[c-nsp] ASR920 Break Into ROMMON

Scott Miller fordlove at gmail.com
Fri Dec 4 22:12:03 EST 2020


Ya, gotta open it up.  Take the top off and can't miss it.

On Fri, Dec 4, 2020, 8:10 PM Shawn L <shawn at rmrf.us> wrote:

> Where is the SD card?  I’m guessing you need to open the chassis to get at
> it?
>
> On Fri, Dec 4, 2020 at 7:06 PM Scott Miller <fordlove at gmail.com> wrote:
>
> > This worked!  I pulled the SD card, slotted into a linux laptop, renamed
> > the "good" ios file to the "bad" name, slotted the SD card back into the
> > 920 and booted it up.  Came up like a champ.  Then, corrected my mistake
> > and of course ... removed "no service password-recovery" so that doesn't
> > bite me again.
> >
> > Thanks to all who offered suggestions.  Many thanks.
> >
> > On Fri, Dec 4, 2020 at 5:18 AM Cassidy B. Larson <alandaluz at gmail.com>
> > wrote:
> >
> > > I believe the bootflash is an SD card inside, you could pop it out and
> > see
> > > if you can modify it on another asr920 or device, renaming the new
> > filename
> > > to the one it's looking for.  Long shot, but who knows, might work?
> > >
> > > On Thu, Dec 3, 2020 at 5:24 PM Scott Miller <fordlove at gmail.com>
> wrote:
> > >
> > >> Ya I tried that too, it still tries to find the wrong ios file and
> > start's
> > >> its loop again.  This one might be a brick.
> > >>
> > >> On Thu, Dec 3, 2020 at 5:15 PM Aaron <dudepron at gmail.com> wrote:
> > >>
> > >> > Try this
> > >> >
> > >> >
> > >> >
> > >>
> >
> https://packetlife.net/blog/2010/oct/11/recovering-no-service-password-recovery-service/
> > >> >
> > >> >
> > >> > On Thursday, December 3, 2020, Aaron <dudepron at gmail.com> wrote:
> > >> >
> > >> >> Looks like you need to talk to TAC. The password recovery being
> > >> disabled
> > >> >> is not your friend.
> > >> >>
> > >> >>
> > https://community.cisco.com/t5/routing/asr-920-boot-fail/td-p/3834996
> > >> >>
> > >> >>
> > >> >> On Thursday, December 3, 2020, Scott Miller <fordlove at gmail.com>
> > >> wrote:
> > >> >>
> > >> >>> The output didn't seem to format well, let's try it again:
> > >> >>>
> > >> >>> System Bootstrap, Version 15.5(3r)S2, RELEASE SOFTWARE (fc1)
> > >> >>> Technical Support: http://www.cisco.com/techsupport
> > >> >>> Copyright (c) 2015 by cisco Systems, Inc.
> > >> >>> Compiled Wed 01-Jul-15 03:53 by sdcunha
> > >> >>> Starting Initialization of FMAN0
> > >> >>> Loading ucode for FMAN0, size: 31424, ver: 106.04.14
> > >> >>> Silicon Rev Major:Minor [1:1]
> > >> >>> Initializing the pci..
> > >> >>> IOFPGA version[17082912]
> > >> >>> Boot ROM0
> > >> >>> Last reset cause: BootFromUpgradeRegFail
> > >> >>> UEA platform with 1572863 Kbytes of main memory
> > >> >>>
> > >> >>> PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
> > >> >>>
> > >> >>> .....Break detected: (0x1)
> > >> >>> Do you want to reset the router to the factory default
> > >> >>> configuration and proceed [y/n] ?y
> > >> >>>
> > >> >>> Router rebooting with factory default configuration
> > >> >>>
> > >> >>> System Bootstrap, Version 15.5(3r)S2, RELEASE SOFTWARE (fc1)
> > >> >>> Technical Support: http://www.cisco.com/techsupport
> > >> >>> Copyright (c) 2015 by cisco Systems, Inc.
> > >> >>> Compiled Wed 01-Jul-15 03:53 by sdcunha
> > >> >>> Starting Initialization of FMAN0
> > >> >>> Loading ucode for FMAN0, size: 31424, ver: 106.04.14
> > >> >>> Silicon Rev Major:Minor [1:1]
> > >> >>> Initializing the pci..
> > >> >>> IOFPGA version[17082912]
> > >> >>> Boot ROM0
> > >> >>> Last reset cause: BootFromUpgradeRegFail
> > >> >>> UEA platform with 1572863 Kbytes of main memory
> > >> >>>
> > >> >>> PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
> > >> >>>
> > >> >>> .....Resetting upgrade counter from failed upgrade
> > >> >>> Directory asr920-universalk9_npe.16.06.05a.SPA.bin not found
> > >> >>> Unable to locate asr920-universalk9_npe.16.06.05a.SPA.bin
> directory
> > >> >>> Unable to load asr920-universalk9_npe.16.06.05a.SPA.bin
> > >> >>> boot: error executing "boot
> > >> >>> bootflash:asr920-universalk9_npe.16.06.05a.SPA.bin"
> > >> >>> autoboot: boot failed, restarting...
