[c-nsp] ASR920 Break Into ROMMON

Brian Turnbow b.turnbow at twt.it
Fri Dec 4 12:14:36 EST 2020


Hi Scott,

You may also try and sniff to see if a 920 looks for a boot server during the process.
Another long shot ..but before making a new coffee table out of it it's worth a shot.

Brian


> -----Original Message-----
> From: cisco-nsp <cisco-nsp-bounces at puck.nether.net> On Behalf Of Scott
> Miller
> Sent: Friday, December 4, 2020 4:32 PM
> To: cbl at infowest.com
> Cc: cisco-nsp <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] ASR920 Break Into ROMMON
> 
> That's definitely worth a look, thanks.
> 
> On Fri, Dec 4, 2020 at 5:18 AM Cassidy B. Larson <alandaluz at gmail.com>
> wrote:
> 
> > I believe the bootflash is an SD card inside, you could pop it out and
> > see if you can modify it on another asr920 or device, renaming the new
> > filename to the one it's looking for.  Long shot, but who knows, might work?
> >
> > On Thu, Dec 3, 2020 at 5:24 PM Scott Miller <fordlove at gmail.com> wrote:
> >
> >> Ya I tried that too, it still tries to find the wrong ios file and
> >> start's its loop again.  This one might be a brick.
> >>
> >> On Thu, Dec 3, 2020 at 5:15 PM Aaron <dudepron at gmail.com> wrote:
> >>
> >> > Try this
> >> >
> >> >
> >> >
> >> https://packetlife.net/blog/2010/oct/11/recovering-no-service-passwor
> >> d-recovery-service/
> >> >
> >> >
> >> > On Thursday, December 3, 2020, Aaron <dudepron at gmail.com> wrote:
> >> >
> >> >> Looks like you need to talk to TAC. The password recovery being
> >> disabled
> >> >> is not your friend.
> >> >>
> >> >> https://community.cisco.com/t5/routing/asr-920-boot-fail/td-p/3834
> >> >> 996
> >> >>
> >> >>
> >> >> On Thursday, December 3, 2020, Scott Miller <fordlove at gmail.com>
> >> wrote:
> >> >>
> >> >>> The output didn't seem to format well, let's try it again:
> >> >>>
> >> >>> System Bootstrap, Version 15.5(3r)S2, RELEASE SOFTWARE (fc1)
> >> >>> Technical Support: http://www.cisco.com/techsupport Copyright (c)
> >> >>> 2015 by cisco Systems, Inc.
> >> >>> Compiled Wed 01-Jul-15 03:53 by sdcunha Starting Initialization
> >> >>> of FMAN0 Loading ucode for FMAN0, size: 31424, ver: 106.04.14
> >> >>> Silicon Rev Major:Minor [1:1] Initializing the pci..
> >> >>> IOFPGA version[17082912]
> >> >>> Boot ROM0
> >> >>> Last reset cause: BootFromUpgradeRegFail UEA platform with
> >> >>> 1572863 Kbytes of main memory
> >> >>>
> >> >>> PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
> >> >>>
> >> >>> .....Break detected: (0x1)
> >> >>> Do you want to reset the router to the factory default
> >> >>> configuration and proceed [y/n] ?y
> >> >>>
> >> >>> Router rebooting with factory default configuration
> >> >>>
> >> >>> System Bootstrap, Version 15.5(3r)S2, RELEASE SOFTWARE (fc1)
> >> >>> Technical Support: http://www.cisco.com/techsupport Copyright (c)
> >> >>> 2015 by cisco Systems, Inc.
> >> >>> Compiled Wed 01-Jul-15 03:53 by sdcunha Starting Initialization
> >> >>> of FMAN0 Loading ucode for FMAN0, size: 31424, ver: 106.04.14
> >> >>> Silicon Rev Major:Minor [1:1] Initializing the pci..
> >> >>> IOFPGA version[17082912]
> >> >>> Boot ROM0
> >> >>> Last reset cause: BootFromUpgradeRegFail UEA platform with
> >> >>> 1572863 Kbytes of main memory
> >> >>>
> >> >>> PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
> >> >>>
> >> >>> .....Resetting upgrade counter from failed upgrade Directory
> >> >>> asr920-universalk9_npe.16.06.05a.SPA.bin not found Unable to
> >> >>> locate asr920-universalk9_npe.16.06.05a.SPA.bin directory Unable
> >> >>> to load asr920-universalk9_npe.16.06.05a.SPA.bin
> >> >>> boot: error executing "boot
> >> >>> bootflash:asr920-universalk9_npe.16.06.05a.SPA.bin"
> >> >>> autoboot: boot failed, restarting...
> >> >>>
> >> >>> On Thu, Dec 3, 2020 at 4:32 PM Scott Miller <fordlove at gmail.com>
> >> wrote:
> >> >>>
