Friday, February 3, 2017

Cisco 4331 Router IOS and License Upgrade

I've configured and installed Network Interface Module (NIM) and PVDM module on a Cisco 4331 ISR router on my previous post. Now I'll share the steps on how to perform an IOS upgrade and install a feature license on a Cisco 4000 series router. 


Router#dir ?
  /all             List all files
  /recursive       List files recursively
  all-filesystems  List files on all filesystems
  bootflash:       Directory or file name
  cns:             Directory or file name
  flash:           Directory or file name
  null:            Directory or file name
  nvram:           Directory or file name
  system:          Directory or file name
  tar:             Directory or file name
  tmpsys:          Directory or file name
  usb0:            Directory or file name      // usb0: WILL BE DISPLAYED IF ROUTER SUPPORTS IT
  |                Output modifiers
  <cr>

Router#dir usb0:
Directory of usb0:/

  112  -rwx                0  Aug 20 2013 07:39:20 +00:00  system
  113  -rwx         62682268  Mar 29 2012 12:04:58 +00:00  c2900-universalk9-mz.SPA.150-1.M4.bin
  114  -rwx          4968160   Dec 9 2014 11:44:34 +00:00  TeamViewerQS_en-idch93gk2g.exe
  115  -rwx        125231421  Feb 12 2015 17:00:24 +00:00  lms5.1.bin
  116  -rwx         95947928  Sep 26 2015 08:01:34 +00:00  c2900-universalk9-mz.SPA.153-3.M6.bin
  117  -rwx        302988468  Mar 29 2016 14:29:12 +00:00  cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
  118  -rwx         97911420  Mar 27 2015 18:25:44 +00:00  c3900-universalk9-mz.SPA.154-1.T1.bin
  119  -rwx         52420608   Apr 1 2016 13:13:32 +00:00  asa924-8-smp-k8.bin
  120  -rwx         69285888  Mar 24 2016 14:55:24 +00:00  asa942-11-smp-k8.bin
  121  -rwx             1402  Jun 30 2016 23:39:00 +00:00  BOOTEX.LOG
  122  drwx            32768   Jul 1 2016 00:02:18 +00:00  System Volume Information
  123  -rwx         45424992  Aug 12 2016 13:59:18 +00:00  c2800nm-advsecurityk9-mz.151-4.M10.bin
  124  -rwx         25819140  Nov 26 2016 21:45:52 +00:00  asdm-761.bin
  125  -rwx         86678080  Nov 26 2016 21:48:12 +00:00  asa961-10-lfbff-k8.SPA
  126  -rwx        174131122  Nov 25 2016 06:30:38 +00:00  AIR-CT2500-K9-8-0-140-0.aes
  127  -rwx        420461412  Nov 25 2016 05:54:08 +00:00  isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin      // CISCO RECOMMENDED IOS VERSION AS OF THIS WRITING

2013200384 bytes total (448921600 bytes free)

Router#copy usb0:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin flash:
Destination filename [isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

<OUTPUT TRUNCATED>

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

Router#dir
*Dec  3 07:10:11.475 UTC: %PARSER-5-CFGLOG_LOGGEDCMD: User:console  logged command:boot system bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin
*Dec  3 07:10:12.467 UTC: %SYS-5-CONFIG_I: Configured from console by console
Directory of bootflash:/

   11  drwx            16384  Mar 24 2016 03:53:01 +00:00  lost+found
193537  drwx             4096   Dec 3 2016 06:50:06 +00:00  .prst_sync
   12  -rw-        470602752  Mar 24 2016 04:12:15 +00:00  isr4300-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin
80641  drwx             4096  Mar 24 2016 03:53:32 +00:00  .installer
177409  drwx             4096  Mar 24 2016 04:20:10 +00:00  core
64513  drwx             4096  Mar 24 2016 04:20:10 +00:00  .rollback_timer
   13  -rw-                0  Mar 24 2016 04:20:20 +00:00  tracelogs.219
209665  drwx             8192   Dec 3 2016 06:54:52 +00:00  tracelogs
   14  -rw-               30   Dec 3 2016 06:50:06 +00:00  throughput_monitor_params
   15  -rw-        420461412   Dec 3 2016 07:09:34 +00:00  isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin

3249049600 bytes total (2191085568 bytes free)

Router#show run | include boot
boot-start-marker
boot-end-marker
license boot level appxk9

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#boot system bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin
Router(config)#end
Router#sh run | i bootf
boot system bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin
Router#write memory
Building configuration...

[OK]
Router#reload
Proceed with reload? [confirm]

*Dec  3 07:10:45.779 UTC: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.Dec  3 07:11:00.990 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: process exit with reload chassis code


<OUTPUT TRUNCATED>


I also needed to activate an evaluation (90-day) appxk9 license to support the MPLS commands on the Cisco 4331 router. The datak9 is the equivalent license in Cisco ISR G2 series routers (1900, 2900, 3900).

Router#show version
Cisco IOS XE Software, Version 03.13.06a.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S6a, RELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Tue 27-Sep-16 21:02 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON

Router uptime is 1 minute
Uptime for this control processor is 2 minutes
System image file is "bootflash:isr4300-universalk9.03.13.06a.S.154-3.S6a-ext.SPA.bin"
Last reload reason: Reload Command


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

        
Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite                 Suite Current         Type           Suite Next reboot    
--------------------------------------------------------------------------------
FoundationSuiteK9     None                  None           None                 
securityk9
appxk9

AdvUCSuiteK9          None                  None           None                 
uck9
cme-srst
cube

Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot 
------------------------------------------------------------------
appxk9           None             None             None
uck9             None             None             None
securityk9       None             None             None
ipbase           ipbasek9         Permanent        ipbasek9

cisco ISR4331/K9 (1RU) processor with 1655569K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

Configuration register is 0x2102

Router#show license
Index 1 Feature: appxk9                        
        Period left: Not Activated
        Period Used: 0  minute  0  second 
        License Type: EvalRightToUse
        License State: Active, Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 2 Feature: uck9                          
        Period left: Not Activated
        Period Used: 0  minute  0  second 
        License Type: EvalRightToUse
        License State: Active, Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 3 Feature: securityk9                    
        Period left: Not Activated
        Period Used: 0  minute  0  second 
        License Type: EvalRightToUse
        License State: Active, Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 4 Feature: ipbasek9                      
        Period left: Life time
         
Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#license boot ?
  level  which level to boot
  suite  which suite to boot

Router(config)#license boot level ?
  appxk9      Appx License Level
  securityk9  Security License Level
  uck9        Unified Communication License Level

Router(config)#license boot level appxk9 ?
  disable  disable the group
  <cr>

Router(config)#license boot level appxk9
PLEASE  READ THE  FOLLOWING TERMS  CAREFULLY. INSTALLING THE LICENSE OR
LICENSE  KEY  PROVIDED FOR  ANY CISCO  PRODUCT  FEATURE  OR  USING SUCH
PRODUCT  FEATURE  CONSTITUTES  YOUR  FULL ACCEPTANCE  OF  THE FOLLOWING
TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO  BE BOUND
BY ALL THE TERMS SET FORTH HEREIN.

Use of this product feature requires  an additional license from Cisco,
together with an additional  payment.  You may use this product feature
on an evaluation basis, without payment to Cisco, for 60 days. Your use
of the  product,  including  during the 60 day  evaluation  period,  is
subject to the Cisco end user license agreement
http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html
If you use the product feature beyond the 60 day evaluation period, you
must submit the appropriate payment to Cisco for the license. After the
60 day  evaluation  period,  your  use of the  product  feature will be
governed  solely by the Cisco  end user license agreement (link above),
together  with any supplements  relating to such product  feature.  The
above  applies  even if the evaluation  license  is  not  automatically
terminated  and you do  not receive any notice of the expiration of the
evaluation  period.  It is your  responsibility  to  determine when the
evaluation  period is complete and you are required to make  payment to
Cisco for your use of the product feature beyond the evaluation period.

