Friday, April 3, 2020

Installing Cisco ASR 9000 IOS-XRv in VMware Workstation

I had a POC for a Cisco ASR9K so I deployed an IOS-XRv virtual machine in my lab to play around with it.

I downloaded an IOS-XRv demo OVA file and import in VMware Workstation. To import, go to File > Open > rename the virtual machine > Import.



Edit the virtual machine settings. I gave the VM a 3 GB memory.
 

The OVA demo file had two Network Adapters, so I set the first Network Adapter as Custom: VMnet0 (192.168.1.0/24 subnet in my lab) > removed the second Network Adapter > click OK > Power on this virtual machine.
 

Just click Yes to continue.


You'll see a Booting 'IOS XRv' output during initial bootup. You'll need to increase the memory (RAM) and Hard Disk space on the VM in order to properly bootup.


I increased the Hard Disk to 80 GB and added a Serial Port in order to monitor the bootup process via the console.


You'll see a blank prompt which indicated the VM has completed its bootup.


You'll need to install Named Pipe TCP Proxy to view the console output.


Click the connector icon > type the Pipe name: \\.\pipe\xr1 > type a Port number (you can use any abritrary number) > click Add.



Open a terminal emulator (I used SecureCRT in this case) > choose Telnet > type the IP address: 127.0.0.1 (loopback IP). You'll be initially asked to create a root-system username (aside from the system default: cisco/cisco).


 Notice the Named Pipe TCP Proxy Status is now Connected.


Below are some basic configuration in order to remotely access the IOS-XRv and eventually eliminate the use of Named Pipe Proxy.


ios con0/0/CPU0 is now available

Press RETURN to get started.

IMPORTANT:  READ CAREFULLY
Welcome to the Demo Version of Cisco IOS XRv (the "Software").
The Software is subject to and governed by the terms and conditions
of the End User License Agreement and the Supplemental End User
License Agreement accompanying the product, made available at the
time of your order, or posted on the Cisco website at
www.cisco.com/go/terms (collectively, the "Agreement").
As set forth more fully in the Agreement, use of the Software is
strictly limited to internal use in a non-production environment
solely for demonstration and evaluation purposes.  Downloading,
installing, or using the Software constitutes acceptance of the
Agreement, and you are binding yourself and the business entity
that you represent to the Agreement.  If you do not agree to all
of the terms of the Agreement, then Cisco is unwilling to license
the Software to you and (a) you may not download, install or use the
Software, and (b) you may return the Software as more fully set forth
in the Agreement.

Please login with any configured user/password, or cisco/cisco

User Access Verification

Username: cisco
Password:<cisco>

RP/0/0/CPU0:ios#configure terminal
Thu Mar  5 10:36:57.885 UTC
RP/0/0/CPU0:ios(config)#hostname XRv-LAB    // DEFAULT HOSTNAME IS 'ios'
RP/0/0/CPU0:ios(config)#
RP/0/0/CPU0:ios(config)#show config    // VIEW TARGET CONFIG
Thu Mar  5 10:37:21.293 UTC
Building configuration...
!! IOS XR Configuration 5.1.2
hostname XRv-LAB
end

RP/0/0/CPU0:ios(config)#
RP/0/0/CPU0:ios(config)#commit   // APPLY CHANGE IN RUNNING CONFIG; THERE'S NO write memory IN IOS-XR
Thu Mar  5 10:37:26.873 UTC
RP/0/0/CPU0:Mar  5 10:37:26.913 : ike[228]: %SECURITY-IKE-4-WARNING : You may want to configure a domain-name

RP/0/0/CPU0:XRv-LAB(config)#load ?
  WORD           Load from file
  bootflash:     Load from bootflash: file system
  commit         Load commit changes
  configuration  Contents of configuration
  diff           Load from diff file
  disk0:         Load from disk0: file system
  disk0a:        Load from disk0a: file system
  disk1:         Load from disk1: file system
  disk1a:        Load from disk1a: file system
  ftp:           Load from ftp: file system
  nvram:         Load from nvram: file system
  rcp:           Load from rcp: file system
  rollback       Load rollback changes
  tftp:          Load from tftp: file system
RP/0/0/CPU0:XRv-LAB(config)#load rollback ?
  changes  Load configuration changes to be made during a rollback operation
RP/0/0/CPU0:XRv-LAB(config)#load rollback changes ?
  last        Changes for rolling back last <n> commits
  to          Changes up to (and including) a specific commit
  1000000039  Commit ID
  1000000038  Commit ID
  1000000037  Commit ID
  1000000036  Commit ID
  1000000035  Commit ID
  1000000034  Commit ID
  1000000033  Commit ID
  1000000032  Commit ID
  1000000031  Commit ID
  1000000030  Commit ID
  1000000029  Commit ID
  1000000028  Commit ID
  1000000027  Commit ID
  1000000026  Commit ID
  1000000025  Commit ID
  1000000024  Commit ID
  1000000023  Commit ID
  1000000022  Commit ID
  1000000021  Commit ID
  1000000020  Commit ID
  1000000019  Commit ID
  1000000018  Commit ID
  1000000017  Commit ID
  1000000016  Commit ID
  1000000015  Commit ID
  1000000014  Commit ID
  1000000013  Commit ID
  1000000012  Commit ID
  1000000011  Commit ID
  1000000010  Commit ID
  1000000009  Commit ID
  1000000008  Commit ID
  1000000007  Commit ID
  1000000006  Commit ID
  1000000005  Commit ID
  1000000004  Commit ID
  1000000003  Commit ID
  1000000002  Commit ID
  1000000001  Commit ID
RP/0/0/CPU0:XRv-LAB(config)#load rollback changes last ?
  <1-39>  Number of commits
RP/0/0/CPU0:XRv-LAB(config)#load rollback changes last 1   // ROLLBACK TO PREVIOUS RUNNING CONFIG
Building configuration...
Loading.
48 bytes parsed in 1 sec (47)bytes/sec
RP/0/0/CPU0:ios(config)#      // HOSTNAME ROLLBACK TO ios

