如何恢复Juniper防火墙管理员密码，手把手教你

说明：恢复密码不会删除现有配置。

准备:USB串口线连接PC和防火墙管理口，打开secureCRT-快速连接-serial-选择正确的COM口-速率改为9600-连接，防火墙加电。

注：如果恢复过程中，要求输入root密码，则该方法可能被禁用（set system ports console insecure）

U-Boot 1.1.6-JNPR-2.7 (Build time: Nov 26 2013 - 19:04:49)

Initializing memory this may take some time...

注：此处省略若干提示信息

直到出现下面的红色信息就要睁大双眼盯紧屏幕

Loading /boot/defaults/loader.conf

/kernel data=0xb0496c+0x1344a4 syms=[0x4+0x8a9e0+0x4+0xc8f47]

Hit [Enter] to boot immediately, or space bar for command prompt.

注：此时按空格键

Type '?' for a list of commands, 'help' for more detailed help.

loader> boot -s   注：输入蓝色部分的命令，并回车

Kernel entry at 0x801000e0 ...

init regular console

注：此处省略若干提示信息

直到出现下面的红色信息就要睁大双眼盯紧屏幕

Enter full pathname of shell or 'recovery' for root password recovery or RETURN for /bin/sh: recovery     注：输入蓝色部分的命令，并回车

Performing system setup ...

Checking integrity of BSD labels:

  s1: Passed

  s2: Passed

  s3: Passed

  s4: Passed

注：此处省略若干提示信息

直到出现下面的红色信息就要睁大双眼盯紧屏幕

NOTE: Once in the CLI, you will need to enter configuration mode using

NOTE: the 'configure' command to make any required changes. For example,

NOTE: to reset the root password, type:

NOTE:    configure

NOTE:    set system root-authentication plain-text-password

NOTE:    (enter the new password when asked)

NOTE:    commit

NOTE:    exit

NOTE:    exit

NOTE: When you exit the CLI, you will be asked if you want to reboot

NOTE: the system

Starting CLI ...

root@SRX100> configure    注：输入蓝色部分的命令，并回车

Entering configuration mode

[edit]

root@SRX100# set system root-authentication plain-text-password

New password:

Retype new password:

[edit]

root@SRX100# commit  

commit complete

[edit]

root@SRX100# exit

Exiting configuration mode

root@SRX100> exit

Reboot the system? [y/n]y

正常启动后，就可以用新密码登录root用户了

参考文档：SRX password reset/recovery – RtoDto.net

https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/recovering-root-password.html