Cisco NCS 540 IOS-XR Software Upgrade

The NCS 540 IOS-XR software (.tar) is usually around 2 GB so leave the file transfer running for several minutes. I usually perform this during night time to avoid bandwidth congestion or disruption.

Transfer the new IOS-XR using FTP, TFTP or SCP. You can view the .tar file using dir harddisk: command.

RP/0/RP0/CPU0:NCS540#copy ftp://ftp:ftp123@172.16.5.3 harddisk: vrf Mgmt-intf

Wed Sep 27 14:44:03.768 UTC

Source filename [/ftp:]?NCS540-iosxr-7.4.2.tar

Destination filename [/harddisk:/NCS540-iosxr-7.4.2.tar]?  <PRESS ENTER>

Accessing ftp://ftpuser:*@172.16.5.3;Mgmt-intf/NCS540-iosxr-7.4.2.tar

CCCCCCCCCCCCCCC

 

<OUTPUT TRUNCATED>

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

1770946560 bytes copied in  21784 sec (    81295)bytes/sec

 

Copy operation success

RP/0/RP0/CPU0:NCS540#dir harddisk:

Fri Sep 29 08:33:50.778 UTC

 

Directory of harddisk:

 522241 drwxr-xr-x. 2       4096 Sep 29 05:49 .sppdc

1305602 drw-rw-r--. 2       4096 Jul 12 18:02 rdsfs_log

     14 -rw-r--r--. 1       7714 Sep 27 05:51 bcm_console_log_output.txt

 261121 drwxr-xr-x. 2       4096 Jul 12 17:38 nvram

1175041 drwxr-xr-x. 3       4096 Jul 12 17:40 ztp

     11 drwx------. 2      16384 Jul 12 17:31 lost+found

 391681 drwxr-xr-x. 3       4096 Jul 12 17:40 mirror

1044481 drwxr-xr-x. 2       4096 Jul 12 17:40 ipodwdm_log

     13 -rw-r--r--. 1          0 Jul 12 17:38 zl30363_trace_file.log

 913923 drwxr-xr-x. 5       4096 Sep 27 06:50 cisco_support

     12 -rw-r--r--. 1      65770 Jul 12 18:02 nvgen_bkup.log

     15 -rw-r--r--. 1        182 Sep 29 07:55 feature_list

 783361 drwxr-xr-x. 2       4096 Jul 12 17:38 shutdown

1305601 drwxr-xr-x. 2       4096 Jul 12 17:38 tftpboot

 522242 drwxr-xr-x. 3       4096 Jul 12 17:42 pam

1044482 drwxr-xr-x. 2       4096 Jul 12 17:42 showtech

 913921 drwxr-xr-x. 2       4096 Jul 12 17:40 .sppdc_new

 130561 drwxr-xr-x. 6       4096 Jul 12 17:40 xr

     16 -rwxr--r--. 1 1770946560 Sep 27 20:47 NCS540-iosxr-7.4.2.tar

 261122 drwxr-xr-x. 2       4096 Jul 12 17:42 dumper

 783362 drwx------. 3       4096 Sep 27 05:50 ima

 

23893884 kbytes total (20877188 kbytes free)

Use the install add source /harddisk:/ <.tar> privilege exec command to extract and install the RPM packages. Note there's a space before .tar file and the operation id is usually 4.

RP/0/RP0/CPU0::NCS540#install add source /harddisk:/ NCS540-iosxr-7.4.2.tar

Sat Sep 30 03:09:13.249 UTC

Sep 30 03:09:15 Install operation 4 started by root:

 install add source /harddisk:/ NCS540-iosxr-7.4.2.tar nooptim

Sep 30 03:09:21 Install operation will continue in the background

 

 

You can view the installation progress using the show install request command.

RP/0/RP0/CPU0::NCS540#show install request

Sat Sep 30 03:09:55.073 UTC

User root, Op Id 4

install add 

NCS540-iosxr-7.4.2.tar

 

The install add operation 4 is 60% complete

Add validate request sent to sysadmin

 

 

RP/0/RP0/CPU0:NCS540#Sep 30 03:12:19 Install operation 4 finished successfully

 

 

It took around 2 mins for the RPM package installation to finish. It's recommended to monitor the upgrade process via the console access.

 

 

RP/0/RP0/CPU0::NCS540#show install request                                

Sat Sep 30 03:12:34.287 UTC

No install operation in progress

 

 

Use the install activate id <ID> privilege exec command to activate the RPM packages. Type yes to proceed.

 

RP/0/RP0/CPU0::NCS540#install activate ?

  WORD             package

  id               The id of the install add operation containing package(s) to activate(cisco-support)

  issu             ISSU operation(cisco-support)

  nooptim          Execute install operation in traditional mode(cisco-support)

  noprompt         do not prompt user.continue assuming default yes(cisco-support)

  process-restart  process-restart(cisco-support)

  reload           reload(cisco-support)

  synchronous      Execute install operation in synchronous mode(cisco-support)

  <cr>            

RP/0/RP0/CPU0::NCS540#install activate id ?

  <1-4294967295>  Activate the package(s) specified in this install id

RP/0/RP0/CPU0::NCS540#install activate id 4

Sat Sep 30 03:13:48.124 UTC

Sep 30 03:13:50 Install operation 5 started by root:

  install activate id 4

Sep 30 03:13:50 Package list:

Sep 30 03:13:50     ncs540-isis-1.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-mpls-te-rsvp-1.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-mpls-1.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-ospf-2.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-mini-x-7.4.2

Sep 30 03:13:50     ncs540-mcast-1.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-eigrp-1.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-mgbl-1.0.0.0-r742.x86_64

Sep 30 03:13:50     ncs540-li-1.0.0.0-r742.x86_64

 

 

This install operation will reload the system, continue?

