juniper srx恢复出厂设置

[KB15725] Show KB Properties

Categories:  SRX Series

Knowledge Base ID: Last Updated:

KB15725 27 Oct 2011

4.0

Version:

SUMMARY:

This article describes how to return the configuration on an SRX Series device to the factory default version (configuration file that is shipped with the device).

For other topics, go to the SRX Getting Started main page.

PROBLEM OR GOAL:

Reset the configuration to the factory default.

CAUSE:

SOLUTION:

There are three ways to reset an SRX Series device to its factory default configuration.

 

Using the Reset Config Button (requires access to the front panel of the device) Using the load factory-default Command (requires login to the CLI)

Using the Root Password Recovery Process (requires console access to the device)



Using the Reset Config Button

Note: The Reset Config button is available only on the SRX100, SRX210, SRX240, and SRX650 devices.

You can use the Reset Config button on the front panel of the SRX Series device to reset the device to its factory default configuration. The Reset Config button is recessed to prevent it from being pressed accidentally, so you need to insert a small probe (for example, a straightened paper clip) to press the button.

Caution: If you use the Reset Config button to reset the device to its factory default configuration, all the configuration files, including the rescue configuration and backup configurations, are deleted.

For more information, see the Hardware Guide for your device at http://www.juniper.net/techpubs/hardware/junos-srx/index.html.

To reset the device to its factory default configuration, press and hold the Reset Config button on the front panel of the SRX Series device for at least 15 seconds, until the Status LED glows amber.

Using the load factory-default Command

If you are still able to log in to the device with the CLI, you can use the load factory-default command to return the device to its factory default configuration. The load factory-default command loads and commits the factory configuration, but using this command does not delete other configuration files on the device.

For more information about the load factory-default command, see

http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-security-admin-guide/factory-defaults-router-context-to-secure-context-section.html#factory-defaults-router-context-to-secure-context-section.

1. Enter the load factory-default command.

root@host# load factory-default

2. Use the set system root-authentication plain-text-password command to

set a new root password for the device.

root@host# set system root-authentication plain-text-password

3. Enter the root password, and enter it again for confirmation.

New password:

Retype new password:

Caution: Before you commit changes, if you do not assign an IP address for the ge-0/0/0 interface, create a local user account, and enter routing information, either from CLI configuration or using DHCP, the SRX device is no longer remotely accessible. To manage the SRX device, you must connect a PC or laptop to the physical console, or attach the PC or laptop to a subnet that is directly connected to the ge-0/0/0 interface, which is assigned an IP address of 192.168.2.1.

4. Use the

commit and-quit command

to commit the configuration and exit from

configuration mode if the configuration contains no errors and the commit succeeds.

root@host# commit and-quit

After the commit, the factory default configuration is the running configuration.

Using the Root Password Recovery Process

If you can no longer log in to the device, you can use the root password recovery process to reset the device to its factory default configuration. You must have console access to use the password recovery process.

For instructions on how to recover the root password, see

http://www.juniper.net/techpubs/en_US/junos10.4/information-products/topic-collections/config-guide-system-basics/index.html?topic-31396.html.

Note that for SRX Branch devices running 10.0R1 or later JUNOS versions password recovery may fail due to watchdog timeout while entering single-user mode. Refer to KB17565 for details.

PURPOSE:

Implementation

RELATED LINKS: