誤刪CiscoIOS文件恢復-創(chuàng)新互聯(lián)

手賤把公司ASA防火墻IOS文件刪除了，趕緊在同型號防火墻下載IOS文件后恢復故障。記錄一下過程。

創(chuàng)新互聯(lián)于2013年創(chuàng)立，是專業(yè)互聯(lián)網(wǎng)技術(shù)服務公司，擁有項目成都網(wǎng)站建設、成都網(wǎng)站制作網(wǎng)站策劃，項目實施與項目整合能力。我們以讓每一個夢想脫穎而出為使命，1280元都江堰做網(wǎng)站,已為上家服務,為都江堰各地企業(yè)和個人服務,聯(lián)系電話:18980820575

rommon #1> ？?

Variables: Use "sync" to store in NVRAM?
ADDRESS=?local IP address?
CONFIG=?config file path/name?
GATEWAY=?gateway IP address?
IMAGE=?p_w_picpath file path/name?
LINKTIMEOUT=?Link UP timeout (seconds)?
PKTTIMEOUT=?packet timeout (seconds)?
PORT=?ethernet interface port?
RETRY=?Packet Retry Count (Ping/TFTP)?
SERVER=?server IP address?
VLAN=?enable/disable DOT1Q tagging on the selected port?

rommon #2> ADDRESS=192.168.0.2 （因為是TFFP上傳，所以防火墻設置為客戶機）?
rommon #3> GATEWAY=192.168.0.1 （網(wǎng)關(guān)）?
rommon #4> IMAGE=asa802-k8.bin （導入IOS的名稱）?
rommon #5> SERVER=192.168.0.1 （服務器IP，也就是你的PC）?
rommon #6> sync （保存）?
Updating NVRAM Parameters...?

rommon #7> ping 192.168.0.1?

Sending 20, 100-byte ICMP Echoes to 192.168.0.1, timeout is 4 seconds:?
?!!!!!!!!!!!!!!!!!!!?
Success rate is 95 percent (19/20)?
確認線路是否連通，開啟TFTP軟件 （這里說明下我測試是ASA5505 所以接的E0/0口。不知道設備該接什么口可以用set看“PORT=Ethernet0/0”）?
rommon #8> tftpdnld （上傳）?
ROMMON Variable Settings:?
ADDRESS=192.168.0.2?
SERVER=192.168.0.1?
GATEWAY=192.168.0.1?
PORT=Ethernet0/0?
VLAN=untagged?
IMAGE=asa802-k8.bin?
CONFIG=?
LINKTIMEOUT=20?
PKTTIMEOUT=4?
RETRY=20?

tftp asa802-k8.bin@192.168.0.1 via 192.168.0.1?
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!?

導入后設備重啟，現(xiàn)在有了IOS 能進去?
Type help or '?' for a list of available commands.?
ciscoasa> en?
但現(xiàn)在IOS也沒有裝入設備，而是從tftp引導啟動設備，斷開TFTP服務器就會從新進入監(jiān)控模式。這一點當設備啟動完畢后可以用show version命令看到：?
System p_w_picpath file is "tftp://192.168.0.1/asa802-k8.bin"?

現(xiàn)在需要把IOS存入設備，但是現(xiàn)在防火墻和PC已經(jīng)不能通信?
ciscoasa# ping 192.168.0.1?
Type escape sequence to abort.?
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:?
No route to host 192.168.0.1?

Success rate is 0 percent (0/1)?
因為剛才是在監(jiān)控模式下，現(xiàn)在需要配置讓PC和防火墻從新通信（具體型號具體設置，下面已我手上的5505為例）?

interface Vlan1?
nameif inside?
security-level 100?
ip address 192.168.1.1 255.255.255.0?
!?
interface Vlan2?
nameif outside?
security-level 0?
ip address 192.168.0.2 255.255.255.0?
!?
interface Ethernet0/0?
switchport access vlan 2?
現(xiàn)在測試?
ciscoasa# ping 192.168.1.1?
Type escape sequence to abort.?
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:?
!!!!!?
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms?
已經(jīng)能通信，下面拷貝IOS和ASDM存入設備?

ciscoasa# copy tftp://192.168.0.1/asa802-k8.bin disk0:/asa802-k8.bin?

