Hướng dẫn khôi phục mật khẩu cho hệ điều hành XE-SDWAN trên router Cisco

   Bắt đầu với XE-SDWAN version 16.10.3, bạn có mật khẩu admin dùng một lần mặc định vì lý do bảo mật mà người dùng có thể dễ dàng bỏ qua và có khả năng rơi vào tình huống bị block user. Điều này đặc biệt nguy hiểm trong quá trình thiết lập bộ định tuyến ban đầu nếu kết nối điều khiển với bộ điều khiển vManage chưa được thiết lập. Bài viết này đưa ra một quy trình chi tiết về cách khôi phục lại mật khẩu.

Username: admin
Password: 
Router#
*Sep 23 20:36:03.133: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed.
*Sep 23 20:36:03.240: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 14
Router#exit

Press RETURN to get started.

User Access Verification

Username: admin
Password: 
% Login invalid

Tải khoản mặc định là admin/admin.

Lưu ý: Quy trình này sẽ xóa sạch cấu hình hiện có, vì vậy vui lòng sao lưu cấu hình nếu có thể trước khi bạn tiếp tục.

Bước 1: Bật nguồn router, đưa router vào chế độ Rommon bằng cách nhấn tổ hợp phím: ctrl+break hoặc ctrl+c

Bước 2: Thay đổi giá trị thanh ghi thành 0xA102 hoặc 0x8000

Initializing Hardware ...

System integrity status: 90170400 12030117

U

System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE
Copyright (c) 1994-2016  by cisco Systems, Inc.


Current image running: Boot ROM1

Last reset cause: PowerOn


Warning: Octeon PCIe lanes not x2 width: sts=0x5011 

ASR1001-HX platform with 16777216 Kbytes of main memory


rommon 1 >     confreg 0x8000



You must reset or power cycle for new config to take effect

Bước 3: Reset lại router

rommon 2 > reset


Resetting .......


Initializing Hardware ...

Bước 4: Login vào router bằng account default: admin/admin và kiểm tra địa chỉ thanh ghi:

User Access Verification

Username: admin
Password: 
Router#
*Sep 23 20:48:16.659: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed.
*Sep 23 20:48:16.767: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 14 
Router#
Router#sh ver | i Configuration register
Configuration register is 0x8000

Bước 5: Đây là 1 bước rất quan trọng và bắt buộc. Đặt lại địa chỉ thanh ghi về 0x2102 và thiết lập lại phần mềm sdwan, điều này sẽ xóa sạch cấu hình hiện có. Router sẽ khởi động lại với tệp cấu hình packages.conf

Router#request platform software sdwan software reset

*Sep 23 20:52:17.400: %INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install activate bootflash:asr1000-ucmk9.16.10.3a.SPA.bin
*Sep 23 20:52:23.919: %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram
Router#
*Sep 23 20:52:47.943: %INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install activate PACKAGESep 23 20:53:04.302: 


Initializing Hardware ...

System integrity status: 90170400 12030117

U

System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE
Copyright (c) 1994-2016  by cisco Systems, Inc.


Current image running: Boot ROM1

Last reset cause: LocalSoft


Warning: Octeon PCIe lanes not x2 width: sts=0x5011 

ASR1001-HX platform with 16777216 Kbytes of main memory


File size is 0x00001a47

Located packages.conf 

Image size 6727 inode num 1120114, bks cnt 2 blk size 8*512

#

File size is 0x01e7df8e

Located asr1000-rpboot.16.10.3a.SPA.pkg 

Image size 31973262 inode num 1120126, bks cnt 7806 blk size 8*512

########################################################################################################################################################################################################################################################################################################################

