Friday, February 3, 2017

Cisco 4331 Router IOS and License Upgrade

I've configured and installed Network Interface Module (NIM) and PVDM module on a Cisco 4331 ISR router on my previous post. Now I'll share the steps on how to perform an IOS upgrade and install a feature license on a Cisco 4000 series router. 


Router#dir ?
  /all             List all files
  /recursive       List files recursively
  all-filesystems  List files on all filesystems
  bootflash:       Directory or file name
  cns:             Directory or file name
  flash:           Directory or file name
  null:            Directory or file name
  nvram:           Directory or file name
  system:          Directory or file name
  tar:             Directory or file name
  tmpsys:          Directory or file name
  usb0:            Directory or file name      // usb0: WILL BE DISPLAYED IF ROUTER SUPPORTS IT
  |                Output modifiers
  <cr>

Router#dir usb0:
Directory of usb0:/

  112  -rwx                0  Aug 20 2013 07:39:20 +00:00  system
  113  -rwx         62682268  Mar 29 2012 12:04:58 +00:00  c2900-universalk9-mz.SPA.150-1.M4.bin
  114  -rwx          4968160   Dec 9 2014 11:44:34 +00:00  TeamViewerQS_en-idch93gk2g.exe
  115  -rwx        125231421  Feb 12 2015 17:00:24 +00:00  lms5.1.bin
  116  -rwx         95947928  Sep 26 2015 08:01:34 +00:00  c2900-universalk9-mz.SPA.153-3.M6.bin
  117  -rwx        302988468  Mar 29 2016 14:29:12 +00:00  cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
  118  -rwx         97911420  Mar 27 2015 18:25:44 +00:00  c3900-universalk9-mz.SPA.154-1.T1.bin
  119  -rwx         52420608   Apr 1 2016 13:13:32 +00:00  asa924-8-smp-k8.bin
  120  -rwx         69285888  Mar 24 2016 14:55:24 +00:00  asa942-11-smp-k8.bin
  121  -rwx             1402  Jun 30 2016 23:39:00 +00:00  BOOTEX.LOG
  122  drwx            32768   Jul 1 2016 00:02:18 +00:00  System Volume Information
  123  -rwx         45424992  Aug 12 2016 13:59:18 +00:00  c2800nm-advsecurityk9-mz.151-4.M10.bin
  124  -rwx         25819140  Nov 26 2016 21:45:52 +00:00  asdm-761.bin
  125  -rwx         86678080  Nov 26 2016 21:48:12 +00:00  asa961-10-lfbff-k8.SPA
  126  -rwx        174131122  Nov 25 2016 06:30:38 +00:00  AIR-CT2500-K9-8-0-140-0.aes
  127  -rwx        420461412  Nov 25 2016 05:54:08 +00:00  isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin      // CISCO RECOMMENDED IOS VERSION AS OF THIS WRITING

2013200384 bytes total (448921600 bytes free)

Router#copy usb0:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin flash:
Destination filename [isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

<OUTPUT TRUNCATED>

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

Router#dir
*Dec  3 07:10:11.475 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:console  logged command:boot system bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin
*Dec  3 07:10:12.467 UTC: %SYS-5-CONFIG_I: Configured from console by console
Directory of bootflash:/

   11  drwx            16384  Mar 24 2016 03:53:01 +00:00  lost+found
193537  drwx             4096   Dec 3 2016 06:50:06 +00:00  .prst_sync
   12  -rw-        470602752  Mar 24 2016 04:12:15 +00:00  isr4300-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin
80641  drwx             4096  Mar 24 2016 03:53:32 +00:00  .installer
177409  drwx             4096  Mar 24 2016 04:20:10 +00:00  core
64513  drwx             4096  Mar 24 2016 04:20:10 +00:00  .rollback_timer
   13  -rw-                0  Mar 24 2016 04:20:20 +00:00  tracelogs.219
209665  drwx             8192   Dec 3 2016 06:54:52 +00:00  tracelogs
   14  -rw-               30   Dec 3 2016 06:50:06 +00:00  throughput_monitor_params
   15  -rw-        420461412   Dec 3 2016 07:09:34 +00:00  isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin

3249049600 bytes total (2191085568 bytes free)

Router#show run | include boot
boot-start-marker
boot-end-marker
license boot level appxk9

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#boot system bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin
Router(config)#end
Router#sh run | i bootf
boot system bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin
Router#write memory
Building configuration...