RP/0/0/CPU0:ios(config)#hostname XRv-LAB
RP/0/0/CPU0:ios(config)#commit
Thu Mar  5 10:38:10.427 UTC

RP/0/0/CPU0:XRv-LAB(config)#
RP/0/0/CPU0:XRv-LAB(config)#interface loopback0
RP/0/0/CPU0:XRv-LAB(config-if)#ip address 1.1.1.1 255.255.255.255
RP/0/0/CPU0:XRv-LAB(config-if)#
RP/0/0/CPU0:XRv-LAB(config-if)#show config
Thu Mar  5 10:39:16.466 UTC
Building configuration...
!! IOS XR Configuration 5.1.2
interface Loopback0
 ipv4 address 1.1.1.1 255.255.255.255
!
end

RP/0/0/CPU0:XRv-LAB(config-if)#
RP/0/0/CPU0:XRv-LAB(config-if)#clear    // REMOVE TARGET CONFIG; OR JUST SIMPLY TYPE THE abort COMMAND
RP/0/0/CPU0:XRv-LAB(config)#
RP/0/0/CPU0:XRv-LAB(config)#show config
Thu Mar  5 10:39:30.625 UTC
Building configuration...
!! IOS XR Configuration 5.1.2
end

RP/0/0/CPU0:XRv-LAB(config)#interface loopback0
RP/0/0/CPU0:XRv-LAB(config-if)#ip address 1.1.1.1 255.255.255.255
RP/0/0/CPU0:XRv-LAB(config-if)#
RP/0/0/CPU0:XRv-LAB(config-if)#commit ?
  best-effort   Commit the configuration changes via best-effort operation
  comment       Assign a comment to this commit
  confirmed     Rollback this commit unless there is a confirming commit
  force         Override the memory checks
  label         Assign a label to this commit
  replace       Replace the contents of running configuration
  save-running  Save running configuration to a file
  <cr>          Commit the configuration changes to running
RP/0/0/CPU0:XRv-LAB(config-if)#commit confirmed ?
  <30-65535>  Seconds until rollback unless there is a confirming commit
  minutes     Specify the rollback timer in the minutes
  <cr>        Commit the configuration changes to running
RP/0/0/CPU0:XRv-LAB(config-if)#commit confirmed 30   // ROLLBACK CONFIG AFTER 30 SECONDS
Thu Mar  5 10:41:34.646 UTC
RP/0/0/CPU0:XRv-LAB(config-if)#do show interface loopback0
Thu Mar  5 10:41:56.645 UTC
Loopback0 is up, line protocol is up
  Interface state transitions: 1
  Hardware is Loopback interface(s)
  Internet address is 1.1.1.1/32
  MTU 1500 bytes, BW 0 Kbit
     reliability Unknown, txload Unknown, rxload Unknown
  Encapsulation Loopback,  loopback not set,
  Last input Unknown, output Unknown
  Last clearing of "show interface" counters Unknown
  Input/output data rate is disabled.

<AFTER 30 SECONDS>

RP/0/0/CPU0:XRv-LAB(config-if)#do show interface loopback0
Thu Mar  5 10:42:23.353 UTC
Interface not found (Loopback0)

RP/0/0/CPU0:XRv-LAB(config-if)#interface loopback0
RP/0/0/CPU0:XRv-LAB(config-if)#ip address 1.1.1.1 255.255.255.255
RP/0/0/CPU0:XRv-LAB(config-if)#commit confirmed 30
Thu Mar  5 10:45:24.980 UTC

One or more commits have occurred from other
configuration sessions since this session started
or since the last commit was made from this session.
You can use the 'show configuration commit changes'
command to browse the changes.
Do you wish to proceed with this commit anyway? [no]: yes
RP/0/0/CPU0:XRv-LAB(config-if)#do show interface loopback0
Thu Mar  5 10:45:52.088 UTC
Loopback0 is up, line protocol is up
  Interface state transitions: 1
  Hardware is Loopback interface(s)
  Internet address is 1.1.1.1/32
  MTU 1500 bytes, BW 0 Kbit
     reliability Unknown, txload Unknown, rxload Unknown
  Encapsulation Loopback,  loopback not set,
  Last input Unknown, output Unknown
  Last clearing of "show interface" counters Unknown
  Input/output data rate is disabled.

RP/0/0/CPU0:XRv-LAB(config-if)#
RP/0/0/CPU0:XRv-LAB(config-if)#commit    // APPLY CHANGES IN RUNNING CONFIG
Thu Mar  5 10:45:56.038 UTC

% Confirming commit for trial session.
RP/0/0/CPU0:XRv-LAB(config-if)#end
RP/0/0/CPU0:XRv-LAB#show interface loopback0
Thu Mar  5 10:46:17.087 UTC
Loopback0 is up, line protocol is up
  Interface state transitions: 1
  Hardware is Loopback interface(s)
  Internet address is 1.1.1.1/32
  MTU 1500 bytes, BW 0 Kbit
     reliability Unknown, txload Unknown, rxload Unknown
  Encapsulation Loopback,  loopback not set,
  Last input Unknown, output Unknown
  Last clearing of "show interface" counters Unknown
  Input/output data rate is disabled.

