Monday, January 9, 2017

Password Recovery on a Cisco 3650 Catalyst Switch

I had to reconfigure some used Cisco 3650 switches from a previous deployment but wasn't able to login using known passwords so I had to perform a password recovery. I've been doing password recovery on Cisco 3560 switch which is identical on other switch platforms, but the password recovery for a Cisco 3650 is a bit different. The CONSOLE port is found at the back and it's the top most port (look at LED arrow pointing upward).


The MODE button is found in front and it's a small black button beside the Cisco logo.


Booting...Initializing RAM +++++++@@@@@@@@...++++++++++++++++++++++++++++++++@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@done.
Memory Test Pass!

Base ethernet MAC Address: f4:4e:05:57:f1:23

Interface GE 0 link down***ERROR: PHY link is down      // WAIT FOR SYST AND ACTV LED TO BECOME AMBER BEFORE RELEASING MODE BUTTON

The system has been interrupted prior to initializing some
filesystems and loading the operating system software.
Console will be reset to 9600 baud rate, need to change terminal setting first.
The following commands will initialize the remaining filesystems,
and finish loading the operating system software:

    flash_init
    boot

switch: flash_init
Initializing Flash...

flashfs[7]: 0 files, 1 directories
flashfs[7]: 0 orphaned files, 0 orphaned directories
flashfs[7]: Total bytes: 6784000
flashfs[7]: Bytes used: 1024
flashfs[7]: Bytes available: 6782976
flashfs[7]: flashfs fsck took 2 seconds....done Initializing Flash.

switch: SWITCH_IGNORE_STARTUP_CFG=1     // BYPASS STARTUP-CONFIG IN NVRAM

switch: boot flash:packages.conf
Getting rest of image
Reading full image into memory....done
Reading full base package into memory...: done = 79121160
Nova Bundle Image
--------------------------------------
Kernel Address    : 0x6042f350
Kernel Size       : 0x402ecf/4206287
Initramfs Address : 0x60832220
Initramfs Size    : 0xdb98e6/14391526
Compression Format: .mzip

Bootable image at @ ram:0x6042f350
Bootable image segment 0 address range [0x81100000, 0x82110000] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 377
Loading Linux kernel with entry point 0x81653a10 ...Bootloader: Done loading app on core_mask: 0xf

### Launching Linux Kernel (flags = 0x5)

All packages are Digitally Signed
Starting System Services

Dec 8 02:21:06 %PLATFORM_MGR-1-PLATMGR_INIT_FAIL: Platform Manager: Failed to set system LEDs after POST.

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sun 27-Apr-14 18:33 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2014 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found,FIPS Mode Not Enabled

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C3650-24PS (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FDO1837EABC
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
257008K bytes of Crash Files at crashinfo:.
1550272K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : f4:4e:05:57:f1:823
Motherboard Assembly Number        : 73-15128-05
Motherboard Serial Number          : FDO18370DEF
Model Revision Number              : D0
Motherboard Revision Number        : A0
Model Number                       : WS-C3650-24PS
System Serial Number               : FDO1837EABC


         --- System Configuration Dialog ---

Enable secret warning
----------------------------------
In order to access the device manager, an enable secret is required
If you enter the initial configuration dialog, you will be prompted for the enable secret
If you choose not to enter the intial configuration dialog, or if you exit setup without setting the enable secret,
please set an enable secret using the following CLI in configuration mode-
enable secret 0 <cleartext password>
----------------------------------
Would you like to enter the initial configuration dialog? [yes/no]: no


Press RETURN to get started!


*Dec  8 02:22:12.388: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
*Dec  8 02:22:14.285: Registering wireless registries required for roaming

*Dec  8 02:22:14.617: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to down
*Dec  8 02:22:14.617: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Dec  8 02:22:14.619: %NGWC_PLATFORM_FEP-6-FRU_PS_OIR: Switch 1: FRU power supply A inserted
*Dec  8 02:21:32.078: *%INIT-7-SWITCH_BOOTING: 1 wcm:  Switch booting...
*Dec  8 02:22:15.618: %LINEPROT% Generating 1024 bit RSA keys, keys will be non-exportable...O-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to down
*Dec  8 02:22:15.618: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Dec  8 02:22:16.507: %MGMTINFRA-3-CFG_PUSH: 1 eicored:  Config push failed.please check wcm provider.
*Dec  8 02:22:16.507: %MGMTINFRA-3-CFG_PUSH: 1 eicored:  Config push failed (rc=10000) for (wcm) on attributes [{ schedulerEnabled@1 : 10000, rtTimeout@1 : 10000, frameBurst@1 : 10000 }, { schedulerEnabled@1 : 10000, rtTimeout@
[OK] (elapsed time was 1 seconds)
1 : 10000, frameBurst@1 : 10000 }]
*Dec  8 02:22:16.893: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Dec  8 02:22:22.669: %SYS-6-STARTUP_CONFIG_IGNORED: System startup configuration is ignored based on the configuration register setting.
*Dec  8 02:22:26.454: %STACKMGR-6-ACTIVE_READY: 1 stack-mgr:  Active switch 1 is ready. System has been configured

