nexus 9000 비밀번호 초기화

모델: cisco Nexus9000 C93108TC-FX3P

설정한 비밀 번호를 알 수 없는 경우, 아래와 같은 과정을 거쳐 새로 설정한다.

1. 스위치와 콘솔케이블을 연결한다. 속도는 9600bps

2. 부팅이 시작될 때 Ctrl+C 키를 눌러서 ‘loader > ‘프롬프트로 진입한다.

CISCO MODULE
BIOS Ver: 5.47
Switch G5
RC Revision:  02.03.00

Memory Information:
...

Board Type: N9K-C93108TC-FX3P

Bootable Disk is detected. Device Name: INTEL SSDSCKKB240G8K
Version 2.18.1260. Copyright (C) 2022 American Megatrends, Inc.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     
Xilinx FPGA
FPGA SPI Flash Micron(Numonyx) N25Q128
Board type  4
IOFPGA @ 0xd8000000
SLOT_ID @ 0xf
Set fan speed to 60%
Initializing fan controller...
Aborting config file read and autoboot
No autoboot or failed autoboot. falling to loader



                Loader Version 5.47

loader > 

3. cmdline recoverymode=1 을 입력한다.

loader > cmdline recoverymode=1 

4. dir 명령으로 부트 이미지를 확인한다. 보통 .bin 확장자를 가진다.

loader > dir

bootflash::

  lost+found
  .rpmstore
  evt_log_snapshot
  .swtam
  eem_snapshots
  virtual-instance
  virtual-instance.conf
  virt_strg_pool_bf_vdc_1
  scripts
  20230118_041926_poap_3056_init.log
  platform-sdk.cmd
  nxos.9.3.5.bin
  home
  20230118_043549_poap_2598_init.log
  20230216_020623_poap_2373_init.log
  poap_retry_debugs.log
  20230310_073030_poap_2375_init.log

5. 위에서 확인 한 부트 이미지로 부팅을 한다. 위에서 확인한 파일은 nxos.9.3.5.bin 이다.

loader > boot nxos.9.3.5.bin

Security Lock
Booting nxos.9.3.5.bin
Trying diskboot
 Filesystem type is ext2fs, partition type 0x83
Image valid
...

6. 부팅이 완료되면 switch(boot)# 프롬프트가 보인다. 이때, admin-password 명령으로 비밀번호를 설정한다.

switch(boot)# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
switch(boot)(config)# admin-password Cisco123!
WARNING! Enabling local authentication for login through console due to password recovery
switch(boot)(config)# exit

7.load-nxos 명령으로 스위치를 재부팅 한다.

switch(boot)# load-nxos
Unsquashing rootfs ...
Total size needed in bootflash is 108588
check bootflash : OK
Total size needed in bootflash is 41032
check bootflash : OK
Creating /dev/mcelog
Starting mcelog daemon
mcelog: Family 6 Model 56 CPU: only decoding architectural errors
INIT: Switching to runlevel: 3
INIT: Sending processes the TERM signal
fastboot or torissu
INIT: (boot)#
FIXME : sundown detcted  use temp librockyf_sun.so ..
Running S93thirdparty-script...

Populating conf files for hybrid sysmgr ...
Starting hybrid sysmgr ...
done
Netbroker support IS present in the kernel.
done
Skipping EMON in TOR ...
Executing Prune clis.
ethernet switching mode Wed Apr 26 07:23:59 UTC 2023
Apr 26 07:24:02 %FW_APP-2-FIRMWARE_IMAGE_LOAD_SUCCESS Found SR card (460)
Apr 26 07:24:02 %FW_APP-2-FIRMWARE_IMAGE_LOAD_SUCCESS Found SR card (460)
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-PS_OK: Power supply 1 ok (Serial number DTN2644K11J)
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-PS_FANOK: Fan in Power supply 1 ok
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-PS_ABSENT: Power supply 2 is absent/shutdown, ps-redundancy might be affected
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-PS_RED_MODE_CHG: Power supply operational redundancy mode changed to non-redundant
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-FANMOD_FAN_OK: Fan module 1 (Fan1(sys_fan1) fan) ok
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-FANMOD_FAN_OK: Fan module 2 (Fan2(sys_fan2) fan) ok
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-FANMOD_FAN_OK: Fan module 3 (Fan3(sys_fan3) fan) ok
2023 Apr 26 07:24:05 switch %$ VDC-1 %$ %PLATFORM-2-FANMOD_FAN_OK: Fan module 4 (Fan4(sys_fan4) fan) ok
2023 Apr 26 07:24:06 switch %$ VDC-1 %$  %USER-2-SYSTEM_MSG: <<%USBHSD-2-MOUNT>> logflash: online  - usbhsd
2023 Apr 26 07:24:07 switch %$ VDC-1 %$  %DAEMON-2-SYSTEM_MSG: <<%ASCII-CFG-2-CONF_CONTROL>> Binary restore - ascii-cfg[30281]
2023 Apr 26 07:24:09 switch %$ VDC-1 %$ netstack: Registration with cli server complete
2023 Apr 26 07:24:23 switch %$ VDC-1 %$ %USER-2-SYSTEM_MSG: ssnmgr_app_init called on ssnmgr up - aclmgr
2023 Apr 26 07:24:26 switch %$ VDC-1 %$ %FW_APP-2-FIRMWARE_IMAGE_LOAD_SUCCESS: Extracting SW Firmware
2023 Apr 26 07:24:30 switch %$ VDC-1 %$ %USER-0-SYSTEM_MSG: end of default policer - copp
2023 Apr 26 07:24:33 switch %$ VDC-1 %$ %CARDCLIENT-2-FPGA_BOOT_PRIMARY: IOFPGA booted from Primary
2023 Apr 26 07:24:33 switch %$ VDC-1 %$ %CARDCLIENT-2-FPGA_BOOT_PRIMARY: MIFPGA booted from Primary
2023 Apr 26 07:24:35 switch %$ VDC-1 %$ %VDC_MGR-2-VDC_ONLINE: vdc 1 has come online

8. 위에서 설정한 비밀번호로 로그인하면 된다. 위에서는 Cisco123!로 설정했다.

User Access Verification
 login: admin
Password:

Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (C) 2002-2020, Cisco and/or its affiliates.
All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under their own
licenses, such as open source.  This software is provided "as is," and unless
otherwise stated, there is no warranty, express or implied, including but not
limited to warranties of merchantability and fitness for a particular purpose.
Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or
GNU General Public License (GPL) version 3.0  or the GNU
Lesser General Public License (LGPL) Version 2.1 or
Lesser General Public License (LGPL) Version 2.0.
A copy of each such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://opensource.org/licenses/gpl-3.0.html and
http://www.opensource.org/licenses/lgpl-2.1.php and
http://www.gnu.org/licenses/old-licenses/library.txt.
switch#
switch#
switch#
switch#
switch#

아래 참고문서에서는 부트 이미지를 tftp 서버에서 가져오는 방법도 설명되어 있다.

* 참고문서: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/password_recovery/b_nx_os_pwr/nx_os_pw.html#13020

답글 남기기

Your email address will not be published.