RP/0/0/CPU0:XRv-LAB#show ip interface brief
Thu Mar  5 10:49:37.063 UTC

Interface                      IP-Address      Status                Protocol
Loopback0                      1.1.1.1         Up                    Up      
MgmtEth0/0/CPU0/0              unassigned      Shutdown              Down   
 
RP/0/0/CPU0:XRv-LAB#configure terminal
RP/0/0/CPU0:XRv-LAB(config)#interface loopback0
RP/0/0/CPU0:XRv-LAB(config-if)#description ### TEST ###
RP/0/0/CPU0:XRv-LAB(config-if)#
RP/0/0/CPU0:XRv-LAB(config-if)#show config merge interface loopback0    // DISPLAY MERGED TARGET AND RUNNING CONFIG
Mon Mar 23 09:00:21.784 UTC
interface Loopback0
 description ### TEST ###
 ipv4 address 1.1.1.1 255.255.255.255
!

RP/0/0/CPU0:XRv-LAB#configure terminal
Thu Mar  5 10:50:49.668 UTC
RP/0/0/CPU0:XRv-LAB(config)#interface ?
  BVI              Bridge-Group Virtual Interface
  Bundle-Ether     Aggregated Ethernet interface(s)
  Bundle-POS       Aggregated POS interface(s)
  CEM              Circuit Emulation interface(s)
  GigabitEthernet  GigabitEthernet/IEEE 802.3 interface(s)
  IMA              ATM Network Interface(s)
  InterflexLeft    InterFlex Left interface(s)
  InterflexRight   InterFlex Right interface(s)
  Loopback         Loopback interface(s)
  MgmtEth          Ethernet/IEEE 802.3 interface(s)
  Multilink        Multilink network interface(s)
  Null             Null interface
  POS              Packet over SONET/SDH network interface(s)
  PW-Ether         PWHE Ethernet Interface
  PW-IW            PWHE VC11 IP Interworking Interface
  Serial           Serial network interface(s)
  preconfigure     Specify a preconfig
  tunnel-ip        GRE/IPinIP Tunnel Interface(s)
  tunnel-ipsec     IPSec Tunnel interface(s)
  tunnel-mte       MPLS Traffic Engineering P2MP Tunnel interface(s)
  tunnel-te        MPLS Traffic Engineering Tunnel interface(s)
  tunnel-tp        MPLS Transport Protocol Tunnel interface
RP/0/0/CPU0:XRv-LAB(config)#interface MgmtEth0/0/CPU0/0
RP/0/0/CPU0:XRv-LAB(config-if)#ip address 192.168.1.150 255.255.255.0
RP/0/0/CPU0:XRv-LAB(config-if)#no shutdown
RP/0/0/CPU0:XRv-LAB(config-if)#commit
Thu Mar  5 10:51:59.353 UTC
RP/0/0/CPU0:Mar  5 10:51:59.403 : ifmgr[226]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/0/CPU0/0, changed state to Down
RP/0/0/CPU0:XRv-LAB(config-if)#RP/0/0/CPU0:Mar  5 10:51:59.433 : ifmgr[226]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/0/CPU0/0, changed state to Up

RP/0/0/CPU0:XRv-LAB(config-if)#do ping 192.168.1.1
Thu Mar  5 10:52:08.803 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/14/59 ms


C:\Users\User>ping 192.168.1.150    // PING FROM SOURCE IP 192.168.1.100 (WINDOWS 10)

Pinging 192.168.1.150 with 32 bytes of data:
Reply from 192.168.1.150: bytes=32 time=1ms TTL=255
Reply from 192.168.1.150: bytes=32 time=1ms TTL=255

Ping statistics for 192.168.1.150:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 1ms, Average = 1ms
Control-C
^C
C:\Users\User>telnet 192.168.1.150
Connecting To 192.168.1.150...Could not open connection to the host, on port 23: Connect failed


You'll need to explicitly configure the remote access (Telnet or SSH) under the control-plane.

RP/0/0/CPU0:XRv-LAB#configure terminal
Thu Mar  5 11:04:45.601 UTC
RP/0/0/CPU0:XRv-LAB(config)#telnet ?
  ipv4  IPv4 configuration
  ipv6  IPv6 configuration
  vrf   VRF name for telnet server
RP/0/0/CPU0:XRv-LAB(config)#telnet ipv4 ?
  client  Telnet client configuration commands
  dscp    dscp
  server  Telnet server configuration commands
RP/0/0/CPU0:XRv-LAB(config)#telnet ipv4 server ?
  max-servers  Set number of allowable telnet sessions
RP/0/0/CPU0:XRv-LAB(config)#telnet ipv4 server max-servers ?
  <1-100>  Set number of allowable telnet sessions
RP/0/0/CPU0:XRv-LAB(config)#telnet ipv4 server max-servers 3
RP/0/0/CPU0:XRv-LAB(config)#domain name ?
  WORD  Default domain name
RP/0/0/CPU0:XRv-LAB(config)#domain name lab.com
RP/0/0/CPU0:XRv-LAB(config)#commit
Thu Mar  5 11:07:00.782 UTC
RP/0/0/CPU0:XRv-LAB(config)#end
RP/0/0/CPU0:XRv-LAB#crypto key generate rsa ?
  WORD          RSA keypair label
  general-keys  Generate a general purpose RSA key pair for signing and encrypti
on
  usage-keys    Generate seperate RSA key pairs for signing and encryption
  <cr>         
RP/0/0/CPU0:XRv-LAB#crypto key generate rsa
Thu Mar  5 11:07:59.308 UTC
The name for the keys will be: the_default
  Choose the size of the key modulus in the range of 512 to 2048 for your General Purpose Keypair. Choosing a key modulus greater than 512 may take a few minutes.

