Network Docs
Download as DOC, PDF0 likes443 views
The document provides steps to upgrade the IOS image and field programmable device (FPD) images on a Cisco 7206 router. The steps include deleting old image files, copying new IOS and FPD images via TFTP, verifying the image checksums, setting the boot configuration to use the new IOS image, and rebooting the router to complete the upgrade. Checks are also provided to confirm the VSA card and other modules are functioning after the upgrade.
![R(config)#wr
R(config)#reload
Other O/P for information:-
router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
router(config)#no aaa authentication enable default group tacacs+ enable
router(config)#
router#copy tftp: disk2:
Address or name of remote host []? 10.2.11.194
Source filename []? c7200p-fpd-pkg.152-4.M7.pkg
Destination filename [c7200p-fpd-pkg.152-4.M7.pkg]?
Accessing tftp://10.2.11.194/c7200p-fpd-pkg.152-4.M7.pkg...
Loading c7200p-fpd-pkg.152-4.M7.pkg from 10.2.11.194 (via
GigabitEthernet0/1): !!!!!!!!!!!!!!
[OK - 3450880 bytes]
3450880 bytes copied in 6.272 secs (550204 bytes/sec)
router#sh hw-module all fpd
Load for five secs: 0%/0%; one minute: 3%; five minutes: 8%
Time source is NTP, *18:44:59.061 IST Sun Dec 7 2014
==== ====================== ======
=============================================
H/W Field Programmable Current Min. Required
Slot Card Type Ver. Device: "ID-Name" Version Version
==== ====================== ====== ================== ===========
==============
npe NPE-G2 1.3 1-NPEG2 I/O FPGA 0.38 0.33
---- ---------------------- ------ ------------------ ----------- --------------
0 VSA 0.4 1-VSA 0.23 0.23
==== ====================== ======
=============================================
router#sh upgrade fpd package default
Load for five secs: 0%/0%; one minute: 2%; five minutes: 7%
Time source is NTP, *18:45:37.189 IST Sun Dec 7 2014
***********************************************************************
**
This IOS release requires the following default FPD Image Package for](https://image.slidesharecdn.com/7206iosupgrade0-151126103414-lva1-app6892/85/Network-Docs-5-320.jpg)
Network Docs
- 1. IOS upgrade 7206 router Follow the steps to upgrade IOS image of 7206 router:- 1 .Delete unwanted files:- Router#Dir disk2: Router#Sh bootflash: Router#delete bootflash:IOS name Router#delete disk2:IOS name Router#format bootflash: 2. Router#squeeze. If required. To remove deleted file. 3.To install IOS images. Router#copy tftp: disk2: c7200p-adventerprisek9-mz.152-4.M7.bin Router#verify /md5 disk2:c7200p-adventerprisek9-mz.152-4.M7.bin O/P:- ............................................................................................... ....................................................... verify /md5 (bootflash:c7200p-kboot-mz.152-4.M7.bin) = 18b953e28eefed3cb0d7deea4374c922 (verify checksum value from cisco site).It should be same. https://software.cisco.com/download/type.html? mdfid=282188585&catid=268437899 https://software.cisco.com/download/release.html? mdfid=282188585&catid=268437899&softwareid=280805685&release=15.2.4S6&reli nd=AVAILABLE&rellifecycle=MD&reltype=latest Hold cursor on image it will show md5 checksum value. 4.To install boot loader file. Router#copy tftp: bootflash: c7200p-kboot-mz.152-4.M7.bin Router#verify /md5 disk2: c7200p-kboot-mz.152-4.M7.bin 5.To install FPD image:- Router#copy tftp: disk2: c7200p-fpd-pkg.152-4.M7.pkg Router#verify /md5 bootflash:c7200p-kboot-mz.152-4.M7.bin Verify checksum value. 6.Set boot loader image. Router#Conf t boot bootldr bootflash:c7200p-kboot-mz.152-4.M7.bin
