ASA 5510密碼恢復:
1.重啟防火墻出現
Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
2.進入rommon模式,然后修改寄存器
rommon #1> confreg
Current Configuration Register: 0x00000001-------------當前asa的寄存器值
Configuration Summary:
boot default image from Flash
Do you wish to change this configuration y/n [n]: y---------------是否改變現有配置
enable boot to ROMMON prompt y/n [n]: y
select specific Flash image index y/n [n]: n
disable system configuration y/n [n]: y --------重要----------是否關閉系統當前的配置
go to ROMMON prompt if netboot fails y/n [n]: y
enable passing NVRAM file specs in auto-boot mode y/n [n]: y
disable display of BREAK or ESC key prompt during auto-boot y/n [n]: n
Current Configuration Register: 0x00102040---------------------修改后的寄存器值
Configuration Summary:
boot ROMMON
ignore system configuration
load ROMMON if netboot fails
pass NVRAM file specs in auto-bootloader mode
Update Config Register (0x102040) in NVRAM…
3.重啟asa
rommon #2> boot
4.這時可修改密碼
ciscoasa>enable
Password:(密碼為空)
ciscoasa#configure terminal
ciscoasa(config)#enable password XXX
5.copy 原有配置
ciscoasa(config)# copy startup-config running-config
6.寄存器立刻改回原值,然后重啟。
Rack46ASA2(config)# config-register 0x01
7.重啟
ciscoasa#reload