类别：Weakcurrent / 日期：2020-08-26 / 浏览：812 / 评论：0
大概的情况就是，有一台在用的USG6100网件，不知道后台密码，因此我们需要想办法修改管理员密码。
首先通过SecureCRT接入Console口连接路由器(执行步骤时，请保持串口用户在线，防止串口用户中途退出。)然后重启路由器，在路由器出现以下提示信息时按Ctrl+B，并输入默认密码O&m15213进入BootROM菜单。Username:
Com Init............................OK
Enable L2 ECC.......................OK
Enable L2 Index Aliasing............OK
Enable L2 Early Fill................OK
Measured DDR Clock 533 MHz..........OK
DDR Memory Size 4096 MB.............OK
DDR Config..........................OK
Clear base memory, please wait......OK
Test SDRAM data bus ................OK
Test SDRAM address bus .............OK
Press 'y' or 'Y' to test sdram unit.
Test Trap Value.....................OK
Clear Low Memory....................OK
Init Cache Lib......................OK
Init Exception Vector...............OK
Init System Hardware................OK
Init usrKernel......................OK
Enable Icache.......................OK
Init System Hardware2...............OK
Init System Clock...................OK
Init tty............................OK
Init ExcTask........................OK
Base Bootrom : 202 May 31 2017 17:14:39
CPLD BigVer : 01
CPLD SmlVer : 06 2015-02-10
Boot from : Main area
Reset cause : Power on
Press Ctrl+A to stop auto boot...... 0
Starting extended bootrom...
Test Trap Value.....................OK
CPU BIST............................OK
Clear High Memory ..................OK
Init Cache Lib......................OK
Init Exception Vector...............OK
Init System Hardware................OK
Init usrKernel......................OK
Enable Icache.......................OK
Enable Dcache.......................OK
Init System Hardware2...............OK
Init System Clock...................OK
Init tty............................OK
Init Symbol Table...................OK
Init ExcTask........................OK
Init Formatted I/O..................OK
Checking basic bootrom..............OK
CPLD self test......................OK
Initialize VFS .....................OK
Base Bootrom Ver : 202 May 31 2017 17:14:39
Extended Bootrom Ver : 206 Sep 18 2017 15:58:50
CPLD BigVer : 01
CPLD SmlVer : 06 2015-02-10
PCB Ver : SUE3MPUA REV A
BOM Ver : 001
CPU L2 Cache : 2048 KB
CPU Core Frequency : 1000 MHz
BUS Frequency : 600 MHz
Mem Size : 4096 MB
Detect EUSB ........................OK
Press Ctrl+B to enter main menu... 1
Password: ********
For the sake of security, please modify the original password.
========================================
| <1> Boot System |
| <2> Set Startup Application Software and Configuration |
| <3> File Management Menu... |
| <4> Load and Upgrade Menu... |
| <5> Modify Bootrom Password |
| <6> Reset Factory Configuration |
| <0> Reboot |
| ---------------------------------------------------------|
| Press Ctrl+T to Enter Manufacture Test Menu... |
| Press Ctrl+Z to Enter Diagnose Menu... |
============================================================
Enter your choice(0-6):
