Problema con rommon recovery

Tutto ciò che ha a che fare con la configurazione di apparati Cisco (e non rientra nelle altre categorie)

Moderatore: Federico.Lagni

Rispondi
Quasar*
n00b
Messaggi: 8
Iscritto il: ven 09 ott , 2009 10:13 am

Allora,buongiorno a tutti gli utenti del forum.Innanzi tutto spero che la sezione sia adatta e ringrazio anticipatamente tutti coloro che interverrano su questo post.Ho un problem con un apparato cisco 857W,ho cercato di installare su questo apparecchio uno ios dell' 877 più precisamente lo ios in questione è il 12.4(11)XJ (c870-advipservicesk9-mz.124-11.XJ4.bi) credendo potesse andare bene ( sulle note di release di questo ios, cisco indica una compatibilità hardware). Al riavvio il sistema è andato in crash. Adesso da rommon ho cercato di reinserire il file precedente in tftp ed il risultato ottenuto è il seguente :


rommon 3 > tftpdnld

IP_ADDRESS: 10.10.10.2
IP_SUBNET_MASK: 255.255.255.0
DEFAULT_GATEWAY: 10.10.10.1
TFTP_SERVER: 10.10.10.3
TFTP_FILE: c850-advsecurityk9-mz.124-15.T7.bin
Do you wish to continue? y/n: [n]: y

Receiving c850-advsecurityk9-mz.124-15.T7.bin from 10.10.10.3 !!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
File reception completed.
Not enough space on device

Ok,non c'è spazio sulla memoria,controllo :

rommon 7 > dir flash:
Directory of flash:/

2 -rwx 17444740 <date> c870-advipservicesk9-mz.124-11.XJ4.bin


1904640 bytes available (17448960 bytes used)

stupidamente non avevo cancellato il vecchio file che difatti è ancora presente.Provo in seguito a cancellare il file dalla flash dando il comando delete:

rommon 8 > delete :c870-advipservicesk9-mz.124-11.XJ4.bi
Are you sure you want to delete ":c870-advipservicesk9-mz.124-11.XJ4.bi" (y/n)?y

File ":c870-advipservicesk9-mz.124-11.XJ4.bi" not deleted -- permission denied

è questo quello che mi restituisce.Ho pensato che potesse essere un problema legato
ai cookie,ho provato a cancellarli:

cookie:
04 ff c3 06 00 17 95 8f 32 28 43 00 0a c1 8b 46
4f 43 31 30 31 35 35 33 59 57 40 04 b6 41 02 00
82 4a 0d ae 02 42 42 30 c0 46 03 20 00 68 9b 02
88 00 00 00 00 02 02 c6 8a 56 41 4d 44 38 31 30
52 52 41 03 00 81 00 00 00 00 04 00 cb 94 43 49
53 43 4f 38 35 31 57 2d 47 2d 41 2d 4b 39 20 20
20 20 89 56 30 31 20 d9 02 40 c1 09 95 c2 8b 46
48 4b 31 30 33 32 33 30 39 32 4a 00 00 ff ff ff

rommon 2 > delete :cookie.txt
Are you sure you want to delete ":cookie.txt" (y/n)?y
File ":cookie.txt" not deleted -- permission denied
rommon 3 >

questo è quello che mi restituisce.Come posso risolvere questo problema?
forse il fatto di non potere accedere alla flash potrebbe essere causato da un
danneggiamento fisico della stessa?Come posso appurare se fisicamente è davvero
danneggiata?Esiste una modalità privilegiata da ROM?Ultima domanda, un comando più
radicale per formattare la flash?Spero qualcuno possa aiutarmi
ep
Network Emperor
Messaggi: 260
Iscritto il: sab 06 dic , 2008 11:36 am

Quasar* ha scritto: File ":c870-advipservicesk9-mz.124-11.XJ4.bi" not deleted -- permission denied
Non vorrei dire una stupidaggine, ma la presenza dei ":" e la mancanza della "n" alla fine?