 [yes/no]:[yes] yes

Sep 30 03:15:03 Install operation will continue in the background

 

 

RP/0/RP0/CPU0:NCS540#show install request

Sat Sep 30 03:15:29.157 UTC

User root, Op Id 5

install activate 

ncs540-isis-1.0.0.0-r742.x86_64

ncs540-mpls-te-rsvp-1.0.0.0-r742.x86_64

ncs540-mpls-1.0.0.0-r742.x86_64

ncs540-ospf-2.0.0.0-r742.x86_64

ncs540-mini-x-7.4.2

ncs540-mcast-1.0.0.0-r742.x86_64

ncs540-eigrp-1.0.0.0-r742.x86_64

ncs540-mgbl-1.0.0.0-r742.x86_64

ncs540-li-1.0.0.0-r742.x86_64

 

The install prepare operation 5 is 40% complete

Processing the ISO

 

 

RP/0/RP0/CPU0::NCS540#show install request

Sat Sep 30 03:18:16.789 UTC

User root, Op Id 5

install activate 

ncs540-isis-1.0.0.0-r742.x86_64

ncs540-mpls-te-rsvp-1.0.0.0-r742.x86_64

ncs540-mpls-1.0.0.0-r742.x86_64

ncs540-ospf-2.0.0.0-r742.x86_64

ncs540-mini-x-7.4.2

ncs540-mcast-1.0.0.0-r742.x86_64

ncs540-eigrp-1.0.0.0-r742.x86_64

ncs540-mgbl-1.0.0.0-r742.x86_64

ncs540-li-1.0.0.0-r742.x86_64

 

The install prepare operation 5 is 40% complete

 

 install prepare operation 5 is in progress

Host preparation is in progress

 

Node(s)                 State                   %Completed              Action

--------------------------------------------------------------------------------

Node 0/RP0      :       In Progress                30%                  Host prepare in progress

 

 

RP/0/RP0/CPU0::NCS540#RP/0/RP0/CPU0:Sep 30 03:29:06.098 UTC: fpd-serv[302]: %PKT_INFRA-FM-3-FAULT_MAJOR : ALARM_MAJOR :FPD-NEED-UPGRADE :DECLARE :0/RP0: 

 

 

RP/0/RP0/CPU0::NCS540#show install request

Sat Sep 30 03:29:26.665 UTC

User root, Op Id 5

install activate 

ncs540-isis-1.0.0.0-r742.x86_64

ncs540-mpls-te-rsvp-1.0.0.0-r742.x86_64

ncs540-mpls-1.0.0.0-r742.x86_64

ncs540-ospf-2.0.0.0-r742.x86_64

ncs540-mini-x-7.4.2

ncs540-mcast-1.0.0.0-r742.x86_64

ncs540-eigrp-1.0.0.0-r742.x86_64

ncs540-mgbl-1.0.0.0-r742.x86_64

ncs540-li-1.0.0.0-r742.x86_64

 

The install activate operation 5 is 5% complete

 

 install activate operation 5 is in progress

Host preparation is complete

Sysadmin preparation is complete

XR preparation is complete

Host activation is complete

Sysadmin activation is in progress

 

 

Node(s)                 State                   %Completed              Action

--------------------------------------------------------------------------------

Node 0/RP0      :       Completed                  100%                 Sysadmin activation is complete

 

 

RP/0/RP0/CPU0::NCS540#show install request

Sat Sep 30 03:30:45.730 UTC

User root, Op Id 5

install activate 

ncs540-isis-1.0.0.0-r742.x86_64

ncs540-mpls-te-rsvp-1.0.0.0-r742.x86_64

ncs540-mpls-1.0.0.0-r742.x86_64

ncs540-ospf-2.0.0.0-r742.x86_64

ncs540-mini-x-7.4.2

ncs540-mcast-1.0.0.0-r742.x86_64

ncs540-eigrp-1.0.0.0-r742.x86_64

ncs540-mgbl-1.0.0.0-r742.x86_64

ncs540-li-1.0.0.0-r742.x86_64

 

The install activate operation 5 is 20% complete

Updating XR master software profile

 

 

RP/0/RP0/CPU0::NCS540#RP/0/RP0/CPU0:Sep 30 03:31:05.728 UTC: sdr_instmgr[1293]: %INSTALL-INSTMGR-2-OPERATION_SUCCESS : Install operation 5 finished successfully

RP/0/RP0/CPU0:Sep 30 03:31:06.125 UTC: sdr_instmgr[1293]: %INSTALL-INSTMGR-2-SYSTEM_RELOAD_INFO : The whole system will be reloaded to complete install operation 5

 

It took around 20 mins for the RPM install packages to finish. The NCS 540 router will automatically reload afterwards.

 

RP/0/RP0/CPU0:NCS540#LC/0/0/CPU0:Sep 30 03:31:58.195 UTC: ifmgr[332]: %PKT_INFRA-LINK-3-UPDOWN : Interface GigabitEthernet0/0/0/0, changed state to Down

LC/0/0/CPU0:Sep 30 03:31:58.196 UTC: ifmgr[332]: %PKT_INFRA-LINK-3-UPDOWN : Interface GigabitEthernet0/0/0/21, changed state to Down

LC/0/0/CPU0:Sep 30 03:31:58.199 UTC: fia_driver[243]: %PLATFORM-DPA-2-RX_FAULT : Interface GigabitEthernet0/0/0/0, Detected Local Fault

LC/0/0/CPU0:Sep 30 03:31:58.203 UTC: fia_driver[243]: %PLATFORM-DPA-2-RX_FAULT : Interface GigabitEthernet0/0/0/21, Detected Local Fault

0/RP0/ADMIN0:Sep 30 03:32:04.663 UTC: shelf_mgr[2604]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/RP0 

0/RP0/ADMIN0:Sep 30 03:32:10.520 UTC: vm_manager[2637]: %INFRA-VM_MANAGER-4-INFO : Info: vm_manager brought down VM default-sdr--2 

 

Preparing system for backup. This may take a few minutes especially for large configurations.

