[c-nsp] GSR 12k downgrade IOX to IOS

Vikas Sharma vikassharmas at gmail.com
Wed Jan 12 02:53:05 EST 2011


Hi,

First change the conf-reg to 0X0
reboot the router.

rommon 1 > unset BOOT
rommon 2 > reset

System Bootstrap, Version 12.0(20080619:121934) [gradhakr-sq86358
1.20dev(0.1)] DEVELOPMENT SOFTWARE
Copyright (c) 1994-2008 by cisco Systems, Inc.

DRAM DIMM Slot 1: 2048M found, Slot 2: 2048M found
MPC7457 platform with 3670016 Kbytes of main memory

rommon 1 > TURBOBOOT=ON
rommon 2 > TURBOBOOT=on,compactflash
rommon 3 > boot disk1:image name

ensure yu have image in the directory (also copy the image name).

Rehards,
Vikas

On Wed, Jan 12, 2011 at 6:27 AM,  <cisco-nsp-request at puck.nether.net> wrote:
> Send cisco-nsp mailing list submissions to
>        cisco-nsp at puck.nether.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://puck.nether.net/mailman/listinfo/cisco-nsp
> or, via email, send a message with subject or body 'help' to
>        cisco-nsp-request at puck.nether.net
>
> You can reach the person managing the list at
>        cisco-nsp-owner at puck.nether.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of cisco-nsp digest..."
>
>
> Today's Topics:
>
>   1. Re: Catalyst reloads (was Re: Is Cisco equpiment de facto for
>      you? (Keegan Holley)
>   2. Re: Catalyst reloads (was Re: Is Cisco equpiment de facto
>      for?you? (Alexander Clouter)
>   3. local privilege level question (Greg Whynott)
>   4. Re: Catalyst reloads (was Re: Is Cisco equpiment de facto for
>      you? (Pete Lumbis)
>   5. Re: Catalyst reloads (was Re: Is Cisco equpiment de facto for
>      you? (Pete Lumbis)
>   6. Re: local privilege level question (Daniele Orlandi)
>   7. GSR 12k downgrade IOX to IOS (Judah Scott)
>   8. PVLAN Question (Sam Evans)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 11 Jan 2011 15:28:30 -0500
> From: Keegan Holley <keegan.holley at sungard.com>
> To: Jeff Kell <jeff-kell at utc.edu>
> Cc: cisco-nsp <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de
>        facto   for you?
> Message-ID:
>        <AANLkTikip5VNbG5Y+PeTqgp9VmnsuRhgfWtao-jAqgkM at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Are your PDU's metered?  Are you near capacity?  Did anything else in the
> rack lose power? Usually the whole circuit drops if something like that
> happens or a breaker is tripped.  Is it possible it's a bad power supply?
>  Cisco said the outage was cause by power, but they didn't say the switch
> wasn't broken.  Have you tried an RMA?  Also, I'd rename it to something
> other than funny farm, switches are sensitive. ;)
>
>
> On Tue, Jan 11, 2011 at 2:25 PM, Jeff Kell <jeff-kell at utc.edu> wrote:
>
>> On 1/11/2011 11:29 AM, Seth Mattinen wrote:
>> > The cisco-nsp mailing list is often much more helpful than TAC.
>>
>> On that note... does this ring any bells?
>>
>> Have a 3750E that has had spurious reloads (4 since Friday), was
>> switch-1 of a 3-member stack, initially was the master, now switch-2 has
>> taken over as master.   Show version on the failing one just shows
>>
>> > FunnyFarm-1 uptime is 17 hours, 48 minutes
>> > System returned to ROM by power-on
>>
>> The other members have 23-week uptimes.
>>
>> There's no crashinfo in the logs, no "software forced reload" type
>> reload events.
>>
>> TAC insists power was cut to the switch (four times?).
>>
>> Stack members are in a pair of self-contained, self-cooling Liebert
>> racks, 240v PDUs, different phases of a 3-phase supply, dual UPS,
>> generator backup, it's your "above average" server room.  There are
>> dozens of servers in these racks (3 x 48-port 3750Es full, mostly
>> dual-connected) and nothing has burped whatsoever.
>>
>> Running 12.2(53)SE2 IPServices.  Stack has been up almost 6 months
>> (switch-3, a 3750X, was added about 4 months ago and has a 19-week
