Thursday, June 1, 2023

Cisco Network Convergence System (NCS) 540 Router

Here's a link regarding the Cisco NCS 540 series routers and a link for the hardware installation guide. 

The NCS 540 1RU router have the interfaces and power supply in the front chassis.

It has dual power supply, out-out-band (OOB) MGMT port and console (CON) port.

The power uses an IEC C15 U-notch/kettle plug.


The NCS 540 interfaces are color coded: pink ports are 10G SFP+ (it can also support 1G), yellow ports are 25G SFP+ and green ports are 100G QSFP28.


There are 4 fans in the rear chassis.

It uses N540-RCKMT-19= mount kit/ear.


The NCS 540 uses the IOS-XR software and the bootup only took 2 minutes. The IOS-XR has a similar feel with Junos OS.

 

Booting CISCO Route Processor Module

ME Firmware Status #1: 0x000F0345
ME Firmware Status #2: 0x38002000
ME Current State: Operational
ME Error Code: No Error
ME Operational Firmware Version: 06:3.0.3.27

Baseboard IOFPGA Information:
    Revision = 0x17
    ID = 0x74971FD3
    Creation Date = 0x20201222
CPU Board IOFPGA Information:
    Revision = 0x7
    ID = 0x70971FD3
    Creation Date = 0x20191205
    Fab Revision = P0

Baseboard Present!
Booting from Upgrade Bios
Code Signing Results:(0xC0)                                    0x0
Using Upgrade FPGA

Product: XR OS PRODUCT
Base Board IOFPGA found at PCI Bus: 0x05
Base Board MIFPGA found at PCI Bus: 0x06
CPU Board IOFPGA found at PCI Bus: 0x07
All FPGA devices are up and running.

SATA Port 0: SAMST128G3FEIT - 128.0 GB
DISK Boot Partition = UEFI: SAMST128G3FEITL261, Partition 4

XR OS Boot Mode = 0x0

Selected Boot Option:
        XROS: Harddisk Boot
Version 2.18.1260. Copyright (C) 2021 American Megatrends, Inc.                 
Winterfell BIOS: v1.14.0 Date: 07/08/2021 14:38:25                              
Press <ESC> to enter setup.                                                     
Image Name = \EFI\BOOT\BOOTX64.EFI                                              
                                                                                
Image Size = 926750 Bytes                                                       
                                                                                
 ------------Cisco Secure Boot: Begin ------------                              
                                                                                
 -----------Cisco Secure Boot: Verifying-----------                             
                                                                                
Image verified successfully. Booting..                                          
                                                                                
 ------------Cisco Secure Boot: End ------------                                
                                                                                
                                                                                
GNU GRUB version 2.00                                                           
Press F2 to goto grub Menu..                                                    
Booting from Disk..                                                             
Loading Kernel..                                                                
Kernel Secure Boot Validation Result: PASSED                                    
Loading initrd..                                                                
Initrd Secure Boot Validation Result: PASSED                                    
[    0.191412] Allocating netns hash table                                      
Enable selinux to relabel filesystem from initramfs                            
Load IMA appraise policy: OK
Switching to new root and running init.
Sourcing /etc/sysconfig/udev
Starting udev: udevd[486]: unknown key 'RUN{builtin}' in /lib/udev/rules.d/64-btrfs-dm.rules:8

udevd[486]: invalid rule '/lib/udev/rules.d/64-btrfs-dm.rules:8'