Ciao!
Quasar*
n00b
Messaggi: 8
Iscritto il: ven 09 ott , 2009 10:13 am

Ciao e grazie dell'attenzione, cmq mio errore grammaticale.E' un giorno 1\2 che ho la testa come una pentola a pressione.Cmq le sintassi le ho provate un pò tutte ma NADA.E' da ieri sera che sto sul web cercando informazioni a riguardo.....nulla,sono sprofondato in un cono d'ombra....
CiscoBGP
Cisco power user
Messaggi: 90
Iscritto il: ven 26 dic , 2008 3:02 pm
Località: Reggio Emilia

Ciao Quasar,

Io mi soffermerei sulla questione IOS, non so dove hai trovato che l'immagine c870-advipservicesk9-mz.124-11.XJ4 vada bene per un 857

Trova Cisco Feature Navigator e troverai che l'ultima versione IOS è la Release 12.4(11)xj4

Questa release supporta solo il Feature Set Advanced SecurityK9
Quasar*
n00b
Messaggi: 8
Iscritto il: ven 09 ott , 2009 10:13 am

Diciamo che ho fatto un "esperimento" e adesso ne pago le conseguenze....comunque non voglio ancora disperare... Quel che è fatto è fatto,amen! Chiedo una cortesia agli utenti del forum,se gentilmente qualche possessore di -cisco 857 o 857 w - potrebbe postarmi un listato dei cookie perchè devo fare un confronto. Questo è il mio listato :


04 ff c3 06 00 17 -- -- 32 28 43 00 0a c1 8b 46
4f 43 31 30 31 35 35 33 59 57 40 04 b6 41 02 00
82 4a 0d ae 02 42 42 30 c0 46 03 20 00 68 9b 02
88 00 00 00 00 02 02 c6 8a 56 41 4d 44 38 31 30
52 52 41 03 00 81 00 00 00 00 04 00 cb 94 43 49
53 43 4f 38 35 31 57 2d 47 2d 41 2d 4b 39 20 20
20 20 89 56 30 31 20 d9 02 40 c1 09 95 c2 8b 46
48 4b 31 30 33 32 33 30 39 32 4a 00 00 ff ff ff


Grazie
Quasar*
n00b
Messaggi: 8
Iscritto il: ven 09 ott , 2009 10:13 am

Vincit qui durat!! Ho risolto il problema facendo boot da TFTP :

rommon 12 > set
PS1=rommon ! >
TFTP_TIMEOUT=800000
FE_SPEED_MODE=4
TFTP_RETRY_COUNT=20
BSI=0
RANDOM_NUM=1770894800
ROM_PERSISTENT_UTC=1254984594
RET_2_RTS=
RET_2_RCALTS=
IP_ADDRESS=10.10.10.2
IP_SUBNET_MASK=255.255.255.0
DEFAULT_GATEWAY=10.10.10.1
TFTP_SERVER=10.10.10.3
tftp=?
tftp_cecksum=1
CRASHINFO=flash:crashinfo_20020301-000011
TFTP_FILE=c850-advsecurityk9-mz.124-15.T7.bin
boot=tftp
?=0

rommon 13 > boot tftp:c850-advsecurityk9-mz.124-15.T7.bin
Poorly formed ip address for variable n

IP_ADDRESS: 10.10.10.2
IP_SUBNET_MASK: 255.255.255.0
DEFAULT_GATEWAY: 10.10.10.1
TFTP_SERVER: 10.10.10.3
TFTP_FILE: c850-advsecurityk9-mz.124-15.T7.bin

Receiving c850-advsecurityk9-mz.124-15.T7.bin from 10.10.10.3 !!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
File reception completed.
Launching
Self decompressing the image : ############################################# [OK
]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706



Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T7, RE
LEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Thu 14-Aug-08 07:18 by prod_rel_team
Image text-base: 0x8002007C, data-base: 0x814CA9D4


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
[email protected].

Cisco 857W (MPC8272) processor (revision 0x200) with 59392K/6144K bytes of memor
y.
Processor board ID FHK10323092
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
1 802.11 Radio
128K bytes of non-volatile configuration memory.
20480K bytes of processor board System flash (Intel Strataflash)

no ip dhcp use vrf connected
^
% Invalid input detected at '^' marker.
Selected country Italy


Configuration failed!

