This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bad situation - lan port off, no passwords

What I've learned after being asked to recover a UTM 9.4 software install on a dedicated computer.  The following conditions exist:

  • The former admin does not have console login passwords (loginuser or root)
  • I do have physical access to the "box"
  • I do have web console admin login credentials
  • There are only 2 physical ports: lan (eth1) and wan (eth0)
  • Lan (eth1) has been turned off in Sophos configuration (don't know why, just is...)
  • There are no config backups that I am aware of
  • The console monitor says I can access webadmin on the public IP address (https://public.ip:4444), however with Lan (eth1) turned off, no route, plus wan firewall blocking 4444

Important things to have on hand:

  1. A keyboard with a good old fashion ps/2 style connector
  2. vga monitor and cable

I followed the directions here: https://community.sophos.com/kb/en-us/115346 to gain Grub control and get to a bash console.  This is where the ps/2 type keyboard was critical.  USB drivers are not loaded up in time to intercept the Grub menu with <esc>.

I used the cc command in this section of the same kb article to allow WebAdmin access on all interfaces.

Local network is missing in the allowed networks of the WebAdmin

This did not, however, enable Lan (eth1), but what it did do is allow me to connect the Wan (eth0) port to a local DHCP server, acquire a local ip address and bam!  WebAdmin access.

At which point appropriate access configurations and backups were performed.

Just thought I'd share a Saturday morning recovery story.



This thread was automatically locked due to age.