{"id":428,"date":"2020-04-06T14:50:36","date_gmt":"2020-04-06T12:50:36","guid":{"rendered":"http:\/\/tech.sosthe.sk\/?page_id=428"},"modified":"2020-04-06T15:16:22","modified_gmt":"2020-04-06T13:16:22","slug":"4-reset-password-recovery","status":"publish","type":"page","link":"http:\/\/tech.sosthe.sk\/index.php\/ccna\/cisco-ios\/4-reset-password-recovery\/","title":{"rendered":"4. Reset, password recovery"},"content":{"rendered":"<h3>Reset do tov\u00e1rensk\u00e9ho nastavenia<\/h3>\n<p>Je ve\u013ea d\u00f4vodov, pre\u010do by sme mohli potrebova\u0165 vykona\u0165\u00a0<strong><em>reset zariadenia<\/em><\/strong> (jeho konfigur\u00e1cia) do v\u00fdchodiskov\u00e9ho nastavenia. Pokia\u013e sa t\u00fdka switchov, tak m\u00e1me k dispoz\u00edcii dve met\u00f3dy\u00a0<strong><em>hardwarov\u00fa<\/em><\/strong>\u00a0 (potrebujeme fyzick\u00fd pr\u00edstup ku switchu) a\u00a0 <strong><em>softwarov\u00fa<\/em><\/strong>\u00a0 (potrebujeme sa prihl\u00e1si\u0165 s dostato\u010dn\u00fdm opr\u00e1vnen\u00edm).<\/p>\n<p class=\"notice\"><strong><em>Pozn .:<\/em><\/strong> Pred t\u00fdm ako switch zresetujete, tak sa odpor\u00fa\u010da vykona\u0165 z\u00e1lohu konfigur\u00e1cie. Tie\u017e by som odporu\u010dil urobi\u0165 si pre ka\u017ed\u00fd switch (alebo sk\u00f4r produktov\u00fd rad) z\u00e1lohu IOSu (ako je pop\u00edsan\u00e1 v druhom diele).<\/p>\n<h4>Hardv\u00e9rov\u00e1 met\u00f3da<\/h4>\n<p>T\u00fato met\u00f3du by som odporu\u010dil, zd\u00e1 sa mi jednoduch\u0161ie.<\/p>\n<ol>\n<li>Na switchi stla\u010d\u00edme a dr\u017e\u00edme tla\u010didlo MODE. Po cca 3 sekund\u00e1ch za\u010dn\u00fa LED di\u00f3dy blika\u0165.<\/li>\n<li>Po cca 7 sekund\u00e1ch prestan\u00fa di\u00f3dy blika\u0165, pust\u00edme tla\u010didlo a switch sa re\u0161tartuje.<\/li>\n<li>Po na\u0161tartovan\u00ed je konfigur\u00e1cia zmazan\u00e1.<\/li>\n<\/ol>\n<h4>Softv\u00e9rov\u00e1 met\u00f3da<\/h4>\n<p>Pre zresetovanie switcha potrebujeme vymaza\u0165 jeho konfigur\u00e1ciu. T\u00e1 je ulo\u017een\u00e1 v NVRAM pam\u00e4ti v\u00a0\u00a0<code>startup-config<\/code>, plus inform\u00e1cie o VLAN je ulo\u017een\u00e1 v s\u00fabore\u00a0<code>vlan.dat<\/code>.\u00a0Mazanie m\u00f4\u017eeme vykona\u0165 nieko\u013ek\u00fdmi sp\u00f4sobmi a zoh\u013eadni\u0165 tie\u017e to \u010do v\u0161etko chceme zmaza\u0165.<\/p>\n<p>Pre mazanie s\u00faborov vo flash pam\u00e4ti (s\u00faborovom syst\u00e9me) sl\u00fa\u017ei pr\u00edkaz\u00a0<code>delete<\/code>, pre mazanie s\u00faborov\u00e9ho syst\u00e9mu m\u00e1me pr\u00edkaz\u00a0<code>erase<\/code>, pomocou neho m\u00f4\u017eeme maza\u0165\u00a0<code>bootflash:<\/code>,\u00a0<code>flash:<\/code>\u010di\u00a0<code>nvram:<\/code>.<\/p>\n<p class=\"notice\"><em><strong>Pozn .:<\/strong><\/em> Pri mazan\u00ed s\u00faborov sa tieto iba ozna\u010dia ako zmazan\u00e9 a m\u00f4\u017eeme ich obnovi\u0165 pr\u00edkazom<code>undelete<\/code>, pr\u00edpadne pr\u00edkazom<code>squeeze<\/code>naozaj vymaza\u0165.\u00a0Ale po pou\u017eit\u00ed pr\u00edkazu<code>erase<\/code>je v\u0161etko naozaj vymazan\u00e9.