How many bits in the modulus [1024]: 2048
Generating RSA keys ...
Done w/ crypto generate keypair
[OK]

RP/0/0/CPU0:XRv-LAB#configure terminal
Thu Mar  5 11:08:19.166 UTC
RP/0/0/CPU0:XRv-LAB(config)#ssh ?
  client   Provide SSH client service
  server   Provide SSH server service
  timeout  Set timeout value for SSH
RP/0/0/CPU0:XRv-LAB(config)#ssh server ?
  dscp           Cisco ssh server DSCP
  ipv4           IPv4 access list for ssh server
  ipv6           IPv6 access list for ssh server
  logging        Enable ssh server logging
  rate-limit     Cisco sshd rate-limit of service requests
  session-limit  Cisco sshd session-limit of service requests
  v2             Cisco sshd force protocol version 2 only
  vrf            Cisco sshd VRF name
  <cr>          
RP/0/0/CPU0:XRv-LAB(config)#ssh server v2
RP/0/0/CPU0:XRv-LAB(config)#commit
Thu Mar  5 11:08:35.795 UTC

RP/0/0/CPU0:XRv-LAB(config)#control-plane   
RP/0/0/CPU0:XRv-LAB(config-ctrl)#?           
  apply-group         Apply configuration from a group
  apply-group-append  Append apply-group configuration from a group
  apply-group-remove  Remove a group from apply-group configuration
  clear               Clear the uncommitted configuration
  commit              Commit the configuration changes to running
  describe            Describe a command without taking real actions
  do                  Run an exec command
  exclude-group       Exclude apply-group configuration from a group
  exclude-item        Negate a command or set its defaults
  exit                Exit from this submode
  management-plane    Configure management plane protection
  no                  Negate a command or set its defaults
  pwd                 Commands used to reach current submode
  root                Exit to the global configuration mode
  show                Show contents of configuration
RP/0/0/CPU0:XRv-LAB(config-ctrl)#management-plane ?
  inband       Configure an inband interface/protocol
  out-of-band  Configure an out-of-band interface/protocol
  <cr>        
RP/0/0/CPU0:XRv-LAB(config-ctrl)# management-plane out-of-band
RP/0/0/CPU0:XRv-LAB(config-mpp-outband)#?
  apply-group         Apply configuration from a group
  apply-group-append  Append apply-group configuration from a group
  apply-group-remove  Remove a group from apply-group configuration
  clear               Clear the uncommitted configuration
  commit              Commit the configuration changes to running
  describe            Describe a command without taking real actions
  do                  Run an exec command
  exclude-group       Exclude apply-group configuration from a group
  exclude-item        Negate a command or set its defaults
  exit                Exit from this submode
  interface           Configure an outband interface
  no                  Negate a command or set its defaults
  pwd                 Commands used to reach current submode
  root                Exit to the global configuration mode
  show                Show contents of configuration
  vrf                 configure mpp outband vrf
RP/0/0/CPU0:XRv-LAB(config-mpp-outband)#interface MgmtEth0/0/CPU0/0
RP/0/0/CPU0:XRv-LAB(config-mpp-outband-if)#?
  allow               Allow a protocol on this interface
  apply-group         Apply configuration from a group
  apply-group-append  Append apply-group configuration from a group
  apply-group-remove  Remove a group from apply-group configuration
  clear               Clear the uncommitted configuration
  commit              Commit the configuration changes to running
  describe            Describe a command without taking real actions
  do                  Run an exec command
  exclude-group       Exclude apply-group configuration from a group
  exclude-item        Negate a command or set its defaults
  exit                Exit from this submode
  no                  Negate a command or set its defaults
  pwd                 Commands used to reach current submode
  root                Exit to the global configuration mode
  show                Show contents of configuration
RP/0/0/CPU0:XRv-LAB(config-mpp-outband-if)#allow ?
  HTTP    HTTP(S)
  SNMP    SNMP (all versions)
  SSH     Secure Shell (v1 & v2)
  TFTP    TFTP
  Telnet  Telnet
  XML     XML
  all     All Protocols
RP/0/0/CPU0:XRv-LAB(config-mpp-outband-if)#allow telnet ?
  peer  Configure peer address on this interface
  <cr> 
RP/0/0/CPU0:XRv-LAB(config-mpp-outband-if)#allow telnet peer
RP/0/0/CPU0:XRv-LAB(config-telnet-peer)#?
  address             Configure peer address on this interface
  apply-group         Apply configuration from a group
  apply-group-append  Append apply-group configuration from a group
  apply-group-remove  Remove a group from apply-group configuration
  clear               Clear the uncommitted configuration
  commit              Commit the configuration changes to running
  describe            Describe a command without taking real actions
  do                  Run an exec command
  exclude-group       Exclude apply-group configuration from a group
  exclude-item        Negate a command or set its defaults
  exit                Exit from this submode
  no                  Negate a command or set its defaults
  pwd                 Commands used to reach current submode
  root                Exit to the global configuration mode
  show                Show contents of configuration
RP/0/0/CPU0:XRv-LAB(config-telnet-peer)#address ?
  ipv4  Configure peer IPv4 address on this interface
  ipv6  Configure peer IPv6 address on this interface
RP/0/0/CPU0:XRv-LAB(config-telnet-peer)#address ipv4 ?
  A.B.C.D         Enter IPv4 address
  A.B.C.D/length  Enter IPv4 address with prefix
RP/0/0/CPU0:XRv-LAB(config-telnet-peer)#address ipv4 192.168.1.0/24
RP/0/0/CPU0:XRv-LAB(config-telnet-peer)#allow ssh peer
RP/0/0/CPU0:XRv-LAB(config-ssh-peer)#address ipv4 192.168.1.0/24
RP/0/0/CPU0:XRv-LAB(config-ssh-peer)#commit
Thu Mar  5 11:17:29.289 UTC