Your  acceptance  of  this agreement  for the software  features on one
product  shall be deemed  your  acceptance  with  respect  to all  such
software  on all Cisco  products  you purchase  which includes the same
software.  (The foregoing  notwithstanding, you must purchase a license
for each software  feature you use past the 60 days evaluation  period,
so  that  if you enable a software  feature on  1000  devices, you must
purchase 1000 licenses for use past  the 60 day evaluation period.)   

Activation  of the  software command line interface will be evidence of
your acceptance of this agreement.


ACCEPT? (yes/[no]): yes

% use 'write' command to make license boot config take effect on next boot.

Router(config)#end
Router#write memory
Building configuration...

Router#show license
Index 1 Feature: appxk9                        
    Period left: 8  weeks 4  days
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse

    License State: Active, Not in Use, EULA accepted
    License Count: Non-Counted
    License Priority: Low
Index 2 Feature: uck9                          
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 3 Feature: securityk9                    
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 4 Feature: ipbasek9                      
    Period left: Life time
    License Type: Permanent
    License State: Active, In Use
    License Count: Non-Counted
    License Priority: Medium
Index 5 Feature: FoundationSuiteK9             
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 6 Feature: AdvUCSuiteK9                  
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 7 Feature: cme-srst                      
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: 0/0  (In-use/Violation)
    License Priority: None
Index 8 Feature: hseck9                        
Index 9 Feature: throughput                    
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 10 Feature: internal_service


Router#reload
Proceed with reload? [confirm]

*Dec  3 06:46:41.434 UTC: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.Dec  3 06:46:56.474 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: process exit with reload chassis code

Initializing Hardware ..


<OUTPUT TRUNCATED>


Cisco IOS XE Software, Version 03.13.06a.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(3)S6a, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Tue 27-Sep-16 21:02 by mcpre


<OUTPUT TRUNCATED>


Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot 
------------------------------------------------------------------
appx             appxk9           EvalRightToUse   appxk9
uc               None             None             None
security         None             None             None
ipbase           ipbasek9         Permanent        ipbasek9

cisco ISR4331/K9 (1RU) processor with 1686708K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

Configuration register is 0x2102

Router#show license
Index 1 Feature: appxk9                        
    Period left: 8  weeks 4  days
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, In Use
    License Count: Non-Counted
    License Priority: Low

Index 2 Feature: uck9                          
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 3 Feature: securityk9                    
    Period left: Not Activated
    Period Used: 0  minute  0  second 
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 4 Feature: ipbasek9                     
    Period left: Life time
    License Type: Permanent
    License State: Active, In Use
    License Count: Non-Counted
    License Priority: Medium
Index 5 Feature: FoundationSuiteK9            
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 6 Feature: AdvUCSuiteK9                 
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 7 Feature: cme-srst                     
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: 0/0  (In-use/Violation)
    License Priority: None
Index 8 Feature: hseck9                       
Index 9 Feature: throughput                   
    Period left: Not Activated
    Period Used: 0  minute  0  second
    License Type: EvalRightToUse
    License State: Active, Not in Use, EULA not accepted
    License Count: Non-Counted
    License Priority: None
Index 10 Feature: internal_service

Monday, January 9, 2017

Password Recovery on a Cisco 3650 Catalyst Switch

I had to reconfigure some used Cisco 3650 switches from a previous deployment but wasn't able to login using known passwords so I had to perform a password recovery. I've been doing password recovery on Cisco 3560 switch which is identical on other switch platforms, but the password recovery for a Cisco 3650 is a bit different. The CONSOLE port is found at the back and it's the top most port (look at LED arrow pointing upward).


The MODE button is found in front and it's a small black button beside the Cisco logo.


Booting...Initializing RAM +++++++@@@@@@@@...++++++++++++++++++++++++++++++++@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@done.
Memory Test Pass!

Base ethernet MAC Address: f4:4e:05:57:f1:23

Interface GE 0 link down***ERROR: PHY link is down      // WAIT FOR SYST AND ACTV LED TO BECOME AMBER BEFORE RELEASING MODE BUTTON

The system has been interrupted prior to initializing some
filesystems and loading the operating system software.
Console will be reset to 9600 baud rate, need to change terminal setting first.
The following commands will initialize the remaining filesystems,
and finish loading the operating system software:

    flash_init
    boot

switch: flash_init
Initializing Flash...

flashfs[7]: 0 files, 1 directories
flashfs[7]: 0 orphaned files, 0 orphaned directories
flashfs[7]: Total bytes: 6784000
flashfs[7]: Bytes used: 1024
flashfs[7]: Bytes available: 6782976
flashfs[7]: flashfs fsck took 2 seconds....done Initializing Flash.

switch: SWITCH_IGNORE_STARTUP_CFG=1     // BYPASS STARTUP-CONFIG IN NVRAM

switch: boot flash:packages.conf
Getting rest of image
Reading full image into memory....done
Reading full base package into memory...: done = 79121160
Nova Bundle Image
--------------------------------------
Kernel Address    : 0x6042f350
Kernel Size       : 0x402ecf/4206287
Initramfs Address : 0x60832220
Initramfs Size    : 0xdb98e6/14391526
Compression Format: .mzip

Bootable image at @ ram:0x6042f350
Bootable image segment 0 address range [0x81100000, 0x82110000] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 377
Loading Linux kernel with entry point 0x81653a10 ...Bootloader: Done loading app on core_mask: 0xf

### Launching Linux Kernel (flags = 0x5)

All packages are Digitally Signed
Starting System Services

Dec 8 02:21:06 %PLATFORM_MGR-1-PLATMGR_INIT_FAIL: Platform Manager: Failed to set system LEDs after POST.

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sun 27-Apr-14 18:33 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2014 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found,FIPS Mode Not Enabled

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C3650-24PS (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FDO1837EABC
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
257008K bytes of Crash Files at crashinfo:.
1550272K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : f4:4e:05:57:f1:823
Motherboard Assembly Number        : 73-15128-05
Motherboard Serial Number          : FDO18370DEF
Model Revision Number              : D0
Motherboard Revision Number        : A0
Model Number                       : WS-C3650-24PS
System Serial Number               : FDO1837EABC


         --- System Configuration Dialog ---

Enable secret warning
----------------------------------
In order to access the device manager, an enable secret is required
If you enter the initial configuration dialog, you will be prompted for the enable secret
If you choose not to enter the intial configuration dialog, or if you exit setup without setting the enable secret,
please set an enable secret using the following CLI in configuration mode-
enable secret 0 <cleartext password>
----------------------------------
Would you like to enter the initial configuration dialog? [yes/no]: no


Press RETURN to get started!


*Dec  8 02:22:12.388: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
*Dec  8 02:22:14.285: Registering wireless registries required for roaming

*Dec  8 02:22:14.617: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to down
*Dec  8 02:22:14.617: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Dec  8 02:22:14.619: %NGWC_PLATFORM_FEP-6-FRU_PS_OIR: Switch 1: FRU power supply A inserted
*Dec  8 02:21:32.078: *%INIT-7-SWITCH_BOOTING: 1 wcm:  Switch booting...
*Dec  8 02:22:15.618: %LINEPROT% Generating 1024 bit RSA keys, keys will be non-exportable...O-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to down
*Dec  8 02:22:15.618: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Dec  8 02:22:16.507: %MGMTINFRA-3-CFG_PUSH: 1 eicored:  Config push failed.please check wcm provider.
*Dec  8 02:22:16.507: %MGMTINFRA-3-CFG_PUSH: 1 eicored:  Config push failed (rc=10000) for (wcm) on attributes [{ schedulerEnabled@1 : 10000, rtTimeout@1 : 10000, frameBurst@1 : 10000 }, { schedulerEnabled@1 : 10000, rtTimeout@
[OK] (elapsed time was 1 seconds)
1 : 10000, frameBurst@1 : 10000 }]
*Dec  8 02:22:16.893: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Dec  8 02:22:22.669: %SYS-6-STARTUP_CONFIG_IGNORED: System startup configuration is ignored based on the configuration register setting.
*Dec  8 02:22:26.454: %STACKMGR-6-ACTIVE_READY: 1 stack-mgr:  Active switch 1 is ready. System has been configured