>> uptime).  No incidents until Friday, and no changes then that we can
>> identify.
>>
>> Jeff
>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>>
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 11 Jan 2011 20:44:36 +0000
> From: Alexander Clouter <alex at digriz.org.uk>
> To: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de
>        facto   for?you?
> Message-ID: <k2suv7-m38.ln1 at chipmunk.wormnet.eu>
>
> Jeff Kell <jeff-kell at utc.edu> wrote:
>>
>> On 1/11/2011 11:29 AM, Seth Mattinen wrote:
>>> The cisco-nsp mailing list is often much more helpful than TAC.
>>
>> On that note... does this ring any bells?
>>
>> Have a 3750E that has had spurious reloads (4 since Friday), was
>> switch-1 of a 3-member stack, initially was the master, now switch-2 has
>> taken over as master.   Show version on the failing one just shows
>>
>>> FunnyFarm-1 uptime is 17 hours, 48 minutes
>>> System returned to ROM by power-on
>>
>> The other members have 23-week uptimes.
>>
>> There's no crashinfo in the logs, no "software forced reload" type
>> reload events.
>>
>> TAC insists power was cut to the switch (four times?).
>>
> Weekly at roughly 4:30am we regularly saw power cycling of a bunch of
> kit (including a 3750E stack) reoccurring, often to the minute, for
> one[1] of our "considerably less than average" server rooms.
>
> We put it down to brown-out's on a circuit caused by a timer asking
> for hell to be stoked so that the building has a chance to warm up.
>
> Simple text is to slap something else on the same circuit and see if
> that loses power too...make sure it is picky about getting it's
> $LOCAL_VOLTAGE and $WANTED_AMPERAGE (or put the stack member on a
> portable UPS).  If that dies, you know your power feed is dodgy, if it
> stays up, you might have a borked/loose/taught cable.
>
> Cheers
>
> [1] that's a lie, they all are "considerably less than average"
>
> --
> Alexander Clouter
> .sigmonster says: Do not drink and drive.
>
>
>
> ------------------------------
>
> Message: 3
> Date: Tue, 11 Jan 2011 15:58:10 -0500
> From: Greg Whynott <Greg.Whynott at oicr.on.ca>
> To: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
> Subject: [c-nsp] local privilege level question
> Message-ID: <0CFCCA8E-069A-4921-870F-BA5EF3404A0B at oicr.on.ca>
> Content-Type: text/plain; charset="us-ascii"
>
>
> hello,
>
> on an ASR1004 we have local accounts where the privilege level is set to 15.   when I type 'en' it still asks for the enable password.   is there away to prevent this behavior so that persons with local accounts/15 priv can execute level 15 commands without being prompted?
>
> we are not using any external sources for authentication,  its all local.
>
>
> thanks for your time,
> greg
>
>
> --
>
> This message and any attachments may contain confidential and/or privileged information for the sole use of the intended recipient. Any review or distribution by anyone other than the person for whom it was originally intended is strictly prohibited. If you have received this message in error, please contact the sender and delete all copies. Opinions, conclusions or other information contained in this message may not be that of the organization.
>
>
>
> ------------------------------
>
> Message: 4
> Date: Tue, 11 Jan 2011 17:20:00 -0500
> From: Pete Lumbis <alumbis at gmail.com>
> To: Jeff Kell <jeff-kell at utc.edu>
> Cc: cisco-nsp <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de
>        facto   for you?
> Message-ID:
>        <AANLkTimsyNdvwHxC8nq2e0MbuvGnC5kUrRD7NbDGOKMq at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> You could connect a console and just leave it logging until the next
> reload. I haven't seen it on switches, but I've see other boxes crash
> without writing a crashinfo file. If it crashes or reloads for any