如果不需要保留防火墙配置，我们可以选择第6项恢复默认值，然后再选第1项确认恢复，再选第1项启动系统即可，这样防火墙就直接重启并恢复默认值了。这里显然是不可行的，因为我们必须保留配置。因此就选择第2项修改启动程序和配置，然后，选择第1项确认修改配置。========================================
| <1> Boot System |
| <2> Set Startup Application Software and Configuration |
| <3> File Management Menu... |
| <4> Load and Upgrade Menu... |
| <5> Modify Bootrom Password |
| <6> Reset Factory Configuration |
| <0> Reboot |
| ---------------------------------------------------------|
| Press Ctrl+T to Enter Manufacture Test Menu... |
| Press Ctrl+Z to Enter Diagnose Menu... |
============================================================
Enter your choice(0-6): 2
Current boot application software:
Current boot configuration:
<1> Modify setting
<0> Quit
Enter your choice (0-1): 1
File(s) in hda1:
1:hda1:/suempua53v500r001c60spc300.bin 198235483 bytes
2:hda1:/ltemodemlist.ini 357 bytes
3:hda1:/commands.xml 2963336 bytes
4:hda1:/lic_presis.dat 156 bytes
5:hda1:/webuserinfo.db 2048 bytes
6:hda1:/private-data.txt 704 bytes
7:hda1:/v500r001sph012.pat 1928682 bytes
8:hda1:/$_patchstate_reboot 36 bytes
9:hda1:/$_patch_history 3684 bytes
10:hda1:/snmpnotilog.txt 4 bytes
11:hda1:/vrpcfg.zip 2780 bytes
12:hda1:/trace_info.txt 89744 bytes
13:hda1:/netconf/evm/netopeer-server.out_log.log 268042 bytes
14:hda1:/netconf/evm/openssh.log 16621 bytes
15:hda1:/dbtosql/tosql.db 0 bytes
16:hda1:/loc/ip_base.zip 863601 bytes
17:hda1:/loc/location_new.zip 863601 bytes
18:hda1:/loc/ip_id.csv 3366191 bytes
19:hda1:/loc/id_loc.csv 35425 bytes
20:hda1:/loc/info.txt 100 bytes
21:hda1:/xml/g3at.xml 3531 bytes
22:hda1:/isp/isp_prefile.zip 13480 bytes
23:hda1:/isp/china-educationnet.csv 2356 bytes
24:hda1:/isp/china-mobile.csv 1313 bytes
25:hda1:/isp/china-telecom.csv 50617 bytes
26:hda1:/isp/china-unicom.csv 9831 bytes
27:hda1:/default-sdb/nge-version.zip 1326 bytes
28:hda1:/default-sdb/sa-sdb-ddos.zip 1922320 bytes
29:hda1:/default-sdb/sa-sdb.zip 4099696 bytes
30:hda1:/default-sdb/blockstore 512 bytes
31:hda1:/default-sdb/blockstore_bak 0 bytes
32:hda1:/default-sdb/nge-version.ini 137 bytes
33:hda1:/log/log.dblg 5934141 bytes
34:hda1:/log/log.log 2497774 bytes
35:hda1:/log/2020-06-26.21-00-38.log.zip 926910 bytes
36:hda1:/log/2020-06-27.18-30-22.log.zip 954649 bytes
37:hda1:/log/2020-06-28.16-10-37.log.zip 939917 bytes
38:hda1:/log/2020-06-29.14-15-38.log.zip 943876 bytes
39:hda1:/log/2020-06-30.11-40-38.log.zip 944112 bytes
40:hda1:/log/2020-07-01.09-05-37.log.zip 952828 bytes
41:hda1:/log/2020-07-02.07-15-37.log.zip 940623 bytes
42:hda1:/log/2020-07-03.04-40-37.log.zip 949623 bytes
43:hda1:/log/2020-07-04.02-05-38.log.zip 937884 bytes
44:hda1:/log/2020-07-04.23-45-38.log.zip 939558 bytes
45:hda1:/log/2020-07-05.20-45-27.log.zip 927696 bytes
46:hda1:/log/2020-07-06.17-42-47.log.zip 941353 bytes
47:hda1:/log/2020-07-07.15-29-24.log.zip 949471 bytes
48:hda1:/log/2020-07-08.13-00-37.log.zip 944730 bytes
49:hda1:/log/2020-07-09.10-25-38.log.zip 947247 bytes
50:hda1:/log/2020-07-10.08-30-37.log.zip 945751 bytes