[  OK  ]
Configuring network interfaces... done.
Starting system message bus: dbus.
Tue Jan 31 07:25:21 UTC 2023: in hostos !!!!!!!!!
/etc/rc3.d/S08check-flash: line 487: pd_is_hdd_partition_needed: command not found
UBI device number 3, total 144 LEBs (18855936 bytes, 18.0 MiB), available 0 LEBs (0 bytes), LEB size 130944 bytes (127.9 KiB)
Punching IOFPGA watchdog
UBI device number 5, total 32 LEBs (4190208 bytes, 4.0 MiB), available 0 LEBs (0 bytes), LEB size 130944 bytes (127.9 KiB)
Punching IOFPGA watchdog
Starting OpenBSD Secure Shell server: sshd
sshd start/running, process 3540
Starting rpcbind daemon...done.
Starting kdump:[  OK  ]
Starting random number generator daemon.
Starting system log daemon...0
Starting kernel log daemon...0
tftpd-hpa disabled in /etc/default/tftpd-hpa
Starting internet superserver: xinetd.
Starting S.M.A.R.T. daemon: smartd.
Starting Lighttpd Web Server: lighttpd.
Starting libvirtd daemon: [  OK  ]
Starting crond: OK
Starting cgroup-init
Network ieobc_br defined from /etc/init/ieobc_br_network.xml

Network local_br defined from /etc/init/local_br_network.xml

Network ieobc_br started

Network local_br started

Network xr_local_br started

mcelog start/running, process 5514
diskmon start/running, process 5520
initctl: Unknown instance: /dev/ttyS0

/etc/rc.d/init.d/pd-functions: line 142: /bin: Is a directory

Connecting to 'default-sdr--1' console
ootlogd: ioctl(/dev/pts/2, TIOCCONS): Device or resource busy
Configuring network interfaces... done.
Starting system message bus: dbus.
Starting OpenBSD Secure Shell server: sshd
sshd start/running, process 1800
Starting rpcbind daemon...done.
Starting random number generator daemon.
Starting system log daemon...0
Starting kernel log daemon...0
tftpd-hpa disabled in /etc/default/tftpd-hpa
Starting internet superserver: xinetd.
Libvirt not initialized for container instance
Starting crond: OK
SIOCADDRT: File exists
osSignalTask: started


ios con0/RP0/CPU0 is now available


Press RETURN to get started.

0/RP0/ADMIN0:Jan 31 07:27:44.345 UTC: vm_manager[2666]: %INFRA-VM_MANAGER-4-INFO : Info: vm_manager started VM default-sdr--2  


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply third-party
authority to import, export, distribute or use encryption. Importers,
exporters, distributors and users are responsible for compliance with
U.S. and local country laws. By using this product you agree to comply
with applicable laws and regulations. If you are unable to comply with
U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be
found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.



!!!!!!!!!!!!!!!!!!!! NO root-system username is configured. Need to configure root-system username. !!!!!!!!!!!!!!!!!!!!

         --- Administrative User Dialog ---


  Enter root-system username: admin
  Enter secret:
  Enter secret again:

Use the 'configure' command to modify this configuration.
User Access Verification

Username: admin
Password:

The same Cisco basic IOS commands are still used. You use the "Rack 0" serial number in the show inventory command output when raising a Cisco TAC case.


RP/0/RP0/CPU0:ios#show inventory
Tue Jan 31 07:32:37.831 UTC
NAME: "0/RP0", DESCR: "Cisco NCS 540 16G Series Fixed Router 24x10G,8x25G,2x100G"
PID: N540-ACC-SYS      , VID: V02, SN: FOC26431234

NAME: "Rack 0", DESCR: "NCS 540 Series 16G 24x1/10GE, 8x10/25GE, 2x100GE Fixed Chassis"
PID: N540-ACC-SYS      , VID: V02, SN: FOC2644567

NAME: "0/FT0", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/FT1", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/FT2", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/FT3", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/PM0", DESCR: "NCS 540 400W AC power supply"
PID: N540-PWR400-A     , VID: V02, SN: LIT26431234

NAME: "0/PM1", DESCR: "NCS 540 400W AC power supply"
PID: N540-PWR400-A     , VID: V02, SN: LIT2643567
          

RP/0/RP0/CPU0:ios#show version
Tue Jan 31 07:32:43.379 UTC
Cisco IOS XR Software, Version 7.4.2
Copyright (c) 2013-2022 by Cisco Systems, Inc.