*Dec  8 02:22:26.656: %SYS-5-RESTART: System restarted --
Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sun 27-Apr-14 18:33 by prod_rel_team
*Dec  8 02:22:26.681: %AUTHMGR_SPI-6-START: Auth Manager SPI server started
*Dec  8 02:22:29.100: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
*Dec  8 02:22:33.460: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Dec  8 02:22:33.511: %PKI-6-AUTOSAVE: Running configuration saved to NVRAM
Switch>enable
Switch#copy startup-config running-config      // LOAD THE START-UP CONFIG FROM NVRAM
Destination filename [running-config]?
% Generating 1024 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 1 seconds)
*Dec  8 04:12:14.228: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Dec  8 04:12:14.271: %PKI-4-NOAUTOSAVE: Configuration was modified.  Issue "write memory" to save new certificate
*Dec  8 04:12:20.062: %AAAA-4-NOSERVER: Warning: Server 89.1.2.8 is not defined.
*Dec  8 04:12:20.063: %AAAA-4-NOSERVER: Warning: Server 66.5.3.8 is not defined.
*Dec  8 04:12:20.063: %AAAA-4-NOSERVER: Warning: Server 66.1.3.9 is not defined.
 Warning: The cli will be deprecated soon
 'tacacs-server host 89.1.2.8'       // STARTUP-CONFIG HAS TACACS CONFIGURED
 Please move to 'tacacs server <name>' CLI
 Warning: The cli will be deprecated soon
 'tacacs-server host 66.5.3.9'
 Please move to 'tacacs server <name>' CLI
 Warning: The cli will be deprecated soon
 'tacacs-server host 66.5.3.8'
 Please move to 'tacacs server <name>' CLI
9523 bytes copied in 10.430 secs (913 bytes/sec)
sw02#     // THE HOSTNAME WAS ALSO LOADED
*Dec  8 04:12:20.096: % Multiple self signed certificates in config
    certificate for trust point TP-self-signed-1212499775 ignored
*Dec  8 04:12:20.382: %PKI-4-NOAUTOSAVE: Configuration was modified.  Issue "write memory" to save new certificate        // SAVE AFTER YOU RE-CONFIGURE THE NEW PASSWORDS, ISSUE THE reload COMMAND AND HOLD THE MODE BUTTON AGAIN
sw02#
sw02#delete vlan.dat        // AT THIS POINT YOU CAN EITHER RE-CONFIGURE THE ENABLE, LOCAL USERNAME AND VTY PASSWORDS OR COMPLETELY WIPE OUT THE SWITCH USING THE delete vlan.dat AND write erase COMMANDS (then do a reload).
Delete filename [vlan.dat]?
Delete flash:/vlan.dat? [confirm]
sw02#write erase
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
sw02#reload     // HOLD THE MODE BUTTON AGAIN
*Dec  8 04:17:00.314: %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram

System configuration has been modified. Save? [yes/no]: no     // TYPE yes IF YOU RE-CONFIGURED PASSWORDS; TYPE no IF YOU WANT A CLEAN CONFIG
Reload command is being issued on Active unit, this will reload the whole stack
Proceed with reload? [confirm]
*Dec  8 04:18:11.797: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.
*Dec  8 04:18:12.499: %STACKMGR-1-RELOAD_REQUEST: 1 stack-mgr:  Received reload request for all switches, reason Reload command
*Dec  8 04:18:12.500: %STACKMGR-1-RELOAD: 1 stack-mgr:  Reloading due to reason Reload command
*Dec  8 04:18:13.001: %IOSXE-3-PLATFORM: 1 process sysmgr: Reset/Reload requested by [stack-manager].
<Thu Dec  8 04:18:13 2016> Message from sysmgr: Reason Code:[3] Reset Reason:Reset/Reload requested by [stack-manager]. [Reload command]
umount: /proc/fs/nfsd: not mounted
Unmounting ng3k filesystems...
Unmounted /dev/sda3...
Warning! - some ng3k filesystems may not have unmounted cleanly...
Please stand by while rebooting the system...
Restarting system.


<OUTPUT TRUNCATED>


Booting...Initializing RAM +++++++@@@@@@@@...++++++++++++++++++++++++++++++++
Base ethernet MAC Address: f4:4e:05:51:a9:80

Interface GE 0 link down***ERROR: PHY link is down     // WAIT FOR SYST AND ACTV LED TO BECOME AMBER BEFORE RELEASING MODE BUTTON
The system has been interrupted prior to initializing some
filesystems and loading the operating system software.
Console will be reset to 9600 baud rate, need to change terminal setting first.
The following commands will initialize the remaining filesystems,
and finish loading the operating system software:

    flash_init      // SKIP THE flash_init and boot COMMANDS
    boot

switch: SWITCH_IGNORE_STARTUP_CFG=0      // INSTRUCTS THE SWITCH TO READ/LOAD THE STARTUP-CONFIG

switch: boot flash:packages.conf
Getting rest of image
Reading full image into memory....done
Reading full base package into memory...: done = 79121160
Nova Bundle Image
--------------------------------------
Kernel Address    : 0x6042d350
Kernel Size       : 0x402ecf/4206287
Initramfs Address : 0x60830220
Initramfs Size    : 0xdb98e6/14391526
Compression Format: .mzip

Bootable image at @ ram:0x6042d350
Bootable image segment 0 address range [0x81100000, 0x82110000] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 377
Loading Linux kernel with entry point 0x81653a10 ...
Bootloader: Done loading app on core_mask: 0xf

### Launching Linux Kernel (flags = 0x5)

All packages are Digitally Signed
Starting System Services

Dec 8 04:22:53 %PLATFORM_MGR-1-PLATMGR_INIT_FAIL: Platform Manager: Failed to set system LEDs after POST.

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sun 27-Apr-14 18:33 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2014 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found,FIPS Mode Not Enabled

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C3650-24PS (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FDO1837EABC
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
257008K bytes of Crash Files at crashinfo:.
1550272K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : f4:4e:05:51:a1:23
Motherboard Assembly Number        : 73-15128-05
Motherboard Serial Number          : FDO18370DEF
Model Revision Number              : D0
Motherboard Revision Number        : A0
Model Number                       : WS-C3650-24PS
System Serial Number               : FDO1837EABC



         --- System Configuration Dialog ---

Enable secret warning
----------------------------------
In order to access the device manager, an enable secret is required
If you enter the initial configuration dialog, you will be prompted for the enable secret
If you choose not to enter the intial configuration dialog, or if you exit setup without setting the enable secret,
please set an enable secret using the following CLI in configuration mode-
enable secret 0 <cleartext password>
----------------------------------
Would you like to enter the initial configuration dialog? [yes/no]: no

Would you like to terminate autoinstall? [yes]:


Press RETURN to get started!


Switch>enable
Switch#configure terminal
Switch(config)#no manual ?     // no manual boot COMMAND IS UNAVAILABLE
% Unrecognized command
Switch(config)#no m?    
mab       mac     macro    map-class
map-list  memory  monitor 

Switch(config)#end
Switch#no m?


I chose to completely wipe out the switch, re-configure it and tested again by rebooting and the startup-config stored in NVRAM remained intact.

Sunday, January 1, 2017

Installing PVDM4-64 and NIM-2FXS on a Cisco 4331 Router

I went to the Land of Smiles, Bangkok Thailand, the second time around and was hired to setup an office IT network that uses a Cisco 4331 router. I took a side trip after it was done and visited Wat Pho, which is one of the many Buddhist temples in Bangkok. This temple is known as the birthplace of the traditional Thai massage and it houses a huge reclining Buddha. Thai cuisine is amazingly good! I had Phat Thai (or Pad Thai), which is their famous stir-fried rice noodles, and Green Chicken Curry.





The Cisco 4331 is Cisco's latest ISR router in the 4000 series. The 4000 series routers are said to be 4-10 times faster (and cheaper) compared to the ISR G2 series routers. Here's the initial bootup process and startup-config. It now uses the IOS-XE which is Cisco classic IOS that runs on a Linux platform. There's also no need to issue a write erase and reload commands just to remove the default configurations such as the one-time username "cisco", ip http access-class 23 (used for HTTP/CCP) and transport input none (used on VTY lines), which locked me out of a router a few times.


Initializing Hardware ...

System integrity status: 00000610

Rom image verified correctly


System Bootstrap, Version 15.4(3r)S5, RELEASE SOFTWARE
Copyright (c) 1994-2015  by cisco Systems, Inc.

Current image running: Boot ROM0

Last reset cause: PowerOn

Cisco ISR4331/K9 platform with 4194304 Kbytes of main memory


no valid BOOT image found

Final autoboot attempt from default boot device...

Warning: filesystem is not clean

Warning: filesystem is not clean

File size is 0x1c0cd400

Located isr4300-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin

Image size 470602752 inode num 12, bks cnt 114894 blk size 8*512

###############################################################################

Boot image size = 470602752 (0x1c0cd400) bytes

Package header rev 1 structure detected

Calculating SHA-1 hash...done

validate_package: SHA-1 hash:

    calculated 964c232a:7ae904ce:2722d662:5a878b27:c84ad6da

    expected   964c232a:7ae904ce:2722d662:5a878b27:c84ad6da

RSA Signed RELEASE Image Signature Verification Successful.
Package Load Test Latency : 8547 msec
Image validated
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 1 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 5 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 6 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 7 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 8 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 9 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 10 contained errors which were auto-corrected.
%IOSXEBOOT-4-BOOT_SRC: (rp/0): mounting /boot/super.iso to /tmp/sw/isos

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706


Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 11-Feb-16 08:58 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

% failed to initialize nvram

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco ISR4331/K9 (1RU) processor with 1655569K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: no


Press RETURN to get started!


*Nov 29 05:16:16.090: %SMART_LIC-6-AGENT_READY: Smart Agent for Licensing is initialized
*Nov 29 05:16:17.867: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = esg Next reboot level = ipbasek9 and License = ipbasek9
*Nov 29 05:16:19.041: %ISR_THROUGHPUT-6-LEVEL: Throughput level has been set to 100000 kbps
*Nov 29 05:16:20.019: %IOSXE_RP_NV-3-NV_ACCESS_FAIL: Initial read of NVRAM contents failed
*Nov 29 05:16:23.500: dev_pluggable_optics_selftest attribute table internally inconsistent @ 0x125
*Nov 29 05:16:27.288: %SPANTREE-5-EXTENDED_SYSID:
Router>Extended SysId enabled for type vlan
*Nov 29 05:16:28.261: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Nov 29 05:16:28.262: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Nov 29 05:16:28.262: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Nov 29 05:16:28.270: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Nov 29 05:16:29.596: %IOSXE_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-intf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001
*Nov 29 05:16:29.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, changed state to up
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Nov 29 05:16:21.218: %CMLIB-6-THROUGHPUT_VALUE: SIP1: cmand:  Throughput license found, throughput set to 100000 kbps
*Nov 29 05:16:30.959: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/0, interfaces disabled
*Nov 29 05:16:30.959: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/1, interfaces disabled
*Nov 29 05:16:30.963: %SPA_OIR-6-OFFLINECARD: SPA (ISR4331-3x1GE) offline in subslot 0/0
*Nov 29 05:16:30.964: %SPA_OIR-6-OFFLINECARD: SPA (NIM-2FXS) offline in subslot 0/1
*Nov 29 05:16:30.968: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Nov 29 05:16:30.968: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F0
*Nov 29 05:16:30.969: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Nov 29 05:16:30.969: %IOSXE_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Nov 29 05:16:30.973: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 1
*Nov 29 05:16:31.003: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Nov 29 05:16:31.007: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/1
*Nov 29 05:16:31.043: %SPA-3-ENVMON_NOT_MONITORED: SIP1: iomd:  Environmental monitoring is not enabled for ISR4331-3x1GE[0/0]
*Nov 29 05:16:36.423: %SPA_OIR-6-ONLINECARD: SPA (ISR4331-3x1GE) online in subslot 0/0
*Nov 29 05:16:38.370: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed state to down
*Nov 29 05:16:38.415: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/1, changed state to down
*Nov 29 05:16:38.419: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/2, changed state to down
*Nov 29 05:17:00.882: new extended attributes received from iomd(slot 0 bay 1 board 0)
*Nov 29 05:17:01.371: %SPA_OIR-6-ONLINECARD: SPA (NIM-2FXS) online in subslot 0/1
*Nov 29 05:17:01.372: %IOSXE_OIR-6-SOFT_RELOADSPA: SPA(NIM-2FXS) reloaded on subslot 0/1
*Nov 29 05:17:01.373: %SPA_OIR-6-OFFLINECARD: SPA (NIM-2FXS) offline in subslot 0/1
*Nov 29 05:17:35.853: %SPA_OIR-6-ONLINECARD: SPA (NIM-2FXS) online in subslot 0/1
*Nov 29 05:17:39.700: %LINK-3-UPDOWN: Interface Service-Engine0/1/0, changed state to up
*Nov 29 05:17:40.700: %LINEPROTO-5-UPDOWN: Line protocol on Interface Service-Engine0/1/0, changed state to up
*Nov 29 05:23:13.895: %LINK-5-CHANGED: Interface GigabitEthernet0/0/0, changed state to administratively down
*Nov 29 05:23:13.896: %LINK-5-CHANGED: Interface GigabitEthernet0/0/1, changed state to administratively down
*Nov 29 05:23:13.896: %LINK-5-CHANGED: Interface GigabitEthernet0/0/2, changed state to administratively down
*Nov 29 05:23:13.897: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Nov 29 05:23:13.933: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
*Nov 29 05:23:20.117: %SYS-5-RESTART: System restarted --
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 11-Feb-16 08:58 by mcpre
Router>enable
Router#
Router#show version
Cisco IOS XE Software, Version 03.16.02.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 11-Feb-16 08:58 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON

Router uptime is 7 minutes
Uptime for this control processor is 8 minutes
System returned to ROM by reload at 03:53:06 UTC Thu Mar 24 2016
System image file is "bootflash:/isr4300-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin"
Last reload reason: PowerOn


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

     
Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite                 Suite Current         Type           Suite Next reboot   
--------------------------------------------------------------------------------
FoundationSuiteK9     None                  None           None                
securityk9
appxk9
AdvUCSuiteK9          None                  None           None                
uck9
cme-srst
cube


Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
 Current         Type           Next reboot
------------------------------------------------------------------
appxk9           None             None             None
uck9             None             None             None
securityk9       None             None             None
ipbase           ipbasek9         Permanent        ipbasek9

cisco ISR4331/K9 (1RU) processor with 1655569K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
2 Voice FXS interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

Configuration register is 0x2102


Router#show run
Building configuration...


