一、客户需求
华为AP4050DN-E console登录无线AP密码忘记了怎么办?
console登录无线AP要密码。
如何恢复华为AP4050DN-E
4:室内低密度
0:内置天线1外置天线
5:第二代AC产品
0:预留位
D:双频
N:普通天线E:智能天线
二、解决办法
第一种解决办法:长按Default按钮
如果所有密码均遗忘,对于有Default按钮的设备,可以长按Default按钮3s以上恢复出厂配置,设备的用户名和密码将恢复为缺省值;对于没有Default按钮的设备,请看以下解决办法。
可以直接恢复出厂设置。
修改完密码后,一定要保存。
第二种破解方法:在BIOS下配置跳过Console口密码启动后,重新设置Console口密码
设备的BIOS提供了配置跳过Console口密码启动的功能,可以在用户使用Console口登录的时候跳过密码检查。这样系统启动后除了不需要输入Console密码外,与正常启动相同,也会完成所有配置加载。设备启动后修改Console口密码,然后保存配置。
跳过密码检查存在安全风险,请务必保存好您的BootROM密码。
要进入到BIOS菜单需要重启设备,会导致业务中断,请视具体情况做好设备数据备份,并尽量选择业务量较少的时间操作。
清空Console口密码登录后请马上配置新的密码,否则登录超时或重启后,仍需要清空密码来登录。
在此操作过程中不要对设备进行下电。
用串口线连接并重启设备,出现“Press CTRL+B to enter BIOS menu”打印信息时,按下“Ctrl+B”并键入密码后进入BIOS主菜单。
用串口线连接设备的方法请参见通过Console口连接设备。
不同版本的BootROM密码可能不同,具体可参见AC和AP的缺省用户名和密码。
配置跳过Console口密码登录。
输入BIOS菜单中“Clear password for console user”对应的序号,清除Console口密码。
输入BIOS菜单中“Boot with default mode”对应的序号,以缺省模式启动设备。
完成系统启动后,通过Console口登录时不需要认证,登录后修改Console口密码。此处以登录认证模式为password模式,密码为“huawei 123”为例。
不同版本中设置本地验证密码的命令有所不同:
<Huawei>system-view[Huawei]user-interface console 0[Huawei-ui-console0]authentication-mode password[Huawei-ui-console0]set authentication password cipher Enter Password
<6-16>
://此处提示信息以设备实际显示为准
Confirm Password:
[Huawei-ui-console0]return
V200R002及之前版本:set authentication password[cipher password]
V200R003及之后版本:set authentication password cipher
为了防止重启后配置丢失,执行save命令保存配置。
图片
BIOS主菜单
BIOS主菜单集成了BIOS程序的主要功能,并且是装备菜单的入口。
通过Console口连接设备。
图片
Console口连接方式请参见配置用户通过Console口登录设备。
重启设备,在设备出现提示信息时按Ctrl+B,进入BIOS主菜单。
BIOS主菜单
BIOS主菜单集成了BIOS程序的主要功能,并且是装备菜单的入口。
通过Console口连接设备。
Console口连接方式请参见配置用户通过Console口登录设备。
重启设备,在设备出现提示信息时按Ctrl+B,进入BIOS主菜单。
Press CTRL+B to enter BIOS menu:1
Password:
Info:You are advised to change the password to ensure security.
BIOS Menu
Version:072
1.Boot with default mode
2.Enter serial submenu
3.Enter startup submenu
4.Enter ethernet submenu
5.Enter file system submenu
6.Modify BOOTROM password
7.Clear password for console user
8.Config HigMem to Flash Flag
9.Reboot
Press CTRL+E to enter Diag menu
Enter your choice
1-9
:
重新启动4050DN-E后,出现的重启界面中没有CTRL+B选项,可以进入BIOS菜单。
重新启动AP。
Welcome To HUAWEI Wlan World
U-Boot 428
Apr-25-2017-06:18:05
BOOT:Secondary
USB0:USB XHCI 1.00
0 Storage Device
s
found
Press CTRL+T for Full Memory Test in 1 Seconds:0
Net:Ethernet Mac:4C-FA-CA-65-2F-E0
PHY ID1:0x4d
PHY ID2:0xd0b1
ipq40xx_ess_sw_init done
eth0
Boot Kernel A Address:0x1c9e000
Boot Kernel B Address:0x3c9e000
Start Up time
s
:1
Image:Current Bootup is B
Image:Current Bootup is B
POST test:Begin
Testing DDR:Passed.
