一、故障背景
GbE2c以太网刀片交换机需要变更并备份配置，但交换机的管理密码丢失，无法登录对设备进行管理，所以需要重置交换机管理密码。
GbE2c交换机：HP GbE2c以太网刀箱交换机提供了全套工业标准的千兆以太网特征，共16个内部下联、5个上联以及2个内部互联。
交换机后面板说明（来源：官方手册）
Item | Description | Description |
1 | Reset button | Forces the switch to power up or reboot |
2 | Health LED | Off—Not powered up Green—Powered up and all ports match Amber—Indicates a problem such as a port mismatch. For more information,see the HP BladeSystem enclosure setup and installation guide. |
3 | UID LED |
|
4 | DB-9 management serial port |
|
5 | RJ-45 ports 20 - 24 |
|
GbE2c交换机的默认用户名和密码
User account | Description and tasks performed | Password |
User | The user has no direct responsibility for switch management. He or she can view all switch status information and statistics, but cannot make any configuration changes to the switch. | user |
Operator | The operator manages all functions of the switch. The operator can reset ports or the entire switch By default, the operator account is disabled and has no password. |
|
Administrator | The super user administrator has complete access to all menus, admin information, and configuration commands on the switch, including the ability to change both the user and administrator passwords. | admin |
二、故障处理
恢复管理密码需要准备的工具
- USB/RS232串口转换器
连接终端参数设置要求如下：
Parameter | Value |
Baud rate | 9600 |
Date bits | 8 |
Parity | None |
Stop bits | 1 |
Flow control | None |
1、重置GbE2c交换机模块，自检过程中当出现Memory Test时，按键<shift>-T；
Memory Test . //开始reset网络模块
Memory Test ...... //按shift+t
Manufacturing Mode //进入Manufacturing模式
2、交换机自检结束，随即提示进入诊断模式，输入诊断模式的密码admin以继续；
Initializing Diagnostics Mode (0.0.5.23) ...
Angus NVRAM is @ 0x00000fc0 in FRU Device
*** ANGUS ***
PCI unit 0: Dev 0xb300, Rev 0x12, Chip BCM56300_B1, Driver BCM56304_B0
SOC unit 0 attached to PCI device BCM56300_B1
Enter password: admin //输入默认密码admin
[Diagnostics Menu]
- System ---------------------------------------------------------------------
system - System Menu
ports - Port Menu
eeprom - Manufacturing EEPROM Menu
manu - Manufacturing Test Menu
global - Global Commands Menu
boot - Boot Menu
3、进入boot菜单；
>> Diagnostics# boot //输入boot
4、执行conf f，并再次重启，交换机将在下次使用出厂配置启动；
[Boot Menu]
image - Select Alteon OS image 1 or 2
conf - Set Production Mode Config Block (f, a, or b)
reset - Reset The Switch
>> Diagnostics# conf f //输入conf f
Next boot will use switch FACTORY (f) config block.
>> Diagnostics# reset //输入reset重启
Confirm reset [y/n]: y
Resetting the System ...
Memory Test ......
Production Mode
5、启动结束，管理密码恢复为默认admin，输入则可正常登录；
GbE2c Ethernet Blade Switch for HP c-Class BladeSystem.
Copyright(C)2003 Hewlett-Packard Development Company, L.P.
Enter password:
Router> //重置密码完成，进入到 tree-based ISCLI模式
三、经验总结
1、账户密码作为接入设备的重要凭据信息，一旦丢失，将无法管理设备，且重置密码时需要重新引导设备，甚至丢失原有配置，影响设备的连续运行，造成业务中断。
2、密码同样是保护信息安全的一个重要举措，为规范保密管理，保障IT基础设备安全使用和正常运行，应制定规范的密码管理制度，包括密码内容设置规则、密码定期更换机制、密码和口令的保存、使用等。
四、知识拓展
1、备份GbE2c刀片交换机配置
配置备份的作用，则主要用于以下两个场景出现时，进行配置恢复：
· 交换机在运行过程中发生配置损坏
· 交换机由于硬件故障需要被替换
登录交换机：
[Main Menu]
info - Information Menu
stats - Statistics Menu
cfg - Configuration Menu
oper - Operations Command Menu
boot - Boot Options Menu
maint - Maintenance Menu
diff - Show pending config changes [global command]
apply - Apply pending config changes [global command]
save - Save updated config to FLASH [global command]
revert - Revert pending or applied changes [global command]
exit - Exit [global command, always available]
>> Main#
进入配置菜单：
Main# /cfg
[Configuration Menu]
sys - System-wide Parameter Menu port - Port Menu
ip - IP Menu
vlan - VLAN Menu
stp - Spanning Tree Menu
snmp - SNMP Menu
pmirr - Port Mirroring Menu
trunk - Trunk Group Menu
setup - Step by step configuration set up
dump - Dump current configuration to script file
ptcfg - Backup current configuration to tftp server
gtcfg - Restore current configuration from tftp server
Configuration# dump
script start "HP c-Class GbE2c Switch" 4 /**** DO NOT EDIT THIS LINE!
/* Configuration dump taken 7:04:51 Sun Jan 1, 2006
/* Version 2.0.0, Base MAC address 00:00:00:00:00:00
/* RackId: Default RUID, RackName: UnnamedRack
/* Enclosure: SGH*******, EnclosureName: SGH*******
……………snip………d…
script end /**** DO NOT EDIT THIS LINE!
执行dump，GbE2c将交换机的当前配置打印至终端屏幕，手工复制配置信息并保存为脚本文件，以便于恢复使用。
2、恢复GbE2c刀片交换机配置
进入配置菜单，将dump出的配置信息粘贴至终端中并按回车键确定。
>> Main# diff //检查配置是否加载
>> Main# apply //应用配置，使配置生效
>> Main# save //保存配置
如欲了解更多，请登录安图特官方网站:www.antute.com.cn
您现在的位置：首页 > 典型案例