        Status report: node0_RP0_CPU0: BACKUP INPROGRESS

        Status report: node0_RP0_CPU0: BACKUP HAS COMPLETED SUCCESSFULLY

[Done]

Stoping cgroup-init

Stopping OpenBSD Secure Shell server: sshdinitctl: Unknown instance:

Stopping system message bus: dbus.

Stopping random number generator daemon.

Stopping system log daemon...0

Stopping kernel log daemon...0

Stopping internet superserver: xinetd.

Stopping crond: OK

Stopping rpcbind daemon...

done.

Stopping S.M.A.R.T. daemon: smartd.

Stopping Lighttpd Web Server: stopped /usr/sbin/lighttpd (pid 3963)

lighttpd.

Stopping libvirtd daemon: [  OK  ]

Deconfiguring network interfaces... done.

Sending all processes the KILL signal...

Unmounting remote filesystems...

Deactivating swap...

Unmounting local filesystems...

mount: can't find /mnt/ram in /etc/fstab

Rebooting... [251250.066254] obfl_rb_notify_cb: reboot notifier called

[251250.072019]  writing reset reason 1, (null)

[251250.856170]  Requesting IOFPGA for system wide cold reset operation

[251251.606113] Succesfully wrote mtdoops at 163840 size 32768

[251251.612640] pstore: Successfully logged oops info. Size 32740

 

<OUTPUT TRUNCATED>

 

 

Connecting to 'default-sdr--1' console

ÿûÿûÿûÿýbootlogd: ioctl(/dev/pts/2, TIOCCONS): Device or resource busy

Running postinst /etc/rpm-postinsts/100-dnsmasq...

Running postinst /etc/rpm-postinsts/101-nfs-utils-client...

Running postinst /etc/rpm-postinsts/102-nfs-utils...

update-rc.d: /etc/init.d/run-postinsts exists during rc.d purge (continuing)

 Removing any system startup links for run-postinsts ...

  /etc/rcS.d/S99run-postinsts

Configuring network interfaces... done.

Starting system message bus: dbus.

Starting OpenBSD Secure Shell server: sshd

  generating ssh RSA key...

  generating ssh ECDSA key...

  generating ssh DSA key...

  generating ssh ED25519 key...

sshd start/running, process 2380

Starting rpcbind daemon...done.

Starting random number generator daemon.

Starting system log daemon...0

Starting kernel log daemon...0

tftpd-hpa disabled in /etc/default/tftpd-hpa

Starting internet superserver: xinetd.

Libvirt not initialized for container instance

Starting crond: OK

SIOCADDRT: File exists

osSignalTask: started

 

 

ios con0/RP0/CPU0 is now available

 

 

Press RETURN to get started.

 

RP/0/RP0/CPU0:Sep 30 03:36:02.641 UTC: fpd-serv[305]: %PKT_INFRA-FM-3-FAULT_MAJOR : ALARM_MAJOR :FPD-NEED-UPGRADE :DECLARE :0/RP0: 

0/RP0/ADMIN0:Sep 30 03:36:17.167 UTC: vm_manager[3160]: %INFRA-VM_MANAGER-4-INFO : Info: vm_manager started VM default-sdr--2 

 

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply third-party

authority to import, export, distribute or use encryption. Importers,

exporters, distributors and users are responsible for compliance with

U.S. and local country laws. By using this product you agree to comply

with applicable laws and regulations. If you are unable to comply with

U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be

found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

 

RP/0/RP0/CPU0:Sep 30 03:37:14.957 UTC: ifmgr[139]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RP0/CPU0/0, changed state to Down

RP/0/RP0/CPU0:Sep 30 03:37:14.976 UTC: ifmgr[139]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RP0/CPU0/0, changed state to Up

RP/0/RP0/CPU0:Sep 30 03:37:15.037 UTC: ifmgr[139]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RP0/CPU0/0, changed state to Down

RP/0/RP0/CPU0:Sep 30 03:37:18.644 UTC: ifmgr[139]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RP0/CPU0/0, changed state to Up

 

 

It took around 6 mins for the NCS 540 to boot up using the new IOS-XR code.

 

 

RP/0/RP0/CPU0::NCS540#show version

Sat Sep 30 03:38:35.240 UTC

Cisco IOS XR Software, Version 7.4.2

Copyright (c) 2013-2022 by Cisco Systems, Inc.

 

Build Information:

 Built By     : ingunawa

 Built On     : Wed Feb 16 05:24:50 PST 2022

 Built Host   : iox-lnx-025

 Workspace    : /auto/srcarchive15/prod/7.4.2/ncs540/ws

 Version      : 7.4.2

 Location     : /opt/cisco/XR/packages/

 Label        : 7.4.2

 

cisco NCS-540 () processor

System uptime is 3 minutes

 

 

RP/0/RP0/CPU0::NCS540#show install active

Sat Sep 30 03:39:03.701 UTC

Label : 7.4.2

 

Node 0/RP0/CPU0 [RP]

  Boot Partition: xr_lv7

  Active Packages: 9

        ncs540-xr-7.4.2 version=7.4.2 [Boot image]

        ncs540-eigrp-1.0.0.0-r742

        ncs540-isis-1.0.0.0-r742

        ncs540-li-1.0.0.0-r742

        ncs540-mgbl-1.0.0.0-r742

        ncs540-mpls-1.0.0.0-r742

        ncs540-mpls-te-rsvp-1.0.0.0-r742

        ncs540-ospf-2.0.0.0-r742

        ncs540-mcast-1.0.0.0-r742

 

Node 0/0/CPU0 [LC]

  Boot Partition: xr_lcp_lv8

  Active Packages: 9

        ncs540-xr-7.4.2 version=7.4.2 [Boot image]

        ncs540-eigrp-1.0.0.0-r742

        ncs540-isis-1.0.0.0-r742

        ncs540-li-1.0.0.0-r742

        ncs540-mgbl-1.0.0.0-r742

        ncs540-mpls-1.0.0.0-r742

        ncs540-mpls-te-rsvp-1.0.0.0-r742

        ncs540-ospf-2.0.0.0-r742

        ncs540-mcast-1.0.0.0-r742

 

 

The final step is to issue an install commit command.