Testing Nor Flash:Passed.
Testing PHY0:Passed.
Testing PHY1:Passed.
Testing PHY2:Passed.
Testing PHY3:Passed.
Testing PHY4:Passed.
Saving POST results:Done
POST test:End
Press f or F to stop Auto-Boot in 3 seconds:0 f或F
##Booting kernel from FIT Image at 84000000...
Using'config 1'configuration
Trying'kernel 1'kernel subimage
Description:ARM OpenWrt Linux-3.10.62
Type:Kernel Image
Compression:lzma compressed
Data Start:0x840000e4
Data Size:1948139 Bytes=1.9 MB
Architecture:ARM
OS:Linux
Load Address:0x80208000
Entry Point:0x80208000
Hash algo:crc32
Hash value:cab5b531
Hash algo:sha1
Hash value:29e596152b2ae74b7a7d37b0d28d0d262a759a8a
Verifying Hash Integrity...crc32+sha1+OK
##Flattened Device Tree from FIT Image at 84000000
Using'config 1'configuration
Trying'fdt 1'FDT blob subimage
Description:ARM OpenWrt qcom-ipq40xx-ap.dk01.1-c1 device tree blob
Type:Flat Device Tree
Compression:uncompressed
Data Start:0x841dbc14
Data Size:33752 Bytes=33 KB
Architecture:ARM
Hash algo:crc32
Hash value:5d5bb06e
Hash algo:sha1
Hash value:4fe758c0eeecbf794464de6bbd24470454be60e6
Verifying Hash Integrity...crc32+sha1+OK
Booting using the fdt blob at 0x841dbc14
Uncompressing Kernel Image...OK
Loading Device Tree to 87223000,end 8722e3d7...OK
ipq:fdt fixup unable to find compatible node
Linux version 3.10.62-ltsi-WR6.0.0.21_standard
root SZV1000141398
gcc version 4.8.1
GCC
#1 SMP PREEMPT Tue Apr 25 06:03:45 CST 2017
CPU:ARMv7 Processor[410fc075]revision 5
ARMv7
,cr=10c5387d
CPU:PIPT/VIPT nonaliasing data cache,VIPT aliasing instruction cache
Memory policy:ECC disabled,Data cache writealloc
Built 1 zonelists in Zone order,mobility grouping on.Total pages:61696
Kernel command line:console=ttyMSM0,9600n8 root=/dev/mtdblock22 rootfstype=squashfs rdinit=/sbin/init clk_ignore_unused
FWD_MEM:aligned address c8000000
FWD_MEM:88000000
FWD_MEM:Allocating 68MB
17408 pages
of memory at addr c8000000
Memory:170852k/170852k available,91292k reserved,0K highmem
Virtual kernel memory layout:
vector:0xffff0000-0xffff1000
4 kB
fixmap:0xffc00000-0xfff00000
3072 kB
vmalloc:0xd0800000-0xff000000
744 MB
lowmem:0xc0000000-0xd0000000
256 MB
pkmap:0xbfe00000-0xc0000000
2 MB
modules:0xbf000000-0xbfe00000
14 MB
.text:0xc0208000-0xc06c6e5c
4860 kB
.init:0xc06c7000-0xc06e8d80
136 kB
.data:0xc06ec000-0xc0738bc0
307 kB
.bss:0xc0738d48-0xc07b5074
497 kB
CPU1:Booted secondary processor
CPU2:Booted secondary processor
CPU3:Booted secondary processor
SCSI subsystem initialized
msm_serial_hsl_probe:Bus scaling is disabled
sps:BAM device 0x07884000 is not registered yet.
23 ofpart partitions found on MTD device spi0.0
Creating 23 MTD partitions on"spi0.0":
0x000000000000-0x000000040000:"0:SBL1"
0x000000040000-0x000000080000:"0:MIBIB"
0x000000080000-0x000000100000:"0:QSEE"
0x000000100000-0x000000140000:"0:CDT"
0x000000140000-0x000000180000:"0:DDRPARAMS"
0x000000180000-0x000000280000:"0:APPSBL"
0x000000280000-0x0000002c0000:"0:ART"
0x0000002c0000-0x000000300000:"0:APPSBLENV"
0x000000300000-0x000000380000:"ResultA"
0x000000380000-0x000000600000:"configA"
0x000000600000-0x000000700000:"bootimageA"
0x000000700000-0x000002000000:"SysImageA"
0x000002000000-0x000002040000:"1:SBL1"
0x000002040000-0x000002080000:"1:MIBIB"
0x000002080000-0x000002100000:"1:QSEE"
0x000002100000-0x000002140000:"1:CDT"
0x000002140000-0x000002180000:"1:DDRPARAMS"
0x000002180000-0x000002280000:"1:APPSBL"
0x000002280000-0x000002300000:"Reservel"
0x000002300000-0x000002380000:"ResultB"
0x000002380000-0x000002600000:"configB"
0x000002600000-0x000002700000:"bootimageB"
0x000002700000-0x000004000000:"SysImageB"
Concatenating MTD devices:
0
:"configA"
1
:"configB"
into device"configA_merge"
Concatenating MTD devices:
0
:"1:SBL1"
1
:"1:MIBIB"
2
:"1:QSEE"
3
:"1:CDT"
4
:"1:DDRPARAMS"
5
:"1:APPSBL"
into device"UBOOT"
QCE50:__qce_init_clk:Unable to get CE core src clk,set to NULL
bus_scale_table is NULL
Registering SWP/SWPB emulation handler
clk:Not disabling unused clocks
Bad inittab entry at line 10
Bad inittab entry at line 11
starting pid 89,tty'':'-/etc/init.d/rcS'
MIMC_KERNEL:Module init.
diag_log:module license'unspecified'taints kernel.
Disabling lock debugging due to kernel taint
bsp_adapter module:init
Insmod I2C
Initializing arch flag Done.
ipq40xx-pinctrl 1000000.pinctrl:pin GPIO_63 already requested by 1000000.pinctrl:63;cannot claim for 1000000.pinctrl:63
ipq40xx-pinctrl 1000000.pinctrl:pin-63
1000000.pinctrl:63
status-22
/etc/rcS.d/S10startup.sh:line 46:can't create/sys/devices/soc.0/1000000.pinctrl/gpio/gpio63/direction:nonexistent directory
ess-switch DT exist!
switchreg_base_addr:0xc000000
switchreg_size:0x80000
switch_access_mode:local bus
wan bmp:0x20
ess-psgmii DT exist!
mac mode=0
current mac mode=0
current dts led_source_num is 0
mdio DT exist!
ssdk_plat_init start
enable ess clk
reset ok in probe!
chip_ver is 0x14
PHY ID is 0x4dd0b1
qca probe malibu phy driver succeeded!
Dakota Chip version 0x1401
qca-ssdk module init succeeded!
########32Bit Kernel##########
########MSS Memory Device register success########
MSS_PUB Version[1.07],build on Date:[Apr 24 2017],Time:[22:19:09]
edma module_init
Insmod ipq eth module OK.