51:hda1:/log/2020-07-11.06-00-38.log.zip 938523 bytes
52:hda1:/log/2020-07-12.04-05-37.log.zip 927655 bytes
53:hda1:/log/2020-07-13.01-30-38.log.zip 938713 bytes
54:hda1:/log/2020-07-13.23-35-19.log.zip 934199 bytes
55:hda1:/log/2020-07-14.21-02-51.log.zip 942546 bytes
56:hda1:/log/2020-07-15.18-29-54.log.zip 943789 bytes
57:hda1:/log/2020-07-16.16-10-37.log.zip 950401 bytes
58:hda1:/log/2020-07-17.14-15-37.log.zip 946876 bytes
59:hda1:/log/2020-07-18.03-45-03.dblg.zip 627865 bytes
60:hda1:/log/2020-07-18.11-40-59.log.zip 935868 bytes
61:hda1:/log/2020-07-19.09-08-44.log.zip 937265 bytes
62:hda1:/log/2020-07-20.07-10-37.log.zip 939917 bytes
63:hda1:/log/2020-07-21.04-40-38.log.zip 936269 bytes
64:hda1:/log/2020-07-22.02-05-39.log.zip 947397 bytes
65:hda1:/log/2020-07-23.00-15-38.log.zip 946815 bytes
66:hda1:/log/2020-07-23.21-40-38.log.zip 955914 bytes
67:hda1:/log/2020-07-24.19-09-13.log.zip 945253 bytes
68:hda1:/log/2020-07-25.16-50-38.log.zip 935587 bytes
69:hda1:/log/2020-07-26.14-51-23.log.zip 945824 bytes
70:hda1:/log/2020-07-27.12-15-39.log.zip 938713 bytes
71:hda1:/log/2020-07-28.09-46-04.log.zip 943467 bytes
72:hda1:/log/2020-07-29.07-45-39.log.zip 948781 bytes
73:hda1:/log/2020-07-30.05-17-17.log.zip 948276 bytes
74:hda1:/log/2020-07-31.03-25-38.log.zip 957887 bytes
75:hda1:/log/2020-08-01.00-50-39.log.zip 939702 bytes
76:hda1:/log/2020-08-01.22-15-39.log.zip 937011 bytes
77:hda1:/log/2020-08-02.20-25-38.log.zip 935278 bytes
78:hda1:/log/2020-08-03.17-50-38.log.zip 955018 bytes
79:hda1:/log/2020-08-04.15-30-38.log.zip 965730 bytes
80:hda1:/log/2020-08-05.13-00-39.log.zip 941822 bytes
81:hda1:/log/2020-08-06.12-25-51.log.zip 945654 bytes
82:hda1:/log/2020-08-07.10-35-50.log.zip 948080 bytes
83:hda1:/log/2020-08-08.09-35-51.log.zip 948517 bytes
84:hda1:/log/2020-08-09.07-35-51.log.zip 941196 bytes
85:hda1:/log/2020-08-10.06-10-51.log.zip 951219 bytes
86:hda1:/log/2020-08-11.04-40-51.log.zip 960411 bytes
87:hda1:/log/2020-08-12.03-20-50.log.zip 954423 bytes
88:hda1:/log/2020-08-13.01-55-51.log.zip 966816 bytes
89:hda1:/log/2020-08-14.00-25-52.log.zip 955859 bytes
90:hda1:/log/2020-08-14.23-05-50.log.zip 950060 bytes
91:hda1:/log/2020-08-15.21-40-51.log.zip 941933 bytes
92:hda1:/log/2020-08-16.20-15-34.log.zip 937290 bytes
93:hda1:/log/2020-08-17.18-47-52.log.zip 943345 bytes
94:hda1:/log/2020-08-18.16-40-50.log.zip 959528 bytes
95:hda1:/log/2020-08-19.15-25-52.log.zip 950020 bytes
96:hda1:/log/2020-08-20.13-58-28.log.zip 960697 bytes
97:hda1:/log/2020-08-21.12-35-52.log.zip 954940 bytes
98:hda1:/log/2020-08-22.11-10-51.log.zip 950430 bytes
99:hda1:/log/2020-08-23.09-45-51.log.zip 949612 bytes
100:hda1:/log/2020-08-24.08-20-51.log.zip 953177 bytes
101:hda1:/log/2020-08-25.06-50-52.log.zip 963809 bytes
102:hda1:/log/2020-08-26.05-30-51.log.zip 944573 bytes
103:hda1:/log/2020-08-27.04-00-51.log.zip 952763 bytes
104:hda1:/log/2020-08-28.02-35-51.log.zip 948855 bytes
105:hda1:/log/2020-08-29.01-10-51.log.zip 948423 bytes
