NETWORK CISCO

FUNDAMENTALS
TOPICS
• Basic Cisco commands
• IOS and IOS XE update
• Configuration upload
• SSH access
• Switch stack member replacement
• Password Recovery
• Engineering WIKI
• Competency Test
Expected knowledge from Engineers
• Copy of IOS image and config from:
- TFTP
- FTP
- HTTP
- USB

• Making sure that SSH will work after copying the configuration
• Generate crypto key with the following command

(config)# crypto key generate rsa modulus <360-4096>

Sample Commands
COMMANDS DESCRIPTION
show version Show IOS version, model number, memory size,
configuration register and more about the device
show inventory Show part number of devices
show environment <all> Check FAN and PSU environment status
show file system Check storage devices
show boot system Check boot variable
show running-config Check running configuration
show startup-config Check saved configuration
show ip interface brief Check IP interface IP address and status
ping <IP> Check IP connectivity
show tech-support Required output for raising Cisco TAC
Configuring basic IP address
Router# configuration terminal
Router# configuration terminal
Router(config)# interface gi 0/0/0 Router(config)# interface gi 0/0/0
Router(config-if)# ip address 192.168.1.100 255.255.255.0 Router(config-if)# ip address dhcp
Router(config-if)# no shutdown
Router(config-if)# no shutdown Router(config-if)# end
Router(config-if)# exit Router#

Router(config)# ip route 0.0.0.0 0.0.0.0 <Gateway_address>

Router(config)# ip name-server <DNS_Server>

Switch# configuration terminal

Switch# configuration terminal
Switch(config)# interface vlan1 Switch(config)# interface vlan1
Switch(config-if)# ip address 192.168.1.100 255.255.255.0 Switch(config-if)# ip address dhcp
Switch(config-if)# no shutdown
Switch(config-if)# no shutdown Switch(config-if)# end
Switch(config-if)# exit Switch#

Switch(config)# ip route 0.0.0.0 0.00.0 <Gateway_address>

Switch(config)# ip name-server <DNS_Server>
Sample Commands for copying from
TFTP, HTTP, FTP server or USB to flash
Router# copy tftp flash

Router# copy http flash

Router# copy ftp flash

Router# copy usbflash0: flash:

Note: use the command ‘show file system’ to determine the USB device.
XMODEM COPY
If you have older Cisco switch that has a corrupted IOS and does not support USB, you can upload a new version via XModem.

PROCEDURE:
• Download something like HyperTerminal or Tera Term that support sending files via XModem
• Connect to the console port of the switch using the Cisco console cable and set your baud rate to 9600
• Optional: you may want to "format flash:" to make sure you have enough free space. Note, this will delete your startup-config
and any vlan’s you have configured
• Type in switch: set BAUD 115200
• Disconnect your console session and reconnect with with a baud rate of 115200
• Note: some USB to serial adapters have problems with this. If 115200 doesn’t work, try 57600
• type in "copy xmodem: flash:{Cisco IOS .bin file}"
• Example: copy xmodem: flash:c3750e-universalk9-mz.152-4.E2.bin
• In your terminal software (HyperTerminal) start sending the file via XModem
• After the upload is done, type in switch: set BAUD 9600
• Disconnect your console session and reconnect with a baud rate of 9600
• Type in switch: boot flash:c3750e-universalk9-mz.152-4.E2.bin
IOS XE MODE
• BUNDLE MODE • INSTALL MODE
• Like traditional IOS images • Default IOS XE from Cisco
• Boot variable pointing to flash:<IOS>.bin • Boot variable pointing to flash:packages.conf
• File is extracted to RAM upon reload • File is extracted in flash upon install

BENEFITS OF INSTALL MODE RESTRICTIONS (Install Mode)

Faster reload – no more decompression of file You cannot boot from USB or TFTP
More available space to use on memory
Software auto-upgrade in a stack
Software rollback support
BUNDLE MODE INSTALL MODE
switch# show version switch# show version

switch# show boot system switch# show boot system

switch# show flash switch# show flash

Convert from INSTALL to BUNDLE
• Copy the IOS XE file to flash:
• Change Boot variable

Router(config)# no boot system

Router(config)# boot system flash:<IOSXE_file.bin>

• Save configuration

Router# write memory

• Confirm changes in boot variable

Router# show boot

• Reboot the device

Router# reload
Convert from BUNDLE to INSTALL
• Expand the .bin file using the command:

Router# software expand file flash:<IOSXE.bin>

• Change boot variable

Router# show flash:
Router# config t
Router(config)# no boot system
Router(config)# boot system flash:packages.conf
Router(config)# end
Router# show boot
Router# write
Router# reload
Software expand sample screenshot

Switch# software expand file flash:cat3k_caa-universalk9.SPA.03.07.04.E.152-3.E4.bin

Software expand sample screenshot
Change boot variable

Reload the device to take effect.