*Dec  8 02:22:26.656: %SYS-5-RESTART: System restarted --
Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sun 27-Apr-14 18:33 by prod_rel_team
*Dec  8 02:22:26.681: %AUTHMGR_SPI-6-START: Auth Manager SPI server started
*Dec  8 02:22:29.100: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
*Dec  8 02:22:33.460: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Dec  8 02:22:33.511: %PKI-6-AUTOSAVE: Running configuration saved to NVRAM
Switch>enable
Switch#copy startup-config running-config      // LOAD THE START-UP CONFIG FROM NVRAM
Destination filename [running-config]?
% Generating 1024 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 1 seconds)
*Dec  8 04:12:14.228: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Dec  8 04:12:14.271: %PKI-4-NOAUTOSAVE: Configuration was modified.  Issue "write memory" to save new certificate
*Dec  8 04:12:20.062: %AAAA-4-NOSERVER: Warning: Server 89.1.2.8 is not defined.
*Dec  8 04:12:20.063: %AAAA-4-NOSERVER: Warning: Server 66.5.3.8 is not defined.
*Dec  8 04:12:20.063: %AAAA-4-NOSERVER: Warning: Server 66.1.3.9 is not defined.
 Warning: The cli will be deprecated soon
 'tacacs-server host 89.1.2.8'       // STARTUP-CONFIG HAS TACACS CONFIGURED
 Please move to 'tacacs server <name>' CLI
 Warning: The cli will be deprecated soon
 'tacacs-server host 66.5.3.9'
 Please move to 'tacacs server <name>' CLI
 Warning: The cli will be deprecated soon
 'tacacs-server host 66.5.3.8'
 Please move to 'tacacs server <name>' CLI
9523 bytes copied in 10.430 secs (913 bytes/sec)
sw02#     // THE HOSTNAME WAS ALSO LOADED
*Dec  8 04:12:20.096: % Multiple self signed certificates in config
    certificate for trust point TP-self-signed-1212499775 ignored
*Dec  8 04:12:20.382: %PKI-4-NOAUTOSAVE: Configuration was modified.  Issue "write memory" to save new certificate        // SAVE AFTER YOU RE-CONFIGURE THE NEW PASSWORDS, ISSUE THE reload COMMAND AND HOLD THE MODE BUTTON AGAIN
sw02#
sw02#delete vlan.dat        // AT THIS POINT YOU CAN EITHER RE-CONFIGURE THE ENABLE, LOCAL USERNAME AND VTY PASSWORDS OR COMPLETELY WIPE OUT THE SWITCH USING THE delete vlan.dat AND write erase COMMANDS (then do a reload).
Delete filename [vlan.dat]?
Delete flash:/vlan.dat? [confirm]
sw02#write erase
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
sw02#reload     // HOLD THE MODE BUTTON AGAIN
*Dec  8 04:17:00.314: %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram

System configuration has been modified. Save? [yes/no]: no     // TYPE yes IF YOU RE-CONFIGURED PASSWORDS; TYPE no IF YOU WANT A CLEAN CONFIG
Reload command is being issued on Active unit, this will reload the whole stack
Proceed with reload? [confirm]
*Dec  8 04:18:11.797: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.
*Dec  8 04:18:12.499: %STACKMGR-1-RELOAD_REQUEST: 1 stack-mgr:  Received reload request for all switches, reason Reload command
*Dec  8 04:18:12.500: %STACKMGR-1-RELOAD: 1 stack-mgr:  Reloading due to reason Reload command
*Dec  8 04:18:13.001: %IOSXE-3-PLATFORM: 1 process sysmgr: Reset/Reload requested by [stack-manager].
<Thu Dec  8 04:18:13 2016> Message from sysmgr: Reason Code:[3] Reset Reason:Reset/Reload requested by [stack-manager]. [Reload command]
umount: /proc/fs/nfsd: not mounted
Unmounting ng3k filesystems...
Unmounted /dev/sda3...
Warning! - some ng3k filesystems may not have unmounted cleanly...
Please stand by while rebooting the system...
Restarting system.


<OUTPUT TRUNCATED>


Booting...Initializing RAM +++++++@@@@@@@@...++++++++++++++++++++++++++++++++
Base ethernet MAC Address: f4:4e:05:51:a9:80

Interface GE 0 link down***ERROR: PHY link is down     // WAIT FOR SYST AND ACTV LED TO BECOME AMBER BEFORE RELEASING MODE BUTTON
The system has been interrupted prior to initializing some
filesystems and loading the operating system software.
Console will be reset to 9600 baud rate, need to change terminal setting first.
The following commands will initialize the remaining filesystems,
and finish loading the operating system software:

    flash_init      // SKIP THE flash_init and boot COMMANDS
    boot

switch: SWITCH_IGNORE_STARTUP_CFG=0      // INSTRUCTS THE SWITCH TO READ/LOAD THE STARTUP-CONFIG

switch: boot flash:packages.conf
Getting rest of image
Reading full image into memory....done
Reading full base package into memory...: done = 79121160
Nova Bundle Image
--------------------------------------
Kernel Address    : 0x6042d350
Kernel Size       : 0x402ecf/4206287
Initramfs Address : 0x60830220
Initramfs Size    : 0xdb98e6/14391526
Compression Format: .mzip

Bootable image at @ ram:0x6042d350
Bootable image segment 0 address range [0x81100000, 0x82110000] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 377
Loading Linux kernel with entry point 0x81653a10 ...
Bootloader: Done loading app on core_mask: 0xf

### Launching Linux Kernel (flags = 0x5)

All packages are Digitally Signed
Starting System Services

Dec 8 04:22:53 %PLATFORM_MGR-1-PLATMGR_INIT_FAIL: Platform Manager: Failed to set system LEDs after POST.

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sun 27-Apr-14 18:33 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2014 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found,FIPS Mode Not Enabled

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C3650-24PS (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FDO1837EABC
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
257008K bytes of Crash Files at crashinfo:.
1550272K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : f4:4e:05:51:a1:23
Motherboard Assembly Number        : 73-15128-05
Motherboard Serial Number          : FDO18370DEF
Model Revision Number              : D0
Motherboard Revision Number        : A0
Model Number                       : WS-C3650-24PS
System Serial Number               : FDO1837EABC



         --- System Configuration Dialog ---

Enable secret warning
----------------------------------
In order to access the device manager, an enable secret is required
If you enter the initial configuration dialog, you will be prompted for the enable secret
If you choose not to enter the intial configuration dialog, or if you exit setup without setting the enable secret,
please set an enable secret using the following CLI in configuration mode-
enable secret 0 <cleartext password>
----------------------------------
Would you like to enter the initial configuration dialog? [yes/no]: no

Would you like to terminate autoinstall? [yes]:


Press RETURN to get started!


Switch>enable
Switch#configure terminal
Switch(config)#no manual ?     // no manual boot COMMAND IS UNAVAILABLE
% Unrecognized command
Switch(config)#no m?    
mab       mac     macro    map-class
map-list  memory  monitor 

Switch(config)#end
Switch#no m?


I chose to completely wipe out the switch, re-configure it and tested again by rebooting and the startup-config stored in NVRAM remained intact.

Sunday, January 1, 2017

Installing PVDM4-64 and NIM-2FXS on a Cisco 4331 Router

I went to the Land of Smiles, Bangkok Thailand, the second time around and was hired to setup an office IT network that uses a Cisco 4331 router. I took a side trip after it was done and visited Wat Pho, which is one of the many Buddhist temples in Bangkok. This temple is known as the birthplace of the traditional Thai massage and it houses a huge reclining Buddha. Thai cuisine is amazingly good! I had Phat Thai (or Pad Thai), which is their famous stir-fried rice noodles, and Green Chicken Curry.





The Cisco 4331 is Cisco's latest ISR router in the 4000 series. The 4000 series routers are said to be 4-10 times faster (and cheaper) compared to the ISR G2 series routers. Here's the initial bootup process and startup-config. It now uses the IOS-XE which is Cisco classic IOS that runs on a Linux platform. There's also no need to issue a write erase and reload commands just to remove the default configurations such as the one-time username "cisco", ip http access-class 23 (used for HTTP/CCP) and transport input none (used on VTY lines), which locked me out of a router a few times.


Initializing Hardware ...

System integrity status: 00000610

Rom image verified correctly


System Bootstrap, Version 15.4(3r)S5, RELEASE SOFTWARE
Copyright (c) 1994-2015  by cisco Systems, Inc.

Current image running: Boot ROM0

Last reset cause: PowerOn

Cisco ISR4331/K9 platform with 4194304 Kbytes of main memory


no valid BOOT image found

Final autoboot attempt from default boot device...

Warning: filesystem is not clean

Warning: filesystem is not clean

File size is 0x1c0cd400

Located isr4300-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin

Image size 470602752 inode num 12, bks cnt 114894 blk size 8*512

###############################################################################

Boot image size = 470602752 (0x1c0cd400) bytes

Package header rev 1 structure detected

Calculating SHA-1 hash...done

validate_package: SHA-1 hash:

    calculated 964c232a:7ae904ce:2722d662:5a878b27:c84ad6da

    expected   964c232a:7ae904ce:2722d662:5a878b27:c84ad6da

RSA Signed RELEASE Image Signature Verification Successful.
Package Load Test Latency : 8547 msec
Image validated
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 1 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 5 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 6 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 7 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 8 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 9 contained errors which were auto-corrected.
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash 10 contained errors which were auto-corrected.
%IOSXEBOOT-4-BOOT_SRC: (rp/0): mounting /boot/super.iso to /tmp/sw/isos

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706


Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 11-Feb-16 08:58 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

% failed to initialize nvram

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco ISR4331/K9 (1RU) processor with 1655569K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: no


Press RETURN to get started!


*Nov 29 05:16:16.090: %SMART_LIC-6-AGENT_READY: Smart Agent for Licensing is initialized
*Nov 29 05:16:17.867: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = esg Next reboot level = ipbasek9 and License = ipbasek9
*Nov 29 05:16:19.041: %ISR_THROUGHPUT-6-LEVEL: Throughput level has been set to 100000 kbps
*Nov 29 05:16:20.019: %IOSXE_RP_NV-3-NV_ACCESS_FAIL: Initial read of NVRAM contents failed
*Nov 29 05:16:23.500: dev_pluggable_optics_selftest attribute table internally inconsistent @ 0x125
*Nov 29 05:16:27.288: %SPANTREE-5-EXTENDED_SYSID:
Router>Extended SysId enabled for type vlan
*Nov 29 05:16:28.261: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Nov 29 05:16:28.262: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Nov 29 05:16:28.262: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Nov 29 05:16:28.270: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Nov 29 05:16:29.596: %IOSXE_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-intf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001
*Nov 29 05:16:29.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, changed state to up
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Nov 29 05:16:29.648: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Nov 29 05:16:21.218: %CMLIB-6-THROUGHPUT_VALUE: SIP1: cmand:  Throughput license found, throughput set to 100000 kbps
*Nov 29 05:16:30.959: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/0, interfaces disabled
*Nov 29 05:16:30.959: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/1, interfaces disabled
*Nov 29 05:16:30.963: %SPA_OIR-6-OFFLINECARD: SPA (ISR4331-3x1GE) offline in subslot 0/0
*Nov 29 05:16:30.964: %SPA_OIR-6-OFFLINECARD: SPA (NIM-2FXS) offline in subslot 0/1
*Nov 29 05:16:30.968: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Nov 29 05:16:30.968: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F0
*Nov 29 05:16:30.969: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Nov 29 05:16:30.969: %IOSXE_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Nov 29 05:16:30.973: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 1
*Nov 29 05:16:31.003: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Nov 29 05:16:31.007: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/1
*Nov 29 05:16:31.043: %SPA-3-ENVMON_NOT_MONITORED: SIP1: iomd:  Environmental monitoring is not enabled for ISR4331-3x1GE[0/0]
*Nov 29 05:16:36.423: %SPA_OIR-6-ONLINECARD: SPA (ISR4331-3x1GE) online in subslot 0/0
*Nov 29 05:16:38.370: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed state to down
*Nov 29 05:16:38.415: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/1, changed state to down
*Nov 29 05:16:38.419: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/2, changed state to down
*Nov 29 05:17:00.882: new extended attributes received from iomd(slot 0 bay 1 board 0)
*Nov 29 05:17:01.371: %SPA_OIR-6-ONLINECARD: SPA (NIM-2FXS) online in subslot 0/1
*Nov 29 05:17:01.372: %IOSXE_OIR-6-SOFT_RELOADSPA: SPA(NIM-2FXS) reloaded on subslot 0/1
*Nov 29 05:17:01.373: %SPA_OIR-6-OFFLINECARD: SPA (NIM-2FXS) offline in subslot 0/1
*Nov 29 05:17:35.853: %SPA_OIR-6-ONLINECARD: SPA (NIM-2FXS) online in subslot 0/1
*Nov 29 05:17:39.700: %LINK-3-UPDOWN: Interface Service-Engine0/1/0, changed state to up
*Nov 29 05:17:40.700: %LINEPROTO-5-UPDOWN: Line protocol on Interface Service-Engine0/1/0, changed state to up
*Nov 29 05:23:13.895: %LINK-5-CHANGED: Interface GigabitEthernet0/0/0, changed state to administratively down
*Nov 29 05:23:13.896: %LINK-5-CHANGED: Interface GigabitEthernet0/0/1, changed state to administratively down
*Nov 29 05:23:13.896: %LINK-5-CHANGED: Interface GigabitEthernet0/0/2, changed state to administratively down
*Nov 29 05:23:13.897: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Nov 29 05:23:13.933: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
*Nov 29 05:23:20.117: %SYS-5-RESTART: System restarted --
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 11-Feb-16 08:58 by mcpre
Router>enable
Router#
Router#show version
Cisco IOS XE Software, Version 03.16.02.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 11-Feb-16 08:58 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON

Router uptime is 7 minutes
Uptime for this control processor is 8 minutes
System returned to ROM by reload at 03:53:06 UTC Thu Mar 24 2016
System image file is "bootflash:/isr4300-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin"
Last reload reason: PowerOn


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

     
Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite                 Suite Current         Type           Suite Next reboot   
--------------------------------------------------------------------------------
FoundationSuiteK9     None                  None           None                
securityk9
appxk9
AdvUCSuiteK9          None                  None           None                
uck9
cme-srst
cube


Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
 Current         Type           Next reboot
------------------------------------------------------------------
appxk9           None             None             None
uck9             None             None             None
securityk9       None             None             None
ipbase           ipbasek9         Permanent        ipbasek9

cisco ISR4331/K9 (1RU) processor with 1655569K/6147K bytes of memory.
Processor board ID FDO2012A123
3 Gigabit Ethernet interfaces
2 Voice FXS interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.

Configuration register is 0x2102


Router#show run
Building configuration...


Current configuration : 1293 bytes
!
! Last configuration change at 05:23:22 UTC Tue Nov 29 2016
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no platform punt-keepalive disable-kernel-core
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
!
license udi pid ISR4331/K9 sn FDO20090ABC
!
spanning-tree extend system-id
!
!
redundancy
 mode none
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 shutdown
 negotiation auto
!
interface Service-Engine0/1/0
 no ip address
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 no ip address
 shutdown
 negotiation auto
!
interface Vlan1
 no ip address
 shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
!
!
!
!
!
!
control-plane
!
!
line con 0
 stopbits 1
 line aux 0
 stopbits 1
line vty 0 4
 login
!
!
end


These are the pictures of the front and back panels.



