Friday, March 2, 2018

Upgrading a Cisco ASR 1001-X Router and show hw-module interface Command

I was issued a new Dell Latitude 7480 laptop and had to figure out the Break sequence when doing a password recovery on a Cisco device. You need to hit Fn+Shift+B in order to do the Break sequence since there's no Break or Pause button on newer Dell Latitude laptops.

The Cisco ASR 1001-X router has two 10 GE SFP-only ports (Te0/0/0 - Te0/0/1) one, six GE SFP-only ports (GE0/0/0 - 0/0/5), one dedicated management port (GE0) and one Network Interface Module (NIM) slot.

Router#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
Te0/0/0                unassigned      YES NVRAM  administratively down down     
Te0/0/1                unassigned      YES NVRAM  administratively down down    
GigabitEthernet0/0/0   unassigned      YES NVRAM  administratively down down   
GigabitEthernet0/0/1   unassigned      YES NVRAM  administratively down down   
GigabitEthernet0/0/2   unassigned      YES NVRAM  administratively down down 
GigabitEthernet0/0/3   unassigned      YES NVRAM  administratively down down   
GigabitEthernet0/0/4   unassigned      YES NVRAM  administratively down down   
GigabitEthernet0/0/5   unassigned      YES NVRAM  administratively down down   
GigabitEthernet0       unassigned      YES NVRAM  administratively down down      // MGMT PORT


It has two power supplies found at the back and has an on/off toggle switch.


The serial number sticker is found on the right-hand side (when facing the router ports).


Router#dir
Directory of bootflash:/

   11  drwx            16384  Jan 15 2018 20:17:12 +00:00  lost+found
267169  drwx             4096   Feb 5 2018 21:29:38 +00:00  .prst_sync
   12  -rw-        592670232  Jan 15 2018 20:18:04 +00:00  asr1001x-universalk9.16.03.05.SPA.bin
161921  drwx             4096  Jan 15 2018 20:20:26 +00:00  .installer
48577  drwx             8192   Feb 5 2018 21:30:03 +00:00  tracelogs
129537  drwx             4096  Jan 15 2018 20:27:39 +00:00  core
396705  drwx             4096  Jan 15 2018 20:26:06 +00:00  .rollback_timer
56673  drwx             4096  Jan 15 2018 20:26:20 +00:00  virtual-instance
170017  drwx             4096   Feb 5 2018 21:29:38 +00:00  crypto
   13  -rw-               30   Feb 5 2018 21:29:41 +00:00  throughput_monitor_params
   14  -rw-               35  Jan 15 2018 20:27:46 +00:00  pnp-tech-time
   15  -rw-            39008  Jan 15 2018 20:27:52 +00:00  pnp-tech-discovery-summary

6646632448 bytes total (5709942784 bytes free)

Router#
*Feb  5 21:31:35.281: %IOSD_INFRA-6-IFS_DEVICE_OIR: Device usb0 added

Router#dir usb0:        // USB SLOT 0 IS FOUND ON TOP, USB SLOT 1 IS AT THE BOTTOM
Directory of usb0:/

<OUTPUT TRUNCATED>

   25  -rwx        104970520   Feb 5 2018 15:53:40 +00:00  c3900-universalk9-mz.SPA.154-3.M6a.bin
   26  -rwx        490064992   Feb 5 2018 15:53:10 +00:00  asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin

2013200384 bytes total (7176192 bytes free)

Router#copy usb0:/asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin bootflash:
Destination filename [asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

<OUTPUT TRUNCATED>

Router#dir
Directory of bootflash:/

   11  drwx            16384  Jan 15 2018 20:17:12 +00:00  lost+found
267169  drwx             4096   Feb 5 2018 21:29:38 +00:00  .prst_sync
   12  -rw-        592670232  Jan 15 2018 20:18:04 +00:00  asr1001x-universalk9.16.03.05.SPA.bin
161921  drwx             4096  Jan 15 2018 20:20:26 +00:00  .installer
48577  drwx             8192   Feb 5 2018 21:35:05 +00:00  tracelogs
129537  drwx             4096  Jan 15 2018 20:27:39 +00:00  core
396705  drwx             4096  Jan 15 2018 20:26:06 +00:00  .rollback_timer
56673  drwx             4096  Jan 15 2018 20:26:20 +00:00  virtual-instance
170017  drwx             4096   Feb 5 2018 21:29:38 +00:00  crypto
   13  -rw-               30   Feb 5 2018 21:29:41 +00:00  throughput_monitor_params
   14  -rw-               35  Jan 15 2018 20:27:46 +00:00  pnp-tech-time
   15  -rw-            39008  Jan 15 2018 20:27:52 +00:00  pnp-tech-discovery-summary
   16  -rw-        490064992   Feb 5 2018 21:38:32 +00:00  asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin

Router#show run | i boot
boot-start-marker
boot-end-marker
diagnostic bootup level minimal

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#boot system bootflash:asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin   // PRIMARY IOS-XE BOOT
Router(config)#boot system bootflash:asr1001x-universalk9.16.03.05.SPA.bin     // SECONDARY IOX-XE BOOT

Router(config)#do show run | inc boot
boot-start-marker
boot system bootflash:asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin
boot system bootflash:asr1001x-universalk9.16.03.05.SPA.bin
boot-end-marker
diagnostic bootup level minimal
Router(config)#end
Router#write memory

*Feb  5 21:39:50.440: %SYS-5-CONFIG_I: Configured from console by console
Building configuration...
[OK]
Router#reload
Proceed with reload? [confirm]

*Feb  5 21:40:03.075: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.Feb  5 21:40:22.099 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: process exit with reload chassis code


Initializing Hardware ...

System integrity status: 00000610

System Bootstrap, Version 16.3(2r), RELEASE SOFTWARE
Copyright (c) 1994-2016  by cisco Systems, Inc.

Current image running: Boot ROM1

Last reset cause: CPU-ResetRequest

ASR1001-X platform with 8388608 Kbytes of main memory

File size is 0x1d35cc60

Located asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin

Image size 490064992 inode num 16, bks cnt 119645 blk size 8*512

##################################################################################
##################################################################################

Boot image size = 490064992 (0x1d35cc60) bytes

ROM:RSA Self Test Passed

ROM:Sha512 Self Test Passed

Package header rev 1 structure detected

Calculating SHA-1 hash...done

validate_package_cs: SHA-1 hash:

    calculated 7f3d05b8:1ed209a6:4465d7ea:f1843d1e:b5a930a5

    expected   7f3d05b8:1ed209a6:4465d7ea:f1843d1e:b5a930a5

Validating main package signatures

RSA Signed RELEASE Image Signature Verification Successful.

Image validated

%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 6 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 7 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 8 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 9 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 10 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 11 contained errors which were auto-corrected.

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Sun 31-Jan-16 02:16 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco ASR1001-X (1NG) processor (revision 1NG) with 3751430K/6147K bytes of memory.
Processor board ID FXS2148QABC
6 Gigabit Ethernet interfaces
2 Ten Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
6594559K bytes of eUSB flash at bootflash:.

Press RETURN to get started!

*Feb  5 21:42:23.941: %SMART_LIC-6-AGENT_READY: Smart Agent for Licensing is initialized
*Feb  5 21:42:24.955: %LICENSE-6-EULA_ACCEPT_ALL: The Right to Use End User License Agreement is accepted
*Feb  5 21:42:24.979: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = asr1001x Next reboot level = adventerprise and License = adventerprise
*Feb  5 21:42:26.500: %IOSXE_THROUGHPUT-6-LEVEL: Throughput level has been set to 20000000 kbps
*Feb  5 21:42:29.100: %LICENSE-6-EULA_ACCEPTED: EULA for feature throughput_20g 1.0 has been accepted. UDI=ASR1001-X:JAE2201
Router>
Router>09J6; StoreIndex=11:Built-In License Storage
*Feb  5 21:42:33.696: pak_debug_init: Successfully initialized pak debug trace buffer
*Feb  5 21:42:37.880: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
*Feb  5 21:42:41.200: %VOICE_HA-7-STATUS: CUBE HA-supported platform detected.
*Feb  5 21:42:42.165: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Feb  5 21:42:42.165: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Feb  5 21:42:42.165: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0, changed state to up
*Feb  5 21:42:42.165: %LINEPROTO-5-UPDOWN: Line protocol on Interface LI-Null0, changed state to up
*Feb  5 21:42:42.165: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Feb  5 21:42:42.168: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Feb  5 21:42:44.200: %IOSXE_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-intf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001
*Feb  5 21:42:44.314: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, changed state to up
*Feb  5 21:42:44.314: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Feb  5 21:42:44.314: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Feb  5 21:42:44.314: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Feb  5 21:42:29.459: %CMLIB-6-THROUGHPUT_VALUE: F0: cmand:  Throughput license found, throughput set to 20000000 kbps
*Feb  5 21:42:31.980: %CPPHA-7-START: F0: cpp_ha:  CPP 0 preparing ucode
*Feb  5 21:42:32.156: %CPPHA-7-START: F0: cpp_ha:  CPP 0 startup init
*Feb  5 21:42:35.772: %IOSXE-4-PLATFORM: R0/0: kernel: OCTEON[0]: Received active indication from core
*Feb  5 21:42:35.772: %IOSXE-4-PLATFORM: R0/0: kernel: octeon_core_drv_init: ctx_chunks = 14000
*Feb  5 21:42:35.772: %IOSXE-4-PLATFORM: R0/0: kernel: octeon_core_drv_init: boot_log_ptr=12d580
*Feb  5 21:42:46.270: %SYS-4-CONFIG_NEWER: Configuration from version 16.3 may not be correctly understood
*Feb  5 21:42:47.647: %SYS-5-CONFIG_I: Configured from memory by console
*Feb  5 21:42:47.650: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/0, interfaces disabled
*Feb  5 21:42:47.653: %SPA_OIR-6-OFFLINECARD: SPA (BUILT-IN-2T+6X1GE) offline in subslot 0/0
*Feb  5 21:42:47.655: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Feb  5 21:42:47.655: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F0
*Feb  5 21:42:47.676: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Feb  5 21:42:47.676: %IOSXE_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Feb  5 21:42:47.686: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Feb  5 21:42:47.745: %SYS-5-RESTART: System restarted --
Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Sun 31-Jan-16 02:16 by mcpre
*Feb  5 21:42:47.781: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Feb  5 21:42:50.687: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Feb  5 21:42:50.691: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Feb  5 21:42:50.691: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Feb  5 21:42:53.348: %SYS-6-BOOTTIME: Time taken to reboot after reload =  172 seconds
*Feb  5 21:42:55.275: %SPA_OIR-6-ONLINECARD: SPA (BUILT-IN-2T+6X1GE) online in subslot 0/0
Router>enable
Router#show version
Cisco IOS XE Software, Version 03.13.05.S - Extended Support Release
Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Sun 31-Jan-16 02:16 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON

Router uptime is 1 minute
Uptime for this control processor is 2 minutes
System returned to ROM by reload
System image file is "bootflash:asr1001x-universalk9.03.13.05.S.154-3.S5-ext.SPA.bin"
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

License Level: adventerprise
License Type: Permanent
Next reload license Level: adventerprise

cisco ASR1001-X (1NG) processor (revision 1NG) with 3751430K/6147K bytes of memory.
Processor board ID FXS2148QABC
6 Gigabit Ethernet interfaces
2 Ten Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
6594559K bytes of eUSB flash at bootflash:.

Configuration register is 0x2102


SIN5-PE01#show inventory
NAME: "Chassis", DESCR: "Cisco ASR1001-X Chassis"
PID: ASR1001-X         , VID: V03, SN: FXS2148QABC

NAME: "Power Supply Module 0", DESCR: "Cisco ASR1001-X AC Power Supply"
PID: ASR1001-X-PWR-AC  , VID: V01, SN: LIT21393DEF

NAME: "Power Supply Module 1", DESCR: "Cisco ASR1001-X AC Power Supply"
PID: ASR1001-X-PWR-AC  , VID: V01, SN: LIT21393GHI

NAME: "Fan Tray", DESCR: "Cisco ASR1001-X Fan Tray"
PID: ASR1001-X-FANTRAY , VID:    , SN:           

NAME: "module 0", DESCR: "Cisco ASR1001-X SPA Interface Processor"
PID: ASR1001-X         , VID:    , SN:           

NAME: "SPA subslot 0/0", DESCR: "8-port Built-in GE SPA"
PID: BUILT-IN-2T+6X1GE , VID:    , SN:           

NAME: "subslot 0/0 transceiver 2", DESCR: "GE T"       // THESE ARE THE GLC-TE SFP
PID: SP7041-TE         , VID: A1  , SN: MTC21440123    

NAME: "subslot 0/0 transceiver 3", DESCR: "GE T"
PID: SP7041-TE         , VID: A1  , SN: MTC21440456   
         
NAME: "subslot 0/0 transceiver 4", DESCR: "GE T"
PID: SP7041-TE         , VID: A1  , SN: MTC21440789    

NAME: "subslot 0/0 transceiver 5", DESCR: "GE T"
PID: SP7041-TE         , VID: A1  , SN: MTC21440ABC    

NAME: "subslot 0/0 transceiver 7", DESCR: "GE T"
PID: SBCU-5740ARZ-CS1  , VID: G3.1, SN: AVC21432DEF  
  

NAME: "module R0", DESCR: "Cisco ASR1001-X Route Processor"
PID: ASR1001-X         , VID: V03, SN: JAE22010XYZ

NAME: "module F0", DESCR: "Cisco ASR1001-X Embedded Services Processor"
PID: ASR1001-X         , VID:    , SN:


The SFP transceivers are hot-swappable or supports Online Insertion and Removal (OIR). The vendor gave a mix of GLC-TE made from USA and China.


The China brand (left) has a bright yellow bale clasp which is made of plastic. The USA brand (right) has the metal bale clasp and has a hologram sticker.


You can observe via the console if the SFP is detected or issue a show hw-module interface g0/0/x transceiver status idprom to check the status.

Router#
*Feb  5 21:44:06.277: %TRANSCEIVER-6-INSERTED: SIP0/0: transceiver module inserted in GigabitEthernet0/0/0

Router#show h?
h323  history    hosts            html
http  hw-module  hw-programmable 

Router#show hw-module ?
  all        Select all supported modules in the system
  interface  Interface information
  subslot    Select subslot level module(s)

Router#show hw-module interface  g0/0/0 ?
  transceiver  show transceiver idprom and status

Router#show hw-module interface g0/0/0 transceiver ?
  idprom  transceiver idprom
  status  transceiver initialization status

Router#show hw-module interface g0/0/0 transceiver status
The Transceiver in slot 0 subslot 0 port 2 is enabled.
  Sensor Data is not supported by this transceiver

Router#show hw-module interface g0/0/0 transceiver status idprom
IDPROM for transceiver GigabitEthernet0/0/0:
  Description                               = SFP or SFP+ optics (type 3)
  Transceiver Type:                         = GE T (26)
  Product Identifier (PID)                  = SP7041-TE      
  Vendor Revision                           = A1 
  Serial Number (SN)                        = MTC21440ABC   
  Vendor Name                               = CISCO          
  Vendor OUI (IEEE company ID)              = 00.17.05 (5893)
  CLEI code                                 = CMUIAGBDEF
  Cisco part number                         = 30-1475-01
  Device State                              = Disabled.
  Date code (yy/mm/dd)                      = 17/11/07
  Connector type                            = Unknown.
  Encoding                                  = 8B10B
                                              NRZ
  Nominal bitrate                           = GE (1300 Mbits/s)
  Minimum bit rate as % of nominal bit rate = not specified
  Maximum bit rate as % of nominal bit rate = not specified