CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Nokia And IPSO
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2005-11-16
pyaresanjeev pyaresanjeev is offline
Junior Member
 
Join Date: 2005-11-16
Posts: 2
Rep Power: 0
pyaresanjeev has an average reputation (10+)
Default NOKIA IP120 password recovery

Hi all,

I have got a IP120 from a reseller. But the device is password protected. Even if I am trying through Boot manager mode it is asking for a password.

can any one please help me to break this password.

thanks in advance

Sanjeeb
Reply With Quote
  #2 (permalink)  
Old 2005-11-16
czech12 czech12 is offline
Member
 
Join Date: 2005-10-25
Location: North Brunswick, NJ
Posts: 38
Rep Power: 0
czech12 has an average reputation (10+)
Default Re: NOKIA IP120 password recovery

The admin password in IPSO and the boot manager password are two different things. You probably don't know either. The boot manager one is the important one though because with out that, you can't rebuild the box.

The only way that I know how to remove the boot manager password is to power on the device with the hard drive disconnected, break into the boot manager prompt, then run the command "passwd". It will then ask you to put in the new password without requesting the old password. I'm not sure how to disconnect the hard drive of an IP120 though.

There is another method to completely remove the boot manager password, but it requires reloading the boot manager and there is currently no docs on how to do that. I will try to find out how and let you know...
__________________
====================
Aaron Vivo
CCSE Plus, CCMSE, NSA
====================
Reply With Quote
  #3 (permalink)  
Old 2005-11-17
Lackie Lackie is offline
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: NOKIA IP120 password recovery

Removing the HDD on the IP120 won't allow you to recover/change the boot manager password as the boot manager on the IP120 is on the HDD.

quote from Release notes:
On the Nokia IP110, IP120 and IP330 appliances, if you lose the existing boot
manager password, you cannot set a new boot manager password. A
workaround is to overwrite the boot manager image with a new boot manager
image. This has the effect of setting the boot manager’s environment to
factory defaults. You must ensure that the boot manager environment
variables are saved before overwriting.

I have steps on how to overwrite the boot manager but I'm not sure if they have been tested or if it will/may leave your appliance in an unuseable state.

Last edited by Lackie; 2005-11-17 at 02:58.
Reply With Quote
  #4 (permalink)  
Old 2005-11-17
czech12 czech12 is offline
Member
 
Join Date: 2005-10-25
Location: North Brunswick, NJ
Posts: 38
Rep Power: 0
czech12 has an average reputation (10+)
Default Re: NOKIA IP120 password recovery

I found out the same thing when I spoke with Nokia yesterday. Nokia gave me Resolution 8010, but I was promptly told that I can't release it to anyone. Sorry. You can see if your reseller will give you the Resolution, but I really don't know who you are, so I cannot.

The steps you have may be the same as this Resolution ID. The reason they can't release it is because it could leave the box unusable and need to be RMA'd.

I guess you have to give it a shot and hope for the best.
__________________
====================
Aaron Vivo
CCSE Plus, CCMSE, NSA
====================
Reply With Quote
  #5 (permalink)  
Old 2005-11-17
Lackie Lackie is offline
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: NOKIA IP120 password recovery

I have done resolution 8010 with a customer before. Killed their appliance on a weekend. Needless to say, they wern't happy as their RMA didn't arrive until Tuesday. I wouldn't try it again unless absolutely necessary and I had support on the appliance. Below are the steps that I have (not resolution 8010). Not sure if it will work or if will hose your box or not.



1. Transfer the correct bootmanager image file to the system

Depending on the Nokia IPSO version, the name of the bootmanager image file is slightly different. For example, the bootmanager image file for IPSO 3.8 is called "nkipflash38.bin". In addition, different builds of the same Nokia IPSO version have different bootmanager image files, but the image files have the same filename. Please verify that the correct bootmanager version is being used. "nkipflash38.bin" will be used in the examples for the rest of resolution.

2. Use md5 utility to verify that there has been no corruption
nokia[admin]# md5 nkipflash38.bin
MD5 (nkipflash38.bin) = 47e518e0beab4f90e56fbaea26d51802

3. Mount the / filesystem as read/write
nokia[admin]# mount -uw /

4. Transfer the bootimage file to the /etc directory
nokia[admin]# cp nkipflash38.bin /etc

5. Reboot the device
nokia[admin]# sync; reboot

6. During boot process, select option enter the bootmanager command mode.

7. Boot into single-user mode
BOOTMGR[1] boot -s

8. Provide the bootmanager password when requested.

9. Hit return for shell when prompted

10. Use the upgrade_bootmgr utility to update the bootmanager
nokia[admin]# /etc/upgrade_bootmgr wd0 /etc/nkipflash.bin

NOTE: The command is
/etc/upgrade_bootmgr wd1 /etc/nkipflash.bin
for the IP600 Series Platform

11. When prompted, confirm that the bootmanager should be upgraded

12. Reboot box.

13. Boot into bootmanager again and issue the command install. This will verify that the password has been removed.
Reply With Quote
  #6 (permalink)  
Old 2005-11-22
pyaresanjeev pyaresanjeev is offline
Junior Member
 
Join Date: 2005-11-16
Posts: 2
Rep Power: 0
pyaresanjeev has an average reputation (10+)
Default Re: NOKIA IP120 password recovery

I don't think it will allow me to rewrite the bootmanager image with out a password.

Any way, I found a link to download the IPSO image and a brief procedure to reinstall it on harddisk . can you please suggest it will work or not ??



http://chrisbuechler.com/m0n0wall/nokia/ip110.html
Reply With Quote
  #7 (permalink)  
Old 2005-11-25
Lackie Lackie is offline
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: NOKIA IP120 password recovery

That procedure that you have the link for isn't for installing IPSO, it's for removing the HDD and replacing it with a CF card with another OS on it.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 23:32.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0