<\/p>\n<p>Predt\u00fdm sa pou\u017e\u00edvali tieto dva pr\u00edkazy<\/p>\n<pre><span style=\"font-size: 10pt;\">SWITCH # <strong>erase startup-config <\/strong>   \/\/ zma\u017ee iba startup konfigur\u00e1cii \r\nSWITCH # <strong>write erase <\/strong>            \/\/ zma\u017ee NVRAM pam\u00e4\u0165<\/span><\/pre>\n<p>tie s\u00fa v\u00e4\u010d\u0161inou st\u00e1le funk\u010dn\u00e9, ale boli nahraden\u00e9 pr\u00edkazom<\/p>\n<pre><span style=\"font-size: 10pt;\">SWITCH # <strong>erase NVRAM: <\/strong>           \/\/ zma\u017ee NVRAM pam\u00e4\u0165<\/span><\/pre>\n<p>Pr\u00edkazom\u00a0<code>erase<\/code>m\u00f4\u017eeme tie\u017e vymaza\u0165 flash pam\u00e4\u0165, kde je ulo\u017een\u00fd IOS a konfigur\u00e1cia VLAN.\u00a0Je asi len m\u00e1lo situ\u00e1ci\u00ed, kedy toto potrebujeme.\u00a0E\u0161te raz upozor\u0148ujem, \u017ee pou\u017eit\u00edm tohto pr\u00edkazu si vymast\u00edme IOS a switch teda po re\u0161tarte nabootuje iba do obmedzen\u00e9ho prostredia RxBoot!<\/p>\n<pre><span style=\"font-size: 10pt;\">SWITCH # <strong>erase flash: <\/strong>           \/\/ kompletn\u00e9 zmazanie flash pam\u00e4te<\/span><\/pre>\n<p>Ak potrebujeme, tak vyma\u017eeme konfigur\u00e1ciu VLAN z flash pam\u00e4te<\/p>\n<pre><span style=\"font-size: 10pt;\">SWITCH # <strong>delete vlan.dat <\/strong>        \/\/ zma\u017ee s\u00fabor vlan.dat<\/span><\/pre>\n<p>Po tom, \u010do zma\u017eeme konfigur\u00e1ciu switche, ho potrebujeme re\u0161tartova\u0165.\u00a0To m\u00f4\u017eeme urobi\u0165 pr\u00edkazom<\/p>\n<pre><span style=\"font-size: 10pt;\">SWITCH # <strong>reload <\/strong>                 \/\/ re\u0161tart switche<\/span><\/pre>\n<p class=\"notice\"><em><strong>Pozn .:<\/strong><\/em>\u00a0Ak sa v\u00e1s syst\u00e9m pri reload sp\u00fdta, \u010di chcete ulo\u017ei\u0165 zmeny v konfigur\u00e1cii, mus\u00edte zvoli\u0165 nie.\u00a0Inak by sa aktu\u00e1lne be\u017eiaca konfigur\u00e1cie ulo\u017eila do \u0161tartovacej.<\/p>\n<h3>Password recovery &#8211; straten\u00e9 heslo<\/h3>\n<p>M\u00f4\u017ee sa sta\u0165, \u017ee zabudneme heslo ku switchu a potrebujeme sa k nemu prihl\u00e1si\u0165.\u00a0Pritom samozrejme nechceme pr\u00eds\u0165 o aktu\u00e1lnej konfigur\u00e1cii.\u00a0Nasleduj\u00faci postup je pre Catalyst radu 2900, 3500, 3700 (ale m\u00f4\u017ee fungova\u0165 aj inde).\u00a0Potrebujeme ma\u0165 fyzick\u00fd pr\u00edstup ku switchu.<\/p>\n<p><strong>Principi\u00e1lne ide o to, \u017ee:<\/strong><\/p>\n<ul>\n<li>na\u0161tartujeme switch bez startup konfigur\u00e1cie<\/li>\n<li>prihl\u00e1sime sa do privilegovan\u00e9ho m\u00f3du (bez hesla)<\/li>\n<li>skop\u00edrujeme na\u0161u p\u00f4vodn\u00fa konfigur\u00e1ciu do be\u017eiaci<\/li>\n<li>nastav\u00edme heslo<\/li>\n<li>konfigur\u00e1ciu ulo\u017e\u00edme<\/li>\n<\/ul>\n<p><strong>Tu je presnej\u0161\u00ed postup:<\/strong><\/p>\n<ol>\n<li>so switchom sa spoj\u00edme konzolovo (s\u00e9riov\u00fdm k\u00e1blom)<\/li>\n<li>vypoj\u00edme nap\u00e1janie zo