> > >> >>>
> > >> >>> On Thu, Dec 3, 2020 at 4:32 PM Scott Miller <fordlove at gmail.com>
> > >> wrote:
> > >> >>>
> > >> >>> > I have a ASR-920-12SZ-IM, which I inadvertently entered the
> wrong
> > >> boot
> > >> >>> > command in the config, saved the config and rebooted.  Now it's
> > >> stuck
> > >> >>> in a
> > >> >>> > boot loop.  I've tried breaking the boot, it asks if I want to
> > >> reset to
> > >> >>> > factory default, and I enter "y", it reboots but still tries to
> > find
> > >> >>> that
> > >> >>> > same bad ios file I entered in the initial configuration which
> was
> > >> >>> supposed
> > >> >>> > to have been whipped when it went to factory default.  I can't
> for
> > >> the
> > >> >>> life
> > >> >>> > of me figure out how to get into ROMMON on this box.  Each time
> I
> > >> >>> break the
> > >> >>> > boot, it just goes back to the same question, asking if I want
> to
> > >> >>> factory
> > >> >>> > default.
> > >> >>> >
> > >> >>> > Here's what it's doing:
> > >> >>> >
> > >> >>> >
> > >> >>> > System Bootstrap, Version 15.5(3r)S2, RELEASE SOFTWARE (fc1)
> > >> Technical
> > >> >>> > Support: http://www.cisco.com/techsupport Copyright (c) 2015 by
> > >> cisco
> > >> >>> > Systems, Inc. Compiled Wed 01-Jul-15 03:53 by sdcunha Starting
> > >> >>> > Initialization of FMAN0 Loading ucode for FMAN0, size: 31424,
> ver:
> > >> >>> > 106.04.14 Silicon Rev Major:Minor [1:1] Initializing the pci..
> > >> IOFPGA
> > >> >>> > version[17082912] Boot ROM0 Last reset cause:
> > BootFromUpgradeRegFail
> > >> >>> UEA
> > >> >>> > platform with 1572863 Kbytes of main memory PASSWORD RECOVERY
> > >> >>> FUNCTIONALITY
> > >> >>> > IS DISABLED .....Break detected: (0x1) Do you want to reset the
> > >> router
> > >> >>> to
> > >> >>> > the factory default configuration and proceed [y/n] ?y Router
> > >> rebooting
> > >> >>> > with factory default configuration System Bootstrap, Version
> > >> >>> 15.5(3r)S2,
> > >> >>> > RELEASE SOFTWARE (fc1) Technical Support:
> > >> >>> http://www.cisco.com/techsupport
> > >> >>> > Copyright (c) 2015 by cisco Systems, Inc. Compiled Wed 01-Jul-15
> > >> 03:53
> > >> >>> by
> > >> >>> > sdcunha Starting Initialization of FMAN0 Loading ucode for
> FMAN0,
> > >> size:
> > >> >>> > 31424, ver: 106.04.14 Silicon Rev Major:Minor [1:1] Initializing
> > the
> > >> >>> pci..
> > >> >>> > IOFPGA version[17082912] Boot ROM0 Last reset cause:
> > >> >>> BootFromUpgradeRegFail
> > >> >>> > UEA platform with 1572863 Kbytes of main memory PASSWORD
> RECOVERY
> > >> >>> > FUNCTIONALITY IS DISABLED .....Resetting upgrade counter from
> > failed
> > >> >>> > upgrade Directory asr920-universalk9_npe.16.06.05a.SPA.bin not
> > found
> > >> >>> Unable
> > >> >>> > to locate asr920-universalk9_npe.16.06.05a.SPA.bin directory
> > Unable
> > >> to
> > >> >>> load
> > >> >>> > asr920-universalk9_npe.16.06.05a.SPA.bin boot: error executing
> > "boot
> > >> >>> > bootflash:asr920-universalk9_npe.16.06.05a.SPA.bin" autoboot:
> boot
> > >> >>> failed,
> > >> >>> > restarting...
> > >> >>> >
> > >> >>> >  The boot file
> bootflash:asr920-universalk9_npe.16.06.05a.SPA.bin
> > >> is
> > >> >>> > invalid and does not exist.  The correct file which is on the
> box
> > >> >>> > is  bootflash:asr920igp-universalk9_npe.16.06.05a.SPA.bin
> > >> >>> >
> > >> >>> > Anyone know how to break into ROMMON to blow out this config?
> > I've
> > >> >>> been
> > >> >>> > at it for a couple hours, nothing I've found googling seems to
> > work.
> > >> >>> >
> > >> >>> > Thanks.
> > >> >>> >
> > >> >>> _______________________________________________
> > >> >>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > >> >>> https://puck.nether.net/mailman/listinfo/cisco-nsp
> > >> >>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> > >> >>>
> > >> >>
> > >> _______________________________________________
> > >> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > >> https://puck.nether.net/mailman/listinfo/cisco-nsp
> > >> archive at http://puck.nether.net/pipermail/cisco-nsp/
> > >>
> > >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list