Configuration failed!



Configuration failed!


Press RETURN to get started!


*Mar 1 00:00:09.291: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State change
d to: Initialized
*Mar 1 00:00:09.295: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State change
d to: Enabled
*Mar 1 00:00:12.567: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to
up
*Mar 1 00:00:13.591: %SYS-6-CLOCKUPDATE: System clock has been updated from 00:
00:13 UTC Fri Mar 1 2002 to 19:30:13 PCTime Thu Feb 28 2002, configured from con
sole by console.
*Mar 1 00:00:13.651: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et0, changed state to up
*Mar 1 00:00:16.839: %SYS-5-CONFIG_I: Configured from memory by console
*Oct 8 06:49:54.000: %FW-6-INIT: Firewall inspection startup completed; beginni
ng operation.
*Oct 8 06:49:54.075: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0,
changed state to up
*Oct 8 06:49:54.075: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Oct 8 06:49:54.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, chan
ged state to up
*Oct 8 06:49:54.347: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T7, RE
LEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Thu 14-Aug-08 07:18 by prod_rel_team
*Oct 8 06:49:54.347: %SNMP-5-COLDSTART: SNMP agent on host Cisco857W is undergo
ing a cold start
*Oct 8 06:49:54.375: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Oct 8 06:49:54.451: %DOT11-6-FREQ_SCAN: Interface Dot11Radio0, Scanning freque
ncies for 11 seconds
*Oct 8 06:49:54.451: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Oct 8 06:49:54.451: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Oct 8 06:49:55.075: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Ac
cess1, changed state to up
*Oct 8 06:49:55.479: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, cha
nged state to up
*Oct 8 06:49:55.479: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio
0, changed state to down
*Oct 8 06:49:55.939: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to
up
*Oct 8 06:49:55.939: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to
up
*Oct 8 06:49:55.939: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to
up
*Oct 8 06:49:56.939: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et3, changed state to down
*Oct 8 06:49:56.939: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et2, changed state to down
*Oct 8 06:49:56.939: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et1, changed state to down
*Oct 8 06:49:56.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et0, changed state to up
*Oct 8 06:50:05.667: %DOT11-6-FREQ_USED: Interface Dot11Radio0, frequency 2432
selected
*Oct 8 06:50:05.671: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*Oct 8 06:50:06.671: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio
0, changed state to up
*Oct 8 06:51:58.971: %LINK-3-UPDOWN: Interface ATM0, changed state to up
*Oct 8 06:51:59.971: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, chan
ged state to up
*Oct 8 06:52:07.183: %DIALER-6-BIND: Interface Vi2 bound to profile Di0
*Oct 8 06:52:07.191: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state t
o up
*Oct 8 06:52:14.711: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Ac
cess2, changed state to up
Translating "members.dyndns.org"...domain server (208.67.222.222) [OK]

-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege le
vel of 15.

Please change these publicly known initial credentials using SDM or the IOS CLI.

Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use
.

For more information about SDM please follow the instructions in the QUICK START

GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------


E' stata una full-immersion davvero intersante,questo è il mio primo router cisco e devo prendere atto del fatto che sono degli apperecchi davverò sorprendenti!!Molto interessante anche la questione cookie in rommon.Cmq vi chiedo l'ultima gentilezza,dopo aver ripristinato lo stato funzionale del router (cancellato l'immagine sbagliata,copiato quella corretta ripristinato il confreg 0x2102) ho un piccolo problema in avvio ossia questo:

C850 series (Board ID: 2-149) platform with 65536 Kbytes of main memory

??Booting flash:c850-advsecurityk9-mz.124-15.T7.bin
Error opening: flash:c850-advsecurityk9-mz.124-15.T7.bin
?? :shock:

System Bootstrap, Version 12.3(8r)YI2, RELEASE SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2005 by cisco Systems, Inc.

C850 series (Board ID: 2-149) platform with 65536 Kbytes of main memory

Booting flash:/c850-advsecurityk9-mz.124-11.XJ.bin
Self decompressing the image : #################################################
############################### [OK]

Come corrego o elimino quelle due stringhe in avvio,su che file devo operare?Saluti !
Rispondi