八、备份、升级IOS/密码恢复

个人学习笔记，若有侵权，请告知！

目录

• 配置寄存器值：简单的理解为对路由器开机的配置
  • 0x2142 //开机时不加载配置文件
  • 0x2102 //开机时加载配置文件

备份IOS

• 需要TFTP服务器，同时确保能够ping通TFTP服务器的地址

Router#copy startup-config tftp:       //将startup-config备份到tftp服务器上
Router#copy flash: tftp:               //将IOS备份到tftp服务器上
Source filename []? c2500-is-l.122-15.T14.bin       //要备份的IOS名字
Address or name of remote host []? 172.16.1.100       //服务器的地址
Destination filename [c2500-is-l.122-15.T14.bin]?       //备份到tftp服务器上的名字(直接回车)
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
16423684 bytes copied in 278.752 secs (58919 bytes/sec)
Router#

升级IOS

• 准备工作
  • 备份设备配置
  • 备份设备IOS
  • 需要TFTP服务器，同时确保能够ping通TFTP服务器的地址

Router#copy tftp flash       从TFTP服务器上将新的IOS拷贝到Router的flash中
Address or name of remote host [255.255.255.255]? 172.16.1.100      //TFTP服务器的地址
Source filename []?c2800nm-advsecurityk9-mz.124-12.bin         //新IOS文件名
Destination filename [c2800nm-advsecurityk9-mz.124-12.bin]?     //拷贝到flash后的文件名(直接回车)
%Warning: There is a file already existing with this name
Do you want to over write? [confirm][enter]
Accessing tftp://172.16.1.100/c2800nm-advsecurityk9-mz.124-12.bin...
Loading c2800nm-advsecurityk9-mz.124-12.bin from 172.16.1.100 (via Ethernet0):
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
21710744 bytes copied in 82.880 secs (261954 bytes/sec)
Router#reload     //重启设备

密码恢复

• 只能通过console口破解
• 路由器默认的寄存器值是0x2102 （启动路由器，加载IOS，并读取NVRAM的配置文件）

重启计算机，在开机前30s 按住ctrl+break 发送一个break信号

rommon 1>    //路由器将进入ROM监控模式
rommon 1>confreg 0x2142   //不读取NVRAM 中的配置
rommon 2>reset   或  i   //重启路由器，绕过加载NVRAM 里面的配置

Router#show version
Configuration register is 0x2142    //查看到以修改为0x2142
Router#copy startup-config  running-config   //调用NVRAM的配置到RAM中
Router#conf t
Router(config)#no enable secret  //删除原密码
Router(config)#no enable password   //删除原密码
Router(config)#enable password  xxx    //建立新密码
Router(config)#config-register 0x2102  //把寄存器值改回原来数值
Router#write   //将RAM中的配置保存到NVRAM中
Router#reload   //重启路由器