H3C Series Ethernet Switches - Login Password Recovery
H3C Series Ethernet Switches - Login Password Recovery
H3C Series Ethernet Switches - Login Password Recovery
Table of Contents
i
Login Password Recovery
H3C Series Ethernet Switches Chapter 1 Login Password Overview
Note:
The login password recovery methods introduced in this chapter are applicable to the
following H3C series switches:
z S3100
z S3100-52P
z S3600
z S3610
z S5100
z S5500
z S5510
z S5600
For password recovery methods of other models of H3C switches, refer to their
installation manuals or contact H3C agents.
Note:
For information about the authentication modes listed above, refer to the operation
manual and command manual of your products.
1-1
Login Password Recovery
H3C Series Ethernet Switches Chapter 1 Login Password Overview
With the login password for the Console port configured, the following information
appears when a user attempts to log into a switch through the Console port.
**************************************************************************
* Copyright (c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
**************************************************************************
Login authentication
Password:
Note:
For information about the authentication modes listed above, refer to the operation
manual and command manual of your products.
With the login password for Telnet configured, the following information appears when a
user attempts to log into a switch through Telnet.
**************************************************************************
1-2
Login Password Recovery
H3C Series Ethernet Switches Chapter 1 Login Password Overview
* Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
**************************************************************************
Login authentication
Password:
1-3
Login Password Recovery
H3C Series Ethernet Switches Chapter 2 Login Password Recovery
password:
Note:
By default, entering the BOOT menu requires no password. If the system prompts for
the password and the password gets lost, contact the dealer.
3) Press 7 in the BOOT menu to select the Skip current configuration file item.
BOOT MENU
2-1
Login Password Recovery
H3C Series Ethernet Switches Chapter 2 Login Password Recovery
2-2
Login Password Recovery
H3C Series Ethernet Switches Chapter 2 Login Password Recovery
Note:
If the password is set in plain text, it is displayed as is in the configuration file. If the
password is set in cipher text, you need to convert it to the plain text form.
7) You can also transfer the configuration file to a PC using FTP or TFTP, change the
authentication password or the authentication mode setting of the configuration
file to None in a text editor (such as wordpad or notepad in Windows series
operating systems), save the configuration file, and then upload the configuration
file to the switch. When the switch reboots, the modified configuration file will be
used. You can set a new password for the Console port without affecting other
configurations.
2-3
Login Password Recovery
H3C Series Ethernet Switches Chapter 2 Login Password Recovery
Note:
The above mentioned method takes effect if the Password mode or the Scheme mode
is set to local. If the Scheme mode is set to Radius, the password is set on the Radius
server. In this case, a user cannot log into a switch if the login password gets lost or the
Radius server is unavailable. You can solve this problem by changing the
Authentication mode setting in the configuration file to None (as described above). But
for the password, you need to fetch it on the Radius server.
8) Note that if you perform the operation described in step 3, that is, select the Skip
current configuration file item in the BOOT menu and press y, the setting will be
stored in the BootROM, which means the configuration file will be skipped when
the device starts the next time. To validate the configuration file again, you need to
restart the device manually, select the Skip current configuration file item in the
BOOT menu, and then press n when prompted by the message Are you sure to
skip current configuration file when reboot? Yes or No(Y/N), as shown below.
BOOT MENU
2-4
Login Password Recovery
H3C Series Ethernet Switches Chapter 2 Login Password Recovery
2) Check the configuration file for the user interface authentication setting by using
the display current-configuration command.
<H3C> display current-configuration | begin user-interface
user-interface aux 0
set authentication password simple test
user-interface vty 0 4
user privilege level 3
set authentication password simple h3c
idle-timeout 0 0
#
Note:
z | begin user-interface in the display current-configuration command specifies a
regular expression. It displays the content of the configuration file from the first line
beginning with the string user-interface, it helps to locate the user interface-related
settings in the configuration file quickly. Refer to the corresponding operation
manual for information about the use of regular expression.
z If the configuration file does not contain the Authentication-mode setting, the
current authentication mode of user interface is password, the default.
After the above configuration, the new settings take effect when a user logs in through
Telnet.
2-5
Login Password Recovery
H3C Series Ethernet Switches Chapter 2 Login Password Recovery
Note:
Save your modifications timely using the save command to make sure they can take
effect when the switch starts the next time.
2-6