思科防火墙ASA 密码恢复

王晓强

当ASA镜像文件丢失时，系统恢复步骤

rommon #0> address x.x.x.x

rommon #1> server x.x.x.x

rommon #2> gateway x.x.x.x         

rommon #2> interface GigabitEthernet0/1

GigabitEthernet0/1

MAC Address: 000f.f775.4b54

rommon #3> file asa821-k8.bin

查看：rommon #2> set

开始下载：rommon #5> tftpdnld

当ASA密码丢失时,密码恢复步骤：

1、使用BREAK or ESC进入ROMMON模式

2、修改confreg

rommon #0> confreg

Current Configuration Register: 0x00000001

Configuration Summary:

boot default image from Flash

Do you wish to change this configuration? y/n [n]: y    //修改寄存器值

enable boot to ROMMON prompt? y/n [n]:

enable TFTP netboot? y/n [n]:

enable Flash boot? y/n [n]:

** specific Flash image index? y/n [n]:

disable system configuration? y/n [n]: y    //不加载配置

go to ROMMON prompt if netboot fails? y/n [n]:

enable passing NVRAM file specs in auto-boot mode? y/n [n]:

disable display of BREAK or ESC key prompt during auto-boot? y/n [n]:

Current Configuration Register: 0x00000040

3、重启设备rommon #1> boot

4、之前的初始配置覆盖当前配置 ciscoasa# copy startup-config running-config

5、修改密码

ciscoasa# config terminal

ciscoasa(config)# passwd C1$c0123

ciscoasa(config)# enable password C1$c0123

5、修改寄存器  ciscoasa(config)# config-register 0x1

6、保存  ciscoasa#write

zhangaxyoyo

沙发~  感谢强哥分享~

王晓强

zhangaxyoyo 发表于 2013-5-21 22:57
沙发~  感谢强哥分享~

感谢香姐支持。

人在旅途2013

victor_huang

这个可以有~

人在旅途2013