当前位置：首页 > news >正文

华三交换机Console口密码清除

news 2026/6/7 23:45:13

在企业网络运维管理中，Console 口是网络设备（如华三交换机）最核心的本地管理通道，也是远程登录失效、系统异常时的最后运维生命线。为保障设备本地访问安全，生产环境通常会为 Console 口配置严格的认证密码。但在实际运维过程中，常因人员交接密码未同步、长期未登录导致密码遗忘、配置变更后密码记录丢失等情况，造成无法通过 Console 口登录设备，直接阻断本地管理路径。

1. 故障描述

当远程管理（SSH/Telnet）因网络故障、配置错误不可用时，Console 口密码锁定将导致设备完全无法运维，严重影响故障排查、配置恢复与业务恢复效率。因此，掌握华三交换机Console 口密码清除与重置方法，是快速解除设备登录锁定、恢复本地管理权限、保障网络运维连续性的关键技能，对提升故障应急响应能力、降低运维风险具有重要意义。

2. 解决办法

步骤 1进入bootroom菜单清除Consle密码。通过conlse线和Secure CRT软件连接并登录设备，然后断电重启设备。在配置终端的屏幕上显示如下信息，当出现“press Ctrl+B”的时候快速按住“Ctrl+B”进入botroom菜单。

System is starting...
Press Ctrl+D to access BASIC-BOOTWARE MENU
Booting Normal Extend BootWare
The Extend BootWare is self-decompressing.......................Done!
BootWare Validating...
Press Ctrl+Bto enter extended boot menu...

BotWare password: Not required. Please press Enter to continue.

Password recovery capability is enabled.

Note: The current operating device is flash

Enter < Storage Device Operation > to select device.

步骤 2进入bootroom主菜单，查看是否使能密码恢复功能。

Password recovery capability is enabled. //enabled使能密码恢复功能。

Note: The current operating device is flash

Enter < Storage Device Operation > to select device.

=====================<EXTENDBOOTWARE MENU>=================

|<1> Boot System |

|<2> Enter Serial SubMenu |

|<3> Enter Ethernet SubMenu

|<4> File Control |

|<5> Restore to Factory Default Configuration //恢复到出厂默认配置

|<6> Skip Current System Configuration //跳过当前系统配置启动

|<7> BootWare Operation Menu |

|<8> Clear Super Password |

|<9> Storage Device Operation |

|<0> Reboot //重启设备

=============================================================

Ctrl+Z: Access EXTEND-ASSISTANT MENU

Ctrl+F: Format File System

Enter your choice(0-9):

Flag Set Success.

步骤 3进入bootroom主菜单，然后选择“<6> Skip Current System Configuration”跳过当前系统配置启动，此时设备不会删除上次启动时加载的配置文件，不同设备可能不是数字6。

有部分系列交换机型号可以使用如下方法清除console口密码：
1. 重启设备进入BootWare主菜单，选择<6>，即以忽略系统当前配置的方式启动，此时设备不会删除上次启动时加载的配置文件。
Password recovery capability is enabled.
Note: The current operating device is flash
Enter < Storage Device Operation > to select device.
=======================<EXTENDED-BOOTWARE MENU>=============
|<1> Boot System |
|<2> Enter Serial SubMenu |
|<3> Enter Ethernet SubMenu |
|<4> File Control |
|<5> Restore to Factory Default Configuration |
|<6> Skip Current System Configuration |
|<7> BootWare Operation Menu |
|<8> Skip Authentication for Console Login |
|<9> Storage Device Operation |
|<0> Reboot |
============================================================================
Ctrl+Z: Access EXTENDED ASSISTANT MENU
Ctrl+F: Format File System
Ctrl+C: Display Copyright
Enter your choice(0-9): 6
2. 系统出现如下提示表明已经设置成功。
Flag Set Success.
3. 当再次出现BootWare主菜单时，选择<1>，设备开始启动。
4. 重启设备后，设备的配置为空，用户可以在系统视图下配置回滚恢复原有配置，如下配置表示将当前配置回滚到配置文件startup.cfg中的配置状态。如果用户不想恢复原有配置，请跳过此步骤。
<Sysname> system-view
[Sysname] configuration replace file flash:/startup.cfg
Current configuration will be lost, save current configuration? [Y/N]:n
Now replacing the current configuration. Please wait ...
Succeeded in replacing current configuration with the file flash:/startup.cfg.
5. 在系统视图下设置新的Console口的登录认证模式和密码，例如：设置Console口验证方式为密码验证，且以明文方式设置Console口的密码为123456。
<Sysname> system-view
[Sysname] line console 0
[Sysname-line-console0] authentication-mode password
[Sysname-line-console0] set authentication password simple 123456
6. 保存新配置。
[Sysname-line-console0] save

Password recovery capability is enabled. //enabled使能密码恢复功能。

Note: The current operating device is flash

Enter < Storage Device Operation > to select device.