Current configuration : 1293 bytes
!
! Last configuration change at 05:23:22 UTC Tue Nov 29 2016
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no platform punt-keepalive disable-kernel-core
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
!
license udi pid ISR4331/K9 sn FDO20090ABC
!
spanning-tree extend system-id
!
!
redundancy
 mode none
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 shutdown
 negotiation auto
!
interface Service-Engine0/1/0
 no ip address
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 no ip address
 shutdown
 negotiation auto
!
interface Vlan1
 no ip address
 shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
!
!
!
!
!
!
control-plane
!
!
line con 0
 stopbits 1
 line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end


These are the pictures of the front and back panels.



There's a dedicated out-of-band management port GE0 in front. It uses the default forwarding VRF Mgmt-intf, that can't be changed.


The serial number pull-out label is found at the back which is a bit long and foldable.


The Cisco 4000 uses a fourth generation Network Interface Module (NIM) cards, which is long and NOT supported on ISR G2 routers (such as 2900 and 3900). Below is a NIM-2FXS card that I've installed.


To install a PVDM4-64 module, you'll need to remove 6 small screws: 4 on top and 2 on the sides.



The Cisco 4331 router has only 1 PVDM slot which is found between the 3 heat sinks on the left of the picture.



Router#show inventory
NAME: "Chassis", DESCR: "Cisco ISR4331 Chassis"
PID: ISR4331/K9        , VID: V02, SN: FDO2012AABC

NAME: "Power Supply Module 0", DESCR: "250W AC Power Supply for Cisco ISR 4330"
PID: PWR-4330-AC       , VID: V01, SN: DCA19501DEF

NAME: "Fan Tray", DESCR: "Cisco ISR4330 Fan Assembly"
PID: ACS-4330-FANASSY  , VID:    , SN:           

NAME: "module 0", DESCR: "Cisco ISR4331 Built-In NIM controller"
PID: ISR4331/K9        , VID:    , SN:           

NAME: "NIM subslot 0/1", DESCR: "NIM-2FXS Voice Analog Module"
PID: NIM-2FXS          , VID: V01, SN: FOC19494GHI
  

NAME: "PVDM subslot 0/4", DESCR: "PVDM4-64 Voice DSP Module"
PID: PVDM4-64          , VID: V02, SN: FOC20028JKL
 

NAME: "NIM subslot 0/0", DESCR: "Front Panel 3 ports Gigabitethernet Module"
PID: ISR4331-3x1GE     , VID: V01, SN: JAB09270MNO

NAME: "module 1", DESCR: "Cisco ISR4331 Built-In SM controller"
PID: ISR4331/K9        , VID:    , SN:           
         
NAME: "module R0", DESCR: "Cisco ISR4331 Route Processor"
PID: ISR4331/K9        , VID: V02, SN: FDO20090PQR

NAME: "module F0", DESCR: "Cisco ISR4331 Forwarding Processor"
PID: ISR4331/K9        , VID:    , SN:

Friday, November 18, 2016

Basic Configuration of a Talari Networks T510 SD-WAN Appliance

We started deploying Talari Networks Software Defined (SD)-WAN appliance in our branch networks, particularly the T510 appliance. Talari SD-WAN solution creates an "intelligent" network that helps adapt network environments with dual- or multi-WAN circuts. It goes beyond the traditional network failover setup (such as IP SLA and tracking) by performing intelligent network load balancing, packet duplication, and seamless routing. Here's a sample network architecture from Talari's website using the SD-WAN solution.


I recently configured a T510 appliance and below is the initial setup to be able to manage it. The USB, Console, MGT and Bypass ports are found in front panel. The power and serial number sticker are found at the back.



The box includes a null modem and I've used a USB-to-serial adapter on my PC and to connect to the CONSOLE port. You'll need to set the console baud rate to 115200 and the rest using the common terminal emulator settings (8-N-1-N).


There are two ways to initialize the T510 appliance: connect via console and issue CLI commands to set the management IP address or manually set your PC's static IP address to 192.168.0.1/24 and HTTPS to Talari's default IP address 192.168.0.2. I've used the CLI method and below are the bootup and configuration process.


