Changes between Initial Version and Version 1 of Realisations/2006-2007/Projet/PasswordRecovery

Timestamp:

Mar 22, 2007, 12:37:04 PM (18 years ago)

Author:

ashtari

Comment:

--

Realisations/2006-2007/Projet/PasswordRecovery

@@ +1 @@
+
+= Equipements de l'AS65001 =
+----
+
+== Switch Cisco C3560 ==
+
+   * Relier le switch à un terminal par le port console
+   * Démarrer le switch en maintenant la touche "Mode" enfoncée pendant 3 secondes
+   * Le switch doit afficher "The system has been interrupted prior to initializing the flash file system. The following commands will initialize the flash file system" , ce qui signifie qu'il a demarré en mode "Rom monitor"
+
+Ensuite: 
+
+Step 1   Initialize the Flash file system:
+
+switch: flash_init
+
+Step 2   If you had set the console port speed to anything other than 9600, it has been reset to that particular speed. Change the emulation software line speed to match that of the switch console port.
+
+Step 3   Load any helper files:
+switch: load_helper
+
+Step 4   Display the contents of Flash memory:
+switch: dir flash:
+
+The switch file system appears:
+Directory of flash:[[BR]]
+
+   13  drwx         192   Mar 01 1993 22:30:48  c3560-i5-mz.121.19-EA1[[BR]]
+
+   11  -rwx        5825   Mar 01 1993 22:31:59  config.text[[BR]]
+
+   18  -rwx         720   Mar 01 1993 02:21:30  vlan.dat[[BR]]
+
+
+16128000 bytes total (10003456 bytes free) 
+
+Step 5   Rename the configuration file to config.text.old.
+
+This file contains the password definition.
+switch: rename flash:config.text flash:config.text.old
+
+Step 6   Boot the system:
+switch: boot
+
+You are prompted to start the setup program. Enter N at the prompt:
+Continue with the configuration dialog? [yes/no]: N
+
+Step 7   At the switch prompt, enter privileged EXEC mode:
+Switch> enable
+
+Step 8   Rename the configuration file to its original name:
+Switch# rename flash:config.text.old flash:config.text 
+
+Step 9   Copy the configuration file into memory:
+Switch# copy flash:config.text system:running-config
+Source filename [config.text]?
+Destination filename [running-config]?
+
+Press Return in response to the confirmation prompts.
+
+The configuration file is now reloaded, and you can change the password.
+
+Step 10   Enter global configuration mode:
+Switch# configure terminal
+
+Step 11   Change the password:
+Switch (config)# enable secret password
+
+The secret password can be from 1 to 25 alphanumeric characters, can start with a number, is case sensitive, and allows spaces but ignores leading spaces.
+
+Step 12   Return to privileged EXEC mode:
+Switch (config)# exit[[BR]]
+
+Switch# 
+
+Step 13   Write the running configuration to the startup configuration file:
+Switch# copy running-config startup-config
+
+The new password is now in the startup configuration.
+
+[[BR]]
+[[BR]]
+
+== Routeur Cisco 2801 ==
+
+   * Relier le routeur à un terminal par le port console
+   * Si le routeur est démarré, tapper '''show version''' , le routeur doit afficher: 
+
+{{{
+Router>show version
+Cisco Internetwork Operating System Software
+IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
+Copyright (c) 1986-1999 by cisco Systems, Inc.
+Compiled Tue 07-Dec-99 02:21 by phanguye
+Image text-base: 0x80008088, data-base: 0x80C524F8
+
+ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
+
+Router uptime is 3 minutes
+System returned to ROM by abort at PC 0x802D0B60
+System image file is "flash:c2600-is-mz.120-7.T"
+
+cisco 2611 (MPC860) processor (revision 0x202) with 26624K/6144K bytes of memory.
+Processor board ID JAB031202NK (3878188963)
+M860 processor: part number 0, mask 49
+Bridging software.
+X.25 software, Version 3.0.0.
+Basic Rate ISDN software, Version 1.1.
+2 Ethernet/IEEE 802.3 interface(s)
+2 Serial(sync/async) network interface(s)
+1 ISDN Basic Rate interface(s)
