Saturday, April 1, 2023

Cisco 3850 Switch IOS-XE Downgrade 16.x to 3.x

Here's a link where you can find all Cisco Visio stencils/icons.

You can downgrade a Cisco 3850 or 3650 Catalyst switch from IOS-XE 16.x to 3.x. In this case, the Cisco 3850 runs a "newer" 16.6.2 software code.


C3850#show version
Cisco IOS XE Software, Version 16.06.02
Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 16.6.2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Wed 01-Nov-17 04:27 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2017 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON
BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 3.58, RELEASE SOFTWARE (P)

C3850 uptime is 2 minutes
Uptime for this control processor is 6 minutes
System returned to ROM by Power Failure at 08:44:43 UTC Mon Nov 4 2019
System image file is "flash:packages.conf"
Last reload reason: Power Failure


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

          
Technology Package License Information:

-----------------------------------------------------------------
Technology-package                   Technology-package
Current             Type             Next reboot  
------------------------------------------------------------------
ipbasek9            Permanent        ipbasek9

cisco WS-C3850-48P (MIPS) processor (revision AB0) with 853402K/6147K bytes of memory.
Processor board ID FOC21051234
1 Virtual Ethernet interface
104 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
252000K bytes of Crash Files at crashinfo:.
1611414K bytes of Flash at flash:.
0K bytes of WebUI ODM Files at webui:.

Base Ethernet MAC Address          : cc:98:91:1e:12:34
Motherboard Assembly Number        : 73-15800-08
Motherboard Serial Number          : FOC21265678
Model Revision Number              : AB0
Motherboard Revision Number        : A0
Model Number                       : WS-C3850-48P
System Serial Number               : FOC21051234


Switch Ports Model              SW Version        SW Image              Mode   
------ ----- -----              ----------        ----------            ----   
*    1 56    WS-C3850-48P       16.6.2            CAT3K_CAA-UNIVERSALK9 INSTALL


Configuration register is 0x102

You can use the privileged exec command request platform software package clean switch all file flash to remove old package files.

 
C3850#dir
Directory of flash:/

77602  -rw-          2097152  Feb 22 2023 00:06:10 +00:00  nvram_config
77603  -rw-          2097152  Feb 22 2023 00:06:11 +00:00  nvram_config_bkup
77604  -rw-         19167872  Dec 15 2017 15:38:59 +00:00  cat3k_caa-guestshell.16.06.02.SPA.pkg
77605  -rw-         27906419  Dec 15 2017 15:38:57 +00:00  cat3k_caa-rpbase.16.06.02.SPA.pkg
77606  -rw-        331268728  Dec 15 2017 15:38:59 +00:00  cat3k_caa-rpcore.16.06.02.SPA.pkg
77607  -rw-         15323776  Dec 15 2017 15:38:57 +00:00  cat3k_caa-srdriver.16.06.02.SPA.pkg
15521  -rw-         16181884  Dec 15 2017 15:38:57 +00:00  cat3k_caa-webui.16.06.02.SPA.pkg
15522  -rw-             4754  Dec 15 2017 15:39:17 +00:00  packages.conf
 7761  drwx             4096  Feb 22 2023 00:02:08 +00:00  .installer
15523  -rw-             1147  Feb 22 2023 00:02:30 +00:00  bootloader_evt_handle.log
15524  drwx             4096  May 23 2019 01:09:23 +00:00  core
23281  drwx             4096  May 23 2019 01:14:21 +00:00  .prst_sync
38801  drwx             4096  Dec 15 2017 15:41:55 +00:00  .rollback_timer
46561  drwx             4096  Dec 15 2017 15:42:04 +00:00  gs_script
54321  drwx             4096  Feb 22 2023 00:02:48 +00:00  dc_profile_dir
15525  -rw-            98869  Feb 22 2023 00:03:09 +00:00  memleak.tcl
77609  -rw-               35  Feb 21 2023 03:27:21 +00:00  pnp-tech-time
77610  -rw-            49833  Feb 21 2023 03:27:24 +00:00  pnp-tech-discovery-summary
 7762  drwx             4096   Mar 8 2018 05:04:09 +00:00  onep
77608  -rw-            19431  Nov 29 2018 01:19:25 +00:00  logfile.txt

1624104960 bytes total (1035522048 bytes free)


C3850#request platform software package clean switch all file flash:
This operation may take several minutes...
Running command on switch 1
Cleaning up unnecessary package files
  Scanning boot directory for packages ... done.
  Preparing packages list to delete ...
    cat3k_caa-guestshell.16.06.02.SPA.pkg
      File is in use, will not delete.
    cat3k_caa-rpbase.16.06.02.SPA.pkg
      File is in use, will not delete.
    cat3k_caa-rpcore.16.06.02.SPA.pkg
      File is in use, will not delete.
    cat3k_caa-srdriver.16.06.02.SPA.pkg
      File is in use, will not delete.
    cat3k_caa-webui.16.06.02.SPA.pkg
      File is in use, will not delete.
    packages.conf
      File is in use, will not delete.
  done.
 
