Saturday, October 2, 2021

Cisco ASR 1001-X IOS-XE 3.x to 16.x Software Upgrade

Here's a link for the IOS-XE 16.x series and the procedure in upgrading ROMmon in a Cisco ASR 1000 series. Below is the IOS-XE upgrade from 3.x to 16.x that I performed in a Cisco ASR 1001-X router. You first upgrade the ROMmon to the compatible IOS-XE 16.x version.

ASR1K#show version

Cisco IOS XE Software, Version 03.13.03.S - Extended Support Release

Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S3, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2015 by Cisco Systems, Inc.

Compiled Thu 28-May-15 14:26 by mcpre

 

 

Cisco IOS-XE software, Copyright (c) 2005-2015 by cisco Systems, Inc.

All rights reserved.  Certain components of Cisco IOS-XE software are

licensed under the GNU General Public License ("GPL") Version 2.0.  The

software code licensed under GPL Version 2.0 is free software that comes

with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such

GPL code under the terms of GPL Version 2.0.  For more details, see the

documentation or "License Notice" file accompanying the IOS-XE software,

or the applicable URL provided on the flyer accompanying the IOS-XE

software.

 

 

ROM: IOS-XE ROMMON

 

ASR1K uptime is 1 week, 1 day, 17 hours, 38 minutes

Uptime for this control processor is 1 week, 1 day, 17 hours, 39 minutes

System returned to ROM by reload at 12:12:44 UTC Mon May 24 2021

System image file is "bootflash:/asr1001x-universalk9.03.13.03.S.154-3.S3-ext.SPA.bin"

Last reload reason: Reload Command

 

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

License Level: adventerprise

License Type: Permanent

Next reload license Level: adventerprise

 

cisco ASR1001-X (1NG) processor (revision 1NG) with 6823656K/6147K bytes of memory.

Processor board ID FXS18351234

6 Gigabit Ethernet interfaces

2 Ten Gigabit Ethernet interfaces

32768K bytes of non-volatile configuration memory.

16777216K bytes of physical memory.

6688767K bytes of eUSB flash at bootflash:.

 

Configuration register is 0x2102

 

 

ASR1K#show platform

Chassis type: ASR1001-X          

 

Slot      Type                State                 Insert time (ago)

--------- ------------------- --------------------- -----------------

0         ASR1001-X           ok                    1w1d         

 0/0      BUILT-IN-2T+6X1GE   ok                    1w1d         

R0        ASR1001-X           ok, active            1w1d         

F0        ASR1001-X           ok, active            1w1d         

P0        ASR1001-X-PWR-AC    ps, fail              1w1d         

P1        ASR1001-X-PWR-AC    ok                    1w1d         

P2        ASR1001-X-FANTRAY   ok                    1w1d         

 

Slot      CPLD Version        Firmware Version                       

--------- ------------------- ---------------------------------------

0         14041015            15.4(2r)S

R0        14041015            15.4(2r)S

F0        14041015            15.4(2r)S                          

 

 

ASR1K#dir

Directory of bootflash:/

 

   11  drwx            16384   Oct 8 2014 19:44:23 +00:00  lost+found

482881  drwx             4096  May 24 2021 12:15:40 +00:00  .prst_sync

   12  -rw-        489848672   Sep 1 2015 08:24:44 +00:00  asr1001x-universalk9.03.13.03.S.154-3.S3-ext.SPA.bin

498977  drwx             4096   Oct 8 2014 19:48:02 +00:00  .installer

257537  drwx             4096   Oct 8 2014 20:15:24 +00:00  core

740417  drwx             4096   Oct 8 2014 20:15:24 +00:00  .rollback_timer

   13  -rw-                0   Oct 8 2014 20:15:32 +00:00  tracelogs.218

756513  drwx             8192   Jun 2 2021 04:25:11 +00:00  tracelogs

   14  -rw-        484898400  Oct 28 2014 09:38:03 +00:00  asr1001x-universalk9.03.13.00.S.154-3.S-ext.SPA.bin

   15  -rw-               30  May 24 2021 12:15:43 +00:00  throughput_monitor_params

   16  -rw-          6613972   Jun 1 2021 10:00:09 +00:00  asr1000-rommon.169_4r_SPA.pkg

   17  -rw-        762181641   Jun 1 2021 10:09:41 +00:00  asr1001x-universalk9.16.09.07.SPA.bin

 

6741659648 bytes total (4629876736 bytes free)

 

 

Use the upgrade rom-monitor filename bootflash:<NEW ROMMON>.pkg all privileged EXEC command. The ROMmon upgrade took around 10 minutes to complete. Reload the router for the new ROMmon version to take effect.

 

ASR1K#upgrade rom-monitor filename bootflash:asr1000-rommon.169_4r_SPA.pkg all   

Chassis model ASR1001-X has a single rom-monitor.

 

Upgrade rom-monitor

 

Target copying rom-monitor image file

File size : //tmp/rommon_upgrade/latest.bin

File size is : 3211264

FIPS File size is : 3211264

ROMMON Image Type : X86

File /tmp/rommon_upgrade/latest.bin is a FIPS ROMMON image

FIPS-140-3 Load Test on /tmp/rommon_upgrade/latest.bin has PASSED.

Authenticity of the image has been verified.

4259840+0 records in

4259840+0 records out

131072+0 records in

131072+0 records out

655360+0 records in

655360+0 records out

Checking upgrade image...

3211264+0 records in

6272+0 records out

Upgrade image MD5 signature is d4acb95f9a3e91236cae9a51cadc1234

Burning upgrade partition...

3211264+0 records in

3211264+0 records out

Checking upgrade partition...

3211264+0 records in

3211264+0 records out

Copying ROMMON environment

4259840+0 records in

4259840+0 records out

131072+0 records in

131072+0 records out

131072+0 records in

131072+0 records out

655360+0 records in

655360+0 records out

Upgrade flash partition MD5 signature is d4acb95f9a3e91236cae9a51cadca39d

ROMMON upgrade complete.

To make the new ROMMON permanent, you must restart the RP.


ASR1K#reload

Proceed with reload? [confirm]

 

*Jun  2 06:04:52.551: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.

 

Initializing Hardware ...

 

System integrity status: 00000610

 

System Bootstrap, Version 15.4(2r)S, RELEASE SOFTWARE (fc1)

Copyright (c) 1994-2014  by cisco Systems, Inc.

 

Current image running: Boot ROM1

Last reset cause: LocalSoft

 

ASR1001-X platform with 16777216 Kbytes of main memory

 

Rommon upgrade requested

Flash upgrade reset 1 in progress

.......

 

Initializing Hardware ...

 

System integrity status: 00000610

U

 

System Bootstrap, Version 16.9(4r), RELEASE SOFTWARE

Copyright (c) 1994-2018  by cisco Systems, Inc.

 

Current image running: *Upgrade in progress* Boot ROM0

Last reset cause: BootRomUpgrade

 

 

 ***          Incorrect BIOS parameters           ***

 *** Correcting the BIOS parameters and rebooting ***

 

Initializing Hardware ...

 

System integrity status: 00000610

 

System Bootstrap, Version 15.4(2r)S, RELEASE SOFTWARE (fc1)

Copyright (c) 1994-2014  by cisco Systems, Inc.

 

Current image running: Boot ROM1

Last reset cause: LocalSoft

 

ASR1001-X platform with 16777216 Kbytes of main memory

 

Rommon upgrade requested

Flash upgrade reset 2 in progress

.......

 

Initializing Hardware ...

 

System integrity status: 00000610

U

 

System Bootstrap, Version 16.9(4r), RELEASE SOFTWARE

Copyright (c) 1994-2018  by cisco Systems, Inc.

