juniper防火墙之恢复出厂默认设置
用过Juniper产品的人都应该知道一点，Juniper产品密码忘了的话是一件很痛苦的事，为什么这么说呢？下来就来听我给大家讲讲嘛！
密码丢失是无法恢复的，那么我们就只有通过恢复出厂默认设置的方法来重新获得管理权限 （原来配置的参数、证书等都将被删除）。
有两种办法恢复出厂默认配置：
1、在Console模式下，用设备的***作用用户名/密码进行登录。
成功后系统出现警告提示，将擦去现有配置，确认后系统开始恢复默认配置，随后重启。整个过程约3分钟。
那么我们如何获得这个***呢？要获得这个***的办法有两种，第一种就是在产品的背后有一个***。第二种办法就是通过输入“get sys”来获取。
这里我们先来看看Juniper防火墙的启动过程：
NetScreen NS-5GT Boot Loader Version 2.1.0 (Checksum: 61D07DA5)
Copyright (c) 1997-2003 NetScreen Technologies, Inc.
Copyright (c) 1997-2003 NetScreen Technologies, Inc.
Total physical memory: 128MB
Test - Pass
Initialization.... Done
Test - Pass
Initialization.... Done
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Loading default system p_w_picpath from on-board flash disk...
Done! (size = 11,108,352 bytes)
Ignore p_w_picpath authentication!
Done! (size = 11,108,352 bytes)
Ignore p_w_picpath authentication!
Start loading...
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
......................................
Done.
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
......................................
Done.
Juniper Networks, Inc
NS-5GT System Software
Copyright, 1997-2008
NS-5GT System Software
Copyright, 1997-2008
Version 6.2.0r1.0
Load Manufacture Information ... Done
Load Manufacture Information ... Done
Initialize FBTL 0.... Done
Load NVRAM Information ... (6.2.0)Done
SYIMAGE
Install module init vectors
build and grow heap:system, order:13
Load NVRAM Information ... (6.2.0)Done
SYIMAGE
Install module init vectors
build and grow heap:system, order:13
Initial port mode trust-untrust(1)
Install modules (00fdc800,01bf5c70) ...
PPP IP-POOL initiated, 256 pools
System config (1945 bytes) loaded
Install modules (00fdc800,01bf5c70) ...
PPP IP-POOL initiated, 256 pools
System config (1945 bytes) loaded
Done.
Load System Configuration ..................................................................................................................................Disabled licensekey auto update
...................Done
system init done..
login: trust interface change physical state to Up
untrust interface change physical state to Up
Load System Configuration ..................................................................................................................................Disabled licensekey auto update
...................Done
system init done..
login: trust interface change physical state to Up
untrust interface change physical state to Up
login: System change state to Active(1)
以上就是我们Juniper防火墙的启动过程，这里学过cisco的应该大至是能够理解的。
那么我们现在用我们的根用户登录进去，查看一下我们这款设置和***：
login: admin 这里要注意用户名是我改过了的，默认是：netscreen密码也是netscreen
password: 这里有一点linux基础的都知道，我们在这里输入用户名是不会有任何显示的。不要认为是没有输入进去的哈。
ns5gt-> 到这里就表示我们已经登录进来了
password: 这里有一点linux基础的都知道，我们在这里输入用户名是不会有任何显示的。不要认为是没有输入进去的哈。
ns5gt-> 到这里就表示我们已经登录进来了
下面我们来查看一下这款设备的***：
ns5gt-> get system 查看系统信息
Product Name: NetScreen-NS5GT
Serial Number: 0064012008003751, Control Number: 00000000
Hardware Version: 1010(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Software Version: 6.2.0r1.0, Type: Firewall+×××
Compiled by build_master at: Wed Oct 15 21:31:36 PDT 2008
Base Mac: 001d.b5b1.aae0
File Name: screenos_p_w_picpath, Checksum: b299462d
Product Name: NetScreen-NS5GT
Serial Number: 0064012008003751, Control Number: 00000000
Hardware Version: 1010(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Software Version: 6.2.0r1.0, Type: Firewall+×××
Compiled by build_master at: Wed Oct 15 21:31:36 PDT 2008
Base Mac: 001d.b5b1.aae0
File Name: screenos_p_w_picpath, Checksum: b299462d
......以下的省略了
在上面Serial Number后面的数字就是我们的***。
我们将些***复制出来
然后输入exit退出到登录处。
login: 0064012008003751 注意这里的用户名就是我们的***，下面的密码也是我们的***
password:
!!! Lost Password Reset !!! You have initiated a command to reset the device to factory defaults, clearing all current configuration and settings. Would you like to continue? y/[n] y 在这里我们输入y
password:
!!! Lost Password Reset !!! You have initiated a command to reset the device to factory defaults, clearing all current configuration and settings. Would you like to continue? y/[n] y 在这里我们输入y
!! Reconfirm Lost Password Reset !! If you continue, the entire configuration of the device will be erased. In addition, a permanent counter will be incremented to signify that this device has been reset. This is your last chance to cancel this command. If you proceed, the device will return to factory default configuration, which is: System IP: 192.168.1.1; username: netscreen, password: netscreen. Would you like to continue? y/[n] y 在这里我们输入y
In reset ...
In reset ...
好了这样我们就恢复了出厂默认设置，我们等一会起动启来以后看看用我们的默认用户名密码可以登录不？
login: netscreen 我们这里可以看见我们输入的就是出厂时候的默认的用户名与密码。
password:
ns5gt->
password:
ns5gt->
我们再通过http登录一下看看能否登录进去。
看看我们是不是已经将它恢复到默认出厂设置了。
大家现在知道为什么juniper的东西有一点不爽了嘛！它不像思科、H3C之类的，还提供一个密码恢复这个功能。而忘了juniper密码，我们就只能是恢复出厂默认设置，这样一恢复了之后，我们在juniper里面的所有配置都将被删除了。所以大家还是要谨慎使用呀！
转载于:https://blog.51cto.com/ljh9527/270599