SUCCESS: No extra package or provisioning files found on media. Nothing to clean.


This syslog will appear once an external USB flash drive is inserted.

C3850#sd 1:0:0:0: [sdb] Asking for cache data failed
sd 1:0:0:0: [sdb] Assuming drive cache: write through


*Feb 22 00:09:53.260: %IOSXE-5-PLATFORM: Switch 1 R0/0: kernel: scsi 1:0:0:0: Direct-Access     Imation  Nano             1.20 PQ: 0 ANSI: 2
*Feb 22 00:09:53.262: %IOSXE-5-PLATFORM: Switch 1 R0/0: kernel: sd 1:0:0:0: [sdb] 3948544 512-byte logical blocks: (2.02 GB/1.88 GiB)
*Feb 22 00:09:53.314: %IOSXE-3-PLATFORM: Switch 1 R0/0: kernel: sd 1:0:0:0: [sdb] Asking for cache data failed
*Feb 22 00:09:53.314: %IOSXE-4-PLATFORM: Switch 1 R0/0: kernel: sd 1:0:0:0: [sdb] Assuming drive cache: write through
*Feb 22 00:09:53.443: %PLATFORM_FEP-1-FRU_PS_ACCESS: Switch 1: power supply B is not respondingFAT-fs (sdb1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.

*Feb 22 00:09:53.696: %IOSXE-5-PLATFORM: Switch 1 R0/0: kernel: sd 1:0:0:0: [sdb] Attached SCSI removable disk
*Feb 22 00:09:54.761: %IOSXE-4-PLATFORM: Switch 1 R0/0: kernel: FAT-fs (sdb1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
*Feb 22 00:09:54.796: %IOSD_INFRA-6-IFS_DEVICE_OIR: Device usbflash0 added

It's easy and much faster to copy/transfer IOS-XE files via USB. In this case I've transferred an "old" IOS-XE 3.6.7 to flash.


C3850#copy usbflash0:/cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin flash
Destination filename [cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
*Feb 22 00:10:56.054: %PLATFORM-4-ELEMENT_WARNING: Switch 1 R0/0: smand:  1/RP/0: limited space - copy corefiles/switch-reports out of flash:core & crashinfo: directories. flash:core value 5% (86 MB) exceeds warning level 5% (79 MB)CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
305199560 bytes copied in 51.363 secs (5942012 bytes/sec)

You can use the "newer" way to upgrade or downgrade using the request platform software package install switch all file flash:<IOS-XE> new auto-copy privileged exec command. In this case I "downgrade" to the old IOS-XE 3.6.7 code. 

Issue a reload command for the new code to take effect.


C3850#request platform software package install switch all file flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin new auto-copy
--- Starting install local lock acquisition on switch 1 ---
Finished install local lock acquisition on switch 1

Expanding image file: flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin

*Feb 22 00:12:34.191: %IOSXE-5-PLATFORM: Switch 1 R0/0: Feb 22 00:12:34 provision.sh: %INSTALL-5-OPERATION_START_INFO: Started install package flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin[1]: Expanding file

*Feb 22 00:12:36.865: %IOSXE-5-PLATFORM: Switch 1 R0/0: Feb 22 00:12:36 packtool.sh: %INSTALL-5-OPERATION_START_INFO: Started expand package flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin[1]: Finished expanding all-in-one software package in switch 1
SUCCESS: Finished expanding all-in-one software package.