RP/0/0/CPU0:XRv-LAB(config-ssh-peer)#do who
Thu Mar  5 11:26:11.743 UTC
   Line            User                 Service  Conns   Idle        Location
*  con0/0/CPU0     cisco                hardware     0  00:00:00    
   vty0            cisco                ssh          0  00:00:07     192.168.1.100
   vty1                                 telnet       0  00:00:04     192.168.1.100


To reach remote networks, you need a static default route:

RP/0/0/CPU0:XRv-LAB(config)#router ?    
  amt     Automatic Multicast Tunneling (AMT)
  bgp     BGP configuration subcommands
  eigrp   EIGRP configuration subcommands
  hsrp    HSRP configuration subcommands
  igmp    IPv4 Address Family
  isis    ISO IS-IS
  lisp    LISP configuration subcommands
  mld     IPv6 address family
  msdp    MSDP configuration subcommands
  ospf    OSPF configuration subcommands
  ospfv3  IPv6 Open Shortest Path First protocol (OSPFv3)
  pim     PIM configuration subcommands
  rib     RIB configuration subcommands
  rip     RIP configuration subcommands
  static  Static route configuration subcommands
  vrrp    VRRP configuration subcommands
RP/0/0/CPU0:XRv-LAB(config)#router static
RP/0/0/CPU0:XRv-LAB(config-static)#?
  address-family      Static route address family configuration subcommands
  apply-group         Apply configuration from a group
  apply-group-append  Append apply-group configuration from a group
  apply-group-remove  Remove a group from apply-group configuration
  clear               Clear the uncommitted configuration
  commit              Commit the configuration changes to running
  describe            Describe a command without taking real actions
  do                  Run an exec command
  exclude-group       Exclude apply-group configuration from a group
  exclude-item        Negate a command or set its defaults
  exit                Exit from this submode
  maximum             Limit the number of static paths which may be configured
  no                  Negate a command or set its defaults
  pwd                 Commands used to reach current submode
  root                Exit to the global configuration mode
  show                Show contents of configuration
  vrf                 VRF Static route configuration subcommands
RP/0/0/CPU0:XRv-LAB(config-static)#address-family ?
  ipv4  IPv4 commands
  ipv6  IPv6 commands
RP/0/0/CPU0:XRv-LAB(config-static)#address-family ipv4 ?
  multicast  Multicast commands
  unicast    Unicast commands
RP/0/0/CPU0:XRv-LAB(config-static)#address-family ipv4 unicast
RP/0/0/CPU0:XRv-LAB(config-static-afi)#?
  A.B.C.D/length      Destination prefix
  apply-group         Apply configuration from a group
  apply-group-append  Append apply-group configuration from a group
  apply-group-remove  Remove a group from apply-group configuration
  clear               Clear the uncommitted configuration
  commit              Commit the configuration changes to running
  describe            Describe a command without taking real actions
  do                  Run an exec command
  exclude-group       Exclude apply-group configuration from a group
  exclude-item        Negate a command or set its defaults
  exit                Exit from this submode
  no                  Negate a command or set its defaults
  pwd                 Commands used to reach current submode
  root                Exit to the global configuration mode
  show                Show contents of configuration
  topology            Topology static route configuration subcommands
RP/0/0/CPU0:XRv-LAB(config-static-afi)#0.0.0.0/0 ?
  A.B.C.D          Forwarding router's address
  BVI              Bridge-Group Virtual Interface
  Bundle-Ether     Aggregated Ethernet interface(s)
  Bundle-POS       Aggregated POS interface(s)
  CEM              Circuit Emulation interface(s)
  FastEthernet     FastEthernet/IEEE 802.3 interface(s)
  FortyGigE        FortyGigabitEthernet/IEEE 802.3 interface(s)
  GigabitEthernet  GigabitEthernet/IEEE 802.3 interface(s)
  HundredGigE      HundredGigabitEthernet/IEEE 802.3 interface(s)
  IMA              ATM Network Interface(s)
  InterflexLeft    InterFlex Left interface(s)
  InterflexRight   InterFlex Right interface(s)
  Loopback         Loopback interface(s)
  MgmtEth          Ethernet/IEEE 802.3 interface(s)
  Multilink        Multilink network interface(s)
  Null             Null interface
  POS              Packet over SONET/SDH network interface(s)
  PW-Ether         PWHE Ethernet Interface
  PW-IW            PWHE VC11 IP Interworking Interface
  SRP              SRP interface(s)
  Serial           Serial network interface(s)
  TenGigE          TenGigabitEthernet/IEEE 802.3 interface(s)
  tunnel-ip        GRE/IPinIP Tunnel Interface(s)
  tunnel-ipsec     IPSec Tunnel interface(s)
  tunnel-te        MPLS Traffic Engineering Tunnel interface(s)
  tunnel-tp        MPLS Transport Protocol Tunnel interface
  vrf              Destination VRF
RP/0/0/CPU0:XRv-LAB(config-static-afi)#0.0.0.0/0 192.168.1.1
RP/0/0/CPU0:XRv-LAB(config-static-afi)#commit

Friday, March 6, 2020

Cisco 3850 Stack Swtich IOS Upgrade

Here's a good link in performing an IOS upgrade on a stack of Cisco 3850 switches. You just need to copy the new .bin file on the Active (Master) switch and the software install process (a macro command) will replicate and extract a copy to the Member switch in the stack.