[    0.385137] ACPI: Added _OSI(Module Device)
[    0.385960] ACPI: Added _OSI(Processor Device)
[    0.386958] ACPI: Added _OSI(3.0 _SCP Extensions)
[    0.387958] ACPI: Added _OSI(Processor Aggregator Device)
[    0.398047] ACPI: Executed 1 blocks of module-level executable AML code
[    0.409761] ACPI: Interpreter enabled
[    0.409953] ACPI: (supports S0 S5)
[    0.411960] ACPI: Using IOAPIC for interrupt routing
[    0.433164] HEST: Table parsing has been initialized.
[    0.433955] PCI: Using host bridge windows from ACPI; if necessary, use "pci=
nocrs" and report a bug
[    0.436618] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[    0.439349] pci_root PNP0A08:00: host bridge window [io  0x0000-0x0cf7]
[    0.439951] pci_root PNP0A08:00: host bridge window [io  0x0d00-0xffff]
[    0.440950] pci_root PNP0A08:00: host bridge window [mem 0x000a0000-0x000bffff]
[    0.441950] pci_root PNP0A08:00: host bridge window [mem 0x000d0000-0x000dffff]
[    0.442949] pci_root PNP0A08:00: host bridge window [mem 0x7f700000-0xdfffffff]
[    0.443949] pci_root PNP0A08:00: host bridge window [mem 0xf0000000-0xfed8ffff]
[    0.444949] pci_root PNP0A08:00: host bridge window [mem 0x400000000-0xfffffffff]
[    0.448860] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 1 PIO at 02e0 (mask000f)
[    0.448951] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 2 PIO at 03e0 (mask000f)
[    0.449950] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 3 PIO at 1640 (mask000f)
[    0.450950] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 4 PIO at 0ca0 (mask000f)
[    0.454969] pci 0000:00:1c.0: PCI bridge to [bus 01-01]
[    0.457966] pci 0000:00:1c.4: PCI bridge to [bus 02-02]
[    0.460965] pci 0000:00:1c.5: PCI bridge to [bus 03-03]
[    0.462035] pci 0000:00:1e.0: PCI bridge to [bus 04-04] (subtractive decode)
[    0.464788]  pci0000:00: Requesting ACPI _OSC control (0x1d)
[    0.466168]  pci0000:00: ACPI _OSC control (0x1d) granted
[    0.483845] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 7 10 *11 12 14 15)
[    0.487083] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 7 *10 11 12 14 15)
[    0.491454] ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 *7 10 11 12 14 15)
[    0.495070] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 7 10 11 12 14 *15)
[    0.499449] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 7 10 11 12 14 15) *0, disabled.
[    0.505075] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 7 10 11 12 *14 15)
[    0.509450] ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 7 *10 11 12 14 15)
[    0.513068] ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 7 10 *11 12 14 15)
[    0.517498] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
[    0.517971] vgaarb: loaded
[    0.518936] vgaarb: bridge control possible 0000:00:02.0
[    0.520083] PCI: Using ACPI for IRQ routing
[    0.527819] Expanded resource reserved due to conflict with PCI Bus 0000:00
[    0.534346] pnp: PnP ACPI init
[    0.534955] ACPI: bus type pnp registered
[    0.537716] system 00:01: [mem 0xfed14000-0xfed19fff] has been reserved
[    0.537941] system 00:01: [mem 0xfed90000-0xfed93fff] has been reserved
[    0.542801] system 00:08: [io  0x164e-0x164f] has been reserved
[    0.546215] system 00:0a: [io  0x0a00-0x0a0f] has been reserved
[    0.547605] system 00:0b: [io  0x04d0-0x04d1] has been reserved
[    0.547938] system 00:0b: [io  0x0800-0x087f] has been reserved
[    0.548937] system 00:0b: [io  0x0480-0x04ff] could not be reserved
[    0.549937] system 00:0b: [mem 0xfed1c000-0xfed1ffff] has been reserved
[    0.550935] system 00:0b: [mem 0xfed20000-0xfed3ffff] has been reserved
[    0.551935] system 00:0b: [mem 0xfed40000-0xfed8ffff] has been reserved
[    0.553984] system 00:0d: [mem 0xfec00000-0xfec00fff] could not be reserved
[    0.554935] system 00:0d: [mem 0xfee00000-0xfee00fff] has been reserved
[    0.557007] system 00:0e: [mem 0xe0000000-0xefffffff] has been reserved
[    0.559486] system 00:0f: [mem 0x00000000-0x0009ffff] could not be reserved
[    0.559937] system 00:0f: [mem 0x000c0000-0x000cffff] could not be reserved
[    0.560934] system 00:0f: [mem 0x000e0000-0x000fffff] could not be reserved
[    0.561934] system 00:0f: [mem 0x00100000-0x7f6fffff] could not be reserved
[    0.562934] system 00:0f: [mem 0xfed90000-0xffffffff] could not be reserved
[    0.565107] pnp: PnP ACPI: found 16 devices
[    0.565929] ACPI: ACPI bus type pnp unregistered
[    0.576739] Switching to clocksource acpi_pm
[    0.577077] pci 0000:00:1c.5: BAR 15: assigned [mem 0x80000000-0x801fffff 64bit pref]
[    0.584993] pci 0000:00:1c.4: BAR 15: assigned [mem 0x80200000-0x803fffff 64bit pref]
[    0.592930] pci 0000:00:1c.0: BAR 15: assigned [mem 0x80400000-0x805fffff 64bit pref]
[    0.601116] pci 0000:01:00.0: BAR 7: can't assign mem (size 0x20000)
[    0.607574] pci 0000:01:00.0: BAR 10: can't assign mem (size 0x20000)
[    0.614116] pci 0000:01:00.1: BAR 7: can't assign mem (size 0x20000)
[    0.620572] pci 0000:01:00.1: BAR 10: can't assign mem (size 0x20000)
[    0.627093] pci 0000:00:1c.0: PCI bridge to [bus 01-01]
[    0.632400] pci 0000:00:1c.0:   bridge window [io  0xc000-0xcfff]
[    0.638575] pci 0000:00:1c.0:   bridge window [mem 0xfe900000-0xfe9fffff]
[    0.645448] pci 0000:00:1c.0:   bridge window [mem 0x80400000-0x805fffff 64bit pref]
[    0.653294] pci 0000:00:1c.4: PCI bridge to [bus 02-02]
[    0.658597] pci 0000:00:1c.4:   bridge window [io  0xd000-0xdfff]
[    0.664772] pci 0000:00:1c.4:   bridge window [mem 0xfea00000-0xfeafffff]
[    0.671639] pci 0000:00:1c.4:   bridge window [mem 0x80200000-0x803fffff 64bit pref]
[    0.679485] pci 0000:00:1c.5: PCI bridge to [bus 03-03]
[    0.684787] pci 0000:00:1c.5:   bridge window [io  0xe000-0xefff]
[    0.690964] pci 0000:00:1c.5:   bridge window [mem 0xfeb00000-0xfebfffff]
[    0.697836] pci 0000:00:1c.5:   bridge window [mem 0x80000000-0x801fffff 64bit pref]
[    0.705684] pci 0000:00:1e.0: PCI bridge to [bus 04-04]
[    0.711504] NET: Registered protocol family 2
[    0.716268] IP route cache hash table entries: 65536 (order: 7, 524288 bytes)