 

Current image running: *Upgrade in progress* Boot ROM0

Last reset cause: BootRomUpgrade

 

ASR1001-X platform with 16777216 Kbytes of main memory

 

File size is 0x1d327f60

Located asr1001x-universalk9.03.13.03.S.154-3.S3-ext.SPA.bin

Image size 489848672 inode num 12, bks cnt 119592 blk size 8*512

##################################################################

 

<OUTPUT TRUNCATED>

 


Use the show platform command to verify the new ROMmon version. The next step is to change the boot variable to point the new IOS-XE using the boot system flash bootflash:<NEW-IOS-XE>.bin command. Reload the router for the new IOS-XE version to take effect.

 

ASR1K#show platform

Chassis type: ASR1001-X          

 

Slot      Type                State                 Insert time (ago)

--------- ------------------- --------------------- -----------------

0         ASR1001-X           ok                    00:02:00     

 0/0      BUILT-IN-2T+6X1GE   ok                    00:01:08     

R0        ASR1001-X           ok, active            00:02:00     

F0        ASR1001-X           ok, active            00:02:00     

P0        ASR1001-X-PWR-AC    ps, fail              00:01:35     

P1        ASR1001-X-PWR-AC    ok                    00:01:34     

P2        ASR1001-X-FANTRAY   ok                    00:01:38     

 

Slot      CPLD Version        Firmware Version                       

--------- ------------------- ---------------------------------------

0         14041015            16.9(4r)

R0        14041015            16.9(4r)

F0        14041015            16.9(4r)                           

 

 

ASR1K#show run | inc boot

boot-start-marker

boot system flash bootflash:asr1001x-universalk9.03.13.03.S.154-3.S3-ext.SPA.bin

boot-end-marker

ASR1K#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

ASR1K(config)#no boot system

ASR1K(config)#boot system flash bootflash:asr1001x-universalk9.16.09.07.SPA.bin

ASR1K(config)#end

*Jun  2 06:11:21.392: %SYS-5-CONFIG_I: Configured from console by console

ASR1K#write memory

Building configuration...

[OK]

 

ASR1K#show run | inc boot

boot-start-marker

boot system flash bootflash:asr1001x-universalk9.16.09.07.SPA.bin

boot-end-marker

ASR1K#

ASR1K#reload

Proceed with reload? [confirm]

 

<OUTPUT TRUNCATED>

 


The new IOS-XE upgrade took around 5 minutes to complete. Verify the new code using show version command.

 

ASR1K#show version

Cisco IOS XE Software, Version 16.09.07

Cisco IOS Software [Fuji], ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.9.7, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2021 by Cisco Systems, Inc.

Compiled Wed 10-Feb-21 09:19 by mcpre

 

 

Cisco IOS-XE software, Copyright (c) 2005-2021 by cisco Systems, Inc.

All rights reserved.  Certain components of Cisco IOS-XE software are

licensed under the GNU General Public License ("GPL") Version 2.0.  The

software code licensed under GPL Version 2.0 is free software that comes

with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such

GPL code under the terms of GPL Version 2.0.  For more details, see the

documentation or "License Notice" file accompanying the IOS-XE software,

or the applicable URL provided on the flyer accompanying the IOS-XE

software.

 

 

ROM: IOS-XE ROMMON

 

ASR1K uptime is 2 minutes

Uptime for this control processor is 3 minutes

System returned to ROM by Reload Command

System image file is "bootflash:asr1001x-universalk9.16.09.07.SPA.bin"

Last reload reason: Reload Command

 

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

License Type: Permanent

License Level: adventerprise

Next reload license Level: adventerprise

The current throughput level is 2500000 kbps

 

 

Smart Licensing Status: Smart Licensing is DISABLED

 

cisco ASR1001-X (1NG) processor (revision 1NG) with 6924986K/6147K bytes of memory.

Processor board ID FXS18351234

6 Gigabit Ethernet interfaces

2 Ten Gigabit Ethernet interfaces

32768K bytes of non-volatile configuration memory.

16777216K bytes of physical memory.

6688767K bytes of eUSB flash at bootflash:.

0K bytes of WebUI ODM Files at webui:.

 

Configuration register is 0x2102