華為交換機重置密碼案例
作者：尹正傑
版權聲明：原創作品，謝絕轉載！否則將追究法律責任。
馬上到年底了，請假一個星期的同事毫無征兆的就離職了，由於他的離職，本來負責系統運維的我還得接過來網絡的活，現在我就得負責系統和網絡安全還有設備調試都瞬間壓在了我的肩膀上，索性的是我早已習慣這樣的事情，已經見怪不怪了。這不，領導得派我去高碑店分院調試網絡設備，工作主要部分就是將亦庄到高碑店專線調試成功，讓高碑店的員工可以通過專線訪問亦庄總部的OA系統。
你們是沒有見過高碑店需要運維的那種眼神啊，看見我過去了各種找你的感覺，“正傑，我們打印機連接不上啦”，“正傑，我們部門文件沒法共享啦”，“正傑，我們高碑店OA啥時候能好啊，都等了好久啦...”,沒法，只能硬着頭皮說等我處理完手上的活就去幫他們弄，配置完前樓的核心之后就去后樓配置核心交換機，發現接入層交換機都被賈工（我司前任網絡工程師）加密過了，通過console也無法進入交換機終端，打電話詢問相關信息說他自己也忘記了，沒法，我就得自己想法解決了，於是百度找到華為客服電話，聯系到技術，幫我破解了密碼。
其實破解密碼的過程很簡單，原來就是3分鍾的事情，大家要是遇到類似的問題，也可以直接打客服尋味如何破解密碼即可，在這里我這是給大家說一個遇到問題的解決思路，硬件遇到問題了就找廠家就好~哈哈哈，具有操作如下：(華為交換機默認密碼：Admin@huawei.com)
破解密碼的過程需要你重啟你的交換機，然后按住Ctrl+B鍵進入設備維護模式：
1 Password is wrong, system will reboot ... 2 3 4 BIOS loading ... 5 Start memory test ? ('Ctrl+T' is test): ... 0 6 Copyright (c) 2011-2015 HUAWEI TECH CO., LTD. 7 Basic BootROM version : 0208.0001 Compiled at Jun 2 2015, 21:35:58 8 Current flash file system : DosFs 9 flash:/ - Volume is OK 10 11 Press Ctrl+B or Ctrl+E to enter BootROM menu ... 3 12 password: #默認密碼，Admin@huawei.com 13 The default password is used now. Change the password. 14 15 BootROM MENU 16 17 1. Boot with default mode 18 2. Enter serial submenu 19 3. Enter startup submenu 20 4. Enter ethernet submenu 21 5. Enter filesystem submenu 22 6. Enter password submenu 23 7. Clear password for console user 24 8. Reboot 25 (Press Ctrl+E to enter diag menu) 26 27 Enter your choice(1-8): 7 28 29 Note: Clear password for console user? Yes or No(Y/N): y 30 31 Clear password for console user successfully. Choose "1" to boot, then set a new password. 32 Note: Do not choose "8. Reboot" or power off the device, otherwise this operation will not take effect. 33 34 BootROM MENU 35 36 1. Boot with default mode 37 2. Enter serial submenu 38 3. Enter startup submenu 39 4. Enter ethernet submenu 40 5. Enter filesystem submenu 41 6. Enter password submenu 42 7. Clear password for console user 43 8. Reboot 44 (Press Ctrl+E to enter diag menu) 45 46 Enter your choice(1-8): 1 47 48 Loading "flash:/s5700s-p-li-v200r008c00spc500.cc" ......................... done 49 Decompressing VRP software ................................................ done 50 Disk cache flush and invalidate ........................................... done 51 Initializing EPLD interrupt ............................................... done 52 Current flash file system : DosFs 53 flash:/ - Volume is OK 54 55 There is no record in region Exception. 56 57 Start to initialize the LSW ... 58 Initializing LSW .......................................................... done 59 60 Initializing DEV module ................................................... done 61 62 Initializing hardware system .............................................. done 63 Begin to start the system ... 64 65 Registering IPC and VP callback to platform ............................... done 66 67 Initializing VFS ..................................... done 68 Checking startup system-software .......................................... done 69 Reading PAF file .......................................................... done 70 Initializing VOS monitor ............................. done 71 CFM initialization advance ........................... done 72 Initializing PAT ..................................... done 73 Initializing HA ...................................... done 74 VFS registering to HA ................................ done 75 76 VRP root begin ... 77 VRP root end 78 CFG initialization begin ............................. done 79 CFM initialization begin ............................. done 80 CLI initialization begin ............................. done 81 Registering VRP all link command begin ............... done 82 Creating task begin ... 83 Creating task end 84 Task initialization begin ... 85 Task initialization end 86 Cmd registering begin ... 87 Cmd registering end 88 89 Recover configuration begin ... 90 Recover configuration end 91 Press ENTER to get started. #出現這行說明你已經清空密碼成功啦！
當我們遇到問題的時候，千萬不要慌，因為你的后面還有廠家支持着你，哈哈哈！對了，華為交換機配置遠程和H3C配置遠程有點不一樣，可以參考我的配置華為遠程的筆記如下：
1 [gbd-b-f4-002]aaa 2 [gbd-b-f4-002-aaa]local-user yinzhengjie password cipher jiubugaosuni #這里我設置密碼為“jiubugaosuni”，用戶名為yinzhengjie 3 [gbd-b-f4-002-aaa]local-user yinzhengjie privilege level 15 #這里是授權用戶等級，由於咱們是管理員，直接設置成最好的就好 4 [gbd-b-f4-002-aaa]local-user yinzhengjie service-type telnet #這里需要給用戶授權訪問類型 5 [gbd-b-f4-002-aaa]quit 6 [gbd-b-f4-002]user-interface vty 0 4 #進入遠程配置界面 7 [gbd-b-f4-002-ui-vty0-4]authentication-mode aaa 8 [gbd-b-f4-002-ui-vty0-4]user privilege level 15 9 [gbd-b-f4-002-ui-vty0-4]protocol inbound telnet #這一步千萬別忘記了喲！不然你是無法通過Telnet遠程喲！ 10 [gbd-b-f4-002-ui-vty0-4]quit 11 [gbd-b-f4-002]telnet server enable #開啟Telnet服務