Recovering the Console Password
The following table provides the methods that you can use to recover the console password.
No. |
Method |
Applicable Product |
Applicable Version |
---|---|---|---|
1 |
Logging In to a Device Using Telnet or STelnet and Changing the Console Password |
AC, Fat AP, and cloud AP |
AC: V200R001C00 and later versions Fat AP: V200R003C00 and later versions Cloud AP: V200R007C10 and later versions |
2 |
Clearing the Console Password in the BIOS Menu and Changing the Console Password |
AC |
V200R003C00 and later versions |
3 |
Fit AP |
All versions |
|
4 |
Fit AP |
V200R003C00 and later versions |
|
5 |
Clearing the Console Port Password in the Uboot View and Changing the Console Password |
Fat AP and cloud AP |
Fat AP: V200R003C00-V200R019C00 Cloud AP: V200R007C10-V200R019C00 |
6 |
Fat AP, Fit AP, and cloud AP |
V200R019C10 and later versions |
|
7 |
AT |
V200R005C10 and later versions |
- For an AC, method 1 is preferred. Use method 2 if you forget the Telnet or STelnet password.
- For a Fit AP, use method 3 if the AP has successfully connected to an AC and use method 4 or 6 if the AP has not connected to an AC.
- For a Fat AP or a cloud AP, method 1 is preferred. Use method 5 or 6 if you forget the Telnet or STelnet password.
- Logging In to a Device Using Telnet or STelnet and Changing the Console Password
- Clearing the Console Password in the BIOS Menu and Changing the Console Password
- Changing the Password of a Fit AP on an AC
- Changing the Password of a Fit AP in the Uboot View
- Clearing the Console Port Password in the Uboot View and Changing the Console Password
- Recovering the Password for Bluetooth Serial Port Login After Skipping the Startup Based on the Bluetooth Serial Port Password
- Recovering the Password of an AT
Logging In to a Device Using Telnet or STelnet and Changing the Console Password
If you have a Telnet or STelnet account with a privilege level of 15 for a device, you can change the console password after logging in to the device using Telnet or STelnet. Then save the configuration of the new password. The following procedure uses Telnet login as an example.
In V200R002 and earlier versions, a user with a privilege level of 3 or higher can change the console password after logging in.
- Use a Telnet account with a privilege level of 15 to log in to the device.
- Change the console password. The following example changes the authentication mode to password authentication and the password to huawei@123.
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<6-16>): //The actual display may be different. Confirm Password: [Huawei-ui-console0] return
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
Clearing the Console Password in the BIOS Menu and Changing the Console Password
You can clear the console password in the BIOS menu (if the device provides this function). Then the system can start and load all configurations normally, except that it does not prompt you to enter the console password. After the device starts, change the console password and save the configuration.
- Clearing the console password brings security risks. Keep the BootROM password safe to ensure system security.
- You must restart the device to display the BIOS menu, which results in service interruption. Back up service configuration and perform this operation in off-peak hours.
- If you clear the console password, configure a new password immediately after you log in to the device. Otherwise, you must clear the console password again to log in if the login timeout timer expires or the device restarts.
- Do not power off the device during the operation.
- Use a serial cable to connect a PC to the device and restart the device. When the message "Press CTRL+B to enter BIOS menu" is displayed, press Ctrl+B and enter the password to display the BIOS main menu.
For details on how to connect a PC to the device with a serial cable, see Logging In to a Device Through the Console Port.
The BootROM password may vary in different software versions. For details, see Default User Names and Passwords for WLAN ACs and APs.
- Clear the console password.
- Enter the number of the Clear password for console user option in the BIOS menu to clear the console password.
- Enter the number of the Boot with default mode option to start the system with the default mode.
- Log in to the system through the console port without entering the password. Change the console password. The following example changes the authentication mode to password authentication and the password to huawei@123.
Different software versions provide different commands for changing the authentication password:
- V200R002 and earlier versions: set authentication password [ cipher password ]
- V200R003 and later versions: set authentication password cipher
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<6-16>): //The actual display may be different. Confirm Password: [Huawei-ui-console0] return
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
Changing the Password of a Fit AP on an AC
V200R005C10 and Earlier Versions
A Fit AP supports only one local user account, which can be a console, Telnet, or SSH account.
If the password of a Fit AP is lost but the AP has connected to an AC successfully, change the password or recover the default password:
- Run the wlan ap username command on the AC to configure a new user name and password, and deliver the configuration to the Fit AP.
- Run the undo wlan ap username command on the AC to recover the default user name and password, and deliver the configuration to the Fit AP.
