| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| Hi all, I have got a IP120 from a reseller. But the device is password protected. Even if I am trying through Boot manager mode it is asking for a password. can any one please help me to break this password. thanks in advance Sanjeeb |
| |||
| The admin password in IPSO and the boot manager password are two different things. You probably don't know either. The boot manager one is the important one though because with out that, you can't rebuild the box. The only way that I know how to remove the boot manager password is to power on the device with the hard drive disconnected, break into the boot manager prompt, then run the command "passwd". It will then ask you to put in the new password without requesting the old password. I'm not sure how to disconnect the hard drive of an IP120 though. There is another method to completely remove the boot manager password, but it requires reloading the boot manager and there is currently no docs on how to do that. I will try to find out how and let you know... __________________ ==================== Aaron Vivo CCSE Plus, CCMSE, NSA ==================== |
| |||
| Removing the HDD on the IP120 won't allow you to recover/change the boot manager password as the boot manager on the IP120 is on the HDD. quote from Release notes: On the Nokia IP110, IP120 and IP330 appliances, if you lose the existing boot manager password, you cannot set a new boot manager password. A workaround is to overwrite the boot manager image with a new boot manager image. This has the effect of setting the boot manager’s environment to factory defaults. You must ensure that the boot manager environment variables are saved before overwriting. I have steps on how to overwrite the boot manager but I'm not sure if they have been tested or if it will/may leave your appliance in an unuseable state. Last edited by Lackie; 2005-11-17 at 02:58. |
| |||
| I found out the same thing when I spoke with Nokia yesterday. Nokia gave me Resolution 8010, but I was promptly told that I can't release it to anyone. Sorry. You can see if your reseller will give you the Resolution, but I really don't know who you are, so I cannot. The steps you have may be the same as this Resolution ID. The reason they can't release it is because it could leave the box unusable and need to be RMA'd. I guess you have to give it a shot and hope for the best. __________________ ==================== Aaron Vivo CCSE Plus, CCMSE, NSA ==================== |
| |||
| I have done resolution 8010 with a customer before. Killed their appliance on a weekend. Needless to say, they wern't happy as their RMA didn't arrive until Tuesday. I wouldn't try it again unless absolutely necessary and I had support on the appliance. Below are the steps that I have (not resolution 8010). Not sure if it will work or if will hose your box or not. 1. Transfer the correct bootmanager image file to the system Depending on the Nokia IPSO version, the name of the bootmanager image file is slightly different. For example, the bootmanager image file for IPSO 3.8 is called "nkipflash38.bin". In addition, different builds of the same Nokia IPSO version have different bootmanager image files, but the image files have the same filename. Please verify that the correct bootmanager version is being used. "nkipflash38.bin" will be used in the examples for the rest of resolution. 2. Use md5 utility to verify that there has been no corruption nokia[admin]# md5 nkipflash38.bin MD5 (nkipflash38.bin) = 47e518e0beab4f90e56fbaea26d51802 3. Mount the / filesystem as read/write nokia[admin]# mount -uw / 4. Transfer the bootimage file to the /etc directory nokia[admin]# cp nkipflash38.bin /etc 5. Reboot the device nokia[admin]# sync; reboot 6. During boot process, select option enter the bootmanager command mode. 7. Boot into single-user mode BOOTMGR[1] boot -s 8. Provide the bootmanager password when requested. 9. Hit return for shell when prompted 10. Use the upgrade_bootmgr utility to update the bootmanager nokia[admin]# /etc/upgrade_bootmgr wd0 /etc/nkipflash.bin NOTE: The command is /etc/upgrade_bootmgr wd1 /etc/nkipflash.bin for the IP600 Series Platform 11. When prompted, confirm that the bootmanager should be upgraded 12. Reboot box. 13. Boot into bootmanager again and issue the command install. This will verify that the password has been removed. |
| |||
| I don't think it will allow me to rewrite the bootmanager image with out a password. Any way, I found a link to download the IPSO image and a brief procedure to reinstall it on harddisk . can you please suggest it will work or not ?? http://chrisbuechler.com/m0n0wall/nokia/ip110.html |
![]() |
| Thread Tools | |
| Display Modes | |
| |