口令如何破解路由器密码

Cisco806、826、827、828的密码恢复流程,831,836,837和881系列路由器目录简介先决条件要求使用的组件相关产品规则分步操作步骤密码恢复程序示例相关信息简介本文档介绍了如何恢复enablepassword和enablesecret口令.
这些口令可对特权执行和配置模式的访问权限进行保护.
启用口令可以恢复,但是启用加密口令经过了加密,必须使用新口令进行替换.
请使用本文档介绍的过程替换enablesecret口令.
注意:Cisco801、802、803、804,805,811和813系列路由器的参考的密码恢复流程为了恢复在Cisco801、802、803、804,805,811和813系列路由器的一个密码.
先决条件要求本文档没有任何特定的要求.
使用的组件本文档中的信息基于以下硬件版本:Cisco806SeriesRouterqCisco826SeriesRouterqCisco827SeriesRouterqCisco828SeriesRouterqCisco831SeriesRouterqCisco836SeriesRouterqCisco837SeriesRouterqCisco881SeriesRouterq本文档中的信息都是基于特定实验室环境中的设备编写的.
本文档中使用的所有设备最初均采用原始(默认)配置.
如果您使用的是真实网络,请确保您已经了解所有命令的潜在影响.
相关产品有关如何恢复相关产品口令的信息,请参阅口令恢复过程.
规则有关文档规则的信息,请参阅Cisco技术提示规则.
分步操作步骤请执行以下步骤以恢复口令:附加终端或PC有终端仿真的到路由器的控制台端口.
使用以下终端设置:9600波特率无奇偶校验8个数据位1个停止位无流控制有关如何使用电缆将终端连接到控制台端口或AUX端口的信息,请参阅以下文档:控制台和Aux端口的布线指南连接控制台端口的一个终端Catalyst交换机的将终端连接到Catalyst2948G-L3、4908G-L3和4840G系列交换机1.
如果可以访问路由器,请在提示符处键入showversion,并且记录配置寄存器设置.
请参阅口令恢复过程示例,查看showversion命令的输出注意:配置寄存器通常设置为0x2102或0x102.
如果能不再访问路由器(由于丢失登录密码),您能安全假设,您的配置寄存器设置为0x2102.
2.
请使用电源开关为了关闭路由器,然后启动路由器上一步.
重要说明:要在Cisco6400上模拟此步骤,请将节点路由处理器(NRP)或节点交换机处理器(NSP)卡拔出,然后再插入.
要在带有NI-2的Cisco6x00上模拟此步骤,请将NI-2卡拔出,然后再插入.
3.
在启动后的60秒内按下终端键盘上的Break键,使路由器进入ROMMON模式.
如果中断顺序不起作用,请参阅口令恢复过程中的标准break键序列组合,获取其他键组合.
4.
在rommon1>提示符处键入confreg0x2142,以便从闪存启动.
此步骤将会跳过存储口令的启动配置.
5.
在rommon2>提示符的类型重置.
路由器重新启动,但是忽略已保存的配置.
6.
在每个设置问题后键入no或按Ctrl-C,跳过初始设置过程.
7.
键入enable(event)在Router>提示符.
您将进入启用模式,此时应看到Router#提示符.
8.
键入configurememory或copystartup-configrunning-config,将非易失性RAM(NVRAM)复制到内存中.
重要信息:请勿键入copyrunning-configstartup-config或执行写操作.
这些erase命令您的启动配置.
9.
类型showrunning-config.
showrunning-config命令将会显示路由器的配置.
在此配置中,在所有接口下将会出现shutdown命令,显示当前关闭的所有接口.
另外,密码(特权密码,enablesecret,VTY,控制台密码)是在任一加密和未加密的格式.
您能重新使用未加密的密码.
您必须更改加密密码到新密码.
10.
类型configureterminal.
hostname(config)-提示符出现.
11.
键入enablesecret,以更改enablesecret口令.
例如:hostname(config)#enablesecretcisco12.
在所用的每个接口上发出noshutdown命令.
如果发出showipinterfacebrief命令,则要使用的每个接口都应显示upup.
13.
键入config-register.
其中configuration_register_setting的值为步骤2中记录的值或0x2102.
例如:hostname(config)#config-register0x210214.
按Ctrl-z或end,离开配置模式.
hostname-提示符出现.
15.
键入writememory或copyrunning-configstartup-config,以提交更改.
16.
密码恢复程序示例本部分提供了一个口令恢复过程的示例.
此示例是使用Cisco2600系列路由器创建的.
即使您使用的不是Cisco2600系列路由器,以下输出也可为您的产品体验提供示例.
Router>enablePassword:Password:Password:%BadsecretsRouter>showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)C2600Software(C2600-IS-M),Version12.
0(7)T,RELEASESOFTWARE(fc2)Copyright(c)1986-1999byciscoSystems,Inc.
CompiledTue07-Dec-9902:21byphanguyeImagetext-base:0x80008088,data-base:0x80C524F8ROM:SystemBootstrap,Version11.