[    0.725152] TCP established hash table entries: 262144 (order: 10, 4194304 bytes)
[    0.735644] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes)
[    0.743113] TCP: Hash tables configured (established 262144 bind 65536)
[    0.749828] TCP reno registered
[    0.753075] UDP hash table entries: 1024 (order: 3, 32768 bytes)
[    0.759210] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
[    0.765997] NET: Registered protocol family 1
[    0.771044] Unpacking initramfs...
[    0.945159] Freeing initrd memory: 3476k freed
[    0.953325] audit: initializing netlink socket (disabled)
[    0.958845] type=2000 audit(1479276512.957:1): initialized
[    1.003304] HugeTLB registered 2 MB page size, pre-allocated 0 pages
[    1.011208] VFS: Disk quotas dquot_6.5.2
[    1.015328] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    1.022074] msgmni has been set to 4003
[    1.026831] alg: No test for stdrng (krng)
[    1.031146] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
[    1.038657] io scheduler noop registered
[    1.042667] io scheduler deadline registered
[    1.047125] io scheduler cfq registered (default)
[    1.052943] APEI: Can not request iomem region <000000007f6b412a-000000007f6b412c> for GARs.
[    1.061564] [Firmware Warn]: GHES: Poll interval is 0 for generic hardware error source: 1,
disabled.
[    1.071104] GHES: APEI firmware first mode is enabled by WHEA _OSC.
[    1.077611] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
[    1.104522] serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[    1.131194] serial8250: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[    1.158266] 00:06: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[    1.184605] 00:07: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[    1.190825] hpet_acpi_add: no address or irqs in _CRS
[    1.196214] i8042: PNP: No PS/2 controller found. Probing ports directly.
[    1.205975] serio: i8042 KBD port at 0x60,0x64 irq 1
[    1.211052] serio: i8042 AUX port at 0x60,0x64 irq 12
[    1.216539] mousedev: PS/2 mouse device common for all mice
[    1.222300] rtc_cmos 00:03: RTC can wake from S4
[    1.227198] rtc_cmos 00:03: rtc core: registered rtc_cmos as rtc0
[    1.233434] rtc0: alarms up to one month, y3k, 114 bytes nvram
[    1.239390] cpuidle: using governor ladder
[    1.243558] cpuidle: using governor menu
[    1.248540] TCP cubic registered
[    1.251844] NET: Registered protocol family 17
[    1.256371] Registering the dns_resolver key type
[    1.261260] libceph: loaded (mon/osd proto 15/24, osdmap 5/6 5/6)
[    1.267524] registered taskstats version 1
[    1.272719] rtc_cmos 00:03: setting system clock to 2016-11-16 06:08:34 UTC (
1479276514)
[    1.284682] Freeing unused kernel memory: 536k freed
[    1.290063] Write protecting the kernel read-only data: 6144k
[    1.308736] Freeing unused kernel memory: 1376k freed
[    1.319381] Freeing unused kernel memory: 496k freed
Loading, please wait...
[    1.346222] udevd[67]: starting version 175
[    1.408516] usbcore: registered new interface driver usbfs
[    1.429907] usbcore: registered new interface driver hub
[    1.435474] dca service started, version 1.12.1
[    1.449884] usbcore: registered new device driver usb
[    1.457851] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.466548] e1000e: Intel(R) PRO/1000 Network Driver - 2.3.2-k
[    1.474459] uhci_hcd: USB Universal Host Controller Interface driver
[    1.477195] ehci_hcd 0000:00:1a.7: EHCI Host Controller
[    1.477281] ehci_hcd 0000:00:1a.7: new USB bus registered, assigned bus number 1
[    1.477351] ehci_hcd 0000:00:1a.7: debug port 1
[    1.481311] ehci_hcd 0000:00:1a.7: irq 18, io mem 0xfe777c00
[    1.484037] e1000e: Copyright(c) 1999 - 2013 Intel Corporation.
[    1.484327] e1000e 0000:02:00.0: Interrupt Throttling Rate (ints/sec) set todynamic conservative mode
[    1.497872] ehci_hcd 0000:00:1a.7: USB 2.0 started, EHCI 1.00
[    1.497937] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    1.497945] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.497952] usb usb1: Product: EHCI Host Controller
[    1.497958] usb usb1: Manufacturer: Linux 3.2.57-t510v1 ehci_hcd
[    1.497963] usb usb1: SerialNumber: 0000:00:1a.7
[    1.498345] hub 1-0:1.0: USB hub found
[    1.498360] hub 1-0:1.0: 6 ports detected
[    1.498574] ehci_hcd 0000:00:1d.7: EHCI Host Controller
[    1.498599] ehci_hcd 0000:00:1d.7: new USB bus registered, assigned bus number 2
[    1.498679] ehci_hcd 0000:00:1d.7: debug port 1
[    1.502645] ehci_hcd 0000:00:1d.7: irq 23, io mem 0xfe777800
[    1.512144] ehci_hcd 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[    1.512214] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
[    1.512222] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.512228] usb usb2: Product: EHCI Host Controller
[    1.512234] usb usb2: Manufacturer: Linux 3.2.57-t510v1 ehci_hcd
[    1.512240] usb usb2: SerialNumber: 0000:00:1d.7
[    1.512564] hub 2-0:1.0: USB hub found
[    1.512580] hub 2-0:1.0: 6 ports detected
[    1.593801] e1000e 0000:02:00.0: eth0: (PCI Express:2.5GT/s:Width x1) 0c:c4:7a:85:76:86
[    1.593809] e1000e 0000:02:00.0: eth0: Intel(R) PRO/1000 Network Connection
[    1.593898] e1000e 0000:02:00.0: eth0: MAC: 3, PHY: 8, PBA No: 0101FF-0FF
[    1.594223] e1000e 0000:03:00.0: Interrupt Throttling Rate (ints/sec) set todynamic conservative mode
[    1.666257] uhci_hcd 0000:00:1a.0: UHCI Host Controller
[    1.676195] igb: Intel(R) Gigabit Ethernet Network Driver - version 5.0.5-k
[    1.678319] uhci_hcd 0000:00:1a.0: new USB bus registered, assigned bus number 3
[    1.678434] uhci_hcd 0000:00:1a.0: irq 16, io base 0x0000b880
[    1.678587] usb usb3: New USB device found, idVendor=1d6b, idProduct=0001
[    1.678597] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.678604] usb usb3: Product: UHCI Host Controller
[    1.678611] usb usb3: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.678618] usb usb3: SerialNumber: 0000:00:1a.0
[    1.679105] hub 3-0:1.0: USB hub found
[    1.679126] hub 3-0:1.0: 2 ports detected
[    1.679339] uhci_hcd 0000:00:1a.1: UHCI Host Controller
[    1.679370] uhci_hcd 0000:00:1a.1: new USB bus registered, assigned bus number 4
[    1.679472] uhci_hcd 0000:00:1a.1: irq 21, io base 0x0000b800
[    1.679605] usb usb4: New USB device found, idVendor=1d6b, idProduct=0001
[    1.679614] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.679622] usb usb4: Product: UHCI Host Controller
[    1.679628] usb usb4: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.679635] usb usb4: SerialNumber: 0000:00:1a.1
[    1.680073] hub 4-0:1.0: USB hub found
[    1.680092] hub 4-0:1.0: 2 ports detected
[    1.680303] uhci_hcd 0000:00:1a.2: UHCI Host Controller
[    1.680333] uhci_hcd 0000:00:1a.2: new USB bus registered, assigned bus number 5
[    1.680441] uhci_hcd 0000:00:1a.2: irq 19, io base 0x0000b480
[    1.680587] usb usb5: New USB device found, idVendor=1d6b, idProduct=0001
[    1.680596] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.680604] usb usb5: Product: UHCI Host Controller
[    1.680611] usb usb5: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.680618] usb usb5: SerialNumber: 0000:00:1a.2
[    1.681078] hub 5-0:1.0: USB hub found
[    1.681099] hub 5-0:1.0: 2 ports detected
[    1.681352] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[    1.681385] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 6
[    1.681449] uhci_hcd 0000:00:1d.0: irq 23, io base 0x0000b400
[    1.681584] usb usb6: New USB device found, idVendor=1d6b, idProduct=0001
[    1.681593] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.681601] usb usb6: Product: UHCI Host Controller
[    1.681607] usb usb6: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.681614] usb usb6: SerialNumber: 0000:00:1d.0
[    1.682054] hub 6-0:1.0: USB hub found
[    1.682072] hub 6-0:1.0: 2 ports detected
[    1.682282] uhci_hcd 0000:00:1d.1: UHCI Host Controller
[    1.682314] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 7
[    1.682375] uhci_hcd 0000:00:1d.1: irq 19, io base 0x0000b080
[    1.682519] usb usb7: New USB device found, idVendor=1d6b, idProduct=0001
[    1.682529] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.682537] usb usb7: Product: UHCI Host Controller
[    1.682544] usb usb7: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.682551] usb usb7: SerialNumber: 0000:00:1d.1
[    1.682971] hub 7-0:1.0: USB hub found
[    1.682987] hub 7-0:1.0: 2 ports detected
[    1.683239] uhci_hcd 0000:00:1d.2: UHCI Host Controller
[    1.683267] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 8
[    1.683328] uhci_hcd 0000:00:1d.2: irq 18, io base 0x0000b000
[    1.683452] usb usb8: New USB device found, idVendor=1d6b, idProduct=0001
[    1.683460] usb usb8: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.683467] usb usb8: Product: UHCI Host Controller
[    1.683474] usb usb8: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.683480] usb usb8: SerialNumber: 0000:00:1d.2
[    1.683869] hub 8-0:1.0: USB hub found
[    1.683887] hub 8-0:1.0: 2 ports detected
[    1.704913] e1000e 0000:03:00.0: eth1: (PCI Express:2.5GT/s:Width x1) 0c:c4:7a:85:76:87
[    1.704922] e1000e 0000:03:00.0: eth1: Intel(R) PRO/1000 Network Connection
[    1.705055] e1000e 0000:03:00.0: eth1: MAC: 3, PHY: 8, PBA No: 0101FF-0FF
[    2.040669] igb: Copyright (c) 2007-2013 Intel Corporation.
[    2.054982] SCSI subsystem initialized
[    2.072573] ahci: SSS flag set, parallel bus scan disabled
[    2.078227] ahci 0000:00:1f.2: AHCI 0001.0200 32 slots 6 ports 3 Gbps 0x3f impl SATA mode
[    2.086534] ahci 0000:00:1f.2: flags: 64bit ncq sntf stag pm led clo pio slumpart ccc ems sxs
[    2.106256] scsi0 : ahci
[    2.109231] scsi1 : ahci
[    2.112078] scsi2 : ahci
[    2.114883] scsi3 : ahci
[    2.117699] scsi4 : ahci
[    2.120510] scsi5 : ahci
[    2.123610] ata1: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777100 irq 58
[    2.131114] ata2: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777180 irq 58
[    2.138608] ata3: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777200 irq 58
[    2.146102] ata4: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777280 irq 58
[    2.153598] ata5: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777300 irq 58
[    2.161096] ata6: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777380 irq 58
[    2.209576] igb 0000:01:00.0: Intel(R) Gigabit Ethernet Network Connection
[    2.217221] igb 0000:01:00.0: eth2: (PCIe:2.5Gb/s:Width x4) 00:0c:bd:0a:6c:39