Build Information:
 Built By     : ingunawa
 Built On     : Wed Feb 16 05:24:50 PST 2022
 Built Host   : iox-lnx-025
 Workspace    : /auto/srcarchive15/prod/7.4.2/ncs540/ws
 Version      : 7.4.2
 Location     : /opt/cisco/XR/packages/
 Label        : 7.4.2

cisco NCS-540 () processor
System uptime is 5 minutes

When I checked, it already has the OSPF and MPLS RPM package by default.


RP/0/RP0/CPU0:ios#show install active
Tue Jan 31 07:32:48.121 UTC
Label : 7.4.2

Node 0/RP0/CPU0 [RP]
  Boot Partition: xr_lv0
  Active Packages: 10
        ncs540-xr-7.4.2 version=7.4.2 [Boot image]
        ncs540-eigrp-1.0.0.0-r742
        ncs540-isis-1.0.0.0-r742
        ncs540-li-1.0.0.0-r742
        ncs540-mgbl-1.0.0.0-r742
        ncs540-mpls-1.0.0.0-r742
        ncs540-mpls-te-rsvp-1.0.0.0-r742
        ncs540-ospf-2.0.0.0-r742
        ncs540-mcast-1.0.0.0-r742
        ncs540-k9sec-1.0.0.0-r742

Node 0/0/CPU0 [LC]
  Boot Partition: xr_lcp_lv0
  Active Packages: 10
        ncs540-xr-7.4.2 version=7.4.2 [Boot image]
        ncs540-eigrp-1.0.0.0-r742
        ncs540-isis-1.0.0.0-r742
        ncs540-li-1.0.0.0-r742
        ncs540-mgbl-1.0.0.0-r742
        ncs540-mpls-1.0.0.0-r742
        ncs540-mpls-te-rsvp-1.0.0.0-r742
        ncs540-ospf-2.0.0.0-r742
        ncs540-mcast-1.0.0.0-r742
        ncs540-k9sec-1.0.0.0-r742


RP/0/RP0/CPU0:ios#show ip ospf ?
  WORD                 OSPF process name
  bad-checksum         Bad ospf checksum packets queue(cisco-support)
  border-routers       Border and Boundary Router Information
  cmd                  Generic command support(cisco-support)
  database             Database summary
  fast-reroute         IP Fast-reroute
  flood-list           Link state flood list
  interface            Interface information
  maxage-list          Maxage List(cisco-support)
  message-queue        Hello, TE and router message queue data(cisco-support)
  mpls                 MPLS related information
  neighbor             Neighbor list
  our-address          our address Database(cisco-support)
  private              Lightweight version of show ospf (skip LSA db walks).(cis
co-support)
  request-list         Link state request list
  retransmission-list  Link state retransmission list
  routes               OSPF routes table
  segment-routing      OSPF Segment-routing(cisco-support)
  sid-database         SID Database(cisco-support)
  srlg                 SRLG related info
  standby              Retrieve operational information from standby process(cis
co-support)
  statistics           OSPF statistics information(cisco-support)
  summary              OSPF summary information
  summary-prefix       Summary-prefix redistribution Information
  timers               OSPF timers information(cisco-support)
  topology             OSPF Topo Library Information(cisco-support)
  trace                OSPF trace information(cisco-support)
  virtual-links        Virtual link information
  vrf                  Show one or more non-default OSPF VRFs in process
  |                    Output Modifiers
  <cr>                         
RP/0/RP0/CPU0:ios#show mpls ?
  ea           MPLS EA
  forwarding   Forwarding information
  interfaces   MPLS enabled interfaces information
  io           Show mpls io data
  label        Label information
  lctrl        Line Protocol Control information(cisco-support)
  ldp          Label Distribution Protocol
  lib          Library information
  lsd          Label Switching Database
  ma           MPLS MA
  mldp         mLDP information
  oam          OAM info
  static       Static label bindings
  tp-oam       MPLS Transport Profile OAM(cisco-support)
  traffic-eng  Traffic Engineering information
  vpn          MPLS VPN MIB