一、客戶需求

華為AP4050DN-E console登錄無線AP密碼忘記了怎么辦？

console登錄無線AP要密碼。

如何恢復華為AP4050DN-E

4:室內低密度

0:內置天線1外置天線

5：第二代AC產品

0：預留位

D:雙頻

N：普通天線E：智能天線

二、解決辦法

第一種解決辦法：長按Default按鈕

如果所有密碼均遺忘，對于有Default按鈕的設備，可以長按Default按鈕3s以上恢復出廠配置，設備的用戶名和密碼將恢復為缺省值；對于沒有Default按鈕的設備，請看以下解決辦法。

可以直接恢復出廠設置。

修改完密碼后，一定要保存。

第二種破解方法：在BIOS下配置跳過Console口密碼啟動后，重新設置Console口密碼

設備的BIOS提供了配置跳過Console口密碼啟動的功能，可以在用戶使用Console口登錄的時候跳過密碼檢查。這樣系統啟動后除了不需要輸入Console密碼外，與正常啟動相同，也會完成所有配置加載。設備啟動后修改Console口密碼，然后保存配置。

跳過密碼檢查存在安全風險，請務必保存好您的BootROM密碼。

要進入到BIOS菜單需要重啟設備，會導致業務中斷，請視具體情況做好設備數據備份，并盡量選擇業務量較少的時間操作。

清空Console口密碼登錄后請馬上配置新的密碼，否則登錄超時或重啟后，仍需要清空密碼來登錄。

在此操作過程中不要對設備進行下電。

用串口線連接并重啟設備，出現“Press CTRL+B to enter BIOS menu”打印信息時，按下“Ctrl+B”并鍵入密碼后進入BIOS主菜單。

用串口線連接設備的方法請參見通過Console口連接設備。

不同版本的BootROM密碼可能不同，具體可參見AC和AP的缺省用戶名和密碼。

配置跳過Console口密碼登錄。

輸入BIOS菜單中“Clear password for console user”對應的序號，清除Console口密碼。

輸入BIOS菜單中“Boot with default mode”對應的序號，以缺省模式啟動設備。

完成系統啟動后，通過Console口登錄時不需要認證，登錄后修改Console口密碼。此處以登錄認證模式為password模式，密碼為“huawei 123”為例。

不同版本中設置本地驗證密碼的命令有所不同：

<Huawei>system-view[Huawei]user-interface console 0[Huawei-ui-console0]authentication-mode password[Huawei-ui-console0]set authentication password cipher Enter Password

<6-16>

://此處提示信息以設備實際顯示為準

Confirm Password:

[Huawei-ui-console0]return

V200R002及之前版本：set authentication password[cipher password]

V200R003及之后版本：set authentication password cipher

為了防止重啟后配置丟失，執行save命令保存配置。

圖片

BIOS主菜單

BIOS主菜單集成了BIOS程序的主要功能，并且是裝備菜單的入口。

通過Console口連接設備。

圖片

Console口連接方式請參見配置用戶通過Console口登錄設備。

重啟設備，在設備出現提示信息時按Ctrl+B，進入BIOS主菜單。

BIOS主菜單

BIOS主菜單集成了BIOS程序的主要功能，并且是裝備菜單的入口。

通過Console口連接設備。

Console口連接方式請參見配置用戶通過Console口登錄設備。

重啟設備，在設備出現提示信息時按Ctrl+B，進入BIOS主菜單。

Press CTRL+B to enter BIOS menu:1

Password:

Info:You are advised to change the password to ensure security.

BIOS Menu

Version:072

1.Boot with default mode

2.Enter serial submenu

3.Enter startup submenu

4.Enter ethernet submenu

5.Enter file system submenu

6.Modify BOOTROM password

7.Clear password for console user

8.Config HigMem to Flash Flag

9.Reboot

Press CTRL+E to enter Diag menu

Enter your choice

1-9

:

重新啟動4050DN-E后，出現的重啟界面中沒有CTRL+B選項，可以進入BIOS菜單。

重新啟動AP。

Welcome To HUAWEI Wlan World

U-Boot 428

Apr-25-2017-06:18:05

BOOT:Secondary

USB0:USB XHCI 1.00

0 Storage Device

s

found

Press CTRL+T for Full Memory Test in 1 Seconds:0

Net:Ethernet Mac:4C-FA-CA-65-2F-E0

PHY ID1:0x4d

PHY ID2:0xd0b1

ipq40xx_ess_sw_init done

eth0

Boot Kernel A Address:0x1c9e000

Boot Kernel B Address:0x3c9e000

Start Up time

s

:1

Image:Current Bootup is B

Image:Current Bootup is B

POST test:Begin

Testing DDR:Passed.

Testing Nor Flash:Passed.

Testing PHY0:Passed.

Testing PHY1:Passed.

Testing PHY2:Passed.

Testing PHY3:Passed.

Testing PHY4:Passed.

Saving POST results:Done

POST test:End

Press f or F to stop Auto-Boot in 3 seconds:0 f或F

##Booting kernel from FIT Image at 84000000...

Using'config 1'configuration

Trying'kernel 1'kernel subimage

Description:ARM OpenWrt Linux-3.10.62

Type:Kernel Image

Compression:lzma compressed

Data Start:0x840000e4

Data Size:1948139 Bytes=1.9 MB

Architecture:ARM

OS:Linux

Load Address:0x80208000

Entry Point:0x80208000

Hash algo:crc32

Hash value:cab5b531

Hash algo:sha1

Hash value:29e596152b2ae74b7a7d37b0d28d0d262a759a8a

Verifying Hash Integrity...crc32+sha1+OK

##Flattened Device Tree from FIT Image at 84000000

Using'config 1'configuration

Trying'fdt 1'FDT blob subimage

Description:ARM OpenWrt qcom-ipq40xx-ap.dk01.1-c1 device tree blob

Type:Flat Device Tree

Compression:uncompressed

Data Start:0x841dbc14

Data Size:33752 Bytes=33 KB

Architecture:ARM

Hash algo:crc32

Hash value:5d5bb06e

Hash algo:sha1

Hash value:4fe758c0eeecbf794464de6bbd24470454be60e6

Verifying Hash Integrity...crc32+sha1+OK

Booting using the fdt blob at 0x841dbc14

Uncompressing Kernel Image...OK

Loading Device Tree to 87223000,end 8722e3d7...OK

ipq:fdt fixup unable to find compatible node

Linux version 3.10.62-ltsi-WR6.0.0.21_standard

root SZV1000141398

gcc version 4.8.1

GCC

#1 SMP PREEMPT Tue Apr 25 06:03:45 CST 2017

CPU:ARMv7 Processor[410fc075]revision 5

ARMv7

,cr=10c5387d

CPU:PIPT/VIPT nonaliasing data cache,VIPT aliasing instruction cache

Memory policy:ECC disabled,Data cache writealloc

Built 1 zonelists in Zone order,mobility grouping on.Total pages:61696

Kernel command line:console=ttyMSM0,9600n8 root=/dev/mtdblock22 rootfstype=squashfs rdinit=/sbin/init clk_ignore_unused

FWD_MEM:aligned address c8000000

FWD_MEM:88000000

FWD_MEM:Allocating 68MB

17408 pages

of memory at addr c8000000

Memory:170852k/170852k available,91292k reserved,0K highmem

Virtual kernel memory layout:

vector:0xffff0000-0xffff1000

4 kB

fixmap:0xffc00000-0xfff00000

3072 kB

vmalloc:0xd0800000-0xff000000

744 MB

lowmem:0xc0000000-0xd0000000

256 MB

pkmap:0xbfe00000-0xc0000000

2 MB

modules:0xbf000000-0xbfe00000

14 MB

.text:0xc0208000-0xc06c6e5c

4860 kB

.init:0xc06c7000-0xc06e8d80

136 kB

.data:0xc06ec000-0xc0738bc0

307 kB

.bss:0xc0738d48-0xc07b5074

497 kB

CPU1:Booted secondary processor

CPU2:Booted secondary processor

CPU3:Booted secondary processor

SCSI subsystem initialized

msm_serial_hsl_probe:Bus scaling is disabled

sps:BAM device 0x07884000 is not registered yet.

23 ofpart partitions found on MTD device spi0.0

Creating 23 MTD partitions on"spi0.0":

0x000000000000-0x000000040000:"0:SBL1"

0x000000040000-0x000000080000:"0:MIBIB"

0x000000080000-0x000000100000:"0:QSEE"

0x000000100000-0x000000140000:"0:CDT"

0x000000140000-0x000000180000:"0:DDRPARAMS"

0x000000180000-0x000000280000:"0:APPSBL"

0x000000280000-0x0000002c0000:"0:ART"

0x0000002c0000-0x000000300000:"0:APPSBLENV"

0x000000300000-0x000000380000:"ResultA"

0x000000380000-0x000000600000:"configA"

0x000000600000-0x000000700000:"bootimageA"

0x000000700000-0x000002000000:"SysImageA"

0x000002000000-0x000002040000:"1:SBL1"

0x000002040000-0x000002080000:"1:MIBIB"

0x000002080000-0x000002100000:"1:QSEE"

0x000002100000-0x000002140000:"1:CDT"

0x000002140000-0x000002180000:"1:DDRPARAMS"

0x000002180000-0x000002280000:"1:APPSBL"

0x000002280000-0x000002300000:"Reservel"

0x000002300000-0x000002380000:"ResultB"

0x000002380000-0x000002600000:"configB"

0x000002600000-0x000002700000:"bootimageB"

0x000002700000-0x000004000000:"SysImageB"

Concatenating MTD devices:

0

:"configA"

1

:"configB"

into device"configA_merge"

Concatenating MTD devices:

0

:"1:SBL1"

1

:"1:MIBIB"

2

:"1:QSEE"

3

:"1:CDT"

4

:"1:DDRPARAMS"

5

:"1:APPSBL"

into device"UBOOT"

QCE50:__qce_init_clk:Unable to get CE core src clk,set to NULL

bus_scale_table is NULL

Registering SWP/SWPB emulation handler

clk:Not disabling unused clocks

Bad inittab entry at line 10

Bad inittab entry at line 11

starting pid 89,tty'':'-/etc/init.d/rcS'

MIMC_KERNEL:Module init.

diag_log:module license'unspecified'taints kernel.

Disabling lock debugging due to kernel taint

bsp_adapter module:init

Insmod I2C

Initializing arch flag Done.

ipq40xx-pinctrl 1000000.pinctrl:pin GPIO_63 already requested by 1000000.pinctrl:63;cannot claim for 1000000.pinctrl:63

ipq40xx-pinctrl 1000000.pinctrl:pin-63

1000000.pinctrl:63

status-22

/etc/rcS.d/S10startup.sh:line 46:can't create/sys/devices/soc.0/1000000.pinctrl/gpio/gpio63/direction:nonexistent directory

ess-switch DT exist!

switchreg_base_addr:0xc000000

switchreg_size:0x80000

switch_access_mode:local bus

wan bmp:0x20

ess-psgmii DT exist!

mac mode=0

current mac mode=0

current dts led_source_num is 0

mdio DT exist!

ssdk_plat_init start

enable ess clk

reset ok in probe!

chip_ver is 0x14

PHY ID is 0x4dd0b1

qca probe malibu phy driver succeeded!

Dakota Chip version 0x1401

qca-ssdk module init succeeded!

########32Bit Kernel##########

########MSS Memory Device register success########

MSS_PUB Version[1.07],build on Date:[Apr 24 2017],Time:[22:19:09]

edma module_init

Insmod ipq eth module OK.

Drv_ap_api module:Init

jffs2:notice:

137

jffs2_build_xattr_subsystem:complete building xattr subsystem,0 of xdatum

0 unchecked,0 orphan

and 0 of xref

0 dead,0 orphan

found.

wifi pub bdinfo attach success

ProductName:AP4050DN-E ProductId:61 WirlessMac:4cfa-ca65-2fe0

CountryStr:CN CountryCode:156

BoardMaxUserNum:256

RadioId:0 RadioMaxNodeNum:160 RadioMaxUserNum:128

RadioId:0 DrvType:2 FlashFreqband:0

RadioId:1 RadioMaxNodeNum:160 RadioMaxUserNum:128

RadioId:1 DrvType:2 FlashFreqband:1

set ulMcThValue:512

Init wmi buf pool,11ac_radio_num[2],pool_size[800]

hal stub init

rate stub init

377+0 records in

377+0 records out

12064 bytes

11.8KB

copied,0.098651 seconds,119.4KB/s

377+0 records in

377+0 records out

12064 bytes

11.8KB

copied,0.172973 seconds,68.1KB/s

ol_ath_ahb_probe

device_name=a000000.wifi device_Id=-1

ol_ath_ahb_probe:io resource start:0xa000000,mem=0xd1c00000

__ol_ath_attach

Allocated scn ce3c04c0

ol_ath_ahb_configure:MSI addr:0b006040,MSI base:00000040

Wifi0 CPU frequency 250000000

ol_ath_ahb_configure:num_desired MSI set to 0

Using Legacy Interrupt

Waiting for target init

Done waiting

Atheros Attach:dev name wifi0,radio id:0

ol_transfer_bin_file[4238]Get Caldata for wifi0.

__adf_os_fs_read[42],Open File/tmp/wifi0.caldata SUCCESS!!

file system magic:-2054924042

super blocksize:4096

inode 3075

file size:12064

Warning:No board id matched.Selecting default boarddata file

wifi0:Selecting board data file name boarddata_0.bin

ol_ath_service_ready_event[4368]WAPI MBSSID 2

ol_ath_smart_ant_attach:Firmware doest not support Smart Antenna.

ol_ath_smart_ant_attach:Hardware doest not support Smart Antenna.

init file type:0 address:0x400000 len:0x68000

init file type:1 address:0xc0000 len:0x40000

init file type:2 address:0x980000 len:0x50000

init file type:3 address:0x30000 len:0x7000

init file type:4 address:0x43000 len:0x3000

init file type:5 address:0x4a000 len:0x5000

init file type:6 address:0x80000 len:0x6000

init file type:7 address:0x3f000 len:0x3000

ath_adhoc_netlink_init[118]

huawei probe success radio:wifi0

ol_ath_ahb_probe

device_name=a800000.wifi device_Id=-1

ol_ath_ahb_probe:io resource start:0xa800000,mem=0xd2400000

__ol_ath_attach

Allocated scn cdf004c0

ol_ath_ahb_configure:MSI addr:0b006040,MSI base:00000050

Wifi1 CPU frequency 250000000

ol_ath_ahb_configure:num_desired MSI set to 0

Using Legacy Interrupt

Waiting for target init

Done waiting

Atheros Attach:dev name wifi1,radio id:1

ol_transfer_bin_file[4238]Get Caldata for wifi1.

__adf_os_fs_read[42],Open File/tmp/wifi1.caldata SUCCESS!!

file system magic:-2054924042

super blocksize:4096

inode 1154

file size:12064

Warning:No board id matched.Selecting default boarddata file

wifi1:Selecting board data file name boarddata_1.bin

ol_ath_service_ready_event[4368]WAPI MBSSID 2

ol_ath_smart_ant_attach:Firmware doest not support Smart Antenna.

ol_ath_smart_ant_attach:Hardware doest not support Smart Antenna.

init file type:0 address:0x400000 len:0x68000

init file type:1 address:0xc0000 len:0x40000

init file type:2 address:0x980000 len:0x50000

init file type:3 address:0x30000 len:0x7000

init file type:4 address:0x43000 len:0x3000

init file type:5 address:0x4a000 len:0x5000

init file type:6 address:0x80000 len:0x6000

init file type:7 address:0x3f000 len:0x3000

ath_adhoc_netlink_init[118]

huawei probe success radio:wifi1

Mount fsimage type:patch

User fs folder:/opt

Loop device:/dev/loop0

Mount folder:/mnt/patch

cap32 start,build time 22:17:09

MSS_PUB Version[1.07],build on Date:[Apr 24 2017],Time:[22:17:06]

Mss_Mem_Open:g_MssMemAddr=0x48000000,g_MssMemPhyAddr=0x88000000,g_vir2phy_off=0xffffffffc0000000

Module MEM Init......OK!

Module DIAG Init......OK!

Module PBUF Init......OK!

Module IM Init......OK!

Module IIC Init......OK!

Module HAL Init......OK!

Module Timer Init......OK!

Module TIME Init......OK!

MSS_Global_Init success!

MSC Process run on core[3],PID=[184]

MSC_TCTL_Init Succ!u32Ret=0

MSC goto scheduler!

MSS_PUB Version[1.07],build on Date:[Apr 24 2017],Time:[22:19:09]

MSS_PUB_Init Succ,ret=0

AP_Board_Cfg Succ,ret=0

Module MEM Init......OK!

Module DIAG Init......OK!

Module PBUF Init......OK!

Module IM Init......OK!

Module IIC Init......OK!

Module HAL Init......OK!

Module Timer Init......OK!

Module TIME Init......OK!

MSS_Global_Init Succ,ret=0

MSU Init OK

MSU_Init Succ,ret=0

MSS_IM_InstGlobalInit Succ,ret=0

MSS_Local_Init Succ,ret=0

msu init success!compile time:22:04:24

VOS_Start......

PPI_DEV_SysInit begin.

CDEV_InitProduct Success!

DEV_EVT_InitEvtData Success!

PPI_DEV_SysInit End.

Task GRSA Init......Ok......OK

VRP_SockTm_Init create............OK

System recover configuration.................OK!

Press any key to get started

Login authentication

Password:

Password:

Password:

Login authentication failed.Please wait for 5 seconds.

圖片

第三種破解方法：uBoot下配置跳過Console口密碼啟動后，修改Console口密碼

設備的uBoot提供了配置跳過Console口密碼啟動的功能，可以在用戶使用Console口登錄的時候跳過密碼檢查。這樣系統啟動后除了不需要輸入Console密碼外，與正常啟動相同，也會完成所有配置加載。設備啟動后修改Console口密碼，然后保存配置。

圖片

跳過密碼檢查存在安全風險，請務必保存好您的BootROM密碼。

要進入到uBoot視圖需要重啟設備，會導致業務中斷，請視具體情況做好設備數據備份，并盡量選擇業務量較少的時間操作。

清空Console口密碼登錄后請馬上配置新的密碼，否則登錄超時或重啟后，仍需要清空密碼來登錄。

在此操作過程中不要對設備進行下電。

用串口線連接并重啟設備，出現“Press f or F to stop Auto-Boot……”打印信息時，按下“f”并鍵入密碼后進入uBoot視圖。

用串口線連接設備的方法請參見通過Console口連接設備。

不同版本的BootROM密碼可能不同，具體可參見AC和AP的缺省用戶名和密碼。

在uBoot視圖下執行defaultuser命令，清除Console口密碼。

ar7240>defaultuser

Start setting whether to Change Password.....

Current Bootup Change PW is N

Do you Want To Change The Default password,Y or N:Y

ar7240>

在uBoot視圖下執行reset命令，重啟設備。

ar7240>reset Resetting...

完成系統啟動后，通過Console口登錄時不需要認證，登錄后修改Console口密碼。此處以登錄認證模式為password模式，密碼為“huawei 123”為例。

<Huawei>system-view

[Huawei]user-interface console 0

[Huawei-ui-console0]authentication-mode password

[Huawei-ui-console0]set authentication password cipher

Enter Password

<6-16>

://此處提示信息以設備實際顯示為準

Confirm Password:

[Huawei-ui-console0]return

為了防止重啟后配置丟失，執行save命令保存配置。

實操：

圖片

admin huawei.com

圖片

輸入默認的Uboot密碼

圖片

輸入defaultuser默認帳戶。

圖片

圖片

是否要更改密碼，選擇Y

圖片

reset重啟。

圖片

重新啟動后，發現可以正常進入系統了，不需要輸入密碼了。

圖片

重新設置密碼。

圖片

修改完密碼后，一定要save一下。

圖片