*Feb 22 00:13:14.163: %IOSXE-5-PLATFORM: Switch 1 R0/0: Feb 22 00:13:14 packtool.sh: %INSTALL-5-OPERATION_COMPLETED_INFO: Completed expand package flash:cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.bin[1]: Performing install
  SUCCESS: install finished
[1]: install package(s) on switch 1
--- Starting list of software package changes ---
Old files list:
  Removed cat3k_caa-guestshell.16.06.02.SPA.pkg
  Removed cat3k_caa-rpbase.16.06.02.SPA.pkg
  Removed cat3k_caa-rpcore.16.06.02.SPA.pkg
  Removed cat3k_caa-srdriver.16.06.02.SPA.pkg
  Removed cat3k_caa-webui.16.06.02.SPA.pkg
New files list:
  Added cat3k_caa-base.SPA.03.06.07E.pkg
  Added cat3k_caa-drivers.SPA.03.06.07E.pkg
  Added cat3k_caa-infra.SPA.03.06.07E.pkg
  Added cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg
  Added cat3k_caa-platform.SPA.03.06.07E.pkg
  Added cat3k_caa-wcm.SPA.10.2.170.0.pkg
Finished list of software package changes
SUCCESS: Software provisioned.  New software will load on reboot.
[1]: Finished install successful on switch 1
Checking status of install on [1]
[1]: Finished install in switch 1
SUCCESS: Finished install: Success on [1]

*Feb 22 00:14:08.288: %IOSXE-5-PLATFORM: Switch 1 R0/0: Feb 22 00:14:08 provision.sh: %INSTALL-5-OPERATION_COMPLETED_INFO: Completed install package flash:{cat3k_caa-base.SPA.03.06.07E.pkg,cat3k_caa-drivers.SPA.03.06.07E.pkg,cat3k_caa-infra.SPA.03.06.07E.pkg,cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg,cat3k_caa-platform.SPA.03.06.07E.pkg,cat3k_caa-wcm.SPA.10.2.170.0.pkg}

C3850#reload
Reload command is being issued on Active unit, this will reload the whole stack
Proceed with reload? [confirm]

*Feb 22 00:15:06.788: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.

<OUTPUT TRUNCATED>


C3850#show version
Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.06.07E RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Wed 12-Jul-17 16:55 by prod_rel_team


Cisco IOS-XE software, Copyright (c) 2005-2015 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON
BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 3.58, RELEASE SOFTWARE (P)
          
C3850 uptime is 2 minutes
Uptime for this control processor is 5 minutes
System returned to ROM by reload
System image file is "flash:packages.conf"
Last reload reason: Reload Command


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.
          
License Level: Ipbase
License Type: Permanent
Next reload license Level: Ipbase

cisco WS-C3850-48P (MIPS) processor with 4194304K bytes of physical memory.
Processor board ID FOC21051234
1 Virtual Ethernet interface
104 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
252000K bytes of Crash Files at crashinfo:.
1611414K bytes of Flash at flash:.
0K bytes of Dummy USB Flash at usbflash0:.
0K bytes of  at webui:.

Base Ethernet MAC Address          : cc:98:91:1e:51:00
Motherboard Assembly Number        : 73-15800-08
Motherboard Serial Number          : FOC21265678
Model Revision Number              : AB0
Motherboard Revision Number        : A0
Model Number                       : WS-C3850-48P
System Serial Number               : FOC21051234


Switch Ports Model              SW Version        SW Image              Mode   
------ ----- -----              ----------        ----------            ----   
*    1 56    WS-C3850-48P       03.06.07E         cat3k_caa-universalk9 INSTALL


Configuration register is 0x102


Issue a software clean command to remove unneeded package files.

C3850#software clean
Preparing clean operation ...
[1]: Cleaning up unnecessary package files
[1]: No path specified, will use booted path flash:packages.conf
[1]: Cleaning flash:
[1]: Preparing packages list to delete ...
     In use files, will not delete:
       cat3k_caa-base.SPA.03.06.07E.pkg
       cat3k_caa-infra.SPA.03.06.07E.pkg
       cat3k_caa-iosd-universalk9.SPA.152-2.E7.pkg
       cat3k_caa-platform.SPA.03.06.07E.pkg
       cat3k_caa-wcm.SPA.10.2.170.0.pkg
       packages.conf
     Committed files, will not delete:
       cat3k_caa-drivers.SPA.03.06.07E.pkg
[1]: Files that will be deleted:
    cat3k_caa-guestshell.16.06.02.SPA.pkg
    cat3k_caa-rpbase.16.06.02.SPA.pkg
    cat3k_caa-rpcore.16.06.02.SPA.pkg
    cat3k_caa-srdriver.16.06.02.SPA.pkg
    cat3k_caa-universalk9.SPA.03.06.07.E.152-2.E7.conf
    cat3k_caa-webui.16.06.02.SPA.pkg
    packages.conf.00-

[1]: Do you want to proceed with the deletion? [yes/no]: yes
[1]: Clean up completed


Thursday, March 2, 2023

Cisco Catalyst 9300 IOS-XE Upgrade

My family and I spent our Christmas holiday last year in Bohol, Philippines. The people there were very warm and hospitable. We visited several tourist spots such as the famous Chocolate hills and Sanduguan (Blood Compact) shrine.