=====================<EXTENDBOOTWARE MENU>=================

|<1> Boot System |

|<2> Enter Serial SubMenu |

|<3> Enter Ethernet SubMenu

|<4> File Control |

|<5> Restore to Factory Default Configuration //恢复到出厂默认配置

|<6> Skip Current System Configuration //跳过当前系统配置启动

|<7> BootWare Operation Menu |

|<8> Clear Super Password |

|<9> Storage Device Operation |

|<0> Reboot //重启设备

=============================================================

Ctrl+Z: Access EXTEND-ASSISTANT MENU

Ctrl+F: Format File System

Enter your choice(0-9):6 //跳过当前系统启动的配置文件

Flag Set Success.

步骤 4输入0，然后自动重启设备。

====================<EXTEND-BOOTWARE MENU>================

|<1> Boot System |

|<2> Enter Serial SubMenu |

|<3> Enter Ethernet SubMenu |

|<4> File Control |

|<5> Restore to Factory Default Configuration |

|<6> Skip Current System Configuration |

|<7> BootWare Operation Menu |

|<8> Clear Super Password |

|<9> Storage Device Operation |

|<0> Reboot |

=================================================================

Ctrl+Z: Access EXTEND-ASSISTANT MENU

Ctrl+F: Format File System

Enter your choice(0-9):0 //输入0重启设备

System is starting...

Press ENTER to get started.

步骤 5如不需要配置，直接跳过启动文件后直接保存当前空配置，再重启设备。

<H3C> save

The current configuration will be written to the device. Are you sure? [Y/N]:y

Please input the file name(*.cfg)[flash:/startup.cfg]

(To leave the existing filename unchanged, press the enter key):（输入回车）

flash:/startup.cfg exists, overwrite? [Y/N]:y

Validating file. Please wait...

Configuration is saved to device successfully.

<H3C>reboot

Start to check configuration with next startup configuration file, please wait.........DONE!

Current configuration may be lost after the reboot, save current configuration? [Y/N]:y

This command will reboot the device. Continue? [Y/N]:y

步骤 6如需要之前的配置，导出当前配置文件备份再清除密码，然后再导入配置文件覆盖。

1. 备份配置文件

<H3C>

#Apr 26 12:02:07:166 2000 H3C SHELL/4/LOGIN:

Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.1<hh3cLogIn>: login from Console

%Apr 26 12:02:07:306 2000 H3C SHELL/5/SHELL_LOGIN: Console logged in from aux0.

<H3C> copy startup.cfg startup_bak.cfg //复制一份配置文件进行备份

<H3C>dir //查看设备配置文件

Directory of flash:/

1 drw- - Apr 26 2000 12:00:20 logfile

2 -rw- 1666 Apr 26 2000 12:05:39 startup.cfg

3 -rw- 1556 Apr 26 2000 12:05:33 startup_bak.cfg

4 -rw- 151 Apr 26 2000 12:05:30 system.xml

29106 KB total (16876 KB free)

2. 给设备和电脑配置成同网段IP地址，在电脑上通过3CD、MobaXterm软件搭建tftp服务器。

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C]interface Vlan-interface 1

[H3C-Vlan-interface1] ip address 192.168.100.1 24

[H3C-Vlan-interface1]quit

[H3C] ping 192.168.100.2

PING 192.168.100.2: 56 data bytes, press CTRL_C to break

Reply from 192.168.100.2: bytes=56 Sequence=1 ttl=128 time=7 ms

Reply from 192.168.100.2: bytes=56 Sequence=2 ttl=128 time=2 ms

3. 设备上传配置文件至tftp服务器。

<H3C>tftp 192.168.100.2 put startup.cfg
File will be transferred in binary mode
Sending file to remote TFTP server. Please wait... |
TFTP: 1666 bytes sent in 0 second(s).
File uploaded successfully.

<H3C>

设备文件上传成功，tftp服务器下载成功。

4. 清除console密码。

可以到本地相关路径查看到相关文件，需要恢复之前配置解决方法：删除密码恢复之前配置文件

（1）使用记事本打开startup.cfg文件。

（2）删除aux0口下的认证方式和密码并保存文件。

5. 覆盖当前配置文件。

<H3C> tftp 192.168.100.20 get startup.cfg

The file startup.cfg exists. Overwrite it? [Y/N]:y //选择y，确认覆盖文件。

Verifying server file...

Deleting the old file, please wait...

...