锐捷交换机密码破解

 

资料来源：https://search.ruijie.com.cn:8447/rqs/preview.html?#ie=utf-8&wd=eHAiOjE1NDU4NzUxNDcsIm5iZiI6MTU0NTYxNTk0N302018092015040000149LqqZuvMhE7V7Ygl6r5RWsTHbWazT

 

问题：忘记enable密码

忘记密码，操作如下：

1）手动对设备进行下电重启

2）出现Ctrl+C 提示时在键盘上同时按下CTRL键和C键，进入bootloader菜单

====== BootLoader Menu("Ctrl+Z" to upper level) ======

   TOP menu items.

************************************************

   0. Tftp utilities.

   1. XModem utilities.

   2. Run main.

   3. SetMac utilities.

   4. Scattered utilities.

   5. Set Module Serial

************************************************

Press a key to run the command:

3）按ctrl + q，然后输入ubootui，回车后马上按一次ctrl + p

s29xs#ubootui

Leaving simple UI....

s29xs#

4）输入如下命令：

s29xs#setenv runlevel 2

s29xs#run linux

Creating 1 MTD partitions on "nand0":

0x000001000000-0x000002e00000 : "mtd=6"

UBI: attaching mtd1 to ubi0

UBI: physical eraseblock size:   131072 bytes (128 KiB)

UBI: logical eraseblock size:    126976 bytes

UBI: smallest flash I/O unit:    2048

UBI: VID header offset:          2048 (aligned 2048)

UBI: data offset:               4096

UBI: attached mtd1 to ubi0

UBI: MTD device name:           "mtd=6"

UBI: MTD device size:           30 MiB

UBI: number of good PEBs:        240

UBI: number of bad PEBs:        0

UBI: max. allowed volumes:       128

UBI: wear-leveling threshold:    4096

UBI: number of internal volumes: 1

UBI: number of user volumes:     1

UBI: available PEBs:            19

UBI: total number of reserved PEBs: 221

UBI: number of PEBs reserved for bad PEB handling: 2

UBI: max/mean erase counter: 2/0

UBIFS: recovery needed

UBIFS: recovery deferred

UBIFS: mounted UBI device 0, volume 0, name "kernel"

UBIFS: mounted read-only

UBIFS: file system size:   26030080 bytes (25420 KiB, 24 MiB, 205 LEBs)

UBIFS: journal size:       3682304 bytes (3596 KiB, 3 MiB, 29 LEBs)

UBIFS: media format:       w4/r0 (latest is w4/r0)

UBIFS: default compressor: LZO

UBIFS: reserved for root:  0 bytes (0 KiB)

Unmounting UBIFS volume kernel!

   Uncompressing Kernel Image ... OK

  Loading Device Tree to 823fc000, end 823ff593 ... OK

Starting kernel ...

5）执行如下命令，注意命令之间的空格。

~ #

~ # cd /data/

/data # ls

/data # mv config.text config.bak

/data # sync

/data # reboot

6）重启完成后，恢复配置文件

Ruijie>enable        ----->进入特权模式

Ruijie#copy config.bak config.text

如果以上命令报错，则使用以下命令恢复配置文件：

Ruijie#copy flash:config.bak flash:config.text

然后用以下命令使配置生效：

Ruijie#copy startup-config running-config

7）修改密码

重新登入交换机，密码变更为刚才修改的密码