This is a Tarsier, which is one of the smallest primate in the world. They're only found in the forests of Southeast Asian islands (Philippines, Indonesia and Malaysia)

We tried the Loay River Cruise and had buffet lunch in Rio Verde floating restaurant. The Loay River Cruise has a more "nature view" (and good food too!) compared to Loboc River Cruise which we've tried many years ago.

This is the new Cisco Catalyst 9300 switch (48-port). The USB slot (type A) is found in front of the chassis (beside the mini USB console port) and it's used for file transfers (for software upgrades).

The console port (RJ-45) and dedicated out-of-band (OOB) management port are found at the rear (left most).

It's has a dual power supply. Power Supply Unit (PSU) slot A is located on the left and slot B is on the right.

Below are the steps in upgrading the IOS-XE software in a Cisco Catalyst 9300 switch:

1. Ensure there's enough flash space for the new IOS-XE file. You can use the install remove inactive privilege exec command to remove old and unused files.

#install remove inactive

 

2. You can use the USB slot to quickly transfer the new software image.
 

copy usbflash0:/cat9k_iosxe.17.06.04.SPA.bin flash:

 

3. Verify the MD5 hash and compare the string output published in the Cisco download website.


verify /md5 flash:cat9k_iosxe.17.06.04.SPA.bin

 

4. Check if the boot variable is set to flash:packages.conf
 

show boot system

 

5. Set the boot variable if it's not yet configured.


boot system flash:packages.conf
 

6. Install/activate the new IOS-XE software, type "yes" to proceed.

install add file flash:cat9k_iosxe.17.06.04.SPA.bin activate commit



7. Verify the new package file and IOS-XE version.

dir flash:*.pkg


show version

 

8. Remove old files.


#install remove inactive


Switch#show version
Cisco IOS XE Software, Version 17.06.03
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.3, RELEASE SOFTWARE (fc4)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Wed 30-Mar-22 23:09 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON
BOOTLDR: System Bootstrap, Version 17.6.1r[FC2], RELEASE SOFTWARE (P)

Switch uptime is 1 hour, 5 minutes
Uptime for this control processor is 1 hour, 8 minutes
System returned to ROM by PowerOn
System image file is "flash:packages.conf"
Last reload reason: PowerOn


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.


Technology Package License Information:

------------------------------------------------------------------------------
Technology-package                                     Technology-package
Current                        Type                       Next reboot  
------------------------------------------------------------------------------
network-essentials      Smart License                    network-essentials  
dna-essentials          Subscription Smart License       dna-essentials                
AIR License Level: AIR DNA Advantage
Next reload AIR license Level: AIR DNA Advantage


Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco C9300-48T (X86) processor with 1317232K/6147K bytes of memory.
Processor board ID FOC26241234
1 Virtual Ethernet interface
52 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces
2 TwentyFive Gigabit Ethernet interfaces
2 Forty Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
1638400K bytes of Crash Files at crashinfo:.
11264000K bytes of Flash at flash:.
1974239K bytes of USB Flash at usbflash0:.

Base Ethernet MAC Address          : f8:e5:7e:a9:12:34
Motherboard Assembly Number        : 73-19915-04
Motherboard Serial Number          : FOC26215678
Model Revision Number              : H0
Motherboard Revision Number        : B0
Model Number                       : C9300-48T
System Serial Number               : FOC26241234
CLEI Code Number                   :


Switch Ports Model              SW Version        SW Image              Mode   
------ ----- -----              ----------        ----------            ----   
*    1 65    C9300-48T          17.06.03          CAT9K_IOSXE           INSTALL


A syslog will appear once the USB flash drive is inserted.

*Dec  7 05:34:59.295: %IOSD_INFRA-6-IFS_DEVICE_OIR: Device usbflash0 added. Please configure no iox followed by iox to migrate the Applications from flash
Switch>

Switch#copy usbflash0:/cat9k_iosxe.17.06.04.SPA.bin flash:
Destination filename [cat9k_iosxe.17.06.04.SPA.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCC

< OUTPUT TRUNCATED >

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
1017587860 bytes copied in 59.010 secs (17244329 bytes/sec)


Switch#verify /md5 flash:cat9k_iosxe.17.06.04.SPA.bin
.......................................................

