(精品)3.3 IOS影像与密码恢复

Slide Title,Body Text,Second Level,Third Level,Fourth Level,Fifth Level, 200,6, Shenzhen Polytechnic. All rights reserved.,23,Slide Title,Body Text,Second Level,Third Level,Fourth Level,Fifth Level, 2002,Cisco Systems, Inc. All rights reserved.,19,IOS,映像和密码恢复,IOS Image and Password Recovery,深圳职业技术学院计算机系网络专业,教学目标（,Objectives,）,1.,路由器启动顺序（,Router Startup Sequence,）,2.,路由器加载,IOS,顺序,（,Router Load IOS Sequence,）,3.,配置路由器寄存器,（,Configuring Router,Configuration Register,）,4.,路由器密码破解（,Router,Password Recovery,）,5.,IOS,和配置文件备份,（,Backup IOS and,Configuration,File,）,6.,IOS,的恢复或升级,（,Recovery,or Upgrade IOS,）,Cisco IOS,Internetwork,Operating,System,Software,互联网操作系统,Cisco,IOS,启动顺序预览（,An Overview of System Startup,）,上电自检（,Power on self test,(POST),）,装载引导程序（,Load and run bootstrap code,）,查找,IOS,（,Find the IOS software,）,装载,IOS,（,Load the IOS software,）,查找配置文件（,Find the configuration,）,装载配置文件（,Load the configuration,）,运行（,Run,）,启动顺序,（,Startup Sequence,）,RAM,ROM,Bootstrap,装载启动程序,Load Bootstrap,TFTP Server,Flash,ROM,Cisco,Internetwork,Operating,System,装载,IOS,Locate and Load,Operating System,Console,TFTP Server,NVRAM,Configuration,File,装载配置文件或,进入,Setup,模式,Locate and Load,Configuration File,or,Enter Setup Mode,加载,IOS,顺序（,Load IOS Sequence,）,show,version,show,startup-,config,Console,Config,register,配置寄存器,NVRAM,1.,在配置文件中，,boot system,命令指定了查找顺序，路由器会依次使用,Global configuration mode boot system commands can be specified to enter fallback sources for the router to use in sequence. The router will use these commands as needed, in sequence, when it restarts.,2.,否则，路由器会使用自己的,Flash,中的,IOS,软件,If NVRAM lacks boot system commands that the router can use, the system by default uses the Cisco IOS software in flash memory.,定位,IOS,（,Locating the Cisco IOS Software,）,配置寄存器（,Configuration Registers,）,更改,NVRAM,中的寄存器，会改变,Cisco IOS,软件的基本选项，可以指定从哪里引导,IOS,Router#,configure terminal,Router(config,)#,boot system flash,IOS_filename,Router(config,)#,boot system,tftp,IOS_filename,tftp_address,Router(config,)#,boot system,rom,Ctrl-Z,Router#,copy running-,config,startup-,config,Boot system,commands not found In NVRAM,Get default Cisco IOS software from,Flash,Flash memory,empty,Get default Cisco IOS software from,TFTP server,From,ROM,ROM,功能（,ROM Functions,）,ROM,Bootstrap,Mini IOS,ROMmonitor,POST,show version,Console,Mini IOS,RXBOOT,模式,ROM monitor,ROMMON,模式,查看当前配置寄存器的值（,Determining the Current Configuration Register Value,）,Router#show,version,Cisco,Internetwork,Operating System Software,IOS (tm) C2600 Software (C2600-I-M),Version 12.2(8)T1, RELEASE SOFTWARE (fc2),TAC Support: http:/, (c) 1986-2002 by,cisco,Systems, Inc.,Compiled Sat 30-Mar-02 20:08 by,ccai,Image text-base: 0x80008074, data-base: 0x80A29E20,ROM: System Bootstrap, Version 12.2(7r) ,cmong,7r, RELEASE SOFTWARE (fc1),Router,uptime,is 5 minutes,System returned to ROM by reload,System image file is flash:,c2600-i-mz.122-8.T1.bin,“,Configuration register,is,0x2102,配置寄存器组成（,Component of,Configuration Registers,）,寄存器组成：,4,位,16,进制,格式：,0xABCD,D,C,B,A,D:,启动域,C,：,使得系统软件忽略,NVRAM,中的内容,，关键位“,6,”,（,1,）,值为,当路由器启动后会从里面的配置文件调到里运行,（,2,）值为,，路由器启动后会忽略的配置,A,：,13,位，网络启动次数，,值为,1,5,次,值为,0,无数次,15 14 13 12,11 10 9 8,7 6 5 4,3 2 1 0,实例,2 1 0 2,Console,口,速率设定表,12 11,速率,0 0,9600,0 1,4800,0,1200,1 1,2400,启动域取值（,Boot Field