switche<\/li>\n<li>stla\u010d\u00edme a dr\u017e\u00edme tla\u010didlo MODE<\/li>\n<li>zapoj\u00edme nap\u00e1janie<\/li>\n<li>switch sa zastav\u00ed v \u00favode bootovanie<\/li>\n<li>n\u00e1sledne zad\u00e1me tieto pr\u00edkazy<\/li>\n<\/ol>\n<pre><span style=\"font-size: 10pt;\">SWITCH: <strong>flash_init<\/strong> \r\nSWITCH: <strong>load_helper<\/strong> \r\nSWITCH: <strong>dir flash: <\/strong>                                  \/\/ v\u00fdpis pam\u00e4te \r\nSWITCH: <strong>rename flash: config.text flash: config.old <\/strong>   \/\/ premenujeme \u0161tartovacie konfigur\u00e1ciu \r\nSWITCH: <strong>boot <\/strong>                                        \/\/ nabootuje \r\nSWITCH&gt; <strong>enable    <\/strong>                                    \/\/ na\u0161tartovali sme bez hesla a konfig , privilegovan\u00fd m\u00f3d \r\nSWITCH # <strong>rename flash: config.old flash: config.text <\/strong>   \/\/ premenujeme sp\u00e4\u0165 \r\nSWITCH # <strong>copy flash: config.text system: running-config <\/strong>\/\/ skop\u00edrujeme do be\u017eiaci konfigur\u00e1cie (pripoj\u00ed sa) \r\nSwitch # <strong>configure terminal<\/strong> \r\nSwitch (config ) # <strong>no enable secret   <\/strong>                  \/\/ zru\u0161\u00edme heslo (pr\u00edpadne i password) \r\nSwitch (config) # <strong>enable secret Cisco <\/strong>                 \/\/ nastav\u00edme nov\u00e9 \r\nSwitch (config) # <strong>exit<\/strong> \r\nSwitch # <strong>copy running-config startup-config <\/strong>          \/\/ ulo\u017e\u00edme konfigur\u00e1ciu<\/span><\/pre>\n<p>Z bezpe\u010dnostn\u00e9ho h\u013eadiska m\u00f4\u017eeme chcie\u0165 t\u00fato mo\u017enos\u0165 obnovy hesla zak\u00e1za\u0165.\u00a0Na nov\u0161\u00edch verzi\u00e1ch IOSu je i toto mo\u017en\u00e9 pomocou pr\u00edkazu:<\/p>\n<pre><span style=\"font-size: 10pt;\">Switch (config) # <strong>no service password-recovery<\/strong><\/span><\/pre>\n<p>Potom, ak sa niekto pok\u00fasi o postup obnovy hesla, sa vyma\u017ee pam\u00e4\u0165.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Reset do tov\u00e1rensk\u00e9ho nastavenia Je ve\u013ea d\u00f4vodov, pre\u010do by sme mohli potrebova\u0165 vykona\u0165\u00a0reset zariadenia (jeho konfigur\u00e1cia) do v\u00fdchodiskov\u00e9ho nastavenia. Pokia\u013e sa t\u00fdka switchov, tak m\u00e1me&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":431,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/pages\/428"}],"collection":[{"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/comments?post=428"}],"version-history":[{"count":5,"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/pages\/428\/revisions"}],"predecessor-version":[{"id":446,"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/pages\/428\/revisions\/446"}],"up":[{"embeddable":true,"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/pages\/431"}],"wp:attachment":[{"href":"http:\/\/tech.sosthe.sk\/index.php\/wp-json\/wp\/v2\/media?parent=428"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}