..........................................................................................................................................Done!
verify /md5 (flash:cat9k_iosxe.17.06.04.SPA.bin) = dae85d113b3438d4f00e49ccdd1ec611


Switch#show boot system
---------------------------
Switch 1
---------------------------
Current Boot Variables:
BOOT variable does not exist

Boot Variables on next reload:
BOOT variable = flash:packages.conf
Manual Boot = no
Enable Break = no
Boot Mode = DEVICE
iPXE Timeout = 0


Switch#install add file flash:cat9k_iosxe.17.06.04.SPA.bin activate commit
install_add_activate_commit: START Wed Dec  7 05:41:10 UTC 2022

System configuration has been modified.
Press Yes(y) to save the configuration and proceed.
Press No(n) for proceeding without saving the configuration.
Press Quit(q) to exit, you may save configuration and re-enter the command. [y/n/q]n

*Dec  7 05:41:32.442: %INSTALL-5-INSTALL_START_INFO: Switch 1 R0/0: install_engine: Started install one-shot flash:cat9k_iosxe.17.06.04.SPA.bininstall_add_activate_commit: Adding PACKAGE
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---
Info: Finished copying flash:cat9k_iosxe.17.06.04.SPA.bin to the selected switch(es)
Finished initial file syncing

--- Starting Add ---
Performing Add on all members
  [1] Add package(s) on switch 1
  [1] Finished Add on switch 1
Checking status of Add on [1]
Add: Passed on [1]
Finished Add

Image added. Version: 17.06.04.0.4912
install_add_activate_commit: Activating PACKAGE

*Dec  7 05:44:11.611: %ISSU-3-ISSU_COMP_CHECK_FAILED: Switch 1 R0/0: install_engine: ISSU compatibility check failed for 17.06.04.0.4912Following packages shall be activated:
/flash/cat9k-wlc.17.06.04.SPA.pkg
/flash/cat9k-webui.17.06.04.SPA.pkg
/flash/cat9k-srdriver.17.06.04.SPA.pkg
/flash/cat9k-sipspa.17.06.04.SPA.pkg
/flash/cat9k-sipbase.17.06.04.SPA.pkg
/flash/cat9k-rpboot.17.06.04.SPA.pkg
/flash/cat9k-rpbase.17.06.04.SPA.pkg
/flash/cat9k-lni.17.06.04.SPA.pkg
/flash/cat9k-guestshell.17.06.04.SPA.pkg
/flash/cat9k-espbase.17.06.04.SPA.pkg
/flash/cat9k-cc_srdriver.17.06.04.SPA.pkg

This operation may require a reload of the system. Do you want to proceed? [y/n]y   // TOOK 4 MINS
--- Starting Activate ---Performing Activate on all members

*Dec  7 05:47:48.187: %INSTALL-5-INSTALL_AUTO_ABORT_TIMER_PROGRESS: Switch 1 R0/0: install_mgr: Install auto abort timer will expire in 7200 seconds  [1] Activate package(s) on switch 1
    --- Starting list of software package changes ---
    Old files list:
      Modified cat9k-cc_srdriver.17.06.03.SPA.pkg
      Modified cat9k-espbase.17.06.03.SPA.pkg
      Modified cat9k-guestshell.17.06.03.SPA.pkg
      Modified cat9k-lni.17.06.03.SPA.pkg
      Modified cat9k-rpbase.17.06.03.SPA.pkg
      Modified cat9k-rpboot.17.06.03.SPA.pkg
      Modified cat9k-sipbase.17.06.03.SPA.pkg
      Modified cat9k-sipspa.17.06.03.SPA.pkg
      Modified cat9k-srdriver.17.06.03.SPA.pkg
      Modified cat9k-webui.17.06.03.SPA.pkg
      Modified cat9k-wlc.17.06.03.SPA.pkg
    New files list:
      Added cat9k-cc_srdriver.17.06.04.SPA.pkg
      Added cat9k-espbase.17.06.04.SPA.pkg
      Added cat9k-guestshell.17.06.04.SPA.pkg
      Added cat9k-lni.17.06.04.SPA.pkg
      Added cat9k-rpbase.17.06.04.SPA.pkg
      Added cat9k-rpboot.17.06.04.SPA.pkg
      Added cat9k-sipbase.17.06.04.SPA.pkg
      Added cat9k-sipspa.17.06.04.SPA.pkg
      Added cat9k-srdriver.17.06.04.SPA.pkg
      Added cat9k-webui.17.06.04.SPA.pkg
      Added cat9k-wlc.17.06.04.SPA.pkg
    Finished list of software package changes
  [1] Finished Activate on switch 1
Checking status of Activate on [1]
Activate: Passed on [1]
Finished Activate