Values,）,配置寄存器启动域值,Value of Boot Field,0,x0,0,x2 to 0xF,0,x1,描述,Description,路由器启动后会进入,ROMMON,模式,路由器属于正常启动，如果路由器有,FLASH,，,2,是缺省值,路由器从,ROM,中启动，进入,RXBOOT,模式（,FLASH,空,）,Router#configure terminal,Router(config)#,config-register 0x2102,Ctrl-Z,Router#,reload,Case Study(1),分别按下面步骤修改寄存器的值，然后重新启动，并比较不同点：,1.,将寄存器的值修改为,0x2100,2.,将寄存器的值修改为,0x2101,3.,将寄存器的值修改为,0x2102,4.,将寄存器的值修改为,0x2142,Configuration register value in,show version,0x,2102,：工业默认值,0x,2142,：从,FLASH,中启动，但不使用,NVRAM,中的配置文件（用于口令恢复）,路由器密码破解,(,Password Recovery,),Password,?,I dont know.,So,how,can I do?,密码恢复,破解步骤,(Steps),准备,TFTP,服务器（,Preparing for TFTP,）,Router#,show flash,System flash directory:,File Length Name/status,1 5848552 c2600-i-mz.122-8.T1.bin,5848616 bytes,used, 10928600,available, 16777216,total,16384K bytes of processor board System flash (Read/Write),FLASH,RAM,Router#,ping,tftp_address,.,!,(On the TFTP server, for example, a UNIX host),dir,c2600-i-mz.122-8.T1.bin,TFTP Server,确定,TFTP,服务器有足够的空间,Verify that Flash memory has,roomfor,the Cisco IOS image,Router#,show flash,System flash directory:,File Length Name/status,1 5848552 c2600-i-mz.122-8.T1.bin,5848616 bytes,used, 10928600,available, 16777216,total,16384K bytes of processor board System flash (Read/Write),Router#,copy flash,tftp,Source filename c2600-i-mz.122-8.T1.bin?,Address or name of remote host ? 10.1.1.2,Destination filename c2600-i-mz.122-8.T1.bin?,!,!,Router#,TFTP Server,FLASH,RAM,copy,flash,tftp,备份,IOS,（,Backup IOS,）,Router#,copy,tftp,flash,IP address or name of remote host 255.255.255.255?,10.1.1.2,Name of,tftp,filename to copy into flash ?,c2600-i-mz.122-8.T1.bin,copy,c2600-i-mz.122-8.T1.bin,from,10.1.1.2,into flash memory? confirm,xxxxxxxx,bytes available for writing without erasure.,erase flash before writing? confirm,Clearing and initializing flash memory (please wait)#.#,Loading from,10.1.1.2,: !,!(text omitted) OK - 324572/524212 bytes,Verifying checksum.,VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV,VVVVVV(text,omitted),Flash verification successful. Length = 1804637, checksum = 0xA5D3,从网络升级,IOS,（,Upgrading IOS from the Network,）,FLASH,RAM,TFTP Server,copy,tftp,flash,备份配置文件到,TFTP,服务器（,Backup Running-,config,to,Tftp,Server,）,Network,server,running-,config,R1#copy running-,config,tftp,Address or name of remote host ? 10.1.1.2,Destination filename r1-confg?,!,691 bytes copied in 0.725,secs,从,TFTP,下载配置文件（,Update Running-,config,from,Tftp,Server,）,Network,server,running-,config,R1#copy,tftp,running-,config,Address or name of remote host ? 10.1.1.2,Source filename ? r1-confg,Destination filename running-,config,?,Accessing tftp:/10.1.1.2/r1-confg.,Loading r1-confg from 10.1.1.2 (via FastEthernet0/0): !,OK - 691/1024 bytes,691 bytes copied in 0.854,secs,Case Study (2),1.,C,isco IOS,备份,2.running-config,备份与加载,fa0/0:10.1.1.1/24,PC1:10.1.1.2/24,GW:10.1.1.1,R1,TFTP SERVER,深入实验（,Further Study,）,fa0/0:10.1.1.1/24,PC1:10.1.1.2/24,GW:10.1.1.1,R1,TFTP SERVER,R2,Case Study(4),Router,Networkserver,从,TFTP Server,加载,IOS,思考题（,Questions,）,1.Cisco,默认加载,IOS,的顺序是什么？,2.,配置寄存器的启动域的,0,1,和,2,所代表的含义是什么,?,3.,用什么命令可以查看配置寄存器的值,?,4.,用什么命令可以修改配置寄存器的值,?,5.,配置寄存器的值,2102,是十进制还是十六进制,?,6.,在什么模式下可以恢复路由器的密码,?,7.,当我们升级,IOS,时,应该注意哪些事情,?,8.,用什么命令可以从,TFTP,服务器上下载新的,IOS?,9.,路由器的启动顺序是怎样的,?,10.,如何查看,IOS,软件的大小,?,11.,备份配置文件的命令包含哪些,?,12.,路由器密码破解的核心思想是什么,?,