- 2. 7.Remove old IOS boot sequence:- Router#No boot system disk2: c7200p-adventerprisek9-mz.124-15.T8.bin Set new boot sequence:- Router#boot system disk2: c7200p-adventerprisek9-mz.152-4.M7.bin Router#boot system disk2: c7200p-adventerprisek9-mz.124-15.T8.bin sh bootvar – Check boot variable before reload. 8.Reboot the router to run with new IOS installed in router. Router#reload Check after reload:- sh version sh bootvar – Check boot variable after reload. Note:- VSA and NPE-G2 should be detected after IOS and FPD image upgrade. FPD image upgrade not required if VSA card is not there. Sh commands;- Sh version Sh inventory Sh diag sh hw-module all fpd show upgrade fpd package default Router#sh diag Load for five secs: 0%/0%; one minute: 4%; five minutes: 9% Time source is NTP, *18:44:30.133 IST Sun Dec 7 2014 Slot 0: VSA IPsec Card Port adapter Port adapter is analyzed Port adapter insertion time 00:04:27 ago EEPROM contents at hardware discovery: PCB Serial Number : JAF1322ACKF Hardware Revision : 1.0 Part Number : 73-10220-05 Board Revision : B1 RMA Test History : 00 RMA Number : 0-0-0-0 RMA History : 00 Deviation Number : 0 Product (FRU) Number : C7200-VSA Version Identifier : V01 Top Assy. Part Number : 68-2578-05 CLEI Code : CNUCAFNAAA EEPROM format version 4
- 3. EEPROM contents (hex): 0x00: 04 FF C1 8B 4A 41 46 31 33 32 32 41 43 4B 46 40 0x10: 05 0D 41 01 00 82 49 27 EC 05 42 42 31 03 00 81 0x20: 00 00 00 00 04 00 88 00 00 00 00 CB 94 43 37 32 0x30: 30 30 2D 56 53 41 20 20 20 20 20 20 20 20 20 20 0x40: 20 89 56 30 31 20 D9 03 C1 40 CB 87 44 0A 12 05 0x50: C6 8A 43 4E 55 43 41 46 4E 41 41 41 FF FF FF FF 0x60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0x70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Slot 1: VAM2+ Encryption/Compression engine, Port adapter Port adapter is analyzed Port adapter insertion time 00:04:28 ago EEPROM contents at hardware discovery: Hardware Revision : 1.0 PCB Serial Number : JAB1203007T Part Number : 73-9571-06 Board Revision : A0 RMA Test History : 00 RMA Number : 0-0-0-0 RMA History : 00 Deviation Number : 0 Product (FRU) Number : SA-VAM2+ Version Identifier : V02 Top Assy. Part Number : 68-2288-06 CLEI Code : CNDQASMGAA EEPROM format version 4 EEPROM contents (hex): 0x00: 04 FF 40 04 B0 41 01 00 C1 8B 4A 41 42 31 32 30 0x10: 33 30 30 37 54 82 49 25 63 06 42 41 30 03 00 81 0x20: 00 00 00 00 04 00 88 00 00 00 00 CB 94 53 41 2D 0x30: 56 41 4D 32 2B 20 20 20 20 20 20 20 20 20 20 20 0x40: 20 89 56 30 32 20 87 44 08 F0 06 C6 8A 43 4E 44 0x50: 51 41 53 4D 47 41 41 FF FF FF FF FF FF FF FF FF 0x60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0x70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF sh upgrade fpd package default Load for five secs: 0%/0%; one minute: 2%; five minutes: 7% Time source is NTP, *18:45:37.189 IST Sun Dec 7 2014 ************************************************************************* This IOS release requires the following default FPD Image Package for the automatic upgrade of FPD images:
- 4. ************************************************************************* Version: 15.2(4)M7 Package Filename: c7200p-fpd-pkg.152-4.M7.pkg List of card type supported in this package: Minimal No. Card Type HW Ver. ---- ------------------ ------- 1) VSA 0.0 2) Port-Adaptor 0.0 3) Port-Adaptor 0.0 4) Port-Adaptor 0.0 5) Port-Adaptor 0.0 6) NPE-G2 0.0 7) C7201 0.0 ---- ------------------ ------- If VSA card not detected check the physical LED status of slot0 . a) Check logs: sh logging (IOS incompatible issue logs then check proper all image name should be same). b) Remove card from slot by power down the router and re insert the card in slot0. Power on the router and check LED status. Table 1-6 VSA LED Color State Function No color Off Indicates that the VSA is disabled. Green On Indicates the VSA is powered up and enabled for operation. Amber On Indicates VSA is booting or has encountered errors. Yellow Powering Up Indicates that the VSA is powering up, but software initialization has not started yet. c) Issue below command and reload the router. If issue still there. Enabling VSA card. Disable by prepending no commands. R (config)#crypto engine slot 0 VSA will NOT come up until system power-cycle or reload... R(config)#crypto engine acce R(config)#crypto engine accelerator 0 VSA will NOT come up until system power-cycle or reload...