Drv_ap_api module:Init
jffs2:notice:
137
jffs2_build_xattr_subsystem:complete building xattr subsystem,0 of xdatum
0 unchecked,0 orphan
and 0 of xref
0 dead,0 orphan
found.
wifi pub bdinfo attach success
ProductName:AP4050DN-E ProductId:61 WirlessMac:4cfa-ca65-2fe0
CountryStr:CN CountryCode:156
BoardMaxUserNum:256
RadioId:0 RadioMaxNodeNum:160 RadioMaxUserNum:128
RadioId:0 DrvType:2 FlashFreqband:0
RadioId:1 RadioMaxNodeNum:160 RadioMaxUserNum:128
RadioId:1 DrvType:2 FlashFreqband:1
set ulMcThValue:512
Init wmi buf pool,11ac_radio_num[2],pool_size[800]
hal stub init
rate stub init
377+0 records in
377+0 records out
12064 bytes
11.8KB
copied,0.098651 seconds,119.4KB/s
377+0 records in
377+0 records out
12064 bytes
11.8KB
copied,0.172973 seconds,68.1KB/s
ol_ath_ahb_probe
device_name=a000000.wifi device_Id=-1
ol_ath_ahb_probe:io resource start:0xa000000,mem=0xd1c00000
__ol_ath_attach
Allocated scn ce3c04c0
ol_ath_ahb_configure:MSI addr:0b006040,MSI base:00000040
Wifi0 CPU frequency 250000000
ol_ath_ahb_configure:num_desired MSI set to 0
Using Legacy Interrupt
Waiting for target init
Done waiting
Atheros Attach:dev name wifi0,radio id:0
ol_transfer_bin_file[4238]Get Caldata for wifi0.
__adf_os_fs_read[42],Open File/tmp/wifi0.caldata SUCCESS!!
file system magic:-2054924042
super blocksize:4096
inode 3075
file size:12064
Warning:No board id matched.Selecting default boarddata file
wifi0:Selecting board data file name boarddata_0.bin
ol_ath_service_ready_event[4368]WAPI MBSSID 2
ol_ath_smart_ant_attach:Firmware doest not support Smart Antenna.
ol_ath_smart_ant_attach:Hardware doest not support Smart Antenna.
init file type:0 address:0x400000 len:0x68000
init file type:1 address:0xc0000 len:0x40000
init file type:2 address:0x980000 len:0x50000
init file type:3 address:0x30000 len:0x7000
init file type:4 address:0x43000 len:0x3000
init file type:5 address:0x4a000 len:0x5000
init file type:6 address:0x80000 len:0x6000
init file type:7 address:0x3f000 len:0x3000
ath_adhoc_netlink_init[118]
huawei probe success radio:wifi0
ol_ath_ahb_probe
device_name=a800000.wifi device_Id=-1
ol_ath_ahb_probe:io resource start:0xa800000,mem=0xd2400000
__ol_ath_attach
Allocated scn cdf004c0
ol_ath_ahb_configure:MSI addr:0b006040,MSI base:00000050
Wifi1 CPU frequency 250000000
ol_ath_ahb_configure:num_desired MSI set to 0
Using Legacy Interrupt
Waiting for target init
Done waiting
Atheros Attach:dev name wifi1,radio id:1
ol_transfer_bin_file[4238]Get Caldata for wifi1.
__adf_os_fs_read[42],Open File/tmp/wifi1.caldata SUCCESS!!
file system magic:-2054924042
super blocksize:4096
inode 1154
file size:12064
Warning:No board id matched.Selecting default boarddata file
wifi1:Selecting board data file name boarddata_1.bin
ol_ath_service_ready_event[4368]WAPI MBSSID 2
ol_ath_smart_ant_attach:Firmware doest not support Smart Antenna.
ol_ath_smart_ant_attach:Hardware doest not support Smart Antenna.
init file type:0 address:0x400000 len:0x68000
init file type:1 address:0xc0000 len:0x40000
init file type:2 address:0x980000 len:0x50000
init file type:3 address:0x30000 len:0x7000
init file type:4 address:0x43000 len:0x3000
init file type:5 address:0x4a000 len:0x5000
init file type:6 address:0x80000 len:0x6000
init file type:7 address:0x3f000 len:0x3000
ath_adhoc_netlink_init[118]
huawei probe success radio:wifi1
Mount fsimage type:patch
User fs folder:/opt
Loop device:/dev/loop0
Mount folder:/mnt/patch
cap32 start,build time 22:17:09
MSS_PUB Version[1.07],build on Date:[Apr 24 2017],Time:[22:17:06]
Mss_Mem_Open:g_MssMemAddr=0x48000000,g_MssMemPhyAddr=0x88000000,g_vir2phy_off=0xffffffffc0000000
Module MEM Init......OK!