3(2)XA4,RELEASESOFTWARE(fc1)Routeruptimeis3minutesSystemreturnedtoROMbyabortatPC0x802D0B60Systemimagefileis"flash:c2600-is-mz.
120-7.
T"cisco2611(MPC860)processor(revision0x202)with26624K/6144Kbytesofmemory.
ProcessorboardIDJAB031202NK(3878188963)M860processor:partnumber0,mask49Bridgingsoftware.
X.
25software,Version3.
0.
0.
BasicRateISDNsoftware,Version1.
1.
2Ethernet/IEEE802.
3interface(s)2Serial(sync/async)networkinterface(s)1ISDNBasicRateinterface(s)32Kbytesofnon-volatileconfigurationmemory.
8192KbytesofprocessorboardSystemflashpartition1(Read/Write)8192KbytesofprocessorboardSystemflashpartition2(Read/Write)Configurationregisteris0x2102Router>!
---Therouterwasjustpowercycled,andduringbootupa!
---breaksequencewassenttotherouter.
!
***SystemreceivedanabortduetoBreakKey***signal=0x3,code=0x500,context=0x813ac158PC=0x802d0b60,Vector=0x500,SP=0x80006030rommon1>confreg0x2142Youmustresetorpowercyclefornewconfigtotakeeffectrommon2>resetSystemBootstrap,Version11.
3(2)XA4,RELEASESOFTWARE(fc1)Copyright(c)1999byciscoSystems,Inc.
TAC:Home:SW:IOS:SpecialsforinfoC2600platformwith32768Kbytesofmainmemoryprogramloadcomplete,entrypoint:0x80008000,size:0x6fdb4cSelfdecompressingtheimageOK]RestrictedRightsLegendUse,duplication,ordisclosurebytheGovernmentissubjecttorestrictionsassetforthinsubparagraph(c)oftheCommercialComputerSoftware-RestrictedRightsclauseatFARsec.
52.
227-19andsubparagraph(c)(1)(ii)oftheRightsinTechnicalDataandComputerSoftwareclauseatDFARSsec.
252.
227-7013.
ciscoSystems,Inc.
170WestTasmanDriveSanJose,California95134-1706CiscoInternetworkOperatingSystemSoftwareIOS(tm)C2600Software(C2600-IS-M),Version12.
0(7)T,RELEASESOFTWARE(fc2)Copyright(c)1986-1999byciscoSystems,Inc.
CompiledTue07-Dec-9902:21byphanguyeImagetext-base:0x80008088,data-base:0x80C524F8cisco2611(MPC860)processor(revision0x202)with26624K/6144Kbytesofmemory.
ProcessorboardIDJAB031202NK(3878188963)M860processor:partnumber0,mask49Bridgingsoftware.
X.
25software,Version3.
0.
0.
BasicRateISDNsoftware,Version1.
1.
2Ethernet/IEEE802.
3interface(s)2Serial(sync/async)networkinterface(s)1ISDNBasicRateinterface(s)32Kbytesofnon-volatileconfigurationmemory.
8192KbytesofprocessorboardSystemflashpartition1(Read/Write)8192KbytesofprocessorboardSystemflashpartition2(Read/Write)---SystemConfigurationDialog---Wouldyouliketoentertheinitialconfigurationdialog[yes/no]:nPressRETURNtogetstarted!
00:00:19:%LINK-3-UPDOWN:InterfaceBRI0/0,changedstatetoup00:00:19:%LINK-3-UPDOWN:InterfaceEthernet0/0,changedstatetoup00:00:19:%LINK-3-UPDOWN:InterfaceEthernet0/1,changedstatetoup00:00:19:%LINK-3-UPDOWN:InterfaceSerial0/0,changedstatetodown00:00:19:%LINK-3-UPDOWN:InterfaceSerial0/1,changedstatetodown00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0/0,changedstatetodown00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/0,changedstatetoupRouter>00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/1,changedstatetoup00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/0,changedstatetodown00:00:20:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/1,changedstatetodown00:00:50:%SYS-5-RESTART:Systemrestarted--CiscoInternetworkOperatingSystemSoftwareIOS(tm)C2600Software(C2600-IS-M),Version12.
0(7)T,RELEASESOFTWARE(fc2)Copyright(c)1986-1999byciscoSystems,Inc.
CompiledTue07-Dec-9902:21byphanguye00:00:50:%LINK-5-CHANGED:InterfaceBRI0/0,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceEthernet0/0,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceSerial0/0,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceEthernet0/1,changedstatetoadministrativelydown00:00:52:%LINK-5-CHANGED:InterfaceSerial0/1,changedstatetoadministrativelydown00:00:53:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/0,changedstatetodown00:00:53:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/1,changedstatetodownRouter>Router>enableRouter#copystartup-configrunning-configDestinationfilename[running-config]1324bytescopiedin2.
