topic Re: Password Recovery for VDX6740 in Data Center (VDX)

Password Recovery for VDX6740

80sNRG — Tue, 28 May 2019 22:38:38 GMT

Hi there,

I've inherited some network gear.
Dumb question I fear - may I have some help with password recovery?
2x VDX6740s in VCS Logical Chassis running OS 6.0.2b
Root account is disabled and the admin password has been lost.

I've been reading some of the manuals and Googling around and it looks somewhat more involved than I was expecting.

Failing that, what are the steps to flattening the pair? (While keeping whatever license keys are on device)
I have an old backup of the config and I'm alright(ish) with the Brocade stuff so I could rebuild them.

I'm happy to do whichever is quickest and causes the least amount of sadness.

I really appreciate any help you can provide 

Re: Password Recovery for VDX6740

Truyen_Phan — Wed, 29 May 2019 02:35:25 GMT

Hello,

You can do below to recover the password.

If you want to keep the config, then go thru all the steps on one switch
If you are ok to default the config on both switches (licenses will be retained), complete only steps 1-14 on both switches.

Disable the ISL from selected switch, recover the password, then default the configuration to allow it to rejoin and become principal to make changes to admin password

Disconnect all ISL from the selected switch
Power cycle the switch and get into Boot PROM (Hit ESC during AutoBoot)
Type '
```
3' 
```
at the prompt to open the command shell

Enter

setenv bootargs 'root=/dev/sda$prt rootfstype=ext4 quiet S'

Enter
```
saveenv
```
Enter
```
reset
```
Enter
```
mount -vo remount,rw,noatime /
```
Enter
```
mount /dev/sda2 /mnt
```

Enter

cp /etc/fabos/user.db /etc/fabos/user.db.bkup

Enter

cp /etc/fabos/user.db.default /etc/fabos/user.db

Enter
```
/sbin/passwddefault -f
```
Enter
```
cfgcleanup 
```
to default the configuration on bootup

Enter

bootenv bootargs 'root=/dev/sda$prt rootfstype=ext4 quiet'

Enter
```
"partman -r" to reboot
```
Keep ISL disconnected until the switch fully boots up
Once the switch boots up, login as admin/password
With admin still logged in, physically connect the ISL to the fabric to let the switch rejoin. The switch rejoin while the admin is still logged in to the switch
Once the switch rejoins, go to config t -> RB , enter
```
'logical-chassis principal-priority 1'
```
to make it the new principal switch
Then, run
```
'logical-chassis principal switchover'
```
to make the new switch the principal switch to reconfigure the admin account.

Re: Password Recovery for VDX6740

Truyen_Phan — Wed, 29 May 2019 02:37:40 GMT

*Re-posting since the format got mangled*

Hello,

You can do below to recover the password.

If you want to keep the config, then go thru all the steps on one switch
If you are ok to default the config on both switches (licenses will be retained), complete only steps 1-14 on both switches.

Disable the ISL from selected switch, recover the password, then default the configuration to allow it to rejoin and become principal to make changes to admin password

Disconnect all ISL from the selected switch
Power cycle the switch and get into Boot PROM (Hit ESC during AutoBoot)
Type '3' at the prompt to open the command shell
Entersetenv bootargs 'root=/dev/sda$prt rootfstype=ext4 quiet S'
Enter saveenv
Enter reset
Enter mount -vo remount,rw,noatime /
Enter mount /dev/sda2 /mnt
Enter cp /etc/fabos/user.db /etc/fabos/user.db.bkup
Enter cp /etc/fabos/user.db.default /etc/fabos/user.db
Enter /sbin/passwddefault -f
Enter cfgcleanup to default the configuration on bootup
Enter bootenv bootargs 'root=/dev/sda$prt rootfstype=ext4 quiet'
Enter "partman -r" to reboot
Keep ISL disconnected until the switch fully boots up
Once the switch boots up, login as admin/password
With admin still logged in, physically connect the ISL to the fabric to let the switch rejoin. The switch rejoin while the admin is still logged in to the switch
Once the switch rejoins, go to config t -> RB , enter 'logical-chassis principal-priority 1'to make it the new principal switch
Then, run 'logical-chassis principal switchover' to make the new switch the principal switch to reconfigure the admin account.

Re: Password Recovery for VDX6740

80sNRG — Wed, 29 May 2019 16:02:51 GMT

Wow, thank you so much!
That's brilliant, I'll arrange a spot of downtime and give the above a go.

I'll let you know how I get on. ?

Re: Password Recovery for VDX6740

Truyen_Phan — Thu, 30 May 2019 01:52:45 GMT

Sure, let us know if you still have issues. If you are going with option#1 (complete all the steps 1-19),

Below are the cli sample output for steps 18 & 19.

code:

RB1(config)# rb 1
RB1(config-rbridge-id-1)# logical-chassis principal-priority 1
RB1(config-rbridge-id-1)# end
RB1# logical-chassis principal switchover

NOTE: principal switchover will take a few mins to trigger after the command is executed. After, 5 mins, run 'show vcs' to confirm.

Re: Password Recovery for VDX6740

80sNRG — Sat, 27 Jul 2019 21:56:51 GMT

Hi there.

I know this has been a while! Took a while to finally get the downtime I needed.

I now have management access and the config was retained.

Everything worked great except for Step 12.
"Enter cfgcleanup to default the configuration on bootup"

"cfgcleanup" did not work from the root.

"/fabos/sbin/cfgcleanup" worked.

Thankfully I had a colleague with me who's considerably better with Linux than me.

Thank you very much for your help. 

Re: Password Recovery for VDX6740

Truyen_Phan — Mon, 29 Jul 2019 03:09:14 GMT

Thanks for the feedback and updating us with the results. I will update the syntax in our documentation.

Re: Password Recovery for VDX6740

Russ — Wed, 20 Oct 2021 00:45:27 GMT

Hi is there an Extreme KB article for this that I can bookmark for future reference? I've searched, but unable to find one.