3850#show switch
Switch/Stack Mac Address : c025.5c85.1234 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   c025.5c85.1234     10     V02     Ready              
 2       Standby  c025.5c85.5678     1      V02     Ready              


3850#software install file flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin ?
  auto-rollback      Auto-rollback time
  force              Proceed with installation without performing peer package compatibility checks
  new                Create a new package provisioning file. After installation, only packages contained in the installed bundle will
                     be part of the committed package set
  on-reboot          Suppress reload prompt and do not reload after installation
  provisioning-file  Provisioning file to use for installation
  switch             Switch(es) where install operation is performed. Default is all switches
  verbose            Verbose output
  <cr>

3850#software install file flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin switch ?
  Valid switch ids: 1,2

  Multiple switch ids may be specified using a
  comma separated list or  '-' separated range

  For example:
    1,3,4     specifies switch ids 1, 3 and 4
    1-3       specifies switch ids 1, 2 and 3

  WORD  Switch id(s)

3850#software install file flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin switch 1-2
Preparing install operation ...
[1]: Copying software from active switch 1 to switch 2
[1]: Finished copying software to switch 2
[1 2]: Starting install operation    // [1 2] MEANS SWITCH 1 AND 2
[1 2]: Expanding bundle flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin
[1 2]: Copying package files
[1 2]: Package files copied
[1 2]: Finished expanding bundle flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin
[1 2]: Verifying and copying expanded package files to flash:
[1 2]: Verified and copied expanded package files to flash:
[1 2]: Starting compatibility checks
[1 2]: Finished compatibility checks
[1 2]: Starting application pre-installation processing
[1 2]: Finished application pre-installation processing
[1]: Old files list:
    Removed cat3k_caa-base.SPA.03.06.04.E.pkg
    Removed cat3k_caa-drivers.SPA.03.06.04.E.pkg
    Removed cat3k_caa-infra.SPA.03.06.04.E.pkg
    Removed cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
    Removed cat3k_caa-platform.SPA.03.06.04.E.pkg
    Removed cat3k_caa-wcm.SPA.10.2.140.0.pkg
[2]: Old files list:
    Removed cat3k_caa-base.SPA.03.06.04.E.pkg
    Removed cat3k_caa-drivers.SPA.03.06.04.E.pkg
    Removed cat3k_caa-infra.SPA.03.06.04.E.pkg
    Removed cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
    Removed cat3k_caa-platform.SPA.03.06.04.E.pkg
    Removed cat3k_caa-wcm.SPA.10.2.140.0.pkg
[1]: New files list:
    Added cat3k_caa-base.SPA.03.06.07E.pkg
    Added cat3k_caa-drivers.SPA.03.06.07E.pkg
    Added cat3k_caa-infra.SPA.03.06.07E.pkg
    Added cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg
    Added cat3k_caa-platform.SPA.03.06.07E.pkg
    Added cat3k_caa-wcm.SPA.10.2.170.0.pkg
[2]: New files list:
    Added cat3k_caa-base.SPA.03.06.07E.pkg
    Added cat3k_caa-drivers.SPA.03.06.07E.pkg
    Added cat3k_caa-infra.SPA.03.06.07E.pkg
    Added cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg
    Added cat3k_caa-platform.SPA.03.06.07E.pkg
    Added cat3k_caa-wcm.SPA.10.2.170.0.pkg

[1 2]: Creating pending provisioning file
[1 2]: Finished installing software.  New software will load on reboot.
[1 2]: Committing provisioning file

[1 2]: Do you want to proceed with reload? [yes/no]: yes

 <OUTPUT TRUNCATED>

3850#show verson | inc INSTALL
*    1 32    WS-C3850-24T       03.06.07E         cat3k_caa-universalk9 INSTALL
     2 32    WS-C3850-24T       03.06.07E         cat3k_caa-universalk9 INSTALL

3850#show switch
Switch/Stack Mac Address : 580a.2006.1234 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.1234     10     V03     Ready              
 2       Standby  580a.201b.5678     1      V03     Ready

3850#software clean
Preparing clean operation ...
[1 2]: Cleaning up unnecessary package files
[1 2]: No path specified, will use booted path flash:packages.conf
[1 2]: Cleaning flash:
[1]: Preparing packages list to delete ...
     In use files, will not delete:
       cat3k_caa-base.SPA.03.06.07E.pkg
       cat3k_caa-drivers.SPA.03.06.07E.pkg
       cat3k_caa-infra.SPA.03.06.07E.pkg
       cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg
       cat3k_caa-platform.SPA.03.06.07E.pkg
       cat3k_caa-wcm.SPA.10.2.170.0.pkg
       packages.conf
[2]: Preparing packages list to delete ...
     In use files, will not delete:
       cat3k_caa-base.SPA.03.06.07E.pkg
       cat3k_caa-drivers.SPA.03.06.07E.pkg
       cat3k_caa-infra.SPA.03.06.07E.pkg
       cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg
       cat3k_caa-platform.SPA.03.06.07E.pkg
       cat3k_caa-wcm.SPA.10.2.170.0.pkg
       packages.conf
[1]: Files that will be deleted:
    cat3k_caa-base.SPA.03.06.04.E.pkg
    cat3k_caa-drivers.SPA.03.06.04.E.pkg
    cat3k_caa-infra.SPA.03.06.04.E.pkg
    cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
    cat3k_caa-platform.SPA.03.06.04.E.pkg
    cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin
    cat3k_caa-wcm.SPA.10.2.140.0.pkg
    packages.conf.00-
[2]: Files that will be deleted:
    cat3k_caa-base.SPA.03.06.04.E.pkg
    cat3k_caa-drivers.SPA.03.06.04.E.pkg
    cat3k_caa-infra.SPA.03.06.04.E.pkg
    cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
    cat3k_caa-platform.SPA.03.06.04.E.pkg
    cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin
    cat3k_caa-wcm.SPA.10.2.140.0.pkg
    packages.conf.00-

[1 2]: Do you want to proceed with the deletion? [yes/no]: yes
[1 2]: Clean up completed


You might encounter a Member switch that wouldn't join the stack after the upgrade process. The show switch will display a V-Mismatch state on a Member switch. Just issue a reload slot <SWITCH NUMBER> to reboot the specific Member switch again.

