华为路由器如何清除进入console配置口的密码？

【第一步 重启路由器，按Ctrl＋B进入BOOTROM菜单】
Starting at 0x1c00000...
********************************************
* *
* Quidway Series Routers Boot ROM, V9.07 *
* *
********************************************

Copyright(C) 1997-2004 by HUAWEI TECH CO., LTD.
Compiled at 18:10:29 , Oct 14 2004.

Testing memory...OK!
128M bytes SDRAM
32768k bytes flash memory
Hardware Version is MTR 1.0
CPLD Version is CPLD 1.0
Press Ctrl-B to enter Boot Menu
Please input Bootrom password: /默认密码为空/

Boot Menu:
1: Download application program with XMODEM
2: Download application program with NET
3: Set application file type
4: Display applications in Flash
5: Clear application password
6: Start up and ignore configuration
7: Enter debugging environment
8: Boot Rom Operation Menu
9: Do not check the version of the software
a: Exit and reboot
Enter your choice(1-a):

【第二步 选择第六项“6: Start up and ignore configuration”，并确认】
Boot Menu:
1: Download application program with XMODEM
2: Download application program with NET
3: Set application file type
4: Display applications in Flash
5: Clear application password
6: Start up and ignore configuration
7: Enter debugging environment
8: Boot Rom Operation Menu
9: Do not check the version of the software
a: Exit and reboot
Enter your choice(1-a): 6
Start up and ignore configuration, Are you sure?[Y/N]y
Set Succeeds

【第三步 选择a项重启系统】
Boot Menu:
1: Download application program with XMODEM
2: Download application program with NET
3: Set application file type
4: Display applications in Flash
5: Clear application password
6: Start up and ignore configuration
7: Enter debugging environment
8: Boot Rom Operation Menu
9: Do not check the version of the software
a: Exit and reboot
Enter your choice(1-a): a
Exit and reboot,are you sure?[Y/N]y
Start to reboot...

【第四步 当系统以空配置起来以后，使用“more config.cfg”查看配置脚本】
<Quidway>dir
Directory of flash:/

0 -rw- 5748224 Nov 19 2004 17:23:05 main.bin
1 -rw- 5746199 Nov 30 2004 14:51:21 v330-0008.bin
2 -rw- 8650414 Nov 22 2004 12:26:57 system
3 -rw- 1053 Dec 15 2004 18:46:41 config.cfg
4 -rw- 8695261 Dec 15 2004 09:59:45 340-0006.bin

31877 KB total (3706 KB free)
<Quidway>more config.cfg
sysname RTA
#
FTP server enable
#
local-server nas-ip 127.0.0.1 key huawei
#
domain default enable system
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain
#
domain system
access-limit disable
state active
#
local-user aaa
password cipher ;)<01%^&;YGQ=^Q`MAF4<1!!
service-type terminal
level 3
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0
ip address dhcp-alloc
#
interface Ethernet1/0
ip address dhcp-alloc
#
interface Ethernet1/1
ip address dhcp-alloc
#
interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address ppp-negotiate
#
interface NULL0
#
user-interface con 0
authentication-mode scheme
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
如果是采用simple方式配置口令，则可以直接显示出密码。
如果是采用cipher方式配置口令，按照以下方法处理：
1）将查看到的配置文件复制保存成一个文本文件。
2）修改该文件中对应帐号的密码“password cipher ;)<01%^&;YGQ=^Q`MAF4<1!!”为类似“password simple aaa”的口令
3）将修改过的脚本，复制粘贴到当前路由器中
4）disp cur确认当前配置和以前的配置一致后，save配置后重新启动系统
5）重启后，就可以通过修改过的帐号口令登录系统

在全局下：静态绑定
mac-address static 0000-0000-0000 interface Ethernet 1/0/1 vlan 100
动态在单个端口下：
mac-address security 0000-0000-0000 vlan 100 #端口安全下绑定MAC
port-security max-mac-count 1 #限制该端口最多只有一个MAC，其他的丢弃
建议开启端口安全，让端口自动学习MAC地址，然后限制MAC地址上来的数量：
interface ethernet 1/0/1
port-security port-mode autolearn
port-security max-mac-count 1
这样子，会自动学习最先上来的MAC,当这个MAC地址下线后，重新学习新上来的MAC

<name>sys
[name]arp static aaaa-bbbb-cccc 192.168.x.x

aaaa-bbbb-cccc 为mac地址 后边的为ip地址

[name]quit
<name>save 保存本回答被提问者采纳

复位键长按5秒以上