The preceding operations may affect other APs connected to the AC. For example, if configuration needs to be delivered to other APs or new APs connect to the AC, the password configuration delivered from the AC will change the user name and password on these APs.
The following example changes the password of AP1 on an AC6605.
If a WS6603 is used, run the following commands to enter the WLAN view.
WS6603>enable WS6603#config WS6603(config)#wlan ac
- Change the password of AP1.
<AC6605> system-view [AC6605] wlan [AC6605-wlan-view] wlan ap username admin password cipher Enter the password (plain-text password of 8-32 characters or cipher-text passwo rd of 32 or 56 characters): Confirm password: [AC6605-wlan-view] commit ap 1 //Run the display ap command to obtain the AP ID beforehand. Warning: Committing configuration may cause service interruption, continue?[Y/N] :y
- Recover the default user name and password of AP1.
<AC6605> system-view [AC6605] wlan [AC6605-wlan-view] undo wlan ap username [AC6605-wlan-view] commit ap 1 //Obtain the AP ID beforehand. Warning: Committing configuration may cause service interruption, continue?[Y/N] :y
V200R006C10 and Later Versions
A Fit AP supports only one local user account, which can be a console, Telnet, or SSH account.
If the password of a Fit AP is lost but the AP has connected to an AC successfully, change the password or recover the default password:
- Run the ap username command on the AC to configure a new user name and password, and deliver the configuration to the Fit AP.
- Run the undo ap username command on the AC to recover the default user name and password, and deliver the configuration to the Fit AP.
The preceding operations may affect other APs connected to the AC. The AC automatically delivers the modified user name and password to all APs. The delivered configuration takes effect on all APs.
The following example changes the password of an AP on an AC6605.
- Change the password of the AP.
<AC6605> system-view [AC6605] wlan [AC6605-wlan-view] ap username admin password cipher Enter the password (plain-text password of 8-32 characters or cipher-text password of 48 or 68 characters): Confirm password:
- Recover the default user name and password of the AP.
<AC6605> system-view [AC6605] wlan [AC6605-wlan-view] undo ap username
Changing the Password of a Fit AP in the Uboot View
A Fit AP supports only one local user account, which can be a console, Telnet, or SSH account. If the password of a Fit AP is lost and the AP has not joined an AC, enter the Uboot view and recover the default user name and password.
- You must restart the device to enter the Uboot view, which results in service interruption. Back up service configuration and perform this operation in off-peak hours.
- Do not power off the device during the operation.
- Use a serial cable to connect a PC to the device and restart the device. When the message "Press f or F to stop Auto-Boot" is displayed, press F and enter the password to enter the Uboot view.
For details on how to connect a PC to the device with a serial cable, see Logging In to a Device Through the Console Port.
The BootROM password may vary in different software versions. For details, see Default User Names and Passwords for WLAN ACs and APs.
- Run the defaultuser command to recover the default user name and password.
ar7240> defaultuser Start setting whether to Change Password..... Current Bootup Change PW is N Do you Want To Change The Default password, Y or N : Y ar7240>
- Run the reset command to restart the device.
ar7240> reset Resetting...
The user name and password are recovered when the restart is complete.
Clearing the Console Port Password in the Uboot View and Changing the Console Password
You can clear the console password in the Uboot view (if the device provides this function). Then the system can start and load all configurations normally, except that it does not prompt you to enter the console password. After the device starts, change the console password and save the configuration.
- Clearing the console password brings security risks. Keep the BootROM password safe to ensure system security.
- You must restart the device to enter the Uboot view, which results in service interruption. Back up service configuration and perform this operation in off-peak hours.
- If you clear the console password, configure a new password immediately after you log in to the device. Otherwise, you must clear the console password again to log in if the login timeout timer expires or the device restarts.
- Do not power off the device during the operation.
- Use a serial cable to connect a PC to the device and restart the device. When the message "Press f or F to stop Auto-Boot" is displayed, press F and enter the password to enter the Uboot view.
For details on how to connect a PC to the device with a serial cable, see Logging In to a Device Through the Console Port.
The BootROM password may vary in different software versions. For details, see Default User Names and Passwords for WLAN ACs and APs.
- Run the defaultuser command to clear the console port password.
ar7240> defaultuser Start setting whether to Change Password..... Current Bootup Change PW is N Do you Want To Change The Default password, Y or N : Y ar7240>
- Run the reset command to restart the device.
ar7240> reset Resetting...
- Log in to the system through the console port without entering the password. Change the console password. The following example changes the authentication mode to password authentication and the password to huawei@123.