106:hda1:/log/2020-08-29.23-05-51.log.zip 929393 bytes
107:hda1:/log/2020-08-30.22-20-52.log.zip 925864 bytes
108:hda1:/log/2020-09-09.14-34-57.log.zip 883456 bytes
109:hda1:/log/2020-06-05.07-38-46.log.zip 938700 bytes
110:hda1:/log/2020-06-06.05-28-47.log.zip 938370 bytes
111:hda1:/log/2020-06-07.03-33-45.log.zip 943517 bytes
112:hda1:/log/2020-06-08.00-44-43.log.zip 938404 bytes
113:hda1:/log/2020-06-08.23-20-38.log.zip 951602 bytes
114:hda1:/log/2020-06-09.20-15-37.log.zip 939669 bytes
115:hda1:/log/2020-06-10.17-13-26.log.zip 943360 bytes
116:hda1:/log/2020-06-11.13-50-37.log.zip 941190 bytes
117:hda1:/log/2020-06-12.10-52-32.log.zip 942554 bytes
118:hda1:/log/2020-06-13.08-05-37.log.zip 938939 bytes
119:hda1:/log/2020-06-14.05-35-36.log.zip 946833 bytes
120:hda1:/log/2020-06-15.03-03-34.log.zip 944785 bytes
121:hda1:/log/2020-06-16.00-35-37.log.zip 956862 bytes
122:hda1:/log/2020-06-16.22-45-36.log.zip 951759 bytes
123:hda1:/log/2020-06-17.20-19-21.log.zip 938004 bytes
124:hda1:/log/2020-06-18.17-50-37.log.zip 933980 bytes
125:hda1:/log/2020-06-19.15-20-37.log.zip 933701 bytes
126:hda1:/log/2020-06-20.12-51-33.log.zip 935681 bytes
127:hda1:/log/2020-06-21.11-00-36.log.zip 946671 bytes
128:hda1:/log/2020-06-22.08-35-36.log.zip 949651 bytes
129:hda1:/log/2020-06-23.06-05-38.log.zip 946806 bytes
130:hda1:/log/2020-06-24.03-40-42.log.zip 962821 bytes
131:hda1:/log/2020-06-25.01-30-37.log.zip 935853 bytes
132:hda1:/log/2020-06-25.22-59-27.log.zip 939554 bytes
133:hda1:/pki/public/ltemodemlist.ini 357 bytes
134:hda1:/pki/public/ca_config.ini 200 bytes
135:hda1:/pki/public/default_ca.cer 3586 bytes
136:hda1:/pki/public/default_local.cer 1395 bytes
137:hda1:/pki/public/ca.cer 1318 bytes
138:hda1:/pki/public/local.cer 1253 bytes
139:hda1:/hidesshpubkey/ca-budle.crt 3587 bytes
140:hda1:/hidesshpubkey/local.pem 3253 bytes
141:hda1:/conf/vg-private-c10.dat 0 bytes
142:hda1:/logo/&logo&.gif 1616 bytes
143:hda1:/logo/&logo&.ico 1150 bytes
144:hda1:/logo/&logo&.png 3629 bytes
145:hda1:/logo/&title&.txt 7 bytes
146:hda1:/logo/&welcome&.txt 7 bytes
147:hda1:/logo/customtemplate/customtemplate.html 72140 bytes
148:hda1:/logo/customtemplate/homepagetemplate.html 68309 bytes
149:hda1:/logo/icon/vt_default1.png 1646 bytes
150:hda1:/logo/icon/vt_default2.png 4492 bytes
151:hda1:/logo/icon/vt_default3.png 3380 bytes
152:hda1:/logo/icon/vt_default4.png 6945 bytes
153:hda1:/vpnclient/vcversion.ini 165 bytes
154:hda1:/update/version.ini 63 bytes
155:hda1:/update/sa-sdb/update.cfg 636 bytes
156:hda1:/update/sa-sdb/sa_h30071000_2019112100.zip 3996096 bytes
157:hda1:/update/sa-sdb/sa_h30071000_2019111400.zip 4001168 bytes
158:hda1:/update/ip-reputation/update.cfg 636 bytes
159:...te/ip-reputation/iprpu_h10010000_2019112800.zip 7617 bytes
160:...te/ip-reputation/iprpu_h10010000_2019112700.zip 7553 bytes
161:hda1:/update/engine/update.cfg 636 bytes
162:hda1:/gpmbak/version.info 29 bytes
163:hda1:/gpmbak/0_3_-1.sdb 8838224 bytes
164:hda1:/gpmbak/0_1_-1.sdb 5309200 bytes
