Sunday, May 21, 2023

Cisco ASR1K IOS-XE 17.6.3 Software Upgrade

My family and I recently visited the Omniverse Museum and it houses a large collection of toys and memorabilia from DC, Marvel, Star Wars, Harry Potter, etc. It's located in Level 4 (Japan Town area) Glorietta 2 Makati City, Philippines.

This is the Iron Man hall which displays the complete 14 Iron Man suit/armor.

This is Superman's Fortress of Solitude.

This is my favorite part of the museum, Hogwarts castle's The Great Hall.

This is Star Wars' Jabba the Hutt.

Below is the upgrade process for a Cisco ASR1K from IOS-XE 16.x to 17.x. You'll need to check first the ROMMON and IOS-XE compatibility matrix. The initial ROMMON upgrade took around 8 minutes to complete.

Per the Cisco doc, in a Cisco ASR 1001 and Cisco ASR 1002-X after all the RTU licenses, there is NO expiration of license and are valid for a lifetime. Permanent licenses are NOT affected by Cisco IOS-XE release upgrades.

Per the Cisco doc, the 17.x IOS-XE upgrade performs a PAK licenses "snapshot": To continue supporting and honouring any existing PAK licenses you may have, the system automatically takes a snapshot of the PAK license and triggers a Device-led Conversion process, to convert PAK license to a Smart license.

 

 

ASR1K#upgrade rom-monitor filename bootflash:asr1000-rommon.173-1r.SPA.pkg all

Verifying the code signature of the ROMMON package...

Chassis model ASR1002-X has a single rom-monitor.

 

Upgrade rom-monitor

 

Target copying rom-monitor image file

File size : //tmp/rommon_upgrade/latest.bin

File size is : 2097152

FIPS File size is : 2097152

ROMMON Image Type : X86

File /tmp/rommon_upgrade/latest.bin is a FIPS ROMMON image

FIPS-140-3 Load Test on /tmp/rommon_upgrade/latest.bin has PASSED.

Authenticity of the image has been verified.

Checking upgrade image...

2097152+0 records in

4096+0 records out

2097152 bytes (2.1 MB, 2.0 MiB) copied, 2.04224 s, 1.0 MB/s

Upgrade image MD5 signature is 917ad3396182f922eea0cadaf1221513

Burning upgrade partition...

2097152+0 records in

2097152+0 records out

2097152 bytes (2.1 MB, 2.0 MiB) copied, 47.7425 s, 43.9 kB/s

Checking upgrade partition...

2097152+0 records in

2097152+0 records out

2097152 bytes (2.1 MB, 2.0 MiB) copied, 7.20536 s, 291 kB/s

Upgrade flash partition MD5 signature is 917ad3396182f922eea0cadaf1221513

2097152+0 records in

2097152+0 records out

2097152 bytes (2.1 MB, 2.0 MiB) copied, 5.05746 s, 415 kB/s

65536+0 records in

65536+0 records out

65536 bytes (66 kB, 64 KiB) copied, 0.29747 s, 220 kB/s

Copying ROMMON environment

2097152+0 records in

2097152+0 records out

2097152 bytes (2.1 MB, 2.0 MiB) copied, 46.2797 s, 45.3 kB/s

65536+0 records in

65536+0 records out

65536 bytes (66 kB, 64 KiB) copied, 1.44509 s, 45.4 kB/s

65536+0 records in

65536+0 records out

65536 bytes (66 kB, 64 KiB) copied, 1.45039 s, 45.2 kB/s

ROMMON upgrade complete.

To make the new ROMMON permanent, you must restart the RP.

 

ASR1K#reload

Proceed with reload? [confirm]

Mar 16 06:20:11.088: %PMAN-5-EXX

 

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

System Bootstrap, Version 16.7(1r), RELEASE SOFTWARE

Copyright (c) 1994-2017 by cisco Systems, Inc.

 

Current image running: Boot ROM1

Last reset cause: LocalSoft

 

 

SPI Flash 4KB Descriptor Area Checksum = 0x6f5a0db2

ASR1002-X platform with 8388608 Kbytes of main memory

 

Rommon upgrade requested

Flash upgrade reset 1 in progress

..

 

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

System Bootstrap, Version 16.7(1r), RELEASE SOFTWARE

Copyright (c) 1994-2017 by cisco Systems, Inc.

 

Current image running: Boot ROM1

Last reset cause: LocalSoft

 

 

SPI Flash 4KB Descriptor Area Checksum = 0x6f5a0db2

ASR1002-X platform with 8388608 Kbytes of main memory

 

Rommon upgrade requested

Flash upgrade reset 1 in progress

.......

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

System Bootstrap, Version 17.3(1r), RELEASE SOFTWARE

Copyright (c) 1994-2020 by cisco Systems, Inc.

 

Current image running: Boot ROM0

Last reset cause: Watchdog/ICH

 

Saving cur/min version to nvram 2

 

 ***          Incorrect BIOS parameters           ***

 *** Correcting the BIOS parameters and rebooting ***

ΓΏ

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

System Bootstrap, Version 16.7(1r), RELEASE SOFTWARE

Copyright (c) 1994-2017 by cisco Systems, Inc.

 

Current image running: Boot ROM1

Last reset cause: LocalSoft

 

 

SPI Flash 4KB Descriptor Area Checksum = 0x6f5a0db2

ASR1002-X platform with 8388608 Kbytes of main memory

 

Rommon upgrade requested

Flash upgrade reset 2 in progress

.......

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

System Bootstrap, Version 17.3(1r), RELEASE SOFTWARE

Copyright (c) 1994-2020 by cisco Systems, Inc.

 

Current image running: *Upgrade in progress* Boot ROM0

Last reset cause: BootRomUpgrade

 

 

SPI Flash 4KB Descriptor Area Checksum = 0x6f5a0db2

ASR1002-X platform with 8388608 Kbytes of main memory

 

File size is 0x2b0414ba

Located asr1002x-universalk9.16.09.08.SPA.bin

Image size 721687738 inode num 17, bks cnt 176194 blk size 8*512

################################################################

 

 

Issue the show platform command to verify new ROMMON code.

 

ASR1K#show platform

Chassis type: ASR1002-X          

 

Slot      Type                State                 Insert time (ago)

--------- ------------------- --------------------- -----------------

0         ASR1002-X           ok                    00:03:05     

 0/0      6XGE-BUILT-IN       ok                    00:01:45     

R0        ASR1002-X           ok, active            00:03:05     

F0        ASR1002-X           ok, active            00:03:05     

P0        ASR1002-PWR-AC      ps, fail              00:02:39     

P1        ASR1002-PWR-AC      ok                    00:02:39     

 

Slot      CPLD Version        Firmware Version                       

--------- ------------------- ---------------------------------------

0         14012203            17.3(1r)                           

R0        14012203            17.3(1r)                           

F0        14012203            17.3(1r) 

 

 

ASR1K#show version

Cisco IOS XE Software, Version 16.09.08

Cisco IOS Software [Fuji], ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.9.8, RELEASE SOFTWARE (fc4)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2021 by Cisco Systems, Inc.

Compiled Wed 01-Sep-21 01:43 by mcpre

 

 

Cisco IOS-XE software, Copyright (c) 2005-2021 by cisco Systems, Inc.

All rights reserved.  Certain components of Cisco IOS-XE software are

licensed under the GNU General Public License ("GPL") Version 2.0.  The

software code licensed under GPL Version 2.0 is free software that comes

with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such

GPL code under the terms of GPL Version 2.0.  For more details, see the

documentation or "License Notice" file accompanying the IOS-XE software,

or the applicable URL provided on the flyer accompanying the IOS-XE

software.

 

 

ROM: IOS-XE ROMMON

 

ASR1K uptime is 2 minutes

Uptime for this control processor is 5 minutes

System returned to ROM by BootRomUpgrade at 10:04:16 UTC Fri Jul 29 2022

System restarted at 06:25:34 UTC Thu Mar 16 2023

System image file is "bootflash:asr1002x-universalk9.16.09.08.SPA.bin"

Last reload reason: BootRomUpgrade

 

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

License Type: Permanent

License Level: adventerprise

Next reload license Level: adventerprise

The current throughput level is 10000000 kbps

 

 

Smart Licensing Status: Smart Licensing is DISABLED

 

cisco ASR1002-X (2RU-X) processor (revision 2KP) with 3852984K/6147K bytes of memory.

Processor board ID FOX17511234

6 Gigabit Ethernet interfaces

32768K bytes of non-volatile configuration memory.

8388608K bytes of physical memory.

6684671K bytes of eUSB flash at bootflash:.

0K bytes of WebUI ODM Files at webui:.

 

Configuration register is 0x2102

 

 

Change to the bootflash variable to point to the new IOS-XE code. Then issue a reload command to take effect.

 

ASR1K#show run | inc boot

boot-start-marker

boot system flash bootflash:asr1002x-universalk9.16.09.08.SPA.bin

boot system flash bootflash:asr1002x-universalk9.03.10.05.S.153-3.S5-ext.SPA.bin

boot-end-marker

no ip bootp server

diagnostic bootup level minimal



ASR1K#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

ASR1K(config)#no boot system

ASR1K(config)#boot system flash bootflash:asr1002x-universalk9.17.06.03a.SPA.bin    

ASR1K(config)#boot system flash bootflash:asr1002x-universalk9.16.09.08.SPA.bin

ASR1K(config)#end

ASR1K#write memory

Building configuration...