--- Starting Commit ---
Performing Commit on all members
  [1] Commit package(s) on switch 1
  [1] Finished Commit on switch 1
Checking status of Commit on [1]
Commit: Passed on [1]
Finished Commit

Send model notification for install_add_activate_commit before reload
[1]: Performing Upgrade_Service
300+0 records in
300+0 records out
307200 bytes (307 kB, 300 KiB) copied, 0.195936 s, 1.6 MB/s
/usr/sbin/boot_verify_package: /ucode0/cat9k-select_srdriver.SPA.pkg: Digital Signature Verified
/usr/sbin/boot_verify_package: updatepcr8d unavailable, KGV data not extended to PCR8 - No such file or directory.
/usr/sbin/boot_verify_package: INFO: Collected KGV data for package cat9k-select_srdriver.SPA.pkg.
  SUCCESS: Upgrade_Service finished
Install will reload the system now!
SUCCESS: install_add_activate_commit  Wed Dec  7 05:49:09 UTC 2022

Switch#
Chassis 1 reloading, reason - Reload command
Dec  7 05:49:12.506: %PMAN-5-EXITACTION: F0/0: pvp: Process manager is exiting: reload fp action requested
Dec  7 05:49:13.437: %PMAN-5-EXITACTION: R0/0: pvp:ger is exiting: rp processes exit with reload switch code


Initializing Hardware......

System Bootstrap, Version 17.6.1r[FC2], RELEASE SOFTWARE (P)
Compiled Wed 05/12/2021 15:39:34.01 by rel

Current ROMMON image : Primary
Last reset cause     : SoftwareReload
C9300-48T platform with 8388608 Kbytes of main memory

boot: attempting to boot from [flash:packages.conf]
boot: reading file packages.conf
#
####################################

< OUTPUT TRUNCATED>

 

It took around 6 minutes for the software upgrade to finish.

Switch#show version
Cisco IOS XE Software, Version 17.06.04
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.4, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Sun 14-Aug-22 08:58 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON
BOOTLDR: System Bootstrap, Version 17.6.1r[FC2], RELEASE SOFTWARE (P)

Switch uptime is 2 minutes
Uptime for this control processor is 4 minutes
System returned to ROM by Reload Command ReloadReason=Image Install
System image file is "flash:packages.conf"
Last reload reason: Reload Command ReloadReason=Image Install


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.


Technology Package License Information:

------------------------------------------------------------------------------
Technology-package                                     Technology-package
Current                        Type                       Next reboot  
------------------------------------------------------------------------------
network-essentials      Smart License                    network-essentials  
dna-essentials          Subscription Smart License       dna-essentials                
AIR License Level: AIR DNA Advantage
Next reload AIR license Level: AIR DNA Advantage


Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco C9300-48T (X86) processor with 1317097K/6147K bytes of memory.
Processor board ID FOC26241234
1 Virtual Ethernet interface
52 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces
2 TwentyFive Gigabit Ethernet interfaces
2 Forty Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
1638400K bytes of Crash Files at crashinfo:.
11264000K bytes of Flash at flash:.

Base Ethernet MAC Address          : f8:e5:7e:a9:12:34
Motherboard Assembly Number        : 73-19915-04
Motherboard Serial Number          : FOC26215678
Model Revision Number              : H0
Motherboard Revision Number        : B0
Model Number                       : C9300-48T
System Serial Number               : FOC26241234
CLEI Code Number                   :


Switch Ports Model              SW Version        SW Image              Mode   
------ ----- -----              ----------        ----------            ----   
*    1 65    C9300-48T          17.06.04          CAT9K_IOSXE           INSTALL

Thursday, February 2, 2023

Renumber a Cisco Catalyst 3650 Switch Stack

Here's a link to manually change or renumber a Cisco Catalyst 3650 stack number. This also applies to a Cisco Catalyst 3850 since it has an identical IOS-XE architecture. The switch was removed from a stack and re-purposed as a standalone switch. It remained as logical switch number 4 and the interfaces starts with Gi4/0/x which is quite annoying.