 

RP/0/RP0/CPU0::NCS540#install commit

Sat Sep 30 03:39:31.523 UTC

2023-09-30 03:39:33 Install operation 6 started by root:

  install commit

2023-09-30 03:39:34 Install operation will continue in the background

RP/0/RP0/CPU0:NCS540#2023-09-30 03:39:46 Install operation 6 finished successfully

RP/0/RP0/CPU0:Sep 30 03:39:46.897 UTC: sdr_instmgr[1296]: %INSTALL-INSTMGR-2-OPERATION_SUCCESS : Install operation 6 finished successfully

Cisco Export Compliance Tool

The Cisco products, software, and technology (Cisco products) are subject to export controls under the laws and regulations of the United States (U.S.), European Union (EU) and other applicable countries’ export laws and regulations. Export, re-export, transfer, and use of Cisco products may require obtaining U.S. and local authorizations, permits, or licenses.

There's a free Cisco Export Compliance online tool to check the Export Control Classification Number (ECCN), Harmonized System (HS) and other info on various Cisco products. This is useful when dealing with a courrier or customs in other countries.

In the example, I tried to search for the Export Compliance codes for a Cisco 4331 ISR router.

Type Product ID: ISR4331/K9 > click Search (bottom page).

You can also download the result into an excel file (XLSX).

Change Cisco Switch Stack Member Number

Here's a link in changing the interface name or renumber a Cisco stack member switch. There's a logical correlation between the switch number and the interface name, i.e. GigabitEthernet1/0/x belongs to Switch 1 and GigabitEthernet2/0/x belongs to Switch 2 and so on.

Issue a show switch command to verify the role and number of member switches in the stack. I used a Cisco 3650 switch but the command is similar in other Cisco Catalyst switch that supports stacking.

3650#show switch
Switch/Stack Mac Address : 188b.9db0.8888 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
-------------------------------------------------------------------------------------
 1       Member   188b.9d0f.6666     13     V02     Ready                
 2       Standby  7c31.0ee7.7777     14     V05     Ready                
*3       Active   188b.9db0.8888     15     V02     Ready                

In this case, I wanted Switch 3 interfaces to be renumbered from Gi3/0/x to Gi1/0/x. Use the switch <CURRENT STACK NUMBER> renumber <NEW STACK NUMBER> privileged EXEC command.

3650#show interface status

Port         Name               Status       Vlan       Duplex  Speed Type
Gi1/0/1                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/2                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/3                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/4                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/5                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/6                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/7                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/8                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/9                         connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/10                        connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/11                        connected    1          a-full a-1000 10/100/1000BaseTX
Gi1/0/12                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/13                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/14                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/15                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/16                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/17                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/18                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/19                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/20                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/21                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/22                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/23                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/24                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/25                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/26                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/27                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/28                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/29                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/30                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/31                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/32                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/33                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/34                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/35                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/36                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/37                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/38                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/39                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/40                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/41                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/42                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/43                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/44                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/45                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/46                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/47                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/0/48                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi1/1/1                         notconnect   1            auto   auto unknown
Gi1/1/2                         notconnect   1            auto   auto unknown
Gi1/1/3                         notconnect   1            auto   auto unknown
Gi1/1/4                         notconnect   1            auto   auto unknown
Gi2/0/1                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/2                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/3                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/4                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/5                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/6                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/7                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/8                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/9                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/10                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/11                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/12                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/13                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/14                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/15                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/16                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/17                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/18                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/19                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/20                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/21                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/22                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/23                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/0/24                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi2/1/1                         notconnect   1            auto   auto unknown
Gi2/1/2                         notconnect   1            auto   auto unknown
Gi2/1/3                         notconnect   1            auto   auto unknown
Gi2/1/4                         notconnect   1            auto   auto unknown
Gi3/0/1                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/2                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/3                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/4                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/5                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/6                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/7                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/8                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/9                         notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/10                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/11                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/12                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/13                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/14                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/15                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/16                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/17                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/18                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/19                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/20                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/21                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/22                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/23                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/24                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/25                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/26                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/27                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/28                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/29                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/30                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/31                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/32                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/33                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/34                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/35                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/36                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/37                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/38                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/39                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/40                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/41                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/42                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/43                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/44                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/45                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/46                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/47                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/0/48                        notconnect   1            auto   auto 10/100/1000BaseTX
Gi3/1/1                         connected    trunk        full   1000 1000BaseSX SFP
Gi3/1/2                         connected    trunk        full   1000 1000BaseSX SFP
Gi3/1/3                         notconnect   1            auto   auto unknown
Gi3/1/4                         notconnect   1            auto   auto unknown

3650#switch ?           
  <1-9>  Switch Number
  clear  Reset the switch mode to N+1

3650#switch 1 ?
  priority  Set the priority of the specified switch
  renumber  Renumber the specified switch number
  role      Set the new switch mode of the Switch
  stack     Stack port enable or disable

3650#switch 1 renumber ?
  <1-9>  New number of the Switch

3650#switch 1 renumber 2
WARNING: Changing the switch number may result in a configuration change for that switch.  The interface configuration associated with the old switch number will remain as a provisioned configuration. New Switch Number will be effective after next reboot.. Do you want to continue?[y/n]? [yes]: yes

 

You need to reload the switch slot in order for the change to take effect.

3650#reload slot ?
  <1-9>  Slot number of RP or line card

3650#reload slot 1
Proceed with reload?[confirm]    // HIT ENTER
 

3650#terminal monitor
Sep  2 07:45:58.336:  Successfully sent switch reload message for switch num: 1 and reason Reload Slot Command
Sep  2 07:45:58.333: %STACKMGR-6-STACK_LINK_CHANGE: Switch 2 R0/0: stack_mgr: Stack port 2 on Switch 2 is down
Sep  2 07:45:58.336: %STACKMGR-4-SWITCH_REMOVED: Switch 2 R0/0: stack_mgr: Switch 1 has been removed from the stack.
Sep  2 07:45:58.338: %STACKMGR-6-STACK_LINK_CHANGE: Switch 3 R0/0: stack_mgr: Stack port 1 on Switch 3 is down
Sep  2 07:45:58.340: %STACKMGR-4-SWITCH_REMOVED: Switch 3 R0/0: stack_mgr: Switch 1 has been removed from the stack.
Sep  2 07:45:58.956: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/1: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.958: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/2: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.960: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/3: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.962: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/4: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.963: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/5: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.965: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/6: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.967: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/7: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.969: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/8: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.971: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/9: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.974: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/10: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:58.979: %ILPOWER-5-PD_ENTRY_REMOVAL: Interface GigabitEthernet1/0/11: power device entry removed. admin_state: 2, oper_state: 3
Sep  2 07:45:59.164: %HMANRP-5-CHASSIS_DOWN_EVENT: Chassis 1 gone DOWN!
Sep  2 07:46:00.353: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/1, changed state to down
Sep  2 07:46:00.394: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/2, changed state to down
Sep  2 07:46:00.418: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/3, changed state to down
Sep  2 07:46:00.420: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/4, changed state to down
Sep  2 07:46:00.435: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/5, changed state to down
Sep  2 07:46:00.503: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/6, changed state to down
Sep  2 07:46:00.516: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/7, changed state to down
Sep  2 07:46:00.529: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/8, changed state to down
Sep  2 07:46:00.543: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/9, changed state to down
Sep  2 07:46:00.555: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/10, changed state to down
Sep  2 07:46:00.646: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/11, changed state to down
Sep  2 07:46:00.660: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/12, changed state to down
Sep  2 07:46:00.665: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/13, changed state to down
Sep  2 07:46:00.670: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/14, changed state to down
Sep  2 07:46:00.674: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/15, changed state to down
Sep  2 07:46:00.679: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/16, changed state to down
Sep  2 07:46:00.683: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/17, changed state to down
Sep  2 07:46:00.688: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/18, changed state to down
Sep  2 07:46:00.693: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/19, changed state to down
Sep  2 07:46:00.696: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/20, changed state to down
Sep  2 07:46:00.724: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/21, changed state to down
Sep  2 07:46:00.725: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/22, changed state to down
Sep  2 07:46:00.726: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/23, changed state to down
Sep  2 07:46:00.734: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/24, changed state to down
Sep  2 07:46:00.749: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/25, changed state to down
Sep  2 07:46:00.749: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/26, changed state to down
Sep  2 07:46:00.750: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/27, changed state to down
Sep  2 07:46:00.762: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/28, changed state to down
Sep  2 07:46:00.763: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/29, changed state to down
Sep  2 07:46:00.763: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/30, changed state to down
Sep  2 07:46:00.769: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/31, changed state to down
Sep  2 07:46:00.772: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/32, changed state to down
Sep  2 07:46:00.778: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/33, changed state to down
Sep  2 07:46:00.811: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/34, changed state to down
Sep  2 07:46:00.819: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/35, changed state to down
Sep  2 07:46:00.826: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/36, changed state to down
Sep  2 07:46:00.830: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/37, changed state to down
Sep  2 07:46:00.835: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/38, changed state to down
Sep  2 07:46:00.841: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/39, changed state to down
Sep  2 07:46:00.847: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/40, changed state to down
Sep  2 07:46:00.852: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/41, changed state to down
Sep  2 07:46:00.858: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/42, changed state to down
Sep  2 07:46:00.864: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/43, changed state to down
Sep  2 07:46:00.869: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/44, changed state to down
Sep  2 07:46:00.894: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/45, changed state to down
Sep  2 07:46:00.905: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/46, changed state to down
Sep  2 07:46:00.909: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/47, changed state to down
Sep  2 07:46:00.913: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/48, changed state to down
Sep  2 07:46:00.917: %LINK-3-UPDOWN: Interface GigabitEthernet1/1/1, changed state to down
Sep  2 07:46:00.921: %LINK-3-UPDOWN: Interface GigabitEthernet1/1/2, changed state to down
Sep  2 07:46:00.926: %LINK-3-UPDOWN: Interface GigabitEthernet1/1/3, changed state to down
Sep  2 07:46:00.930: %LINK-3-UPDOWN: Interface GigabitEthernet1/1/4, changed state to down
Sep  2 07:46:01.353: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down
Sep  2 07:46:01.394: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/2, changed state to down
Sep  2 07:46:01.418: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/3, changed state to down
Sep  2 07:46:01.437: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/4, changed state to down
Sep  2 07:46:01.437: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/5, changed state to down
Sep  2 07:46:01.502: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/6, changed state to down
Sep  2 07:46:01.515: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/7, changed state to down
Sep  2 07:46:01.530: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/8, changed state to down
Sep  2 07:46:01.543: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/9, changed state to down
Sep  2 07:46:01.555: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/10, changed state to down
Sep  2 07:46:01.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/11, changed state to down
Sep  2 07:47:37.292: %HMANRP-6-HMAN_IOS_CHANNEL_INFO: HMAN-IOS channel event for switch 1: EMP_RELAY: Channel DOWN!

I had to temporarily create Switch 4 for flexibility in renumbering the rest of the switch stack numbers:

Original Switch 1 > renumber as Switch 2

Original Switch 2 > renumber as Switch 3

Original Switch 3 > renumber as Switch 1

3650##show switch
Switch/Stack Mac Address : 188b.9db0.8888 - Local Mac Address
Mac persistency wait time: Indefinite
                                             H/W   Current
Switch#   Role    Mac Address     Priority Version  State
-------------------------------------------------------------------------------------
*1       Active   188b.9db0.8888     15     V02     Ready               
 2       Member   188b.9d0f.6666     13     V02     Ready                
 3       Standby  7c31.0ee7.7777     12     V05     Ready                
 4       Member   0000.0000.0000     0      V02     Removed   

Packet Capture in a Cisco 4000 ISR

I needed to perform a packet capture in our Cisco 4K Integrated Services Router (ISR) to troubleshoot a Session Initiation Protocol (SIP) problem. Here's a Cisco link for the monitor capture commands.

Below is a summary of the CLI commands applied. Majority of these commands are applied in the privileged EXEC mode (Router#).

ip access-list extended CAP-ACL
 permit ip 172.27.17.0 0.0.0.31 10.12.16.0 0.0.0.255
 permit ip 10.12.16.0 0.0.0.255 172.27.17.0 0.0.0.31

#monitor capture CAP access-list CAP-ACL
 

#monitor capture CAP interface GigabitEthernet0/0/0.41 both

#monitor capture CAP start

show monitor capture CAP buffer brief

show monitor capture CAP buffer detailed

#monitor capture CAP export tftp://<TFTP IP ADDRESS>/CAP.pcap

#monitor capture CAP stop

#monitor capture CAP clear

 

Configure an ACL to narrow down specific TCP/UDP port (or IP) and IP address.

4K#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
4K(config)#ip access-list extended CAP-ACL
4K(config-ext-nacl)#permit ip 172.27.17.0 0.0.0.31 10.12.16.0 0.0.0.255
4K(config-ext-nacl)#permit ip 10.12.16.0 0.0.0.255 172.27.17.0 0.0.0.31

Configure the packet capture arbitrary name, interface, ingress/egress direction and apply the ACL previously configured.

4K#monitor capture CAP access-list CAP-ACL
 

4K#monitor capture CAP interface GigabitEthernet0/0/0.41 both 

 

Start the packet capture. Issue the show monitor capture <NAME> command to view the summary of the configuration.

4K#monitor capture CAP start

4K#show monitor capture CAP

Status Information for Capture CAP
  Target Type:
   Interface: GigabitEthernet0/0/0.41, Direction: both
   Status : Active
  Filter Details:
   Access-list: CAP-ACL
  Buffer Details:
   Buffer Type: LINEAR (default)
   Buffer Size (in MB): 10
  Limit Details:
   Number of Packets to capture: 0 (no limit)
   Packet Capture duration: 0 (no limit)
   Packet Size to capture: 0 (no limit)
   Maximum number of packets to capture per second: 1000
   Packet sampling rate: 0 (no sampling)

 

Use the show monitor capture <NAME> buffer brief command to view traffic.

4K#show monitor capture CAP buffer brief
 -------------------------------------------------------------
 #   size   timestamp     source             destination   protocol
 -------------------------------------------------------------
   0 1046    0.000000   172.27.17.8     ->  10.12.16.5     TCP
   1   70    0.569022   172.27.17.8     ->  10.12.16.5     TCP
   2   70    0.577018   172.27.17.8     ->  10.12.16.5     TCP
   3 1050    4.057996   172.27.17.12    ->  10.12.16.5     TCP
   4   70    4.617024   172.27.17.12    ->  10.12.16.5     TCP
   5   70    4.623020   172.27.17.12    ->  10.12.16.5     TCP

<OUTPUT TRUNCATED>

You'll need Wireshark in order to view the detailed packet capture from the show monitor capture <NAME> buffer detailed command. You can export the .pcap file to an external TFTP/FTP server using the monitor capture CAP export command.

Make sure the TFTP server IP address is reachable. You can use the ip tftp source-interface <INTERFACE> command if you have multiple sub-interfaces using VRF.

4K(config)#ip tftp source-interface GigabitEthernet0/0/0.41

4K#show monitor capture CAP buffer detailed
 -------------------------------------------------------------
 #   size   timestamp     source             destination   protocol
 -------------------------------------------------------------
   0 1046    0.000000   172.27.17.8     ->  10.12.16.5     TCP
  0000:  682C7BD2 9A205061 BF3D7715 81006191   h,{.. Pa.=w...a.
  0010:  08004560 0404529F 00004006 AD48AC1B   ..E`..R...@..H..
  0020:  B0080A70 1019C71D 13C4EC3E 0B5E5DFB   ...p.......>.^].
  0030:  939C8018 0A510F25 00000101 080A0037   .....Q.%.......7

   1   70    0.569022   172.27.17.8     ->  10.12.16.5     TCP
  0000:  682C7BD2 9A205061 BF3D7715 81006191   h,{.. Pa.=w...a.
  0010:  08004560 003452AF 00004006 B108AC1B   ..E`.4R...@.....
  0020:  B0080A70 1019C71D 13C4EC3E 0F2E5DFB   ...p.......>..].
  0030:  94E58010 0A5185F9 00000101 080A0037   .....Q.........7

   2   70    0.577018   172.27.17.8     ->  10.12.16.5     TCP
  0000:  682C7BD2 9A205061 BF3D7715 81006191   h,{.. Pa.=w...a.
  0010:  08004560 003452B0 00004006 B107AC1B   ..E`.4R...@.....
  0020:  B0080A70 1019C71D 13C4EC3E 0F2E5DFB   ...p.......>..].
  0030:  977C8010 0A518360 00000101 080A0037   .|...Q.`.......7

4K#monitor capture CAP export tftp://172.27.5.3/CAP.pcap
!
Exported Successfully

Remove the packet capture and ACL once you're finished.

4K#monitor capture CAP clear

4K#monitor capture CAP stop
 

4K#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
4K(config)#no ip access-list extended CAP-ACL

 

Cisco Network Convergence System (NCS) 540 Router

Here's a link regarding the Cisco NCS 540 series routers and a link for the hardware installation guide. 