[OK]

 

 

ASR1K#show run | inc boot

boot-start-marker

boot system flash bootflash:asr1002x-universalk9.17.06.03a.SPA.bin

boot system flash bootflash:asr1002x-universalk9.16.09.08.SPA.bin

boot-end-marker

no ip bootp server

diagnostic bootup level minimal


ASR1K#show bootvar

BOOT variable = bootflash:asr1002x-universalk9.17.06.03a.SPA.bin,1;bootflash:asr1002x-universalk9.16.09.08.SPA.bin,1;

CONFIG_FILE variable does not exist

BOOTLDR variable does not exist

Configuration register is 0x2102

 

Standby not ready to show bootvar

 

ASR1K#reload

Proceed with reload? [confirm]

Mar 16 06:32:55.978: %PMAN-5-EX

 

 

Initializing Hardware ...

 

System integrity status: 00000610

 

 

System Bootstrap, Version 17.3(1r), RELEASE SOFTWARE

Copyright (c) 1994-2020 by cisco Systems, Inc.

 

Current image running: Boot ROM0

Last reset cause: LocalSoft

 

 

SPI Flash 4KB Descriptor Area Checksum = 0x6f5a0db2

ASR1002-X platform with 8388608 Kbytes of main memory

 

File size is 0x2a235209

Located asr1002x-universalk9.17.06.03a.SPA.bin

Image size 706957833 inode num 15, bks cnt 172598 blk size 8*512

####################################################################

 

 

The main IOS-XE 17.x upgrade took around 6 minutes to complete.

 

ASR1K#show version

Cisco IOS XE Software, Version 17.06.03a

Cisco IOS Software [Bengaluru], ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 17.6.3a, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2022 by Cisco Systems, Inc.

Compiled Fri 08-Apr-22 04:50 by mcpre

 

 

Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc.

All rights reserved.  Certain components of Cisco IOS-XE software are

licensed under the GNU General Public License ("GPL") Version 2.0.  The

software code licensed under GPL Version 2.0 is free software that comes

with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such

GPL code under the terms of GPL Version 2.0.  For more details, see the

documentation or "License Notice" file accompanying the IOS-XE software,

or the applicable URL provided on the flyer accompanying the IOS-XE

software.

 

 

ROM: IOS-XE ROMMON

 

ASR1K uptime is 2 minutes

Uptime for this control processor is 4 minutes

System returned to ROM by Reload Command at 06:32:35 UTC Thu Mar 16 2023

System restarted at 06:36:56 UTC Thu Mar 16 2023

System image file is "bootflash:asr1002x-universalk9.17.06.03a.SPA.bin"

Last reload reason: Reload Command

 

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

License Type: Smart License is permanent

License Level: adventerprise

Next reload license Level: adventerprise

The current throughput level is 10000000 kbps

 

 

Smart Licensing Status: Registration Not Applicable/Not Applicable

 

cisco ASR1002-X (2RU-X) processor (revision 2KP) with 3742322K/6147K bytes of memory.

Processor board ID FOX17511234

Router operating mode: Autonomous

6 Gigabit Ethernet interfaces

32768K bytes of non-volatile configuration memory.

8388608K bytes of physical memory.

6684671K bytes of eUSB flash at bootflash:.

 

Configuration register is 0x2102

 

 

ASR1K#show platform

Chassis type: ASR1002-X          

 

Slot      Type                State                 Insert time (ago)

--------- ------------------- --------------------- -----------------

0         ASR1002-X           ok                    00:03:17     

 0/0      6XGE-BUILT-IN       ok                    00:02:06     

R0        ASR1002-X           ok, active            00:03:17     

F0        ASR1002-X           ok, active            00:03:17     

P0        ASR1002-PWR-AC      ps, fail              00:02:46     

P1        ASR1002-PWR-AC      ok                    00:02:46     

 

Slot      CPLD Version        Firmware Version                       

--------- ------------------- ---------------------------------------

0         14012203            17.3(1r)                           

R0        14012203            17.3(1r)                           

F0        14012203            17.3(1r)              

 

 

The previous PAK/traditional license remained permanent. Issue a show platform software sl-infra pak-info to verify licenses.

