nanog mailing list archives

Re: Recovery mode on Juniper M7i


From: Anurag Bhatia <me () anuragbhatia com>
Date: Thu, 14 Nov 2013 02:31:20 +0100

I was able to access routers by flashing 1st router's image on remaining.

Issue with other three as to best extent I can guess was that someone
enabled root password in single user mode and so there was no way around to
get to recovery console.



Thanks everyone for useful replies.


On Wed, Nov 6, 2013 at 10:59 PM, Jeff Sorrels <jlsorrels () kanren net> wrote:

Direct access to the bootstrap loader should bypass any access
restrictions configured on the box.  However, it sounds like the device is
not dropping into single-user mode.

I would suggest removing and wiping the CF card.  Then boot from
alternative media (USB) and snapshot on to the blank card.

Cheers,
Jeff





On 11/6/2013 3:28 PM, Pedro Cavaca wrote:

Maybe you're not doing anything wrong and someone tweaked the routers and
marked the console as insecure, a previous owner maybe?

http://superuser.com/questions/85536/securing-freebsd-in-single-user-mode

http://www.freebsd.org/cgi/man.cgi?query=boot&sektion=8

HTH.


On 6 November 2013 21:11, Anurag Bhatia <me () anuragbhatia com> wrote:

 Hello everyone!


Greetings of the day.


I am kind of (badly) stuck with multiple routers and not able to recover
the root password. It's Juniper M7i. I have followed the Juniper support
page as given here -

http://www.juniper.net/techpubs/en_US/junos/topics/task/configuration/
authentication-root-password-recovering.htmland
strange enough that it worked with one of routers I have but failed on
rest all.


I am getting stuck on Step #12. As I give "boot -s" to get into single
user
mode of BSD, system next asks me for root password and hence I am out of
luck to get into "recovery mode". I tried pressing enter on that prompt
as
well but no luck. I am connecting to router via console and do have
physical access to router(s).


Was wondering if someone has seen similar issues and could guide on what
I
am doing wrong? Most of other help pages I have seen on net have same
exact
steps as given on that page.




Thanks.
--


Anurag Bhatia
anuragbhatia.com

Linkedin <http://in.linkedin.com/in/anuragbhatia21> |
Twitter<https://twitter.com/anurag_bhatia>
Skype: anuragbhatia.com


--
Jeff Sorrels
Network Administrator
KanREN, Inc
jlsorrels () kanren net
785-856-9820, #2




-- 


Anurag Bhatia
anuragbhatia.com

Linkedin <http://in.linkedin.com/in/anuragbhatia21> |
Twitter<https://twitter.com/anurag_bhatia>
Skype: anuragbhatia.com


Current thread: