F5忘记ROOT\ADMIN密码怎么办

案例一：拥有可用的OPERATION权限的用户

BIGIP v9的root和admin帐号的密码修改可以在WEB界面进行修改，但前提是有一个可以登录的OPERATION权限的用户，这样才可以通过WEB界面进行修改（详见图1）

图1：







案例二：忘记所有OPERATION以上权限的用户密码

这种情况可以通过console进入单用户模式进行修改root和admin帐号的密码（详见如下步骤）

STEP1:重启设备，在出现GRUB菜单时候，选择要启动的 boot image，输入”e”来进行编辑







STEP2:进入到以下界面，继续敲入”e”，进行编辑





STEP3:在后面加入 single，这样下次再重启的时候，系统会进入单用户模式









STEP4:敲入”b”，重启设备





STEP5:这个时候系统进入单用户模式





STEP6:mount –a





STEP7:输入 passwd root 进入修改密码界面，输入新的root 帐号的口令





STEP8:完毕后，重启设备





STEP9:设备重起后，可以试试新设定的密码

另附官方资料供参考：

1.1 Solution ID: SOL4178

1.1.1 Booting BIG-IP in single user mode

Products:

ASM versions 9.2 - 9.2.3

GTM versions 9.2.2 - 9.2.3

LCM versions 9.2.2 - 9.2.3

LTM versions 9.0 - 9.2.3

Updated: 05-12-2006

Sometimes it is necessary to boot the BIG-IP system into single-user mode to fix

operating system issues, such as filesystem or root password issues.

To boot the BIG-IP system into single-user mode, perform the following steps:

Note: To perform the following steps, you must be local to the BIG-IP system

with a console connection.

1. Connect a terminal to the BIG-IP serial console port.

2. Reboot the BIG-IP system.

While booting, the BIG-IP system will display the GRUB menu and will

countdown before continuing the boot process.

3. Before the countdown expires, press the ^ and v keys (SHIFT, 6, v) to select the

boot image.

Note: Only one boot image will be available unless you have installed

multiple boot images.

4. Press the e key to edit the boot options.

5. A new menu screen displays.

6. Press the ^ or v keys (SHIFT, 6, v) to select the line that begins with kernel

/boot/vmlinuz.

F5 Networks, Inc. China World Tower 2,10/F,Suite 1001C,Beijing tel: 6505.2375 fax: 65052287 www.f5.com.cn

7. Press the e key.

8. Add the word single to the end of the kernel /boot/vmlinuz line.

For example:

kernel /boot/vmlinuz single

9. Press the Enter key.

10. Press the b key to boot the system using the modified options.

You have now booted the system in single-user mode. When you are finished using

single-user mode, type exit or reboot to return the BIG-IP system to normal operating

mode.

1.2 Solution ID: SOL3350

1.2.1 Changing account passwords for the command line and

Configuration utility

Products:

BIG-IP ASM version 9.2

BIG-IP LTM versions 9.0 - 9.2

Updated: 02-18-2006

How do I recover a lost or forgotten root password?

1.2.2 Changing Root and Support Passwords

To reset a lost or forgotten root o r support password, perform the following steps:

1. Boot the system into single-user mode.

Note: For specific instructions, refer to SOL4178: How do I boot BIG-IP

into single-user mode?

2. Type the following commands:

F5 Networks, Inc. China World Tower 2,10/F,Suite 1001C,Beijing tel: 6505.2375 fax: 65052287 www.f5.com.cn

mount -a

passwd <account>

For example:

passwd root

3. When prompted, enter a new password.

4. Type exit or reboot to return to the normal operating mode.

After the system reboots, you should be able to log in using the new password.

1.2.3 Changing an Administrative Account Password

Note: If you have not lost the password, but want to change it, F5 Networks

recommends that you do so using the Configuration utility. Changing the admin

password from the command line will result in passwords that are different

on each BIG-IP in a redundant pair, which will prevent configuration

synchronization from working correctly. For specific instructions about how

to change a Configuration utility admin password, refer to the Managing User

Accounts chapter of the BIG-IP Systems Management Guide.

To reset a lost Configuration utility admin account password from the command line,

perform the following steps:

1. Log in to the command line.

2. Reset the admin password, by typing the following command:

passwd admin

3. When prompted, enter the new admin password.

4. When prompted, retype the new admin password.

BIG-IP will display the following message:

passwd: all authentication tokens updated successfully.

5. For a redundant pair, repeat these steps on the peer system. Configuration

synchronization will not work correctly until the passwords match.