[OK]
Router#reload
Proceed with reload? [confirm]

*Dec  3 07:10:45.779 UTC: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.Dec  3 07:11:00.990 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: process exit with reload chassis code


<OUTPUT TRUNCATED>


I also needed to activate an evaluation (90-day) appxk9 license to support the MPLS commands on the Cisco 4331 router. The datak9 is the equivalent license in Cisco ISR G2 series routers (1900, 2900, 3900).

Router#show version
Cisco IOS XE Software, Version 03.13.06a.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S6a, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Tue 27-Sep-16 21:02 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON

Router uptime is 1 minute
Uptime for this control processor is 2 minutes
System image file is "bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin"
Last reload reason: Reload Command


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

        
Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite                 Suite Current         Type           Suite Next reboot    
--------------------------------------------------------------------------------
FoundationSuiteK9     None                  None           None                 
securityk9
appxk9

AdvUCSuiteK9          None                  None           None                 
uck9
cme-srst
cube

Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot 
------------------------------------------------------------------
appxk9           None             None             None
uck9             None             None             None
securityk9       None             None             None
ipbase           ipbasek9         Permanent        ipbasek9

cisco ISR4331/K9 (1RU) processor with 1655569K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

Configuration register is 0x2102

Router#show license
Index 1 Feature: appxk9                        
        Period left: Not Activated
        Period Used: 0  minute  0  second 
        License Type: EvalRightToUse
        License State: Active, Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 2 Feature: uck9                          
        Period left: Not Activated
        Period Used: 0  minute  0  second 
        License Type: EvalRightToUse
        License State: Active, Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 3 Feature: securityk9                    
        Period left: Not Activated
        Period Used: 0  minute  0  second 
        License Type: EvalRightToUse
        License State: Active, Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 4 Feature: ipbasek9                      
        Period left: Life time
         
Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#license boot ?
  level  which level to boot
  suite  which suite to boot

Router(config)#license boot level ?
  appxk9      Appx License Level
  securityk9  Security License Level
  uck9        Unified Communication License Level

Router(config)#license boot level appxk9 ?
  disable  disable the group
  <cr>

Router(config)#license boot level appxk9
PLEASE  READ THE  FOLLOWING TERMS  CAREFULLY. INSTALLING THE LICENSE OR
LICENSE  KEY  PROVIDED FOR  ANY CISCO  PRODUCT  FEATURE  OR  USING SUCH
PRODUCT  FEATURE  CONSTITUTES  YOUR  FULL ACCEPTANCE  OF  THE FOLLOWING
TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO  BE BOUND
BY ALL THE TERMS SET FORTH HEREIN.

Use of this product feature requires  an additional license from Cisco,
together with an additional  payment.  You may use this product feature
on an evaluation basis, without payment to Cisco, for 60 days. Your use
of the  product,  including  during the 60 day  evaluation  period,  is
subject to the Cisco end user license agreement
http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html
If you use the product feature beyond the 60 day evaluation period, you
must submit the appropriate payment to Cisco for the license. After the
60 day  evaluation  period,  your  use of the  product  feature will be
governed  solely by the Cisco  end user license agreement (link above),
together  with any supplements  relating to such product  feature.  The
above  applies  even if the evaluation  license  is  not  automatically
terminated  and you do  not receive any notice of the expiration of the
evaluation  period.  It is your  responsibility  to  determine when the
evaluation  period is complete and you are required to make  payment to
Cisco for your use of the product feature beyond the evaluation period.