There's a dedicated out-of-band management port GE0 in front. It uses the default forwarding VRF Mgmt-intf, that can't be changed.


The serial number pull-out label is found at the back which is a bit long and foldable.


The Cisco 4000 uses a fourth generation Network Interface Module (NIM) cards, which is long and NOT supported on ISR G2 routers (such as 2900 and 3900). Below is a NIM-2FXS card that I've installed.


To install a PVDM4-64 module, you'll need to remove 6 small screws: 4 on top and 2 on the sides.



The Cisco 4331 router has only 1 PVDM slot which is found between the 3 heat sinks on the left of the picture.



Router#show inventory
NAME: "Chassis", DESCR: "Cisco ISR4331 Chassis"
PID: ISR4331/K9        , VID: V02, SN: FDO2012AABC

NAME: "Power Supply Module 0", DESCR: "250W AC Power Supply for Cisco ISR 4330"
PID: PWR-4330-AC       , VID: V01, SN: DCA19501DEF

NAME: "Fan Tray", DESCR: "Cisco ISR4330 Fan Assembly"
PID: ACS-4330-FANASSY  , VID:    , SN:           

NAME: "module 0", DESCR: "Cisco ISR4331 Built-In NIM controller"
PID: ISR4331/K9        , VID:    , SN:           

NAME: "NIM subslot 0/1", DESCR: "NIM-2FXS Voice Analog Module"
PID: NIM-2FXS          , VID: V01, SN: FOC19494GHI
  

NAME: "PVDM subslot 0/4", DESCR: "PVDM4-64 Voice DSP Module"
PID: PVDM4-64          , VID: V02, SN: FOC20028JKL
 

NAME: "NIM subslot 0/0", DESCR: "Front Panel 3 ports Gigabitethernet Module"
PID: ISR4331-3x1GE     , VID: V01, SN: JAB09270MNO

NAME: "module 1", DESCR: "Cisco ISR4331 Built-In SM controller"
PID: ISR4331/K9        , VID:    , SN:           
         
NAME: "module R0", DESCR: "Cisco ISR4331 Route Processor"
PID: ISR4331/K9        , VID: V02, SN: FDO20090PQR

NAME: "module F0", DESCR: "Cisco ISR4331 Forwarding Processor"
PID: ISR4331/K9        , VID:    , SN:

Friday, November 18, 2016

Basic Configuration of a Talari Networks T510 SD-WAN Appliance

We started deploying Talari Networks Software Defined (SD)-WAN appliance in our branch networks, particularly the T510 appliance. Talari SD-WAN solution creates an "intelligent" network that helps adapt network environments with dual- or multi-WAN circuts. It goes beyond the traditional network failover setup (such as IP SLA and tracking) by performing intelligent network load balancing, packet duplication, and seamless routing. Here's a sample network architecture from Talari's website using the SD-WAN solution.


I recently configured a T510 appliance and below is the initial setup to be able to manage it. The USB, Console, MGT and Bypass ports are found in front panel. The power and serial number sticker are found at the back.



The box includes a null modem and I've used a USB-to-serial adapter on my PC and to connect to the CONSOLE port. You'll need to set the console baud rate to 115200 and the rest using the common terminal emulator settings (8-N-1-N).


There are two ways to initialize the T510 appliance: connect via console and issue CLI commands to set the management IP address or manually set your PC's static IP address to 192.168.0.1/24 and HTTPS to Talari's default IP address 192.168.0.2. I've used the CLI method and below are the bootup and configuration process.


[    0.385137] ACPI: Added _OSI(Module Device)
[    0.385960] ACPI: Added _OSI(Processor Device)
[    0.386958] ACPI: Added _OSI(3.0 _SCP Extensions)
[    0.387958] ACPI: Added _OSI(Processor Aggregator Device)
[    0.398047] ACPI: Executed 1 blocks of module-level executable AML code
[    0.409761] ACPI: Interpreter enabled
[    0.409953] ACPI: (supports S0 S5)
[    0.411960] ACPI: Using IOAPIC for interrupt routing
[    0.433164] HEST: Table parsing has been initialized.
[    0.433955] PCI: Using host bridge windows from ACPI; if necessary, use "pci=
nocrs" and report a bug
[    0.436618] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[    0.439349] pci_root PNP0A08:00: host bridge window [io  0x0000-0x0cf7]
[    0.439951] pci_root PNP0A08:00: host bridge window [io  0x0d00-0xffff]
[    0.440950] pci_root PNP0A08:00: host bridge window [mem 0x000a0000-0x000bffff]
[    0.441950] pci_root PNP0A08:00: host bridge window [mem 0x000d0000-0x000dffff]
[    0.442949] pci_root PNP0A08:00: host bridge window [mem 0x7f700000-0xdfffffff]
[    0.443949] pci_root PNP0A08:00: host bridge window [mem 0xf0000000-0xfed8ffff]
[    0.444949] pci_root PNP0A08:00: host bridge window [mem 0x400000000-0xfffffffff]
[    0.448860] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 1 PIO at 02e0 (mask000f)
[    0.448951] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 2 PIO at 03e0 (mask000f)
[    0.449950] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 3 PIO at 1640 (mask000f)
[    0.450950] pci 0000:00:1f.0: ICH7 LPC Generic IO decode 4 PIO at 0ca0 (mask000f)
[    0.454969] pci 0000:00:1c.0: PCI bridge to [bus 01-01]
[    0.457966] pci 0000:00:1c.4: PCI bridge to [bus 02-02]
[    0.460965] pci 0000:00:1c.5: PCI bridge to [bus 03-03]
[    0.462035] pci 0000:00:1e.0: PCI bridge to [bus 04-04] (subtractive decode)
[    0.464788]  pci0000:00: Requesting ACPI _OSC control (0x1d)
[    0.466168]  pci0000:00: ACPI _OSC control (0x1d) granted
[    0.483845] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 7 10 *11 12 14 15)
[    0.487083] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 7 *10 11 12 14 15)
[    0.491454] ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 *7 10 11 12 14 15)
[    0.495070] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 7 10 11 12 14 *15)
[    0.499449] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 7 10 11 12 14 15) *0, disabled.
[    0.505075] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 7 10 11 12 *14 15)
[    0.509450] ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 7 *10 11 12 14 15)
[    0.513068] ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 7 10 *11 12 14 15)
[    0.517498] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
[    0.517971] vgaarb: loaded
[    0.518936] vgaarb: bridge control possible 0000:00:02.0
[    0.520083] PCI: Using ACPI for IRQ routing
[    0.527819] Expanded resource reserved due to conflict with PCI Bus 0000:00
[    0.534346] pnp: PnP ACPI init
[    0.534955] ACPI: bus type pnp registered
[    0.537716] system 00:01: [mem 0xfed14000-0xfed19fff] has been reserved
[    0.537941] system 00:01: [mem 0xfed90000-0xfed93fff] has been reserved
[    0.542801] system 00:08: [io  0x164e-0x164f] has been reserved
[    0.546215] system 00:0a: [io  0x0a00-0x0a0f] has been reserved
[    0.547605] system 00:0b: [io  0x04d0-0x04d1] has been reserved
[    0.547938] system 00:0b: [io  0x0800-0x087f] has been reserved
[    0.548937] system 00:0b: [io  0x0480-0x04ff] could not be reserved
[    0.549937] system 00:0b: [mem 0xfed1c000-0xfed1ffff] has been reserved
[    0.550935] system 00:0b: [mem 0xfed20000-0xfed3ffff] has been reserved
[    0.551935] system 00:0b: [mem 0xfed40000-0xfed8ffff] has been reserved
[    0.553984] system 00:0d: [mem 0xfec00000-0xfec00fff] could not be reserved
[    0.554935] system 00:0d: [mem 0xfee00000-0xfee00fff] has been reserved
[    0.557007] system 00:0e: [mem 0xe0000000-0xefffffff] has been reserved
[    0.559486] system 00:0f: [mem 0x00000000-0x0009ffff] could not be reserved
[    0.559937] system 00:0f: [mem 0x000c0000-0x000cffff] could not be reserved
[    0.560934] system 00:0f: [mem 0x000e0000-0x000fffff] could not be reserved
[    0.561934] system 00:0f: [mem 0x00100000-0x7f6fffff] could not be reserved
[    0.562934] system 00:0f: [mem 0xfed90000-0xffffffff] could not be reserved
[    0.565107] pnp: PnP ACPI: found 16 devices
[    0.565929] ACPI: ACPI bus type pnp unregistered
[    0.576739] Switching to clocksource acpi_pm
[    0.577077] pci 0000:00:1c.5: BAR 15: assigned [mem 0x80000000-0x801fffff 64bit pref]
[    0.584993] pci 0000:00:1c.4: BAR 15: assigned [mem 0x80200000-0x803fffff 64bit pref]
[    0.592930] pci 0000:00:1c.0: BAR 15: assigned [mem 0x80400000-0x805fffff 64bit pref]
[    0.601116] pci 0000:01:00.0: BAR 7: can't assign mem (size 0x20000)
[    0.607574] pci 0000:01:00.0: BAR 10: can't assign mem (size 0x20000)
[    0.614116] pci 0000:01:00.1: BAR 7: can't assign mem (size 0x20000)
[    0.620572] pci 0000:01:00.1: BAR 10: can't assign mem (size 0x20000)
[    0.627093] pci 0000:00:1c.0: PCI bridge to [bus 01-01]
[    0.632400] pci 0000:00:1c.0:   bridge window [io  0xc000-0xcfff]
[    0.638575] pci 0000:00:1c.0:   bridge window [mem 0xfe900000-0xfe9fffff]
[    0.645448] pci 0000:00:1c.0:   bridge window [mem 0x80400000-0x805fffff 64bit pref]
[    0.653294] pci 0000:00:1c.4: PCI bridge to [bus 02-02]
[    0.658597] pci 0000:00:1c.4:   bridge window [io  0xd000-0xdfff]
[    0.664772] pci 0000:00:1c.4:   bridge window [mem 0xfea00000-0xfeafffff]
[    0.671639] pci 0000:00:1c.4:   bridge window [mem 0x80200000-0x803fffff 64bit pref]
[    0.679485] pci 0000:00:1c.5: PCI bridge to [bus 03-03]
[    0.684787] pci 0000:00:1c.5:   bridge window [io  0xe000-0xefff]
[    0.690964] pci 0000:00:1c.5:   bridge window [mem 0xfeb00000-0xfebfffff]
[    0.697836] pci 0000:00:1c.5:   bridge window [mem 0x80000000-0x801fffff 64bit pref]
[    0.705684] pci 0000:00:1e.0: PCI bridge to [bus 04-04]
[    0.711504] NET: Registered protocol family 2
[    0.716268] IP route cache hash table entries: 65536 (order: 7, 524288 bytes)

