LAN Routing
1748090 Members
4835 Online
108758 Solutions
New Discussion юеВ

default root password on 3CREVF100-73 ?

 
bvogt
New Member

default root password on 3CREVF100-73 ?

Which user/password can be used to access the 3CREVF100-73 console via ssh?

The users configured via web access are obviously not useable.



Thanks in advance for any hints.



Burkhard

5 REPLIES 5
bvogt
New Member

Re: default root password on 3CREVF100-73 ?

Nobody knows about that issue?

So, why is that ssh option available in the web interface, although the relationship to the users/passwords is unknown or undocumented?

jack_2
New Member

Re: default root password on 3CREVF100-73 ?

I need that console password asap! Can someone over at 3com please provide this essential information.



bvogt
New Member

Re: default root password on 3CREVF100-73 ?

In the meantime I received the following information from the 3com support team:


>>>


Regarding your password you have to use the default one. (The first time you log into the Configuration Manager, you use the default username and password (admin and password). )


Below is the link where you can download the manual. On page 115 you can find more information about this.





http://support.3com.com/documents/firewall/3CREVF100-73/10016886_Rev_AA.pdf





For the second question getting ssh access to the product, it is possible.You will find this information on the 3Com official website.





Please click the link below:





http://www.3com.com/products/en_US/detail.jsp?tab=prodspec&sku=3CREVF100-73&pathtype=support





Should you have any further question, please do not hesitate to contact us.


<<<





My response to that:


>>>


- the firewall is already configured according to the document (your


first link)


- http(s) access to the configuration manager works fine, custom


accounts (according to ch. 17.2) can be added/used, but for http(s)


access only


- trying to use these accounts via ssh leads to log entries like: Nov 16


16:14:17 login attempt for nonexistent user from ...


- trying to use the root account for ssh access leads to the message:


Nov 16 16:25:57 bad password attempt for 'root' from ...


<<<





and the final advice:


>>>


I'm sorry to hear that the information was not very helpful.


According to your explanation you need Technical Support for your Configuration. In that case all  we can offer you  is our Chargeable Service.


<<<



jack_2
New Member

Re: default root password on 3CREVF100-73 ?

Thanks for the information. Not really what I expected, but still.



I got tired waiting, so I hacked it.



 



Execute commands as root, and get passwd:





  • Get Firefox with UrlParams plugin.


  • Login to your routers web interface.


  • Surf to http://router-ip/diagnostics.htm


  • Do a NS Lookup on "127.0.0.1".


  • Open UrlParams and change the POST param "txtDNSName"from "127.0.0.1" to "127.0.0.1 | cat /etc/passwd"


  • Enjoy.




...or, you can set the SSH / Telnet password (it will be reset when the router is restarted, so you need to do this after avery reboot).





  • Surf to http://router-ip/set_password.htm


  • Select Show source (ctrl+u), and save the page to disk.


  • Open the saved page and change:






  • <form method="post" action="core.cgi"> (line 104) to <form method="post" action="http://router-ip/core.cgi">


  • Remove "<!--" and "-->" at line 114 and 129.


  • Add "http://router-ip/" to "js/mgmt.js", "js/common.js" and "js/treeMenu.js" at line 7, 8 and 9. Ex:


    <script language="javascript" src="js/common.js"></script> => <script language="javascript" src="http://router-ip/js/common.js"></script>






  • Save and open in your favorite browser.


  • Now you can set the console password! Enjoy.




 



 



 



 



 



 



 



 



jack_2
New Member

Re: default root password on 3CREVF100-73 ?

I can add that the easiest way to extract internal files from the router is to use the NS Lookup way to execute commands, and copy the desired file to /tmp/pkt.cap



Then you can download it from http://router-ip/pkt.cgi (you don't even have to be logged in to the web interface to download the file!)