3850#show switch
Switch/Stack Mac Address : 580a.2006.1111 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.1111     1      V03     Ready              
 2       Member   580a.201b.2222     1      0       V-Mismatch         

3850#terminal monitor    // MONITOR THE MEMBER SWITCH STATE
3850#reload slot 2
Stack is in Half ring setup; Reloading a switch might cause stack split
Proceed with reload? [confirm]     // JUST HIT ENTER

3850#show switch
Switch/Stack Mac Address : 580a.2006.1111 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.1111     1      V03     Ready              
 2       Member   0000.0000.0000     0      0       Removed

000156: Feb 14 04:30:46.687 UTC: %STACKMGR-1-STACK_LINK_CHANGE: 1 stack-mgr:  Stack port 1 on switch 1 is up
000157: Feb 14 04:30:50.630 UTC: %STACKMGR-6-SWITCH_ADDED: 1 stack-mgr:  Switch 2 has been added to the stack.
000158: Feb 14 04:31:01.271 UTC: %STACKMGR-6-SWITCH_READY: 1 stack-mgr:  Switch 2 is ready.

3850#show switch
Switch/Stack Mac Address : 580a.2006.1111 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.1111     1      V03     Ready              
 2       Member   580a.201b.2222     1      0       Initializing   

000159: Feb 14 04:31:01.276 UTC: Starting SWITCH-ADD sequence, switch 2
000160: Feb 14 04:31:03.367 UTC: %NGWC_USB_CONSOLE-6-CONFIG_ENABLE: Switch 2: Console media-type changed to default

3850#show switch
Switch/Stack Mac Address : 580a.2006.1111 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.1111     1      V03     Ready              
 2       Member   580a.201b.2222    1      V03     Syncing 

000165: Feb 14 04:31:23.510 UTC: SWITCH-ADD sequence complete, switch 2

3850#show switch
Switch/Stack Mac Address : 580a.2006.2980 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.2980     1      V03     Ready              
 2       Member   580a.201b.9480     1      V03     Ready 


It's also best practice to hard code the switch priority (default is 1) in order to avoid this kind of issue. I've set switch 1 with a priority of 10 (higher is better) in order to always be the Active (Master) switch in the stack.

3850#switch ?
  <1-9>  Switch Number

3850#switch 1 ?
  priority  Set the priority of the specified switch
  renumber  Renumber the specified switch number
  stack     Stack port enable or disable

3850#switch 1 priority ?
  <1-15>  Switch Priority

3850#switch 1 priority 10
WARNING: Changing the switchpriority may result in a configuration change for that switch. Do you want to continue?[y/n]y

3850#show switch
Switch/Stack Mac Address : 580a.2006.1111 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
------------------------------------------------------------
*1       Active   580a.2006.1111     10     V03     Ready              
 2       Standby  580a.201b.2222     1      V03     Ready

Friday, February 7, 2020

Cisco 3850 IOS Bundle to Install Mode Conversion

Here's a good Cisco link comparing the Install versus Bundle Mode on a Catalyst 3850 switch (also applies to a 3650 switch).

Install Versus Bundle Mode

When you deploy the Cisco Catalyst 3850 Series Switch, you have two modes of operation to choose from: INSTALL and BUNDLE. There are minor differences between the two modes. Review the configuration guide for more details.

Cisco recommends that the INSTALL mode is used during operation because it allows for a more complete set of features and requires fewer resources upon boot.


Install Mode

This is the default mode for the switch. The INSTALL mode uses a package-provisioning file named packages.conf in order to boot the switch. In addition, there are a number of .pkg files in the flash.

Cisco recommends that you do not alter these files unless directed by a Cisco Technical Assistance Center (TAC) engineer.


Bundle Mode

If you are comfortable with the use of traditional monolithic IOS images in order to boot the switch, then the BUNDLE mode should be familiar. The BUNDLE mode consumes more memory than the INSTALL mode because the packages are extracted from the Bundle and copied to the RAM.


Use the show version command to verify the current boot image and IOS mode, which is in BUNDLE mode.

3850#show version
Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.06.04.E RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Sat 13-Feb-16 03:45 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2015 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON
BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 1.18, RELEASE SOFTWARE (P)

3850 uptime is 2 years, 36 weeks, 3 days, 19 hours, 19 minutes
Uptime for this control processor is 2 years, 36 weeks, 3 days, 19 hours, 22 minutes
System returned to ROM by Power Failure
System restarted at 21:36:40 UTC Fri May 26 2017
System image file is "flash:cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin"
Last reload reason: Power Failure

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.

