AR Router Troubleshooting Guide(V200 and V300)
Troubleshooting Cases: Recovering the Console Port Password
- Method 1: Log in to the device using Telnet and change the console port password.
- Method 2: Clear the console login password in BootROM and change the console port password.
- Method 3: Rename the current startup configuration file in BootROM, restart the device with no configuration, and change the console port password.
- Method 1 is recommended. If you forget the Telnet password, use method 2 or 3.
- If the password authentication mode is used for login through the console port and method 1 cannot be used, method 2 is recommended.
- If the AAA authentication mode is used for login through the console port and method 1 cannot be used, method 2 or 3 is recommended.
- The default username and password are available in AR Router Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Logging In to the Device Using Telnet and Modifying the Console Port Password
If you have a Telnet account and your user right is level 3 or higher, log in to the device using Telnet, change the console port password, and save the configuration.
Log in to the device using Telnet. Ensure that your user right is level 3 or higher.
Run the display users command to display all the users that have logged in to the device. The item with a "+" mark indicates your user account on user interface VTY1.
<Huawei> display users User-Intf Delay Type Network Address AuthenStatus AuthorcmdFlag 129 VTY 0 00:23:36 TEL 10.135.18.67 pass Username : Unspecified + 130 VTY 1 01:20:36 TEL 10.135.18.91 pass Username : Unspecified 131 VTY 2 00:00:00 TEL 10.135.18.54 pass Username : UnspecifiedRun the display user-interface command to display the user right of all users. VTY1 has a corresponding user right 15; therefore, you have the right to change the console port password.
<Huawei> display user-interface Idx Type Tx/Rx Modem Privi ActualPrivi Auth Int 0 CON 0 9600 - 15 - P - + 129 VTY 0 - 15 15 P - + 130 VTY 1 - 15 15 P - + 131 VTY 2 - 15 - P - 132 VTY 3 - 15 15 P - ......Change the console port password. In this example, you set the authentication mode to password authentication and the password to huawei@123.
# V200R003C01 and earlier versions.<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher huawei@123 [Huawei-ui-console0] return
# V200R005C00 and later versions.
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<8-128>): [Huawei-ui-console0] return
Save the configuration to prevent configuration loss after a restart.
<Huawei> save Warning: The current configuration will be written to the device. Are you sure to continue? (y/n)[n]:y It will take several minutes to save configuration file, please wait......... Configuration file had been saved successfully Note: The configuration file will take effect after being activated
Clearing the Console Login Password in BootROM and Changing the Console Port Password
The BootROM allows you to clear the console port password so that the device does not check the password when you log in through the console port. When the device starts, you do not need to enter the console port password and all configurations are loaded as normally. After the device starts, change the console port password and save the configuration.
You must restart the device to display the BootROM menu, which results in service interruption. Migrate services to a backup device and perform this operation in off-peak hours.
Set a new password immediately after you log in to the device by clearing console login password. Otherwise, you must repeat this operation when the login expires or the device restarts.
Do not power off the device during the operation.
Connect a PC to the device with a serial cable and restart the device. When the message "Press Ctrl+B to break auto startup ..." is displayed, press Ctrl+B and enter the password (huawei by default) to display the BootROM main menu.
Clear console login password.
Main Menu 1. Default Startup 2. Serial Menu 3. Network Menu 4. Startup Select 5. File Manager 6. Reboot 7. Password Manager Enter your choice(1-7):7 PassWord Menu 1. Modify the menu password 2. Clear the console login password 0. Return Enter your choice(0-2):2 Clear the console login password Succeed! PassWord Menu 1. Modify the menu password 2. Clear the console login password 0. Return Enter your choice(0-2):0 Main Menu 1. Default Startup 2. Serial Menu 3. Network Menu 4. Startup Select 5. File Manager 6. Reboot 7. Password Manager Enter your choice(1-7):1Log in to the device through the console port. Authentication is not required when you log in. Change the console port password. In this example, you set the authentication mode to password authentication and the password to huawei@123.
# V200R003C01 and earlier versions.<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher huawei@123 [Huawei-ui-console0] return
# V200R005C00 and later versions.
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<8-128>): [Huawei-ui-console0] return
Save the configuration.
<Huawei> save Warning: The current configuration will be written to the device. Are you sure to continue? (y/n)[n]:y It will take several minutes to save configuration file, please wait......... Configuration file had been saved successfully Note: The configuration file will take effect after being activated
Renaming the Current Startup Configuration File in BootROM, Starting the Device with No Configuration, and Changing the Console Port Password
Rename the current startup configuration file in BootROM and restart the device with an empty configuration file. Export the configuration file to the PC, change the console port password, and replace the configuration file on the device with the new configuration file.
You must restart the device to display the BootROM menu, which results in service interruption. Migrate services to a backup device and perform this operation in off-peak hours.
Do not power off the device during the operation.