> software related reason it will probably show something in the
> console.
>
> -Pete
>
> On Tue, Jan 11, 2011 at 2:25 PM, Jeff Kell <jeff-kell at utc.edu> wrote:
>> On 1/11/2011 11:29 AM, Seth Mattinen wrote:
>>> The cisco-nsp mailing list is often much more helpful than TAC.
>>
>> On that note... does this ring any bells?
>>
>> Have a 3750E that has had spurious reloads (4 since Friday), was
>> switch-1 of a 3-member stack, initially was the master, now switch-2 has
>> taken over as master. ? Show version on the failing one just shows
>>
>>> FunnyFarm-1 uptime is 17 hours, 48 minutes
>>> System returned to ROM by power-on
>>
>> The other members have 23-week uptimes.
>>
>> There's no crashinfo in the logs, no "software forced reload" type
>> reload events.
>>
>> TAC insists power was cut to the switch (four times?).
>>
>> Stack members are in a pair of self-contained, self-cooling Liebert
>> racks, 240v PDUs, different phases of a 3-phase supply, dual UPS,
>> generator backup, it's your "above average" server room. ?There are
>> dozens of servers in these racks (3 x 48-port 3750Es full, mostly
>> dual-connected) and nothing has burped whatsoever.
>>
>> Running 12.2(53)SE2 IPServices. ?Stack has been up almost 6 months
>> (switch-3, a 3750X, was added about 4 months ago and has a 19-week
>> uptime). ?No incidents until Friday, and no changes then that we can
>> identify.
>>
>> Jeff
>>
>> _______________________________________________
>> cisco-nsp mailing list ?cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
>
>
> ------------------------------
>
> Message: 5
> Date: Tue, 11 Jan 2011 17:20:00 -0500
> From: Pete Lumbis <alumbis at gmail.com>
> To: Jeff Kell <jeff-kell at utc.edu>
> Cc: cisco-nsp <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de
>        facto   for you?
> Message-ID:
>        <AANLkTimsyNdvwHxC8nq2e0MbuvGnC5kUrRD7NbDGOKMq at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> You could connect a console and just leave it logging until the next
> reload. I haven't seen it on switches, but I've see other boxes crash
> without writing a crashinfo file. If it crashes or reloads for any
> software related reason it will probably show something in the
> console.
>
> -Pete
>
> On Tue, Jan 11, 2011 at 2:25 PM, Jeff Kell <jeff-kell at utc.edu> wrote:
>> On 1/11/2011 11:29 AM, Seth Mattinen wrote:
>>> The cisco-nsp mailing list is often much more helpful than TAC.
>>
>> On that note... does this ring any bells?
>>
>> Have a 3750E that has had spurious reloads (4 since Friday), was
>> switch-1 of a 3-member stack, initially was the master, now switch-2 has
>> taken over as master. ? Show version on the failing one just shows
>>
>>> FunnyFarm-1 uptime is 17 hours, 48 minutes
>>> System returned to ROM by power-on
>>
>> The other members have 23-week uptimes.
>>
>> There's no crashinfo in the logs, no "software forced reload" type
>> reload events.
>>
>> TAC insists power was cut to the switch (four times?).
>>
>> Stack members are in a pair of self-contained, self-cooling Liebert
>> racks, 240v PDUs, different phases of a 3-phase supply, dual UPS,
>> generator backup, it's your "above average" server room. ?There are
>> dozens of servers in these racks (3 x 48-port 3750Es full, mostly
>> dual-connected) and nothing has burped whatsoever.
>>
>> Running 12.2(53)SE2 IPServices. ?Stack has been up almost 6 months
>> (switch-3, a 3750X, was added about 4 months ago and has a 19-week
>> uptime). ?No incidents until Friday, and no changes then that we can
>> identify.
>>
>> Jeff
>>
>> _______________________________________________
>> cisco-nsp mailing list ?cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
>
>
> ------------------------------
>
> Message: 6
> Date: Tue, 11 Jan 2011 23:41:55 +0100
> From: Daniele Orlandi <daniele at orlandi.com>