C3650#show inventory

NAME: "c36xx Stack", DESCR: "c36xx Stack"

PID: WS-C3650-24PS     , VID: V03  , SN: FDO20161234

 

NAME: "Switch 4", DESCR: "WS-C3650-24PS-S"

PID: WS-C3650-24PS-S   , VID: V03  , SN: FDO20161234

 

NAME: "Switch 4 - Power Supply A", DESCR: "Switch 4 - Power Supply A"

PID: PWR-C2-640WAC     , VID: V02  , SN: LIT2007ABCD

 

 

C3650#show switch

Switch/Stack Mac Address : e00e.dafd.9123 - Local Mac Address

Mac persistency wait time: Indefinite

                                             H/W   Current

Switch#   Role    Mac Address     Priority Version  State

------------------------------------------------------------

*4       Active   e00e.dafd.9123     1      V03     Ready   

 

 

C3650#show run | i switch

switch 4 provision ws-c3650-24ps

 

 

You can't remove the switch <NUMBER> provisioned <PLATFORM> command. The correct way to revert back is to use the switch <NUMBER> renumber <NUMBER> privileged EXEC command, save and reload the switch.

 

C3650#no s?

% Unrecognized command

 

C3650#configure terninal

Enter configuration commands, one per line.  End with CNTL/Z.

C3650(config)#no switch ?

  <1-9>  Switch Number

 

C3650(config)#no switch 4 ?

  provision  Configure Switch provision / offline config

 

C3650(config)#no switch 4 provision ?

  <cr>

 

C3650(config)#no switch 4 provision   

 Error: A switch is already physically present at this location

 

 

C3650#switch ?

  <1-9>  Switch Number

 

C3650#switch 4 ?

  priority  Set the priority of the specified switch

  renumber  Renumber the specified switch number

  stack     Stack port enable or disable

 

C3650#switch 4 renumber ?

  <1-9>  New number of the Switch

 

C3650#switch 4 renumber 1

WARNING: Changing the switch number may result in a configuration change for that switch.  The interface configuration associated with the old switch number will remain as a provisioned configuration.  Do you want to continue?[y/n]y

 

 

C3650#sh int status    // IT STILL SHOWS AS Gi4/0/x; SAVE AND RELOAD THE SWITCH

 

Port      Name               Status       Vlan       Duplex  Speed Type

Gi4/0/1                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/2                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/3                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/4                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/5                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/6                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/7                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/8                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/9                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/10                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/11                     notconnect   1            auto   auto 10/100/1000BaseTX

         

Port      Name               Status       Vlan       Duplex  Speed Type

Gi4/0/12                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/13                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/14                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/15                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/16                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/17                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/18                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/19                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/20                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/21                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/22                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/23                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/0/24                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi4/1/1                      notconnect   1            auto   auto unknown

Gi4/1/2                      notconnect   1            auto   auto unknown

         

Port      Name               Status       Vlan       Duplex  Speed Type

Gi4/1/3                      notconnect   1            auto   auto unknown

Gi4/1/4                      notconnect   1            auto   auto unknown

 

 

C3650#write memory

*Sep 20 11:30:50.555: %SYS-5-CONFIG_I: Configured from console by console

Building configuration...

Compressed configuration from 2583 bytes to 1369 bytes[OK]

 

C3650#reload

Reload command is being issued on Active unit, this will reload the whole stack

Proceed with reload? [confirm]

 

*Sep 20 11:31:12.422: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.

*Sep 20 11:31:13.129: %STACKMGR-1-RELOAD_REQUEST: 4 stack-mgr:  Received reload request for all switches, reason Reload command

*Sep 20 11:31:13.130: %STACKMGR-1-RELOAD: 4 stack-mgr:  Reloading due to reason Reload command

*Sep 20 11:31:13.631: %IOSXE-3-PLATFORM: 4 process sysmgr: Reset/Reload requested by [stack-manager].

<Mon Sep 20 11:31:13 2021> Message from sysmgr: Reason Code:[3] Reset Reason:Reset/Reload requested by [stack-manager]. [Reload command]

umount: /proc/fs/nfsd: not mounted

Unmounting ng3k filesystems...

Warning! - some ng3k filesystems may not have unmounted cleanly...

Please stand by while rebooting the system...

Restarting system.

 

 

Booting...

