This section describes how to recover the console port, Telnet or STelnet, and uBoot passwords. You are advised to keep passwords secure and change them regularly.
2.1 List of Default User Names and Passwords
See Default User Names and Passwords for WLAN Devices.
If you forget all passwords and the device has a Default button, hold down the button more than 3s to restore factory settings. The user name and password of the device are then restored to the default values; if the device has no Default button, please contact technical support personnel.
2.2 Recovering the Console Password
No. | Method | Applicable Product | Applicable Version |
|---|---|---|---|
1 | 2.2.1 Logging In to a Device Using Telnet or STelnet and Changing the Console Password | Fat AP | V200R003C00 and later versions |
2 | 2.2.2 Clearing the Console Port Password in the Uboot View and Changing the Console Password | Fat AP | V200R003C00 and later versions |
NOTE: For a Fat AP, method 1 is preferred. Use method 2 if you forget the Telnet or STelnet password.
2.2.1 Logging In to a Device Using Telnet or STelnet and Changing the Console Password
If you have a Telnet or STelnet account with a privilege level of 15 for a device, you can change the console password after logging in to the device using Telnet or STelnet. Then save the configuration of the new password. The following procedure uses Telnet login as an example.
NOTE: In V200R002 and earlier versions, a user with a privilege level of 3 or higher can change the console password after logging in.
- Use a Telnet account with a privilege level of 15 to log in to the device.
- Change the console password. The following example changes the authentication mode to password authentication and the password to huawei@123.
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<6-16>): //The actual display may be different. Confirm Password: [Huawei-ui-console0] return
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
2.2.2 Clearing the Console Port Password in the Uboot View and Changing the Console Password
You can clear the console password in the Uboot view (if the device provides this function). Then the system can start and load all configurations normally, except that it does not prompt you to enter the console password. After the device starts, change the console password and save the configuration.
NOTICE: Clearing the console password brings security risks. Keep the BootROM password safe to ensure system security.
You must restart the device to enter the Uboot view, which results in service interruption. Back up service configuration and perform this operation in off-peak hours.
If you clear the console password, configure a new password immediately after you log in to the device. Otherwise, you must clear the console password again to log in if the login timeout timer expires or the device restarts.
Do not power off the device during the operation.
- Use a serial cable to connect a PC to the device and restart the device. When the message "Press f or F to stop Auto-Boot" is displayed, press F and enter the password (admin@huawei.com by default) to enter the Uboot view.
For details on how to connect a PC to the device with a serial cable, see 2.5.1 Logging In to a Device Through the Console Port.
The BootROM password may vary in different software versions. For details, see 2.1 List of Default User Names and Passwords.
- Run the defaultuser command to clear the console port password.
ar7240> defaultuser Start setting whether to Change Password..... Current Bootup Change PW is N Do you Want To Change The Default password, Y or N : Y ar7240>
- Run the reset command to restart the device.
ar7240> reset Resetting...
- Log in to the system through the console port without entering the password. Change the console password. The following example changes the authentication mode to password authentication and the password to huawei@123.
<Huawei> system-view [Huawei] user-interface console 0 [Huawei-ui-console0] authentication-mode password [Huawei-ui-console0] set authentication password cipher Enter Password(<6-16>): //The actual display may be different. Confirm Password: [Huawei-ui-console0] return
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
2.3 Recovering a Telnet Password
No. | Method | Applicable Product | Applicable Version |
|---|---|---|---|
1 | 2.3.1 Configuring a Telnet Password | Fat AP | V200R003C00 and later versions |
2.3.1 Configuring a Telnet Password
- Log in to the device using a user account with a higher privilege level (at least level 3) than the previous user account, and configure a new password for the previous user account.
- Log in to the device through the console port and configure a new password.
- AAA mode: Enter a user name and password to log in.
- Password mode: Enter only the password to log in.
The following examples configure the same password for VTY user interfaces 0 to 4.
AAA Mode
- Create a Telnet user huawei and set its password to huawei@123.