+32K bytes of non-volatile configuration memory.
+8192K bytes of processor board System flash partition 1 (Read/Write)
+8192K bytes of processor board System flash partition 2 (Read/Write)
+
+Configuration register is 0x2102
+
+Router>
+}}}
+
+   * Noter la valeur du registre de configuration (derniere ligne), ici: 0x2102
+   * Redémarrer celui-ci, et maintenz les touches "CTRL" et "BREAK" enfoncées jusqu'à obtenir:
+
+{{{
+
+!--- The router was just powercycled, and during bootup a
+!--- break sequence was sent to the router.
+
+
+!
+
+*** System received an abort due to Break Key ***
+
+signal= 0x3, code= 0x500, context= 0x813ac158
+PC = 0x802d0b60, Vector = 0x500, SP = 0x80006030
+rommon 1 >
+}}}
+
+   * tapper '''confreg 0x2142'''
+   * tapper '''reset'''
+   * le routeur redémarre en config usine, repondre '''n''' à la question "Would you like to enter the initial configuration dialog?"
+   * Au prompt, tapper '''enable'''
+   * tapper '''copy startup-config running-config'''
+   * tapper '''configure terminal'''
+   * tapper '''enable secret < password >''' où password est le nouveau mot de passe
+   * tapper '''exit'''
+   * si besoin, réactiver les interfaces qui auraient été deconnectées
+   * tapper '''conf t'''
+   * tapper '''copy running-config startup-config'''
+   * tapper '''config-register 0x2102''' pour restaurer l'ancienne valeur du registre de configuration (ici 2102, mais peut varier)
+   
+[[BR]]
+[[BR]]
+
+
+== Firewall Cisco AS5510 ==
+
+   * Step 1 Connect to the security appliance console port
+
+   * Step 2 Power off the security appliance, and then power it on.
+
+   * Step 3 During the startup messages, press the '''Escape''' key when prompted to enter ROMMON.
+
+   * Step 4 To set the security appliance to ignore the startup configuration at reload, enter the following command:
+
+rommon #1> '''confreg'''
+
+
+The security appliance displays the current configuration register value, and asks if you want to change the value:
+
+Current Configuration Register: 0x00000011
+
+Configuration Summary:
+
+  boot TFTP image, boot default image from Flash on netboot failure
+
+Do you wish to change this configuration? y/n [n]:
+
+
+   * Step 5 Record your current configuration register value, so you can restore it later.
+
+   * Step 6 At the prompt, enter Y to change the value.
+
+The security appliance prompts you for new values.
+
+   * Step 7 Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y.
+
+   * Step 8 Reload the security appliance by entering the following command:
+
+rommon #2> '''boot'''
+
+
+The security appliance loads a default configuration instead of the startup configuration.
+
+   * Step 9 Enter privileged EXEC mode by entering the following command:
+
+hostname> '''enable'''
+
+
+   * Step 10 When prompted for the password, press Return.
+
+The password is blank.
+
+   * Step 11 Load the startup configuration by entering the following command:
+
+hostname# '''copy startup-config running-config'''
+
+
+   * Step 12 Enter global configuration mode by entering the following command:
+
+hostname# '''configure terminal'''
+
+
+   * Step 13 Change the passwords in the configuration by entering the following commands, as necessary:
+
+hostname(config)# '''password password'''
+
+hostname(config)# '''enable password password'''
+
+hostname(config)# '''username name password password'''
+
+
+   * Step 14 Change the configuration register to load the startup configuration at the next reload by entering the following command:
+
+hostname(config)# '''config-register value'''
+
+
+Where value is the configuration register value you noted in Step 5. 0x1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference.
+
+   * Step 15 Save the new passwords to the startup configuration by entering the following command:
+
+hostname(config)# '''copy running-config startup-config'''
+
+
+
+