Address or name of remote host ??

Source filename ??

Destination filename ??

Accessing tftp://192.168.0.1/asa802-k8.bin. ... !!!!!!!!!!!!!!!!!!!?
因為刪除的是flash 現(xiàn)在還需要導入ASDM （注意ASDM和IOS的兼容，不兼容如下圖）?
進行ciscoasa# copy tftp://192.168.0.1/asa802-k8.bin disk0:/asa802-k8.bin一直報錯。

ciscoasa# show flash:

Initializing disk0: cache, please wait...Failed (Invalid DOS media or no media in slot error).

%Error show flash: (Failed to initialize the Inode table)

ciscoasa# dir disk0:

%Error opening disk0:/ (Invalid DOS media or no media in slot)

ciscoasa# fsck flash:

Initializing disk0: cache, please wait...Failed (Invalid DOS media or no media in slot error).

Internal error, inode table initialization for flash: failed with error Invalid DOS media or no media in slot

%Error checking flash: (Invalid DOS media or no media in slot)

WARNING: Restoring security context mode failed.

最后使用ciscoasa# format flash: 命令后正常。

ciscoasa# copy tftp://192.168.0.1/asdm-602.bin disk0://asdm-602.bin?

Address or name of remote host ??

Source filename ??

Destination filename ??

Accessing tftp://192.168.0.1/asdm-602.bin.. ... !!!!!!!!!!!!!!!!!!!?
現(xiàn)在可以看見IOS以后在設備上?
ciscoasa# show version?

Cisco Adaptive Security Appliance Software Version 8.2(1)?

Compiled on Tue 05-May-09 22:45 by builders?
System p_w_picpath file is "disk0:/asa821-k8.bin"?
Config file at boot was "startup-config"?

ciscoasa# show flash:?
--#-- --length-- -----date/time------ path?
3 4096 Aug 26 2009 17:41:50 log?
10 4096 Aug 26 2009 17:41:56 crypto_archive?
11 4096 Aug 26 2009 17:59:06 coredumpinfo?
12 43 Aug 27 2009 09:13:02 coredumpinfo/coredump.cfg?
78 16275456 Aug 26 2009 18:07:50 asa802-k8.bin?
80 7598456 Aug 27 2009 09:05:54 asdm-602.bin?
設置啟動文件?
ciscoasa (config)# boot system disk0:/asa802-k8.bin 設置IOS?
ciscoasa (config)# asdm p_w_picpath disk0:/asdm602.bin 設置ASDM?
ciscoasa (config)# reload 重新啟動，配置生效?

另外有需要云服務器可以了解下創(chuàng)新互聯(lián)scvps.cn，海內(nèi)外云服務器15元起步，三天無理由+7*72小時售后在線，公司持有idc許可證，提供“云服務器、裸金屬服務器、高防服務器、香港服務器、美國服務器、虛擬主機、免備案服務器”等云主機租用服務以及企業(yè)上云的綜合解決方案，具有“安全穩(wěn)定、簡單易用、服務可用性高、性價比高”等特點與優(yōu)勢，專為企業(yè)上云打造定制，能夠滿足用戶豐富、多元化的應用場景需求。

網(wǎng)站標題：誤刪CiscoIOS文件恢復-創(chuàng)新互聯(lián)
當前鏈接：http://muchs.cn/article30/cdceso.html

成都網(wǎng)站建設公司_創(chuàng)新互聯(lián)，為您提供網(wǎng)站導航、云服務器、網(wǎng)站設計、網(wǎng)站收錄、商城網(wǎng)站、品牌網(wǎng)站建設

廣告

聲明：本網(wǎng)站發(fā)布的內(nèi)容（圖片、視頻和文字）以用戶投稿、用戶轉(zhuǎn)載內(nèi)容為主，如果涉及侵權(quán)請盡快告知，我們將會在第一時間刪除。文章觀點不代表本網(wǎng)站立場，如需處理請聯(lián)系客服。電話：028-86922220；郵箱：631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載，或轉(zhuǎn)載時需注明來源： 創(chuàng)新互聯(lián)