The NCS 540 1RU router have the interfaces and power supply in the front chassis.

It has dual power supply, out-out-band (OOB) MGMT port and console (CON) port.

The power uses an IEC C15 U-notch/kettle plug.

The NCS 540 interfaces are color coded: pink ports are 10G SFP+ (it can also support 1G), yellow ports are 25G SFP+ and green ports are 100G QSFP28.

There are 4 fans in the rear chassis.

It uses N540-RCKMT-19= mount kit/ear.

The NCS 540 uses the IOS-XR software and the bootup only took 2 minutes. The IOS-XR has a similar feel with Junos OS.

 

Booting CISCO Route Processor Module

ME Firmware Status #1: 0x000F0345
ME Firmware Status #2: 0x38002000
ME Current State: Operational
ME Error Code: No Error
ME Operational Firmware Version: 06:3.0.3.27

Baseboard IOFPGA Information:
    Revision = 0x17
    ID = 0x74971FD3
    Creation Date = 0x20201222
CPU Board IOFPGA Information:
    Revision = 0x7
    ID = 0x70971FD3
    Creation Date = 0x20191205
    Fab Revision = P0

Baseboard Present!
Booting from Upgrade Bios
Code Signing Results:(0xC0)                                    0x0
Using Upgrade FPGA

Product: XR OS PRODUCT
Base Board IOFPGA found at PCI Bus: 0x05
Base Board MIFPGA found at PCI Bus: 0x06
CPU Board IOFPGA found at PCI Bus: 0x07
All FPGA devices are up and running.

SATA Port 0: SAMST128G3FEIT - 128.0 GB
DISK Boot Partition = UEFI: SAMST128G3FEITL261, Partition 4

XR OS Boot Mode = 0x0

Selected Boot Option:
        XROS: Harddisk Boot
Version 2.18.1260. Copyright (C) 2021 American Megatrends, Inc.                 
Winterfell BIOS: v1.14.0 Date: 07/08/2021 14:38:25                              
Press <ESC> to enter setup.                                                     
Image Name = \EFI\BOOT\BOOTX64.EFI                                              
                                                                                
Image Size = 926750 Bytes                                                       
                                                                                
 ------------Cisco Secure Boot: Begin ------------                              
                                                                                
 -----------Cisco Secure Boot: Verifying-----------                             
                                                                                
Image verified successfully. Booting..                                          
                                                                                
 ------------Cisco Secure Boot: End ------------                                
                                                                                
                                                                                
GNU GRUB version 2.00                                                           
Press F2 to goto grub Menu..                                                    
Booting from Disk..                                                             
Loading Kernel..                                                                
Kernel Secure Boot Validation Result: PASSED                                    
Loading initrd..                                                                
Initrd Secure Boot Validation Result: PASSED                                    
[    0.191412] Allocating netns hash table                                      
Enable selinux to relabel filesystem from initramfs                            
Load IMA appraise policy: OK
Switching to new root and running init.
Sourcing /etc/sysconfig/udev
Starting udev: udevd[486]: unknown key 'RUN{builtin}' in /lib/udev/rules.d/64-btrfs-dm.rules:8

udevd[486]: invalid rule '/lib/udev/rules.d/64-btrfs-dm.rules:8'

[  OK  ]
Configuring network interfaces... done.
Starting system message bus: dbus.
Tue Jan 31 07:25:21 UTC 2023: in hostos !!!!!!!!!
/etc/rc3.d/S08check-flash: line 487: pd_is_hdd_partition_needed: command not found
UBI device number 3, total 144 LEBs (18855936 bytes, 18.0 MiB), available 0 LEBs (0 bytes), LEB size 130944 bytes (127.9 KiB)
Punching IOFPGA watchdog
UBI device number 5, total 32 LEBs (4190208 bytes, 4.0 MiB), available 0 LEBs (0 bytes), LEB size 130944 bytes (127.9 KiB)
Punching IOFPGA watchdog
Starting OpenBSD Secure Shell server: sshd
sshd start/running, process 3540
Starting rpcbind daemon...done.
Starting kdump:[  OK  ]
Starting random number generator daemon.
Starting system log daemon...0
Starting kernel log daemon...0
tftpd-hpa disabled in /etc/default/tftpd-hpa
Starting internet superserver: xinetd.
Starting S.M.A.R.T. daemon: smartd.
Starting Lighttpd Web Server: lighttpd.
Starting libvirtd daemon: [  OK  ]
Starting crond: OK
Starting cgroup-init
Network ieobc_br defined from /etc/init/ieobc_br_network.xml

Network local_br defined from /etc/init/local_br_network.xml

Network ieobc_br started

Network local_br started

Network xr_local_br started

mcelog start/running, process 5514
diskmon start/running, process 5520
initctl: Unknown instance: /dev/ttyS0

/etc/rc.d/init.d/pd-functions: line 142: /bin: Is a directory

Connecting to 'default-sdr--1' console
ootlogd: ioctl(/dev/pts/2, TIOCCONS): Device or resource busy
Configuring network interfaces... done.
Starting system message bus: dbus.
Starting OpenBSD Secure Shell server: sshd
sshd start/running, process 1800
Starting rpcbind daemon...done.
Starting random number generator daemon.
Starting system log daemon...0
Starting kernel log daemon...0
tftpd-hpa disabled in /etc/default/tftpd-hpa
Starting internet superserver: xinetd.
Libvirt not initialized for container instance
Starting crond: OK
SIOCADDRT: File exists
osSignalTask: started


ios con0/RP0/CPU0 is now available


Press RETURN to get started.

0/RP0/ADMIN0:Jan 31 07:27:44.345 UTC: vm_manager[2666]: %INFRA-VM_MANAGER-4-INFO : Info: vm_manager started VM default-sdr--2  


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply third-party
authority to import, export, distribute or use encryption. Importers,
exporters, distributors and users are responsible for compliance with
U.S. and local country laws. By using this product you agree to comply
with applicable laws and regulations. If you are unable to comply with
U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be
found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.