 

ASR1K#show platform software sl-infra pak-info
Pak License Snapshot Information
=================================
Platform Supports PAK License snapshot
PAK License Snapshot integrity check pass
PAK License Snapshot available

 

<OUTPUT TRUNCATED>

 

License Name                : adventerprise

  Index                     : 0

  In Use Count              : 0

  In Use Count Valid        : 0

  License Precedence        : 0

  License Type              : 0 - Permanent

  License Get Type          : 0 - Permanent

  Number of License         : 65535 - Non-Counted

  Current State             : 2 - Active, Not in Use

  License State             : 1 - Active, In Use

  Timestamp lower 32bits    : 1678948640 - Thu Mar 16 06:37:20 2023

  Timestamp upper 32bits    : 0

  Trial Elapsed Period Left : 0

Total Number of Feature Info in Snapshot: 21

 

 

ASR1K#show license all

Smart Licensing Status

======================

 

Smart Licensing is ENABLED

 

License Conversion:

  Automatic Conversion Enabled: True

  Status: Not started

 

Export Authorization Key:

  Features Authorized:

    <none>

 

Utility:

  Status: DISABLED

 

Smart Licensing Using Policy:

  Status: ENABLED

 

Data Privacy:

  Sending Hostname: yes

    Callhome hostname privacy: DISABLED

    Smart Licensing hostname privacy: DISABLED

  Version privacy: DISABLED

 

Transport:

  Type: cslu

  Cslu address: <empty>

  Proxy:

    Not Configured

 

Miscellaneous:

  Custom Id: <empty>

 

Policy:

  Policy in use: Merged from multiple sources.

  Reporting ACK required: yes (CISCO default)

  Unenforced/Non-Export Perpetual Attributes:

    First report requirement (days): 365 (CISCO default)

    Reporting frequency (days): 0 (CISCO default)

    Report on change (days): 90 (CISCO default)

  Unenforced/Non-Export Subscription Attributes:

    First report requirement (days): 90 (CISCO default)

    Reporting frequency (days): 90 (CISCO default)

    Report on change (days): 90 (CISCO default)

  Enforced (Perpetual/Subscription) License Attributes:

    First report requirement (days): 0 (CISCO default)

    Reporting frequency (days): 0 (CISCO default)

    Report on change (days): 0 (CISCO default)

  Export (Perpetual/Subscription) License Attributes:

    First report requirement (days): 0 (CISCO default)

    Reporting frequency (days): 0 (CISCO default)

    Report on change (days): 0 (CISCO default)

 

Usage Reporting:

  Last ACK received: <none>

  Next ACK deadline: Mar 15 06:37:56 2024 UTC

  Reporting push interval: 30  days

  Next ACK push check: <none>

  Next report push: Mar 16 06:39:56 2023 UTC

  Last report push: <none>

  Last report file write: <none>

 

Trust Code Installed: <none>

 

License Usage

=============

 

throughput_10g (ASR_1002X_Throughput_5G-10G):

  Description: throughput_10g

  Count: 1

  Version: 1.0

  Status: IN USE

  Export status: NOT RESTRICTED

  Feature Name: throughput_10g

  Feature Description: throughput_10g

  Enforcement type: NOT ENFORCED

  License type: Perpetual

 

adventerprise (ASR_1000_AdvEnterprise):

  Description: adventerprise

  Count: 1

  Version: 1.0

  Status: IN USE

  Export status: NOT RESTRICTED

  Feature Name: adventerprise

  Feature Description: adventerprise

  Enforcement type: NOT ENFORCED

  License type: Perpetual

 

Product Information

===================

UDI: PID:ASR1002-X,SN:JAE181701KH

 

Agent Version

=============

Smart Agent for Licensing: 5.1.26_rel/120

 

License Authorizations

======================

Overall status:

  Active: PID:ASR1002-X,SN:JAE18175678

      Status: NOT INSTALLED

      Status:PAK

 

Legacy License Info:

  regid.2015-06.com.cisco.ASR_1000_AdvEnterprise,1.0_855386bf-6b9a-4aae-bc41-6d398da6abcd:

    DisplayName: adventerprise

    Description: adventerprise

    Total available count: 1

    Term information:

      Active: PID:ASR1002-X,SN:JAE18175678

        License type: PERPETUAL

          Term Count: 1

         

Purchased Licenses:

  No Purchase Information Available

 

 

Derived Licenses:

  Entitlement Tag: regid.2015-08.com.cisco.ASR_1002X_Throughput_5G-10G,1.0_ed4193e9-8505-40b2-8f51-d12ed5e830af

  Entitlement Tag: regid.2015-06.com.cisco.ASR_1000_AdvEnterprise,1.0_855386bf-6b9a-4aae-bc41-6d398da6b2be