[    0.725152] TCP established hash table entries: 262144 (order: 10, 4194304 bytes)
[    0.735644] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes)
[    0.743113] TCP: Hash tables configured (established 262144 bind 65536)
[    0.749828] TCP reno registered
[    0.753075] UDP hash table entries: 1024 (order: 3, 32768 bytes)
[    0.759210] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
[    0.765997] NET: Registered protocol family 1
[    0.771044] Unpacking initramfs...
[    0.945159] Freeing initrd memory: 3476k freed
[    0.953325] audit: initializing netlink socket (disabled)
[    0.958845] type=2000 audit(1479276512.957:1): initialized
[    1.003304] HugeTLB registered 2 MB page size, pre-allocated 0 pages
[    1.011208] VFS: Disk quotas dquot_6.5.2
[    1.015328] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    1.022074] msgmni has been set to 4003
[    1.026831] alg: No test for stdrng (krng)
[    1.031146] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
[    1.038657] io scheduler noop registered
[    1.042667] io scheduler deadline registered
[    1.047125] io scheduler cfq registered (default)
[    1.052943] APEI: Can not request iomem region <000000007f6b412a-000000007f6b412c> for GARs.
[    1.061564] [Firmware Warn]: GHES: Poll interval is 0 for generic hardware error source: 1,
disabled.
[    1.071104] GHES: APEI firmware first mode is enabled by WHEA _OSC.
[    1.077611] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
[    1.104522] serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[    1.131194] serial8250: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[    1.158266] 00:06: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[    1.184605] 00:07: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[    1.190825] hpet_acpi_add: no address or irqs in _CRS
[    1.196214] i8042: PNP: No PS/2 controller found. Probing ports directly.
[    1.205975] serio: i8042 KBD port at 0x60,0x64 irq 1
[    1.211052] serio: i8042 AUX port at 0x60,0x64 irq 12
[    1.216539] mousedev: PS/2 mouse device common for all mice
[    1.222300] rtc_cmos 00:03: RTC can wake from S4
[    1.227198] rtc_cmos 00:03: rtc core: registered rtc_cmos as rtc0
[    1.233434] rtc0: alarms up to one month, y3k, 114 bytes nvram
[    1.239390] cpuidle: using governor ladder
[    1.243558] cpuidle: using governor menu
[    1.248540] TCP cubic registered
[    1.251844] NET: Registered protocol family 17
[    1.256371] Registering the dns_resolver key type
[    1.261260] libceph: loaded (mon/osd proto 15/24, osdmap 5/6 5/6)
[    1.267524] registered taskstats version 1
[    1.272719] rtc_cmos 00:03: setting system clock to 2016-11-16 06:08:34 UTC (
1479276514)
[    1.284682] Freeing unused kernel memory: 536k freed
[    1.290063] Write protecting the kernel read-only data: 6144k
[    1.308736] Freeing unused kernel memory: 1376k freed
[    1.319381] Freeing unused kernel memory: 496k freed
Loading, please wait...
[    1.346222] udevd[67]: starting version 175
[    1.408516] usbcore: registered new interface driver usbfs
[    1.429907] usbcore: registered new interface driver hub
[    1.435474] dca service started, version 1.12.1
[    1.449884] usbcore: registered new device driver usb
[    1.457851] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.466548] e1000e: Intel(R) PRO/1000 Network Driver - 2.3.2-k
[    1.474459] uhci_hcd: USB Universal Host Controller Interface driver
[    1.477195] ehci_hcd 0000:00:1a.7: EHCI Host Controller
[    1.477281] ehci_hcd 0000:00:1a.7: new USB bus registered, assigned bus number 1
[    1.477351] ehci_hcd 0000:00:1a.7: debug port 1
[    1.481311] ehci_hcd 0000:00:1a.7: irq 18, io mem 0xfe777c00
[    1.484037] e1000e: Copyright(c) 1999 - 2013 Intel Corporation.
[    1.484327] e1000e 0000:02:00.0: Interrupt Throttling Rate (ints/sec) set todynamic conservative mode
[    1.497872] ehci_hcd 0000:00:1a.7: USB 2.0 started, EHCI 1.00
[    1.497937] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    1.497945] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.497952] usb usb1: Product: EHCI Host Controller
[    1.497958] usb usb1: Manufacturer: Linux 3.2.57-t510v1 ehci_hcd
[    1.497963] usb usb1: SerialNumber: 0000:00:1a.7
[    1.498345] hub 1-0:1.0: USB hub found
[    1.498360] hub 1-0:1.0: 6 ports detected
[    1.498574] ehci_hcd 0000:00:1d.7: EHCI Host Controller
[    1.498599] ehci_hcd 0000:00:1d.7: new USB bus registered, assigned bus number 2
[    1.498679] ehci_hcd 0000:00:1d.7: debug port 1
[    1.502645] ehci_hcd 0000:00:1d.7: irq 23, io mem 0xfe777800
[    1.512144] ehci_hcd 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[    1.512214] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
[    1.512222] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.512228] usb usb2: Product: EHCI Host Controller
[    1.512234] usb usb2: Manufacturer: Linux 3.2.57-t510v1 ehci_hcd
[    1.512240] usb usb2: SerialNumber: 0000:00:1d.7
[    1.512564] hub 2-0:1.0: USB hub found
[    1.512580] hub 2-0:1.0: 6 ports detected
[    1.593801] e1000e 0000:02:00.0: eth0: (PCI Express:2.5GT/s:Width x1) 0c:c4:7a:85:76:86
[    1.593809] e1000e 0000:02:00.0: eth0: Intel(R) PRO/1000 Network Connection
[    1.593898] e1000e 0000:02:00.0: eth0: MAC: 3, PHY: 8, PBA No: 0101FF-0FF
[    1.594223] e1000e 0000:03:00.0: Interrupt Throttling Rate (ints/sec) set todynamic conservative mode
[    1.666257] uhci_hcd 0000:00:1a.0: UHCI Host Controller
[    1.676195] igb: Intel(R) Gigabit Ethernet Network Driver - version 5.0.5-k
[    1.678319] uhci_hcd 0000:00:1a.0: new USB bus registered, assigned bus number 3
[    1.678434] uhci_hcd 0000:00:1a.0: irq 16, io base 0x0000b880
[    1.678587] usb usb3: New USB device found, idVendor=1d6b, idProduct=0001
[    1.678597] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.678604] usb usb3: Product: UHCI Host Controller
[    1.678611] usb usb3: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.678618] usb usb3: SerialNumber: 0000:00:1a.0
[    1.679105] hub 3-0:1.0: USB hub found
[    1.679126] hub 3-0:1.0: 2 ports detected
[    1.679339] uhci_hcd 0000:00:1a.1: UHCI Host Controller
[    1.679370] uhci_hcd 0000:00:1a.1: new USB bus registered, assigned bus number 4
[    1.679472] uhci_hcd 0000:00:1a.1: irq 21, io base 0x0000b800
[    1.679605] usb usb4: New USB device found, idVendor=1d6b, idProduct=0001
[    1.679614] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.679622] usb usb4: Product: UHCI Host Controller
[    1.679628] usb usb4: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.679635] usb usb4: SerialNumber: 0000:00:1a.1
[    1.680073] hub 4-0:1.0: USB hub found
[    1.680092] hub 4-0:1.0: 2 ports detected
[    1.680303] uhci_hcd 0000:00:1a.2: UHCI Host Controller
[    1.680333] uhci_hcd 0000:00:1a.2: new USB bus registered, assigned bus number 5
[    1.680441] uhci_hcd 0000:00:1a.2: irq 19, io base 0x0000b480
[    1.680587] usb usb5: New USB device found, idVendor=1d6b, idProduct=0001
[    1.680596] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.680604] usb usb5: Product: UHCI Host Controller
[    1.680611] usb usb5: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.680618] usb usb5: SerialNumber: 0000:00:1a.2
[    1.681078] hub 5-0:1.0: USB hub found
[    1.681099] hub 5-0:1.0: 2 ports detected
[    1.681352] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[    1.681385] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 6
[    1.681449] uhci_hcd 0000:00:1d.0: irq 23, io base 0x0000b400
[    1.681584] usb usb6: New USB device found, idVendor=1d6b, idProduct=0001
[    1.681593] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.681601] usb usb6: Product: UHCI Host Controller
[    1.681607] usb usb6: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.681614] usb usb6: SerialNumber: 0000:00:1d.0
[    1.682054] hub 6-0:1.0: USB hub found
[    1.682072] hub 6-0:1.0: 2 ports detected
[    1.682282] uhci_hcd 0000:00:1d.1: UHCI Host Controller
[    1.682314] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 7
[    1.682375] uhci_hcd 0000:00:1d.1: irq 19, io base 0x0000b080
[    1.682519] usb usb7: New USB device found, idVendor=1d6b, idProduct=0001
[    1.682529] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.682537] usb usb7: Product: UHCI Host Controller
[    1.682544] usb usb7: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.682551] usb usb7: SerialNumber: 0000:00:1d.1
[    1.682971] hub 7-0:1.0: USB hub found
[    1.682987] hub 7-0:1.0: 2 ports detected
[    1.683239] uhci_hcd 0000:00:1d.2: UHCI Host Controller
[    1.683267] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 8
[    1.683328] uhci_hcd 0000:00:1d.2: irq 18, io base 0x0000b000
[    1.683452] usb usb8: New USB device found, idVendor=1d6b, idProduct=0001
[    1.683460] usb usb8: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.683467] usb usb8: Product: UHCI Host Controller
[    1.683474] usb usb8: Manufacturer: Linux 3.2.57-t510v1 uhci_hcd
[    1.683480] usb usb8: SerialNumber: 0000:00:1d.2
[    1.683869] hub 8-0:1.0: USB hub found
[    1.683887] hub 8-0:1.0: 2 ports detected
[    1.704913] e1000e 0000:03:00.0: eth1: (PCI Express:2.5GT/s:Width x1) 0c:c4:7a:85:76:87
[    1.704922] e1000e 0000:03:00.0: eth1: Intel(R) PRO/1000 Network Connection
[    1.705055] e1000e 0000:03:00.0: eth1: MAC: 3, PHY: 8, PBA No: 0101FF-0FF
[    2.040669] igb: Copyright (c) 2007-2013 Intel Corporation.
[    2.054982] SCSI subsystem initialized
[    2.072573] ahci: SSS flag set, parallel bus scan disabled
[    2.078227] ahci 0000:00:1f.2: AHCI 0001.0200 32 slots 6 ports 3 Gbps 0x3f impl SATA mode
[    2.086534] ahci 0000:00:1f.2: flags: 64bit ncq sntf stag pm led clo pio slumpart ccc ems sxs
[    2.106256] scsi0 : ahci
[    2.109231] scsi1 : ahci
[    2.112078] scsi2 : ahci
[    2.114883] scsi3 : ahci
[    2.117699] scsi4 : ahci
[    2.120510] scsi5 : ahci
[    2.123610] ata1: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777100 irq 58
[    2.131114] ata2: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777180 irq 58
[    2.138608] ata3: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777200 irq 58
[    2.146102] ata4: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777280 irq 58
[    2.153598] ata5: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777300 irq 58
[    2.161096] ata6: SATA max UDMA/133 abar m2048@0xfe777000 port 0xfe777380 irq 58
[    2.209576] igb 0000:01:00.0: Intel(R) Gigabit Ethernet Network Connection
[    2.217221] igb 0000:01:00.0: eth2: (PCIe:2.5Gb/s:Width x4) 00:0c:bd:0a:6c:39