!!!!!!!!!!!!!!!!!!!! NO root-system username is configured. Need to configure root-system username. !!!!!!!!!!!!!!!!!!!!

         --- Administrative User Dialog ---


  Enter root-system username: admin
  Enter secret:
  Enter secret again:
Use the 'configure' command to modify this configuration.
User Access Verification

Username: admin
Password:

The same Cisco basic IOS commands are still used. You use the "Rack 0" serial number in the show inventory command output when raising a Cisco TAC case.

RP/0/RP0/CPU0:ios#show inventory
Tue Jan 31 07:32:37.831 UTC
NAME: "0/RP0", DESCR: "Cisco NCS 540 16G Series Fixed Router 24x10G,8x25G,2x100G"
PID: N540-ACC-SYS      , VID: V02, SN: FOC26431234

NAME: "Rack 0", DESCR: "NCS 540 Series 16G 24x1/10GE, 8x10/25GE, 2x100GE Fixed Chassis"
PID: N540-ACC-SYS      , VID: V02, SN: FOC2644567

NAME: "0/FT0", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/FT1", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/FT2", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/FT3", DESCR: "NCS 540 Fan"
PID: N540-FAN          , VID: V01, SN: N/A

NAME: "0/PM0", DESCR: "NCS 540 400W AC power supply"
PID: N540-PWR400-A     , VID: V02, SN: LIT26431234

NAME: "0/PM1", DESCR: "NCS 540 400W AC power supply"
PID: N540-PWR400-A     , VID: V02, SN: LIT2643567
          

RP/0/RP0/CPU0:ios#show version
Tue Jan 31 07:32:43.379 UTC
Cisco IOS XR Software, Version 7.4.2
Copyright (c) 2013-2022 by Cisco Systems, Inc.

Build Information:
 Built By     : ingunawa
 Built On     : Wed Feb 16 05:24:50 PST 2022
 Built Host   : iox-lnx-025
 Workspace    : /auto/srcarchive15/prod/7.4.2/ncs540/ws
 Version      : 7.4.2
 Location     : /opt/cisco/XR/packages/
 Label        : 7.4.2

cisco NCS-540 () processor
System uptime is 5 minutes

When I checked, it already has the OSPF and MPLS RPM package by default.

RP/0/RP0/CPU0:ios#show install active
Tue Jan 31 07:32:48.121 UTC
Label : 7.4.2

Node 0/RP0/CPU0 [RP]
  Boot Partition: xr_lv0
  Active Packages: 10
        ncs540-xr-7.4.2 version=7.4.2 [Boot image]
        ncs540-eigrp-1.0.0.0-r742
        ncs540-isis-1.0.0.0-r742
        ncs540-li-1.0.0.0-r742
        ncs540-mgbl-1.0.0.0-r742
        ncs540-mpls-1.0.0.0-r742
        ncs540-mpls-te-rsvp-1.0.0.0-r742
        ncs540-ospf-2.0.0.0-r742
        ncs540-mcast-1.0.0.0-r742
        ncs540-k9sec-1.0.0.0-r742

Node 0/0/CPU0 [LC]
  Boot Partition: xr_lcp_lv0
  Active Packages: 10
        ncs540-xr-7.4.2 version=7.4.2 [Boot image]
        ncs540-eigrp-1.0.0.0-r742
        ncs540-isis-1.0.0.0-r742
        ncs540-li-1.0.0.0-r742
        ncs540-mgbl-1.0.0.0-r742
        ncs540-mpls-1.0.0.0-r742
        ncs540-mpls-te-rsvp-1.0.0.0-r742
        ncs540-ospf-2.0.0.0-r742
        ncs540-mcast-1.0.0.0-r742
        ncs540-k9sec-1.0.0.0-r742


RP/0/RP0/CPU0:ios#show ip ospf ?
  WORD                 OSPF process name
  bad-checksum         Bad ospf checksum packets queue(cisco-support)
  border-routers       Border and Boundary Router Information
  cmd                  Generic command support(cisco-support)
  database             Database summary
  fast-reroute         IP Fast-reroute
  flood-list           Link state flood list
  interface            Interface information
  maxage-list          Maxage List(cisco-support)
  message-queue        Hello, TE and router message queue data(cisco-support)
  mpls                 MPLS related information
  neighbor             Neighbor list
  our-address          our address Database(cisco-support)
  private              Lightweight version of show ospf (skip LSA db walks).(cis
co-support)
  request-list         Link state request list
  retransmission-list  Link state retransmission list
  routes               OSPF routes table
  segment-routing      OSPF Segment-routing(cisco-support)
  sid-database         SID Database(cisco-support)
  srlg                 SRLG related info
  standby              Retrieve operational information from standby process(cis
co-support)
  statistics           OSPF statistics information(cisco-support)
  summary              OSPF summary information
  summary-prefix       Summary-prefix redistribution Information
  timers               OSPF timers information(cisco-support)
  topology             OSPF Topo Library Information(cisco-support)
  trace                OSPF trace information(cisco-support)
  virtual-links        Virtual link information
  vrf                  Show one or more non-default OSPF VRFs in process
  |                    Output Modifiers
  <cr>                         
RP/0/RP0/CPU0:ios#show mpls ?
  ea           MPLS EA
  forwarding   Forwarding information
  interfaces   MPLS enabled interfaces information
  io           Show mpls io data
  label        Label information
  lctrl        Line Protocol Control information(cisco-support)
  ldp          Label Distribution Protocol
  lib          Library information
  lsd          Label Switching Database
  ma           MPLS MA
  mldp         mLDP information
  oam          OAM info
  static       Static label bindings
  tp-oam       MPLS Transport Profile OAM(cisco-support)
  traffic-eng  Traffic Engineering information
  vpn          MPLS VPN MIB