Release: Jan 10, 2021
Author: Gianrico Fichera
How to update the IOS-XE image in a Cisco ASR1001
Cisco ASR1001 has an EOL date at April 30, 2015 and the last support date is April 30, 2021.
I have a Cisco ASR1001 with an old IOS-XE release:
ASR1001_B#sh ver | include image
System image file is "bootflash:/asr1001-universalk9.03.04.03.S.151-3.S3.bin"
I need to update the software. Here is the memory in the system:
ASR1001_B#sh ver | include memory
cisco ASR1001 (1RU) processor with 6923310K/6147K bytes of memory.
32768K bytes of non-volatile configuration memory.
16777216K bytes of physical memory.
ASR1000#sh flash: all | include available
7061102592 bytes available (345341952 bytes used)
I want to change the XE image with this release one:
asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin
The software image is located in the bootflash:
ASR1001_B# dir bootflash:
Directory of bootflash:/
11 drwx 16384 Jul 8 2013 06:28:41 +00:00 lost+found
12 -rw- 343648360 Jul 8 2013 06:30:10 +00:00 asr1001-universalk9.03.04.03.S.151-3.S3.bin
322561 drwx 4096 Jul 8 2013 06:30:39 +00:00 .installer
354817 drwx 4096 Jul 8 2013 06:33:46 +00:00 core
628993 drwx 4096 Dec 5 2020 06:51:21 +00:00 .prst_sync
48385 drwx 4096 Jul 8 2013 06:34:09 +00:00 .rollback_timer
13 -rw- 0 Jul 8 2013 06:34:23 +00:00 tracelogs.221
596737 drwx 8192 Jan 18 2021 10:53:50 +00:00 tracelogs
14 -rw- 1136 Jul 8 2013 06:37:11 +00:00 JAE161xxx6.lic
15 -rwx 2422 Jun 9 2020 11:32:28 +00:00 tracelogs.272
7802802176 bytes total (7061086208 bytes free)
In the Cisco web site there is a "Software download" section where you can download the ASR1001 images. You will find the memory required to use a specific image. You need an active contract with Cisco in order to download the software.
There is enought space to keep the old and the new software release.
I would like to copy the image from a different ASR1001 (but you can also use a TFTP server located in a normal PC system).
In the "server" router we bind the tftp service using this command:
ASR1001_A(config)#ip tftp source-interface Loopback0 // IP binding for the tftp-server
Now we can start the tftp-server service.
ASR1001_A(config)# tftp-server bootflash:asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin 88
! Optional ACL for enable client connection
ASR1001_A(config)# access-list 88 permit IPADDRESS WILDCARD
Now we can try to pull the software from the server ASR1001_A:
ASR1001_B#copy tftp: bootflash:
Address or name of remote host [172.16.80.80]?
Source filename [asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin]?
Destination filename [asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin]?
Accessing tftp://172.16.80.80/asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin...
Loading asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin from 172.16.80.80 (via GigabitEthernet0/0/1): !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
This works but the tftp transfer speed between the two routers could be very slow. There are two reasons for this. The first one is the default packet size of 512byte. The second reason is that TFTP use UDP protocol and requires an acknowledgment for every single packet sent (rfc1350).
To have a higher speed I decide to use the FTP protocol and triangulate with a Linux FTP server. In this example I have a FTP server in the host 172.16.80.80. I put the image from the router to the Linux server here.
ASR1001_A#$copy bootflash:asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin ftp://pippo:it1575@172.16.80.80/
Address or name of remote host [172.16.80.80]?
Destination filename [asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin]?
Writing asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
By inverting the command parameters in the other router we can get the image from the server.
Now let's check the integrity of the file.
ASR1000_B#verify bootflash:/asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin
.........................................................................................................................................................................................................................................
Embedded Hash SHA1 : 54588B0C61BB27C20C95A35CF63BCD3F617ED51E
Computed Hash SHA1 : 54588B0C61BB27C20C95A35CF63BCD3F617ED51E
Embedded hash verification successful.
At the end we change the configuration file and put the new IOS-XE image as a priority over the second. In this way I am sure that the restart will be successful because in the worst case it will load the old image.
ASR1001_B#sh run | include boot
boot-start-marker
boot system flash bootflash:asr1001-universalk9.03.16.04b.S.155-3.S4b-ext.bin
boot system flash bootflash:asr1001-universalk9.03.04.03.S.151-3.S3.bin
boot-end-marker
End
Copyright and General Advice Disclaimer. Tutti i marchi riportati appartengono ai legittimi proprietari; questo documento non e’ sponsorizzato o sottoscritto dalle società eventualmente citate. L’autore di questo documento non si assume nessuna responsabilità e non da nessuna garanzia riguardante l’accuratezza o la completezza delle informazioni presenti nonché da conseguenze sull’uso delle informazioni presenti. Copyright 2021 Gianrico Fichera. Nessuna parte di questa pubblicazione puo' essere riprodotta o trasmessa, in qualsiasi forma o con qualsiasi mezzo, elettronico, meccanico, fotocopie, registrazione, senza il consenso dell’autore se al di fuori della disciplina del fair-use nel qual caso puo' essere utilizzata liberamente citando l'autore senza richiedere autorizzazione. Ogni segnalazione di inesattezza e' la benvenuta e puo' essere comunicata per iscritto all'email gianrico at gianrico.com
This material is not sponsored by, endorsed by, or affiliated with anyone. All trademarks are trademarks of their respective owners. I tried to ensure the accuracy and completeness of the contents of this document, but I cannot offer any undertaking or guarantee, either expressly or implicitly regarding how correct, complete or up to date the contents of this document are. I reserve the right to supplement this document at any time or to change or delete any information contained or views expressed.
Commenti
Posta un commento