Boot image size = 31973262 (0x1e7df8e) bytes


ROM:RSA Self Test Passed

ROM:Sha512 Self Test Passed


<<<<<< OUTPUT TRIMMED >>>>>>>> 



*Sep 23 20:57:13.347: %ONEP_BASE-6-CONNECT: [Element]: ONEP session Application:com.cisco.syncfd Host:Router ID:8029 User:a has connected.
*Sep 23 20:57:15.226: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon cfgmgr @ pid 4435 in vpn 0
*Sep 23 20:57:15.227: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon fpmd @ pid 4436 in vpn 0
*Sep 23 20:57:15.228: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ftmd @ pid 4437 in vpn 0
*Sep 23 20:57:15.229: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ompd @ pid 4438 in vpn 0
*Sep 23 20:57:15.229: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon ttmd @ pid 4439 in vpn 0
*Sep 23 20:57:15.230: %Cisco-SDWAN-Router-SYSMGR-6-INFO-200017: R0/0: SYSMGR: Started daemon vdaemon @ pid 4440 in vpn 0
*Sep 23 20:57:15.308: %Cisco-SDWAN-Router-TTMD-6-INFO-1200001: R0/0: TTMD: Starting
*Sep 23 20:57:15.391: %Cisco-SDWAN-Router-CFGMGR-6-INFO-300001: R0/0: CFGMGR: Starting
*Sep 23 20:57:15.484: %Cisco-SDWAN-Router-FPMD-6-INFO-1100001: R0/0: FPMD: Starting
*Sep 23 20:57:15.620: %Cisco-SDWAN-Router-FTMD-6-INFO-1000020: R0/0: FTMD: SLA class '__all_tunnels__' added at index '0': loss = 128%, latency = 2147483647 ms
*Sep 23 20:57:16.092: %Cisco-SDWAN-Router-FTMD-4-WARN-1000007: R0/0: FTMD: Connection to TTM came up. p_msgq 0x7f5815c35500 p_ftm 0x9a3020
*Sep 23 20:57:27.380: %DMI-5-INITIALIZED: R0/0: syncfd: process has initialized.
*Sep 23 20:57:35.032: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback65528, changed state to up
*Sep 23 20:57:35.048: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (262144)
*Sep 23 20:57:35.081: SDWAN INFO: Received ENABLE_CONSOLE message from sysmgr
*Sep 23 20:57:35.081: Console Enabled
*Sep 23 20:57:35.081: SDWAN INFO: PNP start, status: success
*Sep 23 20:57:35.079: %DMI-5-ACTIVE: R0/0: nesd: process is in steady state.
*Sep 23 20:57:35.682: EXEC mode enabled on console

Bước 6: Bây giờ, một lần nữa, bạn được nhắc với thông tin đăng nhập một lần. Sau bước này, đừng quên thay đổi mật khẩu mặc định. Bạn cũng nên thêm một user bổ sung. Nếu bạn bỏ lỡ bước này và bị khóa, thì bạn cần phải lặp lại tất cả các bước một lần nữa.

User Access Verification

Username: admin
Password: 
Router#
*Sep 23 20:58:18.048: SDWAN INFO: WARNING: Please configure a new username and password; one-time user admin is removed.
*Sep 23 20:58:18.155: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 18
Router#confi
Router#config-tr
System is still initializing. Wait for PnP to be completed or terminate PnP with the following command:

pnpa service discovery stop
Router#pnpa service discovery stop
PNP-EXEC-DISCOVERY (1): Stopping PnP Discovery...
Waiting for PnP discovery cleanup .. 

Router#
*Sep 23 20:58:48.997: %PNP-6-PNP_DISCOVERY_ABORT_ON_CLI: PnP Discovery abort on CLI input
*Sep 23 20:58:48.999: %DMI-5-SYNC_START: R0/0: syncfd: External change to running configuration detected. The running configuration will be synchronized to the NETCONF running data store.
*Sep 23 20:58:54.955: %DMI-5-SYNC_COMPLETE: R0/0: syncfd: The running configuration has been synchronized to the NETCONF running data store.
*Sep 23 20:58:54.955: %DMI-5-ACTIVE: R0/0: syncfd: process is in steady state.
*Sep 23 20:58:55.150: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by system, transaction-id 181
*Sep 23 20:58:55.676: %Cisco-SDWAN-Router-SYSMGR-5-NTCE-200050: R0/0: SYSMGR: System status solid green (reason: All daemons up)
Router#
*Sep 23 20:59:00.083: %INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install commit PACKAGE
*Sep 23 20:59:00.327: %INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install commit PACKAGE
Router#sh ver | i register
Configuration register is 0x2102
Router#sh sdwan ver

*Sep 23 20:59:12.640: %PNP-6-PNP_DISCOVERY_ABORT_ON_CLI: PnP Discovery abort on CLI input
*Sep 23 20:59:12.640: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Discovery Aborted)16.10.3a

Router#
Router#sh sdwan ver
16.10.3a

Router#
Router#conf
Router#config-tr

admin connected from 127.0.0.1 using console on Router
Router(config)# username admin privilege 15   secret <your password>
Router(config)# username  sdwan privilege 15 secret <your password>
Router(config)# comm
Commit complete.
Router(config)# 
*Sep 23 21:00:59.270: %DMI-5-CONFIG_I: R0/0: nesd: Configured from NETCONF/RESTCONF by admin, transaction-id 204
Router(config)# end

Bước 7: Kiểm tra lại username và password mới

Router#exit
Router con0 is now available

Press RETURN to get started.

User Access Verification

Username: admin
Password: 

Router>en
Router#
Router#exit

Router con0 is now available

Press RETURN to get started.
User Access Verification

Username: sdwan
Password: 

Router>en
Router#

Chúc các bạn thành công!