> To: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] local privilege level question
> Message-ID: <201101112341.55997.daniele at orlandi.com>
> Content-Type: Text/Plain;  charset="iso-8859-1"
>
> On Tuesday 11 January 2011 21:58:10 Greg Whynott wrote:
>> hello,
>>
>> on an ASR1004 we have local accounts where the privilege level is set to
>> 15.   when I type 'en' it still asks for the enable password.   is there
>> away to prevent this behavior so that persons with local accounts/15 priv
>> can execute level 15 commands without being prompted?
>>
>> we are not using any external sources for authentication,  its all local.
>
> Hi Greg,
>
> Try enabling "aaa authorization exec default local none" because the privilege
> is assigned in authorization phase.
>
> Ciao,
>
> --
>  Daniele "Vihai" Orlandi
>  Bieco Illuminista #184213
>
>
> ------------------------------
>
> Message: 7
> Date: Tue, 11 Jan 2011 16:07:51 -0800
> From: Judah Scott <judah.scott.iam at gmail.com>
> To: Cisco Mailing list <cisco-nsp at puck.nether.net>
> Subject: [c-nsp] GSR 12k downgrade IOX to IOS
> Message-ID:
>        <AANLkTinscm24iw1gid+xHLXTQytmKcJASoZGw8vxZ78X at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Can someone direct me to a document explaining how to downgrade a gsr12k
> from IOX back to IOS?  Or does anyone have experience with this?  This is a
> lab box so any way it works, works for us.  Since we have multiple PCCARDs
> and CFs we would be most interested in a way to switch back and forth with
> minimal effort.  Thanks in advance.
>
> -J Scott
>
>
> ------------------------------
>
> Message: 8
> Date: Tue, 11 Jan 2011 17:57:05 -0700
> From: Sam Evans <wintrmte at gmail.com>
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] PVLAN Question
> Message-ID:
>        <AANLkTinJgdQmr+1ya+JjPxz=cOVh_THyCOUCGO4Sdi9r at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> All,
>
> I am trying to do a PVLAN implementation on one switch in a distribution /
> access switch environment.  Ideally, I'd like to just be able to use the
> 'isolated' command but we have a few devices that will need to talk to port
> neighbors, so the PVLAN community would work well.
>
> My challenge here is that the uplink port on the access switch is an 802.1q
> trunk to the distribution.  In reading the documentation and not really
> fully understanding pvlans, if I set the uplink port to a promisc port I
> lose connectivity to the distribution switch.
>
> My config looks something like this (access switch):
>
> vlan 101
>  private-vlan isolated
> !
> vlan 102
>  private-vlan community
> !
> vlan 140
>  private-vlan primary
>  private-vlan association 101-102
> !
> vlan 252
>  name mgmt-net
>
> interface Vlan252
>  ip address 10.0.0.200 255.255.255.0
>  no ip route-cache
>  no ip mroute-cache
>
> interface GigabitEthernet0/4
>  description Uplink to distribution switch
>  switchport trunk encapsulation dot1q
>  switchport trunk allowed vlan 140,252
>  switchport mode trunk
>  no logging event link-status
>  no snmp trap link-status
>  spanning-tree guard loop
> !
>
> Configuration for distribution switch:
>
> interface GigabitEthernet0/9
>  description Trunk port to PVLAN switch
>  switchport trunk allowed vlan 140,252
>  switchport mode trunk
>  spanning-tree guard loop
>
> In the normal environment, vlan 140 works fine and servers can talk back to
> the gateway (just that they can also talk to each other on the access
> switch).
>
> Any suggestions?
>
>
> ------------------------------
>
> _______________________________________________
> cisco-nsp mailing list
> cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
>
> End of cisco-nsp Digest, Vol 98, Issue 42
> *****************************************
>



More information about the cisco-nsp mailing list