License Level: Ipbase
License Type: Permanent
Next reload license Level: Ipbase

cisco WS-C3850-48P (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FOC20031234
2 Virtual Ethernet interfaces
52 Gigabit Ethernet interfaces
4 Ten Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
250456K bytes of Crash Files at crashinfo:.
1609272K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : 00:af:1f:cc:12:34
Motherboard Assembly Number        : 73-15800-07
Motherboard Serial Number          : FOC2003ABCD
Model Revision Number              : AA0
Motherboard Revision Number        : B0
Model Number                       : WS-C3850-48P
System Serial Number               : FOC20031234

Switch Ports Model              SW Version        SW Image              Mode  
------ ----- -----              ----------        ----------            ----  
*    1 56    WS-C3850-48P       03.06.04.E        cat3k_caa-universalk9 BUNDLE

Configuration register is 0x102


Extract or expand the BUNDLE image to flash memory using the software expand running to flash: command. Notice the running-packages.conf was created since there's already an existing packages.conf file using the old image (03.02.03).

3850#software expand running to flash:
Preparing expand operation ...
[1]: Expanding the running bundle
[1]: Copying package files
[1]: A different version of provisioning file packages.conf already exists in flash:.
    The provisioning file from the expanded bundle will be saved as
    flash:running-packages.conf
[1]: Package files copied
[1]: Finished expanding the running bundle


The BUNDLE mode uses the traditional boot command to point the .bin file.

3850#show run | inc boot
boot-start-marker
boot system switch all flash:cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
boot-end-marker
diagnostic bootup level minimal
3850#dir
Directory of flash:/

77442  -rwx     2097152   Feb 6 2020 14:10:40 +00:00  nvram_config
77443  -rwx    74369716  Jan 26 2016 22:54:35 +00:00  cat3k_caa-base.SPA.03.02.03.SE.pkg
77444  -rwx     5808828  Jan 26 2016 22:54:36 +00:00  cat3k_caa-drivers.SPA.03.02.03.SE.pkg
77445  -rwx    32496484  Jan 26 2016 22:54:35 +00:00  cat3k_caa-infra.SPA.03.02.03.SE.pkg
77446  -rwx    30418104  Jan 26 2016 22:54:36 +00:00  cat3k_caa-iosd-universalk9.SPA.150-1.EX3.pkg
77447  -rwx    16059104  Jan 26 2016 22:54:35 +00:00  cat3k_caa-platform.SPA.03.02.03.SE.pkg
77448  -rwx    64586444  Jan 26 2016 22:54:36 +00:00  cat3k_caa-wcm.SPA.10.0.120.0.pkg
77449  -rwx        1224  Jan 26 2016 22:54:46 +00:00  packages.conf
77450  -rw-   302988468   May 9 2016 20:14:42 +00:00  cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
77451  drwx        4096   May 9 2016 20:22:52 +00:00  dc_profile_dir
77453  -rw-        2656   Dec 2 2019 07:38:53 +00:00  vlan.dat
77454  -rw-   305199560  Jan 11 2020 11:01:34 +00:00  cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin
77457  -rw-    82665136   Feb 6 2020 16:56:48 +00:00  cat3k_caa-base.SPA.03.06.04.E.pkg
77458  -rw-     4913852   Feb 6 2020 16:56:48 +00:00  cat3k_caa-drivers.SPA.03.06.04.E.pkg
77459  -rw-    33784816   Feb 6 2020 16:56:48 +00:00  cat3k_caa-infra.SPA.03.06.04.E.pkg
77460  -rw-    43021636   Feb 6 2020 16:56:48 +00:00  cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
77461  -rw-    27417488   Feb 6 2020 16:56:48 +00:00  cat3k_caa-platform.SPA.03.06.04.E.pkg
77462  -rw-   111180608   Feb 6 2020 16:56:48 +00:00  cat3k_caa-wcm.SPA.10.2.140.0.pkg
77456  -rw-        1244   Feb 6 2020 16:57:06 +00:00  running-packages.conf

1621966848 bytes total (481095680 bytes free)


Remove the old boot command and set it to running-packages.conf created earlier. Use show boot to verify the boot variables then reboot the switch using the reload command.

3850#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
3850(config)#no boot system switch all flash:cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
3850(config)#boot system switch all flash:running-packages.conf
3850(config)#end
3850#write memory
Building configuration...
Compressed configuration from 15761 bytes to 7060 bytes[OK]

3850#show boot
---------------------------
Switch 1
---------------------------
Current Boot Variables:
BOOT variable = flash:running-packages.conf;

Boot Variables on next reload:
BOOT variable = flash:running-packages.conf;
Allow Dev Key = yes
Manual Boot = no
Enable Break = no
3850#reload
Reload command is being issued on Active unit, this will reload the whole stack

<OUTPUT TRUNCATED>


Notice the boot image is pointing to running-packages.conf and IOS mode is now INSTALL.

3850#show version
Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.06.04.E RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Sat 13-Feb-16 03:45 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2015 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON
BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 1.18, RELEASE SOFTWARE (P)

3850 uptime is 1 minute
Uptime for this control processor is 4 minutes
System returned to ROM by reload at 16:59:07 UTC Thu Feb 6 2020
System image file is "flash:running-packages.conf"
Last reload reason: Reload command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.
         
License Level: Ipbase
License Type: Permanent
Next reload license Level: Ipbase

cisco WS-C3850-48P (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FOC20031234
2 Virtual Ethernet interfaces
52 Gigabit Ethernet interfaces
4 Ten Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
250456K bytes of Crash Files at crashinfo:.
1609272K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : 00:af:1f:cc:12:34
Motherboard Assembly Number        : 73-15800-07
Motherboard Serial Number          : FOC2003ABCD
Model Revision Number              : AA0
Motherboard Revision Number        : B0
Model Number                       : WS-C3850-48P
System Serial Number               : FOC20031234

Switch Ports Model              SW Version        SW Image              Mode  
------ ----- -----              ----------        ----------            ----  
*    1 56    WS-C3850-48P       03.06.04.E        cat3k_caa-universalk9 INSTALL

Configuration register is 0x102