165:hda1:/gpmbak/0_2_-1.sdb 345392 bytes
166:hda1:/gpmbak/0_4_-1.sdb 50640 bytes
167:hda1:/hidepubkey/ca-budle.crt 1908 bytes
168:hda1:/hidepubkey/local.der 990 bytes
169:hda1:/hidepubkey/local.key 1708 bytes
170:hda1:/hidepkirsakey_n/pki_localcert_rsakey_1.rk 1336 bytes
171:hda1:/hidepkirsakey_n/pki_defaultcert_rsakey_1.rk 1336 bytes
172:hda1:/hidepkirsakey_n/pki_defaultcert_rsakey_2.rk 1336 bytes
173:hda1:/dhcp/dhcp-duid.txt 105 bytes
174:hda1:/umdb/umsystem/usermanage.db 35840 bytes
175:...ackup/running_config/20200911125029.usg6100.zip 2811 bytes
176:...ackup/running_config/20190411225224.usg6100.zip 2598 bytes
177:...ackup/running_config/20190412194218.usg6100.zip 2598 bytes
178:...ackup/running_config/20190413205330.usg6100.zip 2598 bytes
179:...ackup/running_config/20190415212739.usg6100.zip 2600 bytes
180:...ackup/running_config/20190429095944.usg6100.zip 2599 bytes
181:...ackup/running_config/20190430185259.usg6100.zip 2599 bytes
182:...ackup/running_config/20190509165815.usg6100.zip 2598 bytes
183:...ackup/running_config/20190717170015.usg6100.zip 2599 bytes
184:...ackup/running_config/20190809161830.usg6100.zip 2599 bytes
185:...ackup/running_config/20191012184817.usg6100.zip 2599 bytes
186:...ackup/running_config/20191031200522.usg6100.zip 2597 bytes
187:...ackup/running_config/20191106170302.usg6100.zip 2598 bytes
188:...ackup/running_config/20191116183659.usg6100.zip 2598 bytes
189:...ackup/running_config/20191117152803.usg6100.zip 2599 bytes
190:...ackup/running_config/20191118181029.usg6100.zip 2598 bytes
191:...ackup/running_config/20191119115805.usg6100.zip 2599 bytes
192:...ackup/running_config/20191122143227.usg6100.zip 2805 bytes
193:...ackup/running_config/20191122183228.usg6100.zip 2472 bytes
194:...ackup/running_config/20191128115800.usg6100.zip 2134 bytes
195:...ackup/running_config/20191129124940.usg6100.zip 2811 bytes
196:...ackup/running_config/20191203194256.usg6100.zip 2812 bytes
197:...ackup/running_config/20191226112140.usg6100.zip 2811 bytes
198:...ackup/running_config/20200328171445.usg6100.zip 2811 bytes
199:...ackup/running_config/20200405142516.usg6100.zip 2819 bytes
200:...ackup/running_config/20200429133145.usg6100.zip 2811 bytes
201:...ackup/running_config/20200527110908.usg6100.zip 2811 bytes
202:...ackup/running_config/20200608191558.usg6100.zip 2811 bytes
203:...ackup/running_config/20200805180112.usg6100.zip 2812 bytes
204:...ackup/running_config/20200909130018.usg6100.zip 2809 bytes
Total size: 1215639552 bytes.
Free size: 842739712 bytes.
File(s) in hda2:
1:hda2:/app_bak.bin 198235483 bytes
Total size: 608862208 bytes.
Free size: 410583040 bytes.
Input the name of application software(eg: hda1:/sup.bin):
启动程序保持默认，直接按回车即可。然后，在选择启动配置文件处按照提示输入“.”号，直接回车，从默认值启动。Input the name of application software(eg: hda1:/sup.bin):
Input the name of configuration or '.' to clear setting(eg: hda1:/vrpcfg.zip):.
Modifed configuration successful.
Next boot configuration: NULL