[    2.224505] igb 0000:01:00.0: eth2: PBA No: Unknown
[    2.229472] igb 0000:01:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s)
[    2.399152] igb 0000:01:00.1: Intel(R) Gigabit Ethernet Network Connection
[    2.406118] igb 0000:01:00.1: eth3: (PCIe:2.5Gb/s:Width x4) 00:0c:bd:0a:6c:38

[    2.413338] igb 0000:01:00.1: eth3: PBA No: Unknown
[    2.418291] igb 0000:01:00.1: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s)
[    2.473049] ata1: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
[    2.480171] ata1.00: ATA-9: KINGSTON SKC400S37128G, SAFM00.Y, max UDMA/133
[    2.487128] ata1.00: 250069680 sectors, multi 16: LBA48 NCQ (depth 31/32), AA

[    2.494523] ata1.00: configured for UDMA/133
[    2.499195] scsi 0:0:0:0: Direct-Access     ATA      KINGSTON SKC400S SAFM PQ: 0 ANSI: 5
[    2.812044] ata2: SATA link down (SStatus 0 SControl 300)
[    3.122041] ata3: SATA link down (SStatus 0 SControl 300)
[    3.432046] ata4: SATA link down (SStatus 0 SControl 300)
[    3.742042] ata5: SATA link down (SStatus 0 SControl 300)
[    4.052040] ata6: SATA link down (SStatus 0 SControl 300)
[    4.073765] sd 0:0:0:0: [sda] 250069680 512-byte logical blocks: (128 GB/119GiB)
[    4.081606] sd 0:0:0:0: [sda] Write Protect is off
[    4.086582] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[    4.097901]  sda: sda1 sda2 sda3 sda4 < sda5 sda6 >
[    4.104259] sd 0:0:0:0: [sda] Attached SCSI disk
Begin: Loading essential drivers ... done.
Begin: Running /scripts/init-premount ... done.
Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done.

