华为Eudemon 100E的密码恢复
转自http://blog.sina.com.cn/s/blog_53835f380100hdc3.html 为了让自己下次能记住
Eudemon 100E系统的初始用户名和密码都是“eudemon”,Siumem这边却有一台Eudemon100E却用初始用户名和密码却怎么也进不去，现场的同志没有人承认动过这台机器。因此SIUMEM只能想办法从后门进去了。随机光盘的文档却找不到恢复密码的方法。以前没有做过这事，有点手足无措，问公司找一个上级代理的据说很牛的工程师，电话一打，得，还不如我呢，自己想办法吧。
Eudemon启动时有进BOOTROM的选项：
Go on Checking the Sdram? Yes or No(Y/N):
Press CTRL+A to Stop AutoBoot!
Starting...
Decompressing ....Done!
Be Sure The Baudrate Be Set To 9600bps!
*******************************************************
* *
* Firewall Platform E100E Bootrom, Ver01.11 *
* *
*******************************************************
Copyright(C) 2001-2005 by HUAWEI TECHNOLOGIES CO.,LTD.
Creation date: Aug 4 2008, 15:19:10
CPU type : IBM750FX
CPU L2 Cache : 512KB
CPU Clock Speed : 733MHz
Memory Size : 256MB
Press Ctrl+B to Enter Boot Menu... 3
SIUMEM用的是SecureCRT，用Ctrl+B却一直进不去BOOTROM，甚至还怀疑是不是B要大写。后来换了WINDOWS自带的超级终端就好了。
进BOOTROM要密码，华为的BOOTROM密码千奇百怪，诸如：“WhiteLily2970013”，“8060bps”，“8060”等等不一而足，估计这个由开发人员随心制定，这是华为早期产品的一大特点，产品规范不严。Eudemon也随版本不同而BOOTROM密码不同，有为空的，有用8060的。我用8060进去了：
Password:
=====================<MAIN-BOOTROM MENU>=====================
| <1> Boot With Default Mode |
| <2> Boot From Flash |
| <3> Enter Serial SubMenu |
| <4> Enter Ethernet SubMenu |
| <5> Change Flash Boot File |
| <6> Modify Bootrom Password |
| <7> Reboot |
=============================================================
Enter your choice(1-7): 3
进去一看，傻眼了，哪有关于密码的选项啊，1—6选项都试过了，一点思路也没有，google了一下，原来要按Ctrl＋Z进入隐含菜单：
Hidden Menu...
======================<HIDDEN SUB-MENU>======================
| <1> Enter Debugging Environment |
| <2> Erase Flash |
| <3> Delete file from Flash |
| <4> Upgrade Small BootRom |
| <5> Upgrade South-Bridge Logic |
| <6> Display Flash Files |
| <7> Enter Flash-Aging Test |
| <8> Recover console0 password... |
| <9> Exit To Main Menu |
=============================================================
按6去删除配置文件,或者按8清除console0的密码的：
Enter your choice(1-9): 8
Recover console0 password...
Done,please reboot and change reset your password on next login!
======================<HIDDEN SUB-MENU>======================
| <1> Enter Debugging Environment |
| <2> Erase Flash |
| <3> Delete file from Flash |
| <4> Upgrade Small BootRom |
| <5> Upgrade South-Bridge Logic |
| <6> Display Flash Files |
| <7> Enter Flash-Aging Test |
| <8> Recover console0 password... |
| <9> Exit To Main Menu |
=============================================================
回到主菜单，reset Eudemon
Enter your choice(1-9): 9
=====================<MAIN-BOOTROM MENU>=====================
| <1> Boot With Default Mode |
| <2> Boot From Flash |
| <3> Enter Serial SubMenu |
| <4> Enter Ethernet SubMenu |
| <5> Change Flash Boot File |
| <6> Modify Bootrom Password |
| <7> Reboot |
=============================================================
Enter your choice(1-7): 7
Rebooting...
成功进入系统，重新设备密码认证：
[Eudemon]aaa
[Eudemon-aaa]local-user admin password cipher M\[BD<8]%V6^./X:8.FDX!!!
[Eudemon-aaa]local-user admin level 3
[Eudemon-aaa]local-user admin service-type terminal
[Eudemon]user-interface con 0
[Eudemon-ui-console0]authentication-mode aaa