[    2.224505] igb 0000:01:00.0: eth2: PBA No: Unknown
[    2.229472] igb 0000:01:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s)
[    2.399152] igb 0000:01:00.1: Intel(R) Gigabit Ethernet Network Connection
[    2.406118] igb 0000:01:00.1: eth3: (PCIe:2.5Gb/s:Width x4) 00:0c:bd:0a:6c:38

[    2.413338] igb 0000:01:00.1: eth3: PBA No: Unknown
[    2.418291] igb 0000:01:00.1: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s)
[    2.473049] ata1: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
[    2.480171] ata1.00: ATA-9: KINGSTON SKC400S37128G, SAFM00.Y, max UDMA/133
[    2.487128] ata1.00: 250069680 sectors, multi 16: LBA48 NCQ (depth 31/32), AA

[    2.494523] ata1.00: configured for UDMA/133
[    2.499195] scsi 0:0:0:0: Direct-Access     ATA      KINGSTON SKC400S SAFM PQ: 0 ANSI: 5
[    2.812044] ata2: SATA link down (SStatus 0 SControl 300)
[    3.122041] ata3: SATA link down (SStatus 0 SControl 300)
[    3.432046] ata4: SATA link down (SStatus 0 SControl 300)
[    3.742042] ata5: SATA link down (SStatus 0 SControl 300)
[    4.052040] ata6: SATA link down (SStatus 0 SControl 300)
[    4.073765] sd 0:0:0:0: [sda] 250069680 512-byte logical blocks: (128 GB/119GiB)
[    4.081606] sd 0:0:0:0: [sda] Write Protect is off
[    4.086582] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[    4.097901]  sda: sda1 sda2 sda3 sda4 < sda5 sda6 >
[    4.104259] sd 0:0:0:0: [sda] Attached SCSI disk
Begin: Loading essential drivers ... done.
Begin: Running /scripts/init-premount ... done.
Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done.