Software Upgrade
Router# software install file flash:<IOS.bin>
Software Rollback
Software clean
NOTE:

Delete unused software files from flash

Rollback is not possible after the cleaning
REFERENCES
https://wiki.interactive.com.au/index.php/IOS-XE_Upgrade_in_Cisco_Catalyst_3850_Switch

https://content.cisco.com/chapter.sjs?uri=%2Fsearchable%2Fchapter%2Fc%2Fen%2Fus%2Ftd%2Fdocs%2Fswit
ches%2Flan%2FDenali_16-
1%2FConfigExamples_Technotes%2FConfig_Examples%2FMisc%2Fqos%2Fm_install_vs_bundle.html.xml&platf
orm=Cisco%20Catalyst%203850%20Series%20Switches&release=IOS%20XE%20Denali%2016.1.x
LAB EXERCISES
Copy IOS XE file from engineering vault to switch/router
1. Connect device to engineering network
2. Obtain IP address through DHCP
3. Check connectivity (both IP and domain name)
4. Copy IOS XE using http or ftp from vault.l to flash:

Convert IOS XE from INSTALL mode to BUNDLE mode

https://wiki.interactive.com.au/index.php/IOS-XE_Upgrade_in_Cisco_Catalyst_3850_Switch
Convert IOS XE from BUNDLE mode to INSTALL mode

Copy IOS XE file from USB to flash

Perform IOS XE upgrade/downgrade

Perform software rollback

Clean flash by deleting unnecessary software files (OPTIONAL)

Understanding Switch Stacking
• Connecting multiple switches using StackWise cable
• Up to 9 switches (1-9)
• Single CLI session to manage
• ROLES
• 1 Active (Master) switch
• 1 Standby switch (new switches)
• Rest are member switches
• STATES
• Ready
• Waiting
• Progressing
• Initializing
• Provisioned
Stack Master Election
1. Switch that already powered ON as master will stay master.

2. Stack member priority, 15 as highest.

(config)# switch <x> priority <1-15>

3. Switch that is not using default interface-level configuration.

4. Switch with higher feature and software image combination. (Mixed

model and revision)

5. Switch with lowest MAC address

Sample Commands
Switch# show switch
Switch/Stack Mac Address : 74a0.2f45.2380 - Local Mac Address
Mac persistency wait time: Indefinite
H/W Current
Switch# Role Mac Address Priority Version State
-------------------------------------------------------------------------------------------
*1 Active 74a0.2f45.2380 1 V01 Ready
2 Standby 74a0.2f58.7180 1 V01 Ready
3 Member a0ec.f936.4d00 1 V01 Ready

SWITCH# show switch detail command will show stacking port status and neighbor switches
Switch Stack Member Replacement Procedure
• Offsite preparation
• Install the same IOS version to the replacement switch
• Change switch stack number to match the faulty switch
SWITCH# switch <current> renumbered <new>

• Reload the switch and check

• Delete start-up config and vlan.dat

• Onsite Replacement
• Remove the faulty switch
• Install the replacement switch, DO NOT apply power yet
• Insert stackwise cable and apply power
• Wait for the switch to boot
Auto Upgrade in Stack

• Available in INSTALL mode only

• When enabled, switches will automatically upgrade IOS in reference to the master switch

• Global configuration

SWITCH(config)# software auto-upgrade enable

Password Recovery
Configuration Registers
• 0x2102 - default
• Boot into bootstrap
• Console Baud Rate of 9600
• Boot NVRAM config
• Ignores Break

• 0x2142 - Ignore startup-config

• Boot into bootstrap
• Console Baud Rate of 9600
• Boot NVRAM config

Link for configuration register values

https://www.cisco.com/c/en/us/support/docs/routers/10000-series-routers/50421-config-register-
use.html
Password Recovery Procedure - ROUTER
Turn power ON or reload the router

Press Ctrl+Break to interrupt boot process

ROMMON> confreg 0x2142

ROMMON> reset
……………..
……………..
Router#
Router# copy startup-config running-config
Router# configure terminal
Router(config)# username <user> password <new_password>
Router(config)# enable secret <new_password>
Router(config)# config-register 0x2102
Router(config)# exit
Router# write memory
Password Recovery Procedure – SWITCH (IOS)
Turn power ON or reload the router

Press and hold MODE button for 20-30 seconds to interrupt boot process

switch: flash_init
switch: dir flash:
switch: rename flash:config.text flash:config.old
switch: boot
……………..
……………..
Switch#
Switch # copy flash:config.old running-config
Switch # configure terminal
Switch(config)# username <user> password <new_password>
Switch(config)# enable secret <new_password>
Switch(config)# exit
Switch# write memory
Password Recovery Procedure – SWITCH (IOS XE)
Turn power ON or reload the router

Press and hold MODE button for about 20 seconds to interrupt boot process

switch: flash_init
switch: SWITCH_IGNORE_STARTUP_CFG=1
switch: boot
……………………………………………………………..
……………………………………………………………..
Switch#
Switch # copy startup-config running-config
Switch # configure terminal
Switch(config)# username <user> password <new_password>
Switch(config)# enable secret <new_password>
Switch(config)# no system ignore startupconfig switch all
Switch(config)# exit
Switch# write memory
LAB Exercise: Password Recovery
Type the following to set enable password

Device# config terminal

Device(config)# enable secret 5 $1$YlbV$3J3yxzbln949LQSZ5oLao.
Device(config)# do write

Logoff or reload the device

Perform password recovery

Change the enable secret to “password”

Note: procedure can be found in Engineering WIKI or Cisco Website

https://wiki.interactive.com.au/index.php/Password_Recovery
THANK YOU
END OF COURSE