> >> >>> > I have a ASR-920-12SZ-IM, which I inadvertently entered the
> >> >>> > wrong
> >> boot
> >> >>> > command in the config, saved the config and rebooted.  Now it's
> >> stuck
> >> >>> in a
> >> >>> > boot loop.  I've tried breaking the boot, it asks if I want to
> >> reset to
> >> >>> > factory default, and I enter "y", it reboots but still tries to
> >> >>> > find
> >> >>> that
> >> >>> > same bad ios file I entered in the initial configuration which
> >> >>> > was
> >> >>> supposed
> >> >>> > to have been whipped when it went to factory default.  I can't
> >> >>> > for
> >> the
> >> >>> life
> >> >>> > of me figure out how to get into ROMMON on this box.  Each time
> >> >>> > I
> >> >>> break the
> >> >>> > boot, it just goes back to the same question, asking if I want
> >> >>> > to
> >> >>> factory
> >> >>> > default.
> >> >>> >
> >> >>> > Here's what it's doing:
> >> >>> >
> >> >>> >
> >> >>> > System Bootstrap, Version 15.5(3r)S2, RELEASE SOFTWARE (fc1)
> >> Technical
> >> >>> > Support: http://www.cisco.com/techsupport Copyright (c) 2015 by
> >> cisco
> >> >>> > Systems, Inc. Compiled Wed 01-Jul-15 03:53 by sdcunha Starting
> >> >>> > Initialization of FMAN0 Loading ucode for FMAN0, size: 31424, ver:
> >> >>> > 106.04.14 Silicon Rev Major:Minor [1:1] Initializing the pci..
> >> IOFPGA
> >> >>> > version[17082912] Boot ROM0 Last reset cause:
> >> >>> > BootFromUpgradeRegFail
> >> >>> UEA
> >> >>> > platform with 1572863 Kbytes of main memory PASSWORD
> RECOVERY
> >> >>> FUNCTIONALITY
> >> >>> > IS DISABLED .....Break detected: (0x1) Do you want to reset the
> >> router
> >> >>> to
> >> >>> > the factory default configuration and proceed [y/n] ?y Router
> >> rebooting
> >> >>> > with factory default configuration System Bootstrap, Version
> >> >>> 15.5(3r)S2,
> >> >>> > RELEASE SOFTWARE (fc1) Technical Support:
> >> >>> http://www.cisco.com/techsupport
> >> >>> > Copyright (c) 2015 by cisco Systems, Inc. Compiled Wed
> >> >>> > 01-Jul-15
> >> 03:53
> >> >>> by
> >> >>> > sdcunha Starting Initialization of FMAN0 Loading ucode for
> >> >>> > FMAN0,
> >> size:
> >> >>> > 31424, ver: 106.04.14 Silicon Rev Major:Minor [1:1]
> >> >>> > Initializing the
> >> >>> pci..
> >> >>> > IOFPGA version[17082912] Boot ROM0 Last reset cause:
> >> >>> BootFromUpgradeRegFail
> >> >>> > UEA platform with 1572863 Kbytes of main memory PASSWORD
> >> >>> > RECOVERY FUNCTIONALITY IS DISABLED .....Resetting upgrade
> >> >>> > counter from failed upgrade Directory
> >> >>> > asr920-universalk9_npe.16.06.05a.SPA.bin not found
> >> >>> Unable
> >> >>> > to locate asr920-universalk9_npe.16.06.05a.SPA.bin directory
> >> >>> > Unable
> >> to
> >> >>> load
> >> >>> > asr920-universalk9_npe.16.06.05a.SPA.bin boot: error executing
> >> >>> > "boot bootflash:asr920-universalk9_npe.16.06.05a.SPA.bin"
> >> >>> > autoboot: boot
> >> >>> failed,
> >> >>> > restarting...
> >> >>> >
> >> >>> >  The boot file
> >> >>> > bootflash:asr920-universalk9_npe.16.06.05a.SPA.bin
> >> is
> >> >>> > invalid and does not exist.  The correct file which is on the
> >> >>> > box is  bootflash:asr920igp-universalk9_npe.16.06.05a.SPA.bin
> >> >>> >
> >> >>> > Anyone know how to break into ROMMON to blow out this config?
> >> >>> > I've
> >> >>> been
> >> >>> > at it for a couple hours, nothing I've found googling seems to work.
> >> >>> >
> >> >>> > Thanks.
> >> >>> >
> >> >>> _______________________________________________
> >> >>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> >> >>> https://puck.nether.net/mailman/listinfo/cisco-nsp
> >> >>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> >> >>>
> >> >>
> >> _______________________________________________
> >> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/cisco-nsp
> >> archive at http://puck.nether.net/pipermail/cisco-nsp/
> >>
> >
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list