35secs(662bytes/sec)Router#00:01:24:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0/0:1,changedstatetodown00:01:24:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0/0:2,changedstatetodownRouter#configureterminalEnterconfigurationcommands,oneperline.
EndwithCNTL/Z.
Router(config)#enablesecretRouter(config)#^Z00:01:54:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter#showipinterfacebriefInterfaceIP-AddressOKMethodStatusProtocolEthernet0/010.
200.
40.
37YESTFTPadministrativelydowndownSerial0/0unassignedYESTFTPadministrativelydowndownBRI0/0193.
251.
121.
157YESunsetadministrativelydowndownBRI0/0:1unassignedYESunsetadministrativelydowndownBRI0/0:2unassignedYESunsetadministrativelydowndownEthernet0/1unassignedYESTFTPadministrativelydowndownSerial0/1unassignedYESTFTPadministrativelydowndownLoopback0193.
251.
121.
157YESTFTPupupRouter#configureterminalEnterconfigurationcommands,oneperline.
EndwithCNTL/Z.
Router(config)#interfaceEthernet0/0Router(config-if)#noshutdownRouter(config-if)#00:02:14:%LINK-3-UPDOWN:InterfaceEthernet0/0,changedstatetoup00:02:15:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceEthernet0/0,changedstatetoupRouter(config-if)#interfaceBRI0/0Router(config-if)#noshutdownRouter(config-if)#00:02:26:%LINK-3-UPDOWN:InterfaceBRI0/0:1,changedstatetodown00:02:26:%LINK-3-UPDOWN:InterfaceBRI0/0:2,changedstatetodown00:02:26:%LINK-3-UPDOWN:InterfaceBRI0/0,changedstatetoup00:02:115964116991:%ISDN-6-LAYER2UP:Layer2forInterfaceBR0/0,TEI68changedtoupRouter(config-if)#^ZRouter#00:02:35:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter#copyrunning-configstartup-configDestinationfilename[startup-config]Buildingconfiguration.
.
.
[OK]Router#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)C2600Software(C2600-IS-M),Version12.
0(7)T,RELEASESOFTWARE(fc2)Copyright(c)1986-1999byciscoSystems,Inc.
CompiledTue07-Dec-9902:21byphanguyeImagetext-base:0x80008088,data-base:0x80C524F8ROM:SystemBootstrap,Version11.
3(2)XA4,RELEASESOFTWARE(fc1)Routeruptimeis3minutesSystemreturnedtoROMbyabortatPC0x802D0B60Systemimagefileis"flash:c2600-is-mz.
120-7.
T"cisco2611(MPC860)processor(revision0x202)with26624K/6144Kbytesofmemory.
ProcessorboardIDJAB031202NK(3878188963)M860processor:partnumber0,mask49Bridgingsoftware.
X.
25software,Version3.
0.
0.
BasicRateISDNsoftware,Version1.
1.
2Ethernet/IEEE802.
3interface(s)2Serial(sync/async)networkinterface(s)1ISDNBasicRateinterface(s)32Kbytesofnon-volatileconfigurationmemory.
8192KbytesofprocessorboardSystemflashpartition1(Read/Write)8192KbytesofprocessorboardSystemflashpartition2(Read/Write)Configurationregisteris0x2142Router#configureterminalEnterconfigurationcommands,oneperline.
EndwithCNTL/Z.
Router(config)#config-register0x2102Router(config)#^Z00:03:20:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)C2600Software(C2600-IS-M),Version12.
0(7)T,RELEASESOFTWARE(fc2)Copyright(c)1986-1999byciscoSystems,Inc.
CompiledTue07-Dec-9902:21byphanguyeImagetext-base:0x80008088,data-base:0x80C524F8ROM:SystemBootstrap,Version11.
3(2)XA4,RELEASESOFTWARE(fc1)Routeruptimeis3minutesSystemreturnedtoROMbyabortatPC0x802D0B60Systemimagefileis"flash:c2600-is-mz.
120-7.
T"cisco2611(MPC860)processor(revision0x202)with26624K/6144Kbytesofmemory.
ProcessorboardIDJAB031202NK(3878188963)M860processor:partnumber0,mask49Bridgingsoftware.
X.
25software,Version3.
0.
0.
BasicRateISDNsoftware,Version1.
1.
2Ethernet/IEEE802.
3interface(s)2Serial(sync/async)networkinterface(s)1ISDNBasicRateinterface(s)32Kbytesofnon-volatileconfigurationmemory.
8192KbytesofprocessorboardSystemflashpartition1(Read/Write)8192KbytesofprocessorboardSystemflashpartition2(Read/Write)Configurationregisteris0x2142(willbe0x2102atnextreload)Router#相关信息密码恢复流程q控制台和Aux端口的布线指南q连接控制台端口的一个终端Catalyst交换机的q将终端连接到Catalyst2948G-L3、4908G-L3和4840G系列交换机qCisco800SeriesRouters的密码恢复流程q在密码恢复期间的标准break键顺序组合q技术支持-CiscoSystemsq