Module DIAG Init......OK!
Module PBUF Init......OK!
Module IM Init......OK!
Module IIC Init......OK!
Module HAL Init......OK!
Module Timer Init......OK!
Module TIME Init......OK!
MSS_Global_Init success!
MSC Process run on core[3],PID=[184]
MSC_TCTL_Init Succ!u32Ret=0
MSC goto scheduler!
MSS_PUB Version[1.07],build on Date:[Apr 24 2017],Time:[22:19:09]
MSS_PUB_Init Succ,ret=0
AP_Board_Cfg Succ,ret=0
Module MEM Init......OK!
Module DIAG Init......OK!
Module PBUF Init......OK!
Module IM Init......OK!
Module IIC Init......OK!
Module HAL Init......OK!
Module Timer Init......OK!
Module TIME Init......OK!
MSS_Global_Init Succ,ret=0
MSU Init OK
MSU_Init Succ,ret=0
MSS_IM_InstGlobalInit Succ,ret=0
MSS_Local_Init Succ,ret=0
msu init success!compile time:22:04:24
VOS_Start......
PPI_DEV_SysInit begin.
CDEV_InitProduct Success!
DEV_EVT_InitEvtData Success!
PPI_DEV_SysInit End.
Task GRSA Init......Ok......OK
VRP_SockTm_Init create............OK
System recover configuration.................OK!
Press any key to get started
Login authentication
Password:
Password:
Password:
Login authentication failed.Please wait for 5 seconds.
图片
第三种破解方法:uBoot下配置跳过Console口密码启动后,修改Console口密码
设备的uBoot提供了配置跳过Console口密码启动的功能,可以在用户使用Console口登录的时候跳过密码检查。这样系统启动后除了不需要输入Console密码外,与正常启动相同,也会完成所有配置加载。设备启动后修改Console口密码,然后保存配置。
图片
跳过密码检查存在安全风险,请务必保存好您的BootROM密码。
要进入到uBoot视图需要重启设备,会导致业务中断,请视具体情况做好设备数据备份,并尽量选择业务量较少的时间操作。
清空Console口密码登录后请马上配置新的密码,否则登录超时或重启后,仍需要清空密码来登录。
在此操作过程中不要对设备进行下电。
用串口线连接并重启设备,出现“Press f or F to stop Auto-Boot……”打印信息时,按下“f”并键入密码后进入uBoot视图。
用串口线连接设备的方法请参见通过Console口连接设备。
不同版本的BootROM密码可能不同,具体可参见AC和AP的缺省用户名和密码。
在uBoot视图下执行defaultuser命令,清除Console口密码。
ar7240>defaultuser
Start setting whether to Change Password.....
Current Bootup Change PW is N
Do you Want To Change The Default password,Y or N:Y
ar7240>
在uBoot视图下执行reset命令,重启设备。
ar7240>reset Resetting...
完成系统启动后,通过Console口登录时不需要认证,登录后修改Console口密码。此处以登录认证模式为password模式,密码为“huawei 123”为例。
<Huawei>system-view
[Huawei]user-interface console 0
[Huawei-ui-console0]authentication-mode password
[Huawei-ui-console0]set authentication password cipher
Enter Password
<6-16>
://此处提示信息以设备实际显示为准
Confirm Password:
[Huawei-ui-console0]return
为了防止重启后配置丢失,执行save命令保存配置。
实操:
图片
admin huawei.com
图片
输入默认的Uboot密码
图片
输入defaultuser默认帐户。
图片
图片
是否要更改密码,选择Y
图片
reset重启。
图片
重新启动后,发现可以正常进入系统了,不需要输入密码了。
图片
重新设置密码。
图片
修改完密码后,一定要save一下。
图片
……