Begin: Running /scripts/local-premount ... done.
[    4.332385] kjournald starting.  Commit interval 5 seconds
[    4.332443] EXT3-fs (sda2): mounted filesystem with ordered data mode
Begin: Running /scripts/local-bottom ... done.
done.
Begin: Running /scripts/init-bottom ... done.
INIT: version 2.88 booting
[....] Starting the hotplug events dispatcher: udevd[    4.911603] udevd[355]: s
tarting version 175
. ok
^[[?1;2c[....] ^[[?1;2cSynthesizing the initial hotplug events...[    5.066709]
input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
[    5.082593] ACPI: Power Button [PWRB]
[    5.088328] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input1
[    5.099655] ACPI: Power Button [PWRF]
[    5.156974] iTCO_vendor_support: vendor-support=0
[    5.157070] udevd[438]: renamed network interface eth0 to tn-wa0
^[[?1;2c[    5.170093] iTCO_wdt: Intel TCO WatchDog Timer Driver v1.07
[    5.172931] udevd[423]: renamed network interface eth3 to tn-wbp0
done.
[    5.188984] udevd[415]: renamed network interface eth2 to tn-lbp0
[    5.189719] iTCO_wdt: Found a ICH9R TCO device (Version=2, TCOBASE=0x0860)
[    5.189906] iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0)
^[[?1;2c[    5.211948] udevd[385]: renamed network interface eth1 to tn-mgt0
[....] Waiting for /dev to be fully populated...done.
^[[?1;2c^[[?1;2c[....] Setting preliminary keymap...done.
^[[?1;2c^[[?1;2c[....] Setting parameters of disc: (none). ok ^[[?1;2c
^[[?1;2c[....] Activating swap...[    6.362317] Adding 1028152k swap on /dev/sda
5.  Priority:-1 extents:1 across:1028152k SS
done.
^[[?1;2c[....] Checking root file system...fsck from util-linux 2.20.1
e2fsck 1.42.5 (29-Jul-2012)
Pass 1: Checking inodes, blocks, and sizes
Pass 2: Checking directory structure
Pass 3: Checking directory connectivity
Pass 4: Checking reference counts
Pass 5: Checking group summary information
Primary_OS: 53314/262944 files (0.8% non-contiguous), 404219/1050249 blocks
done.
[   10.032451] EXT3-fs (sda2): using internal journal
^[[?1;2c^[[?1;2c[....] Cleaning up temporary files... /tmp. ok
^[[?1;2c^[[?1;2c[....] Activating lvm and md swap...done.
[....] ^[[?1;2c^[[?1;2c^[[?1Checking file systems...;2cfsck from util-linux 2.20.1

Debian GNU/Linux 7 talari ttyS0

talari login: talariuser    // DEFAULT LOGIN
Password: talari
Linux talari 3.2.57-t510v1 #1 SMP PREEMPT Mon Dec 8 18:23:19 EST 2014 x86_64
======================================================================

        Talari Operating System 4.4 on T510v1
        Host IP = 192.168.0.2     // DEFAULT MANAGEMENT IP (/24)

======================================================================
talariuser@Talari-T510:~# tcon      // TALARI CONSOLE; TO INITIALIZE MGT IP
Console to Talari acquired

>management_ip

IP Address:             192.168.0.2
Subnet Mask:            255.255.255.0
Gateway IP Address:     (Not configured)

Which would you like to do?
        "set interface <ip address> <subnet mask> <gateway>" - Stage New Setting
s for IP Address, Subnet Mask, and Gateway IP Address
        "address" - Stage New IP Address
        "mask" - Stage New Subnet Mask
        "gateway" - Stage New Gateway IP Address
        "clear" - Clear Settings
        "apply" - Apply Staged Settings
        "cancel" - Cancel Staged Settings
        "main_menu" - Return to the Main Menu

set_management_ip>set interface 172.27.148.31 255.255.255.192 172.27.148.1
Management Interface settings have been staged.
Enter "apply" to make the settings take effect.

The following changes have been staged:

IP Address:             172.27.148.31
Subnet Mask:            255.255.255.192
Gateway IP Address:     172.27.148.1


IP Address:             192.168.0.2
Subnet Mask:            255.255.255.0
Gateway IP Address:     (Not configured)

Which would you like to do?
        "set interface <ip address> <subnet mask> <gateway>" - Stage New Setting
s for IP Address, Subnet Mask, and Gateway IP Address
        "address" - Stage New IP Address
        "mask" - Stage New Subnet Mask
        "gateway" - Stage New Gateway IP Address
        "clear" - Clear Settings
        "apply" - Apply Staged Settings
        "cancel" - Cancel Staged Settings
        "main_menu" - Return to the Main Menu

set_management_ip>apply

Are you sure you want to change your Management Interface IP settings?
You may lose connectivity to the appliance. <y/n>?
y
kill: invalid option -- '9'

Usage:
 kill [options] <pid> [...]

Options:
 <pid> [...]            send signal to every <pid> listed
 -<signal>, -s, --signal <signal>
                        specify the <signal> to be sent
 -l, --list=[<signal>]  list all signal names, or convert one to a name
 -L, --table            list all signal names in a nice table

 -h, --help     display this help and exit
 -V, --version  output version information and exit

For more details see kill(1).
/home/talariuser/os_config/network_interfaces/tn-mgt0:1: interface tn-mgt0 decla
red allow-auto twice
/home/talariuser/os_config/network_interfaces/tn-mgt0:1: interface tn-mgt0 decla
red allow-auto twice
Cannot find device "tn-mgt1"
/home/talariuser/os_config/network_interfaces/tn-mgt0:1: interface tn-mgt0 decla
red allow-auto twice

IP Address:             172.27.148.31
Subnet Mask:            255.255.255.192
Gateway IP Address:     172.27.148.1

Which would you like to do?
        "set interface <ip address> <subnet mask> <gateway>" - Stage New Setting
s for IP Address, Subnet Mask, and Gateway IP Address
        "address" - Stage New IP Address
        "mask" - Stage New Subnet Mask
        "gateway" - Stage New Gateway IP Address
        "clear" - Clear Settings
        "apply" - Apply Staged Settings
        "cancel" - Cancel Staged Settings
        "main_menu" - Return to the Main Menu

set_management_ip>


You could now HTTPS to the T510 appliance using the new management IP address and default login talariuser and password talari.



Choose Advanced Config and Client.



To view and configure interfaces, go to Manage Appliance > Ethernet Interface Settings.
 


After typing the settings (DNS in this case) click Change Settings. I also changed the MGT port speed to 100 Mbps (uncheck Speed) since we have a switches supporting both Gigabit Ethernet and 100 Mbps Ethernet ports.





To change the time or sync the appliance to an NTP server, go to Manage Appliance > Date and Time Settings. There’s a default NTP server configured (time.nst.gov) and I just chose UTC for the Time Zone.
 

To add or change local admin accounts, go to Manage Appliance > Users / Authentication.





To get a snapshot of the device info (for troubleshooting and support purposes) such as OS version, serial number and interface MAC addresses, go to Diagnose > System Info.