<Huawei> system-view [Huawei] telnet server enable [Huawei] user-interface vty 0 4 [Huawei-ui-vty0-4] authentication-mode aaa [Huawei-ui-vty0-4] protocol inbound all [Huawei-ui-vty0-4] quit [Huawei] aaa [Huawei-aaa] local-user huawei password cipher huawei@123 [Huawei-aaa] local-user huawei service-type telnet [Huawei-aaa] local-user huawei privilege level 15
After completing the configuration, you can enter the user name huawei and password huawei@123 to log in to the device.
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
Password Mode
- Set the authentication mode to password authentication and the password to huawei@123 for VTY user interfaces 0 to 4. Different software versions provide different commands for changing the authentication password:
- V200R002 and earlier versions: set authentication password [ cipher password ]
- V200R003 and later versions: set authentication password cipher
<Huawei> system-view [Huawei] telnet server enable [Huawei] user-interface vty 0 4 [Huawei-ui-vty0-4] authentication-mode password [Huawei-ui-vty0-4] protocol inbound all [Huawei-ui-vty0-4] set authentication password cipher Enter Password(<6-16>): //The actual display may be different. Confirm Password: [Huawei-ui-vty0-4] return
After completing the configuration, you can enter password huawei@123 to log in to the device.
- Run the save command to save the configuration so that the new password will not be lost after a system restart.
2.4 Recovering the BootROM Password
No. | Method | Applicable Product | Applicable Version |
|---|---|---|---|
1 | 2.4.1 Recovering the Uboot Password | Fat AP | V200R003C00 and later versions |
2.4.1 Recovering the Uboot Password
The Uboot password is important for system security and must be kept safe. If you forget your Uboot password, restore the default password and then configure a new password.
Use a serial cable to connect a PC to the device and perform the following operations.
- Restore the default Uboot password and restart the device.
For details on how to connect a PC to the device with a serial cable, see 2.5.1 Logging In to a Device Through the Console Port.
The BootROM password may vary in different software versions. For details, see 2.1 List of Default User Names and Passwords.
<Huawei> system-view [Huawei] diagnose [Huawei-diagnose] reset boot password The password used to enter the BootROM menu will be restored to the factory setting, continue? [Y/N] y Info: Succeeded in setting password of boot to default. [Huawei-diagnose] return <Huawei> reboot Info: The system is comparing the configuration, please wait. Warning: All the configuration will be saved to the next startup configuration. Continue ? [y/n]:y It will take several minutes to save configuration file, please wait.......... Configuration file had been saved successfully Note: The configuration file will take effect after being activated System will reboot! Continue ? [y/n]:y Info: system is rebooting ,please wait...
- Change the Uboot password in Uboot view.
When the message "Press f or F to stop Auto-Boot" is displayed, press F and enter the password (admin@huawei.com by default) to enter the Uboot view.
ar7240> passwd Start modify boot password..... Confirm old password : The password must be '0'~'9' , 'a'~'z' , 'A'~'Z' , or '@'! Please enter new password : Please confirm new password : The password is changed successfully.
2.5 Appendix
2.5.1 Logging In to a Device Through the Console Port
Pre-configuration Tasks
Before logging in to a device through the console port, complete the following tasks:
Preparing a console cable
Installing the terminal emulation software on your PC
NOTE: You can use the terminal emulation software of the operating system (such as the HyperTerminal of Windows 2000/XP) on the PC. If the operating system does not provide terminal emulation software, install third-party terminal emulation software according to user guide or online help of the software.
Default Configuration
Procedure
- Use a console cable to connect your PC to the console port of the device. Connect the DB9 female connector of the console cable to the 9-pin serial port on the PC, and connect the RJ45 connector to the console port on the device.
- Start the terminal emulation software on the PC, create a connection, select a serial port, and set communication parameters.
The parameter settings are as follows:
- Bits per second: 9600
- Data bits: 8
- Parity: None
- Stop bits: 1
- Flow control: None
- Press Enter, and then enter the password or both the user name and password as prompted.