Your  acceptance  of  this agreement  for the software  features on one
product  shall be deemed  your  acceptance  with  respect  to all  such
software  on all Cisco  products  you purchase  which includes the same
software.  (The foregoing  notwithstanding, you must purchase a license
for each software  feature you use past the 60 days evaluation  period,
so  that  if you enable a software  feature on  1000  devices, you must
purchase 1000 licenses for use past  the 60 day evaluation period.)   

Activation  of the  software command line interface will be evidence of
your acceptance of this agreement.


ACCEPT? (yes/[no]): yes

% use 'write' command to make license boot config take effect on next boot.

Router(config)#end
Router#write memory
Building configuration...

Router#show license
Index 1 Feature: appxk9                        
    Period left: 8  weeks 4  days
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse

    License State: Active, Not in Use, EULA accepted
    License Count: Non-Counted
    License Priority: Low
Index 2 Feature: uck9                          
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 3 Feature: securityk9                    
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 4 Feature: ipbasek9                      
    Period left: Life time
    License Type: Permanent
    License State: Active, In Use
    License Count: Non-Counted
    License Priority: Medium
Index 5 Feature: FoundationSuiteK9             
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 6 Feature: AdvUCSuiteK9                  
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 7 Feature: cme-srst                      
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: 0/0  (In-use/Violation)
    License Priority: None
Index 8 Feature: hseck9                        
Index 9 Feature: throughput                    
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 10 Feature: internal_service


Router#reload
Proceed with reload? [confirm]

*Dec  3 06:46:41.434 UTC: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.Dec  3 06:46:56.474 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: process exit with reload chassis code

Initializing Hardware ..


<OUTPUT TRUNCATED>


Cisco IOS XE Software, Version 03.13.06a.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S6a, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Tue 27-Sep-16 21:02 by mcpre


<OUTPUT TRUNCATED>


Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot 
------------------------------------------------------------------
appx             appxk9           EvalRightToUse   appxk9
uc               None             None             None
security         None             None             None
ipbase           ipbasek9         Permanent        ipbasek9

cisco ISR4331/K9 (1RU) processor with 1686708K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

Configuration register is 0x2102

Router#show license
Index 1 Feature: appxk9                        
    Period left: 8  weeks 4  days
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, In Use
    License Count: Non-Counted
    License Priority: Low

Index 2 Feature: uck9                          
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 3 Feature: securityk9                    
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 4 Feature: ipbasek9                     
    Period left: Life time
    License Type: Permanent
    License State: Active, In Use
    License Count: Non-Counted
    License Priority: Medium
Index 5 Feature: FoundationSuiteK9            
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 6 Feature: AdvUCSuiteK9                 
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 7 Feature: cme-srst                     
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: 0/0  (In-use/Violation)
    License Priority: None
Index 8 Feature: hseck9                       
Index 9 Feature: throughput                   
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 10 Feature: internal_service

7 comments:

  1. Hi John, thanks for the post. Really useful.

    Also, as upgrading the software and activating the license both require a reboot, does upgrading the license to permanent from temporary also require a reboot?

    ReplyDelete
  2. Yes, a reboot is required. See useful link:

    http://www.cisco.com/c/en/us/td/docs/routers/access/sw_activation/SA_on_ISR.html#pgfId-1168046

    ReplyDelete
  3. Thank you, John! Appreciate your quick response.

    ReplyDelete
  4. hello ,
    I am configuring a Ciscos4331 router but cannot save changes on reboot. even with the copy running config command. Please help

    ReplyDelete
    Replies
    1. Hi,
      Check the config register and make sure it's set to 0x2102. Issue a "show version" to verify.

      Delete
  5. What happens if I don't get my license before the 60 day eval is up? Will the router reload or will the router just start throttling traffic back to normal throughput levels?

    ReplyDelete
    Replies
    1. No, it won't auto reload. I believe the eval feature will be restricted or it won't function.

      Delete