.EZP.150-12.02.EZP.150-12.02.EZP.bin
162196684
Step 3 Boot up the system:
Device: boot
You are prompted to start the setup program. To continue with password recovery, enter N at the prompt:
Continue with the configuration dialog? [yes/no]: N
Step 4 At the Device prompt, enter privileged EXEC mode:
Device> enable
Step 5 Enter global configuration mode:
Device# configure terminal
Step 6 Change the password:
Device(config)# enable secret password
The secret password can be from 1 to 25 alphanumeric characters, can start with a number, is case sensitive,
and allows spaces but ignores leading spaces.
Step 7 Return to privileged EXEC mode:
Device(config)# exit
Device#
Before continuing to Step 9, power on any connected stack members and wait until they have
completely initialized.
Note
Step 8 Write the running configuration to the startup configuration file:
Device# copy running-config startup-config
The new password is now in the startup configuration.
Step 9 You must now reconfigure the Device. If the system administrator has the backup Device and VLAN
configuration files available, you should use those.