 

<OUTPUT TRUNCATED>

 

 

C3650#show interface status

 

Port      Name               Status       Vlan       Duplex  Speed Type

Gi1/0/1                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/2                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/3                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/4                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/5                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/6                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/7                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/8                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/9                      notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/10                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/11                     notconnect   1            auto   auto 10/100/1000BaseTX

         

Port      Name               Status       Vlan       Duplex  Speed Type

Gi1/0/12                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/13                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/14                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/15                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/16                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/17                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/18                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/19                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/20                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/21                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/22                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/0/23                     notconnect   1            auto   auto 10/100/1000BaseTX

         

Port      Name               Status       Vlan       Duplex  Speed Type

Gi1/0/24                     notconnect   1            auto   auto 10/100/1000BaseTX

Gi1/1/1                      notconnect   1            auto   auto unknown

Gi1/1/2                      notconnect   1            auto   auto unknown

Gi1/1/3                      notconnect   1            auto   auto unknown

Gi1/1/4                      notconnect   1            auto   auto unknown

 

 

C3650#show switch

Switch/Stack Mac Address : e00e.dafd.1234 - Local Mac Address

Mac persistency wait time: Indefinite

                                             H/W   Current

Switch#   Role    Mac Address     Priority Version  State

------------------------------------------------------------

*1       Active   e00e.dafd.1234     1      V03     Ready 

 

 

C3650#sh run | i switch

switch 1 provision ws-c3650-24ps

 

Sunday, January 1, 2023

Cisco NCS 540 show tech-support

The Cisco NCS 540 router show tech-support command generates a TAR archive file (.tgz) and saves a copy in harddisk. You can transfer this file to an external FTP or TFTP server and provide to Cisco TAC for further analysis.


RP/0/RP0/CPU0:NCS540#show tech-support

Wed Sep 15 02:31:23.575 UTC

++ Show tech start time: 2021-Sep-15.023123.UTC ++

Wed Sep 15 02:31:25 UTC 2021 Waiting for gathering to complete

.......

Wed Sep 15 02:31:47 UTC 2021 Compressing show tech output

Show tech output available at 0/RP0/CPU0 : /harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz

++ Show tech end time: 2021-Sep-15.023147.UTC ++

 

 

RP/0/RP0/CPU0:NCS5401#dir /harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz

Wed Sep 15 02:35:48.035 UTC

 

Directory of /harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz

130570 -rw-r--r--. 1 62138 Sep 15 02:31 harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz

 

23893884 kbytes total (22460768 kbytes free)

 

 

RP/0/RP0/CPU0:NCS540#copy ?                                                                       

  /recurse        Recursively list subdirectories encountered

  WORD            Copy from file

  access-list     Access lists

  apphost:        Copy from apphost: file system

  config:         Copy from config: file system

  disk0:          Copy from disk0: file system

  ftp:            Copy from ftp: file system

  harddisk:       Copy from harddisk: file system

  http:           Copy from http: file system

  https:          Copy from https: file system

  prefix-list     Prefix lists

  rootfs:         Copy from rootfs: file system

  running-config  Copy from current system configuration

  tftp:           Copy from tftp: file system

  xml-schema      Copy XML schema files as a tar ball file (.tar.gz)

 

RP/0/RP0/CPU0:NCS540#copy harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz ?

  WORD            Copy to file

  apphost:        Copy to apphost: file system

  config:         Copy to config: file system

  disk0:          Copy to disk0: file system

  ftp:            Copy to ftp: file system

  harddisk:       Copy to harddisk: file system

  http:           Copy to http: file system

  https:          Copy to https: file system

  location        location to copy from

  rootfs:         Copy to rootfs: file system

  running-config  Update (merge with) current system configuration

  tftp:           Copy to tftp: file system

 

RP/0/RP0/CPU0:NCS540#copy harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz tftp://192.168.1.3 ?

  vrf   Specify the VRF for the network file system

  <cr> 

 

RP/0/RP0/CPU0:NCS540#copy harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz tftp://172.27.25.253 vrf ?

  WORD     Name of VRF

  default  Default VRF

 

RP/0/RP0/CPU0:NCS540#copy harddisk:/showtech/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz tftp://192.168.1.3 vrf Mgmt-intf

Wed Sep 15 02:37:56.258 UTC

Destination filename [showtech-NCS540generic-2021-Sep-15.023123.UTC.tgz]?

Writing tftp://172.27.25.253;Mgmt-intf/showtech-NCS540-generic-2021-Sep-15.023123.UTC.tgz

CCCC

62138 bytes copied in      7 sec (     8876)bytes/sec

 

Copy operation success