Connect a PC to the device with a serial cable and restart the device. When the message "Press Ctrl+B to break auto startup ..." is displayed, press Ctrl+B and enter the password to display the BootROM main menu.
Rename the current startup configuration file.
Main Menu 1. Default Startup 2. Serial Menu 3. Network Menu 4. Startup Select 5. File Manager 6. Reboot 7. Password Manager Enter your choice(1-7):4 Startup Select 1. Display Startup 2. Set Boot File 3. Set Config File 4. Startupfile Check Manage 5. Set Startup Waiting Time 0. return Enter your choice(0-5):1 ************** Current Stratup info **************** Valid Flag State : Vaild Boot File Name : flash:/softwarenew.cc Config File Name : flash:/cfgnew.zip Licence File Name : Patch File Name : Voice File Name : ************** Pre Startup info ******************** Valid Flag State : Vaild Boot File Name : flash:/software.cc Config File Name : flash:/cfg.zip Licence File Name : Patch File Name : flash:/patch.pat Voice File Name : Startup Select 1. Display Startup 2. Set Boot File 3. Set Config File 4. Startupfile Check Manage 5. Set Startup Waiting Time 0. return Enter your choice(0-5):0 Main Menu 1. Default Startup 2. Serial Menu 3. Network Menu 4. Startup Select 5. File Manager 6. Reboot 7. Password Manager Enter your choice(1-7):5 File Menu 1. Flash file system 0. Return Enter your choice(0-1):1 SDCard file system MENU 1. List file in Flash 2. Delete file in Flash 3. Rename file in Flash 4. Format Flash 5. Check Flash 0. Return Enter your choice(0-5):3 Please input the file name: cfgnew.zip Please input the new name: cfgnew-copy.zip Rename file[flash:/cfgnew.zip] to [flash:/cfgnew-copy.zip], Yes or No(Y/N): y Rename OK! SDCard file system MENU 1. List file in Flash 2. Delete file in Flash 3. Rename file in Flash 4. Format Flash 5. Check Flash 0. Return Enter your choice(0-5):0 File Menu 1. Flash file system 0. Return Enter your choice(0-1):1 Main Menu 1. Default Startup 2. Serial Menu 3. Network Menu 4. Startup Select 5. File Manager 6. Reboot 7. Password Manager Enter your choice(1-7):1After the device starts, it restores the default factory settings and prompts you to set the console port password. In this example, you set the password to huawei@123.
# V200R003C01 and earlier versions.Please configure the login password (maximum length 16) Enter password: Confirm password:
# V200R005C00 and later versions.
Please configure the login password (<8-128>) Enter password: Confirm password:
Configure the device as an FTP server. Create an FTP path that is the same as the path where the renamed configuration file is saved.
<Huawei> system-view [Huawei] ftp server enable Info: Succeeded in starting the FTP server. [Huawei] aaa [Huawei-aaa] local-user huawei password irreversible-cipher huawei@123 [Huawei-aaa] local-user huawei ftp-directory flash: [Huawei-aaa] local-user huawei service-type ftp [Huawei-aaa] local-user huawei privilege level 15
Download the renamed configuration file to the PC.
C:\Documents and Setting\Administrator> ftp 10.110.24.254 Connected to 10.110.24.254. 220 FTP service ready. User (10.110.24.254:(none)): huawei 331 Password required for huawei. Password: 230 User logged in. ftp> get cfgnew-copy.zip //Be the same as the configuration file name after it is renamed. 200 Port command okay. 150 Opening ASCII mode data connection for cfgnew-copy.zip. 226 Transfer complete. ftp: receive 981 bytes in 0.00 seconds 981000.00Kbytes/sec.
Decompress the file on the PC and use the text editor to open the file. (The built-in text editor of the system is recommended.) Delete the configuration about console port authentication and compress the file to a .zip file.
Upload the configuration file to the device and overwrite the original configuration file.
<ftp> put cfgnew-copy.zip 200 Port command okay. 150 Opening ASCII mode data connection for cfgnew-copy.zip. 226 Transfer complete. ftp: send 981 bytes in 0.00 seconds 981000.00Kbytes/sec.
Specify the new configuration file for next startup. Restart the device without saving the configurations.
<Huawei> startup saved-configuration cfgnew-copy.zip This operation will take several minutes, please wait... Info: Succeeded in setting the file for booting system <Huawei> reboot fast System will reboot! Continue ? [y/n]:y
Set the console port password as prompted. For example, set the password to huawei@123.
# V200R003C01 and earlier versions.Please configure the login password (maximum length 16) Enter password: Confirm password:
# V200R005C00 and later versions.
Please configure the login password (<8-128>) Enter password: Confirm password:
Save the configuration to prevent configuration loss after the next restart.
<Huawei> save Warning: The current configuration will be written to the device. Are you sure to continue? (y/n)[n]:y It will take several minutes to save configuration file, please wait......... Configuration file had been saved successfully Note: The configuration file will take effect after being activated