Begin: Running /scripts/local-premount ... done.
[    4.332385] kjournald starting.  Commit interval 5 seconds
[    4.332443] EXT3-fs (sda2): mounted filesystem with ordered data mode
Begin: Running /scripts/local-bottom ... done.
done.
Begin: Running /scripts/init-bottom ... done.
INIT: version 2.88 booting
[....] Starting the hotplug events dispatcher: udevd[    4.911603] udevd[355]: s
tarting version 175
. ok
^[[?1;2c[....] ^[[?1;2cSynthesizing the initial hotplug events...[    5.066709]
input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
[    5.082593] ACPI: Power Button [PWRB]
[    5.088328] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input1
[    5.099655] ACPI: Power Button [PWRF]
[    5.156974] iTCO_vendor_support: vendor-support=0
[    5.157070] udevd[438]: renamed network interface eth0 to tn-wa0
^[[?1;2c[    5.170093] iTCO_wdt: Intel TCO WatchDog Timer Driver v1.07
[    5.172931] udevd[423]: renamed network interface eth3 to tn-wbp0
done.
[    5.188984] udevd[415]: renamed network interface eth2 to tn-lbp0
[    5.189719] iTCO_wdt: Found a ICH9R TCO device (Version=2, TCOBASE=0x0860)
[    5.189906] iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0)
^[[?1;2c[    5.211948] udevd[385]: renamed network interface eth1 to tn-mgt0
[....] Waiting for /dev to be fully populated...done.
^[[?1;2c^[[?1;2c[....] Setting preliminary keymap...done.
^[[?1;2c^[[?1;2c[....] Setting parameters of disc: (none). ok ^[[?1;2c
^[[?1;2c[....] Activating swap...[    6.362317] Adding 1028152k swap on /dev/sda
5.  Priority:-1 extents:1 across:1028152k SS
done.
^[[?1;2c[....] Checking root file system...fsck from util-linux 2.20.1
e2fsck 1.42.5 (29-Jul-2012)
Pass 1: Checking inodes, blocks, and sizes
Pass 2: Checking directory structure
Pass 3: Checking directory connectivity
Pass 4: Checking reference counts
Pass 5: Checking group summary information
Primary_OS: 53314/262944 files (0.8% non-contiguous), 404219/1050249 blocks
done.
[   10.032451] EXT3-fs (sda2): using internal journal
^[[?1;2c^[[?1;2c[....] Cleaning up temporary files... /tmp. ok
^[[?1;2c^[[?1;2c[....] Activating lvm and md swap...done.
[....] ^[[?1;2c^[[?1;2c^[[?1Checking file systems...;2cfsck from util-linux 2.20.1

Debian GNU/Linux 7 talari ttyS0

talari login: talariuser    // DEFAULT LOGIN
Password: talari
Linux talari 3.2.57-t510v1 #1 SMP PREEMPT Mon Dec 8 18:23:19 EST 2014 x86_64
======================================================================

        Talari Operating System 4.4 on T510v1
        Host IP = 192.168.0.2     // DEFAULT MANAGEMENT IP (/24)

======================================================================
talariuser@Talari-T510:~# tcon      // TALARI CONSOLE; TO INITIALIZE MGT IP
Console to Talari acquired

>management_ip

IP Address:             192.168.0.2
Subnet Mask:            255.255.255.0
Gateway IP Address:     (Not configured)

Which would you like to do?
        "set interface <ip address> <subnet mask> <gateway>" - Stage New Setting
s for IP Address, Subnet Mask, and Gateway IP Address
        "address" - Stage New IP Address
        "mask" - Stage New Subnet Mask
        "gateway" - Stage New Gateway IP Address
        "clear" - Clear Settings
        "apply" - Apply Staged Settings
        "cancel" - Cancel Staged Settings
        "main_menu" - Return to the Main Menu

set_management_ip>set interface 172.27.148.31 255.255.255.192 172.27.148.1
Management Interface settings have been staged.
Enter "apply" to make the settings take effect.

The following changes have been staged:

IP Address:             172.27.148.31
Subnet Mask:            255.255.255.192
Gateway IP Address:     172.27.148.1


IP Address:             192.168.0.2
Subnet Mask:            255.255.255.0
Gateway IP Address:     (Not configured)

Which would you like to do?
        "set interface <ip address> <subnet mask> <gateway>" - Stage New Setting
s for IP Address, Subnet Mask, and Gateway IP Address
        "address" - Stage New IP Address
        "mask" - Stage New Subnet Mask
        "gateway" - Stage New Gateway IP Address
        "clear" - Clear Settings
        "apply" - Apply Staged Settings
        "cancel" - Cancel Staged Settings
        "main_menu" - Return to the Main Menu

set_management_ip>apply

Are you sure you want to change your Management Interface IP settings?
You may lose connectivity to the appliance. <y/n>?
y
kill: invalid option -- '9'

Usage:
 kill [options] <pid> [...]

Options:
 <pid> [...]            send signal to every <pid> listed
 -<signal>, -s, --signal <signal>
                        specify the <signal> to be sent
 -l, --list=[<signal>]  list all signal names, or convert one to a name
 -L, --table            list all signal names in a nice table

 -h, --help     display this help and exit
 -V, --version  output version information and exit

For more details see kill(1).
/home/talariuser/os_config/network_interfaces/tn-mgt0:1: interface tn-mgt0 decla
red allow-auto twice
/home/talariuser/os_config/network_interfaces/tn-mgt0:1: interface tn-mgt0 decla
red allow-auto twice
Cannot find device "tn-mgt1"
/home/talariuser/os_config/network_interfaces/tn-mgt0:1: interface tn-mgt0 decla
red allow-auto twice

IP Address:             172.27.148.31
Subnet Mask:            255.255.255.192
Gateway IP Address:     172.27.148.1

Which would you like to do?
        "set interface <ip address> <subnet mask> <gateway>" - Stage New Setting
s for IP Address, Subnet Mask, and Gateway IP Address
        "address" - Stage New IP Address
        "mask" - Stage New Subnet Mask
        "gateway" - Stage New Gateway IP Address
        "clear" - Clear Settings
        "apply" - Apply Staged Settings
        "cancel" - Cancel Staged Settings
        "main_menu" - Return to the Main Menu

set_management_ip>


You could now HTTPS to the T510 appliance using the new management IP address and default login talariuser and password talari.



Choose Advanced Config and Client.



To view and configure interfaces, go to Manage Appliance > Ethernet Interface Settings.
 


After typing the settings (DNS in this case) click Change Settings. I also changed the MGT port speed to 100 Mbps (uncheck Speed) since we have a switches supporting both Gigabit Ethernet and 100 Mbps Ethernet ports.





To change the time or sync the appliance to an NTP server, go to Manage Appliance > Date and Time Settings. There’s a default NTP server configured (time.nst.gov) and I just chose UTC for the Time Zone.
 

To add or change local admin accounts, go to Manage Appliance > Users / Authentication.





To get a snapshot of the device info (for troubleshooting and support purposes) such as OS version, serial number and interface MAC addresses, go to Diagnose > System Info.