Introduction to the Junos Operating System
Password Recovery
The slide highlights the topic we discuss next.
www.juniper.net |
Operational Monitoring and Maintenance • Chapter 6–25 |
Introduction to the Junos Operating System
Password Recovery Requires Console Connection
If you become locked out of a device running the Junos OS, you can recover the root password. As a security precaution, you can perform the recovery only by using the console connection. You can disable the password recovery option by setting the console port to the insecure mode as shown in the following screen capture:
[edit system ports] user@router# show console insecure;
The OK prompt is used for Junos devices based on the Intel architecture while the loader> prompt is used on platforms running the Junos OS based on PowerPC architecture.
Password Recovery Steps
The following steps list the process for recovering the root password.
1.Obtain console access and reboot the system. Watch as the system boots, and press the Spacebar when prompted during the boot loader process. When the system presents a loader> prompt or an OK prompt, enter boot -s to boot into single-user mode:
...TRIMMED...
Hit [Enter] to boot immediately, or space bar for command prompt.
<user presses Spacebar>
Continued on the next page.
Chapter 6–26 • Operational Monitoring and Maintenance |
www.juniper.net |
Introduction to the Junos Operating System
Password Recovery Steps (contd.)
Type '?' for a list of commands, 'help' for more detailed help. loader> boot -s
2.The system performs a single-user boot-up process and prompts you to run the recovery script, enter a shell pathname, or press Enter for a default shell. Enter recovery at this point.
...TRIMMED...
Enter full pathname of shell or 'recovery' for root password recovery or RETURN for / bin/sh: recovery
3.After a series of messages, the CLI starts and you are presented with an operational mode command prompt. At this point, you can enter configuration mode and reset the root password. Do not forget to commit your configuration.
...TRIMMED...
Starting CLI ...
root> configure
Entering configuration mode
[edit]
root# set system root-authentication plain-text-password
New password:
Retype new password:
[edit] root# commit
commit complete
4.To complete the recovery, exit configuration mode. You are then prompted to reboot the system. Choose y (yes) to reboot the system. Once the reboot is complete, you can log in with the new root password.
[edit] root# exit
Exiting configuration mode root> exit
Reboot the system? [y/n] y
www.juniper.net |
Operational Monitoring and Maintenance • Chapter 6–27 |
Introduction to the Junos Operating System
This Chapter Discussed:
•Monitoring of platform and interface operations;
•Network utilities and usage guidelines;
•Maintenance of the Junos OS; and
•Password recovery.
Chapter 6–28 • Operational Monitoring and Maintenance |
www.juniper.net |
Introduction to the Junos Operating System
Review Questions
1.
The primary method for monitoring devices running the Junos OS is the CLI, which includes operational show and monitor commands. Some secondary methods include J-Web, SNMP, hardware LEDs, and front-panel displays or LCDs.
2.
Use the CLI monitor interface or monitor interface traffic commands to view interface usage in real time.
3.
Use the CLI monitor traffic interface command to perform a packet capture.
4.
You must first download the Junos image for your respective platform from the Juniper Networks download site. The install package can be copied to the device running the Junos OS directly (recommended directory is /var/tmp) or you can copy the image to a server that is reachable through FTP or SCP from the device being upgraded. You then perform the upgrade using the CLI request system software add command. You can monitor the upgrade process through a console connection and verify the Junos OS Release using the CLI show version command.
www.juniper.net |
Operational Monitoring and Maintenance • Chapter 6–29 |