- 5. R(config)#wr R(config)#reload Other O/P for information:- router#conf t Enter configuration commands, one per line. End with CNTL/Z. router(config)#no aaa authentication enable default group tacacs+ enable router(config)# router#copy tftp: disk2: Address or name of remote host []? 10.2.11.194 Source filename []? c7200p-fpd-pkg.152-4.M7.pkg Destination filename [c7200p-fpd-pkg.152-4.M7.pkg]? Accessing tftp://10.2.11.194/c7200p-fpd-pkg.152-4.M7.pkg... Loading c7200p-fpd-pkg.152-4.M7.pkg from 10.2.11.194 (via GigabitEthernet0/1): !!!!!!!!!!!!!! [OK - 3450880 bytes] 3450880 bytes copied in 6.272 secs (550204 bytes/sec) router#sh hw-module all fpd Load for five secs: 0%/0%; one minute: 3%; five minutes: 8% Time source is NTP, *18:44:59.061 IST Sun Dec 7 2014 ==== ====================== ====== ============================================= H/W Field Programmable Current Min. Required Slot Card Type Ver. Device: "ID-Name" Version Version ==== ====================== ====== ================== =========== ============== npe NPE-G2 1.3 1-NPEG2 I/O FPGA 0.38 0.33 ---- ---------------------- ------ ------------------ ----------- -------------- 0 VSA 0.4 1-VSA 0.23 0.23 ==== ====================== ====== ============================================= router#sh upgrade fpd package default Load for five secs: 0%/0%; one minute: 2%; five minutes: 7% Time source is NTP, *18:45:37.189 IST Sun Dec 7 2014 *********************************************************************** ** This IOS release requires the following default FPD Image Package for
- 6. the automatic upgrade of FPD images: *********************************************************************** ** Version: 15.2(4)M7 Package Filename: c7200p-fpd-pkg.152-4.M7.pkg List of card type supported in this package: Minimal No. Card Type HW Ver. ---- ------------------ ------- 1) VSA 0.0 2) Port-Adaptor 0.0 3) Port-Adaptor 0.0 4) Port-Adaptor 0.0 5) Port-Adaptor 0.0 6) NPE-G2 0.0 7) C7201 0. router#sh upgrade fpd progress Load for five secs: 0%/0%; one minute: 3%; five minutes: 7% Time source is NTP, *18:46:04.469 IST Sun Dec 7 2014 % There is no FPD image upgrade in progress. router#sh hw-module all fpd ==== ====================== ====== ============================================= H/W Field Programmable Current Min. Required Slot Card Type Ver. Device: "ID-Name" Version Version ==== ====================== ====== ================== =========== ============== npe NPE-G2 1.3 1-NPEG2 I/O FPGA 0.38 0.33 ---- ---------------------- ------ ------------------ ----------- -------------- 0 VSA 0.4 1-VSA 0.19 0.18 ==== ====================== ====== ============================================= example;- Router# show hw-module all fpd ==== ====================== ====== =============================================
- 7. H/W Field Programmable Current Min. Required Slot Card Type Ver. Device: "ID-Name" Version Version ==== ====================== ====== ================== =========== ============== npe NPE-G2 1.5 1-NPEG2 I/O FPGA 0.18 0.20 * ---- ---------------------- ------ ------------------ ----------- -------------- 0 VSA 0.0 1-VSA 0.10 0.10 ==== ====================== ====== ============================================= NOTES: - FPD images that are required to be upgraded are indicated with a '*' character in the "Minimal Required Version" field. - The following FPD image package file is required for the upgrade: "c7200-fpd-pkg.124-4.XD.pkg" router#show upgrade fpd package default *********************************************************************** ** This IOS release requires the following default FPD Image Package for the automatic upgrade of FPD images: *********************************************************************** ** Version: 12.4(15)T8 Package Filename: c7200p-fpd-pkg.124-15.T8.pkg List of card type supported in this package: Minimal No. Card Type HW Ver. ---- ------------------ ------- 1) VSA 0.0 2) Port-Adaptor 0.0 3) Port-Adaptor 0.0 4) Port-Adaptor 0.0 5) Port-Adaptor 0.0 6) NPE-G2 0.0 7) C7201 0.0 Useful docs:- FPD:- http://www.cisco.com/c/en/us/td/docs/routers/7200/configuration/feature_guides/fpd.html http://www.cisco.com/c/en/us/td/docs/routers/7200/configuration/feature_guides/fpd.html VSA:-
- 8. http://www.cisco.com/c/en/us/td/docs/security/vpn_modules/vam_vsa/vsa/vsa/vsa_ov.ht ml The Cisco 7200 series routers have three basic boot images that support different hardware options. The three images are the standard c7200-boot-mz boot image, the c7200-kboot-mz boot image, and the c7200-mboot-mz image. The c7200-kboot-mz image was released in October, 2000 and is larger than the standard c7200-boot-mz image because it supports newer hardware that is not supported in the c7200-boot-mz image.