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<6-16>): //The actual display may be different. Confirm Password: [Huawei-ui-console0] return
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
Recovering the Password for Bluetooth Serial Port Login After Skipping the Startup Based on the Bluetooth Serial Port Password
The BootLoader of a device allows you to skip the password check when you log in to the device through the Bluetooth serial port. In this way, after the system is started, you can load all configurations without entering the password of the Bluetooth serial port. After the device starts, you can change the password of the Bluetooth serial port and save the configuration.
- Security risks exist if you skip the password check. Keep your BootLoader password secure.
- You must restart the device to enter the BootLoader menu, which results in service interruption. Back up device data and perform this operation during off-peak hours.
- If you remove the password of the Bluetooth serial port, configure a new password immediately after you log in to the device. Otherwise, you still need to perform this password removal operation upon a device restart or login timeout.
- Do not power off the device during the operation.
- Use the CloudCampus app on the mobile phone to connect to the device through the Bluetooth serial port and restart the device. When the message "Press CTRL+B to enter BOOT menu" is displayed, press Ctrl+B within 3 seconds and enter the BootLoader password to access the BootLoader main menu. Note that you need to configure the password upon your first login to the BootLoader menu.
For details about how to connect to a device through the Bluetooth serial port, see Connecting to an AP Through the Bluetooth Serial Port.
- Configure the device to skip the password check through the Bluetooth serial port.
- Enter the number corresponding to Password manager submenu in the BootLoader main menu to access the password management submenu.
- Enter the number corresponding to Clear the console login password in the password management submenu to remove the login password of the Bluetooth serial port.
After you press y, the device automatically restarts.
Caution: A new console password must be set after the restart. Continue now? Yes(y) or No(n): y Clear Console Lockword Successfully.
- After the device is started, you can directly log in through the Bluetooth serial port without the password check and then change the password of the Bluetooth serial port.
- For Fat APs and cloud APs, run the following commands to change the password of the Bluetooth serial port. (The following example changes the authentication mode to password authentication and the password to huawei@123.)
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password irreversible-cipher New Password: //The information displayed here is for reference only. Confirm New Password: [Huawei-ui-console0] return
- For Fit APs, run the reset login password command in the diagnostic view to recover the default user name and password. Then log in to the device using the default user name and password and configure a new password of the Bluetooth serial port as prompted.
<Huawei> system-view [Huawei] diagnose [Huawei-diagnose] reset login password Warning: The password used for login through the console port, Telnet, HTTP and SSH will be restored to the factory default. Continue? [Y/N]y Info: Succeeded in setting password to default password. Username:admin Password: //Enter the default password. Warning: The default password poses security risks. It is recommended that the user name and password of the AP be changed using the 'ap username' command in the WLAN view of the AC. Alternatively, directly change the command here. Enter the password (plain-text password of 8-128 characters or cipher-text password of 48-188 characters that must contain at least one lowercase letter, one uppercase letter, and one digit): //Enter a new password. Confirm New Password:
- For Fat APs and cloud APs, run the following commands to change the password of the Bluetooth serial port. (The following example changes the authentication mode to password authentication and the password to huawei@123.)
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
Recovering the Password of an AT
An AT device supports only one local user account, which can be a console, Telnet, or SSH account. If the password is lost, enter the Uboot view and recover the default user name and password.
- You must restart the device to enter the Uboot view, which results in service interruption. Back up service configuration and perform this operation in off-peak hours.
- Do not power off the device during the operation.
- Use a serial cable to connect a PC to the device and restart the device. When the message "Press f or F to stop Auto-Boot" is displayed, press F and enter the password to enter the Uboot view.
For details on how to connect a PC to the device with a serial cable, see Logging In to a Device Through the Console Port.
The BootROM password may vary in different software versions. For details, see List of Default User Names and Passwords.
- Run the defaultuser command to recover the default user name and password.
ar7240> defaultuser Start setting whether to Change Password..... Current Bootup Change PW is N Do you Want To Change The Default password, Y or N : Y ar7240>
- Run the reset command to restart the device.
ar7240> reset Resetting...
- After the device restarts, use the default user name and password to log in and set a new user name and password. The following example sets the user name to huawei and password to huawei@123.
<AT815SN> system-view [AT815SN] local-user huawei password cipher New Password(<8-16>/<56>): Confirm Password: [AT815SN] quit
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
- Logging In to a Device Using Telnet or STelnet and Changing the Console Password
- Clearing the Console Password in the BIOS Menu and Changing the Console Password
- Changing the Password of a Fit AP on an AC
- Changing the Password of a Fit AP in the Uboot View
- Clearing the Console Port Password in the Uboot View and Changing the Console Password
- Recovering the Password for Bluetooth Serial Port Login After Skipping the Startup Based on the Bluetooth Serial Port Password
- Recovering the Password of an AT