Cisco 900 Service Manual

Cisco 900 Series Integrated Services Routers Software Configuration Guide
June 6, 2019
Americas Headquarters
Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000
Fax: 408 527-0883
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)
Cisco 900 Series, Integrated Services Routers Software Configuration Guide
© 2019 Cisco Systems, Inc. All rights reserved.
CONTENTS
Preface ix
Objectives ix
Audience ix
Organization ix
Conventions x
Related Documentation xi
Obtaining Documentation and Submitting a Service Request xi
Cisco 900 Series Integrated Services Routers Overview 1-1
Overview of the Cisco 900 Series ISR 1-1
Cisco 900 Series ISR Models 1-2
Cisco 900 Series ISR Features 1-3
LEDs on the Cisco 900 Series ISR 1-3
IOS Images for Cisco 900 Series ISRs 1-4
Installing the Software 2-5
ROM Monitor 2-5
ROM Monitor Mode Command Prompt 2-5 Why is the Router in ROM Monitor Mode? 2-5 When do I use ROM Monitor? 2-6 Tips for Using ROM Monitor Commands 2-6 How to Use the ROM Monitor—Typical Tasks 2-6
Entering ROM Monitor Mode 2-7 Modifying the Configuration Register (confreg) 2-8 Obtaining Information on USB Flash Devices 2-9 Exiting ROM Monitor Mode 2-10
Upgrading ROMMON using Capsule Upgrade 2-10
Upgrading the Cisco IOS Software 2-11
Information About Upgrading the System Image 2-11
Why Would I Upgrade the System Image? 2-11 Which Cisco IOS Release Is Running on My Router Now? 2-11 How Do I Choose the New Cisco IOS Release and Feature Set? 2-11 Where Do I Download the System Image? 2-12
How to Upgrade the Cisco IOS Image 2-12
Cisco 900 Series Integrated Services Routers Software Configuration Guide
iii
Contents
Saving Backup Copies of Your Old System Image and Configuration 2-12 Copying the System Image into Flash Memory 2-13 Loading the New System Image 2-16 Saving Backup Copies of Your New System Image and Configuration 2-19
Licensing 2-21
Basic Router Configuration 3-23
Default Configuration 3-24
Configuring Global Parameters 3-25
Configuring I/O Memory Allocation 3-26
Interface Ports 3-27
Configuring Gigabit Ethernet Interfaces 3-27
Configuring a Loopback Interface 3-28
Configuring Command-Line Access 3-29
Configuring Static Routes 3-29
Configuring Dynamic Routes 3-30
Configuring Routing Information Protocol 3-30 Configuring Enhanced Interior Gateway Routing Protocol 3-31
Configuring Ethernet Switches 4-33
Configuring VLANs 4-33
Example: VLAN configuration 4-34
Configuring VTP 4-34
Example: Configuring VTP 4-35
Configuring 802.1x Authentication 4-35
Example: Enabling IEEE 802.1x and AAA on a Switch Port 4-36
Configuring Spanning Tree Protocol 4-36
Example: Spanning Tree Protocol Configuration 4-37
Configuring MAC Address Table Manipulation 4-38
Example: MAC Address Table Manipulation 4-38
Configuring MAC Address Notification Traps 4-39
Example: Configuring MAC Address Notification Traps 4-39
Configuring the Switched Port Analyzer 4-39
Example: SPAN Configuration 4-40
Configuring IGMP Snooping 4-40
Example: Configuring IGMP Snooping 4-40
Configuring Per-Port Storm Control 4-41
Example: Per-Port Storm-Control 4-41
Configuring HSRP 4-42
iv
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Example: Configuring HSRP 4-42
Configuring VRRP 4-43
Example: Configuring VRRP 4-43
Configuring PPP over Ethernet with NAT 5-45
Configuring the Virtual Private Dialup Network Group Number 5-46
Configuring Ethernet WAN Interfaces 5-46
Configuring the Dialer Interface 5-47
Configuring Network Address Translation 5-47
Configuration Example 5-48
Verifying Your Configuration 5-49
Configuring a LAN with DHCP and VLANs 6-51
Configuring DHCP 6-52
Configuring VLANs 6-53
Assign a Switch Port to a VLAN 6-53
Contents
Configuring Identity Features on Layer 3 Interface 7-57
Authentication Methods 7-57
Configuring the IEEE 802.1X 7-58 Configuring the MAC Authentication Bypass (MAB) 7-58
Controlling Port Authorization State 7-59
Configuring the Controlling Port Authorization State 7-60
Flexible Authentication 7-61
Configuring Flexible Authentication 7-61
Host mode 7-61
Open Access 7-62
Configuring Open Access 7-62
Control-Direction (Wake-on-LAN) 7-62
Configuring Control-Direction (Wake-on-LAN) 7-62
Preauthentication Access Control List 7-64
Configuring the Preauthentication Access Control List 7-64
Downloadable Access Control List 7-65
Filter-ID or Named Access Control List 7-65
IP Device Tracking 7-65
Configuring Security Features 8-67
Configuring SSL VPN 8-67
Authentication, Authorization, and Accounting 8-68
Cisco 900 Series Integrated Services Routers Software Configuration Guide
v
Contents
Configuring AutoSecure 8-68
Configuring Access Lists 8-68
Access Groups 8-69
Configuring Cisco IOS Firewall 8-69
Zone-Based Policy Firewall 8-70
Configuring Cisco IOS IPS 8-70
Content Filtering 8-71
Configuring VPN 8-71
Configuring Dynamic Multipoint VPN 8-74
Configuring Group Encrypted Transport VPN 8-74
SGT over Ethernet Tagging 8-74
Crypto Engine Throughput Policing 8-75
Configuring VDSL2 and ADSL2/2+ 9-79
Overview 9-79
Configuring DSL 9-80
DSL Configuration Restrictions 9-80 Configuring ADSL Mode 9-81
Configuring ADSL Auto Mode 9-81 Configuring CPE and Peer for ADSL Mode 9-81 ADSL Configuration Example 9-82 Verifying ADSL Configuration 9-84 Verifying CPE to Peer Connection for ADSL 9-85
Configuring VDSL Mode 9-85
Configuring VDSL Auto Mode 9-85 Configuring CPE and Peer for VDSL Mode 9-86 VDSL Configuration Example 9-86 Verifying VDSL Configuration 9-88
Verifying CPE to Peer Connection for VDSL 9-89 Configuring VLAN 0 Priority Tagging 9-90 Enabling ADSL2/2+ Annex M Mode on Over POTS VDSL2/ADSL Multimode Annex A SKUs 9-90 Enabling Seamless Rate Adaption 9-91 Configuring UBR+ 9-91
Troubleshooting 9-91 Collecting DSL Training Logs 9-92 Upgrading DSL Firmware 9-92
vi
Configuring 4G Wireless WAN 10-95
Overview of 4G LTE 10-95
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Cisco 4G LTE Features 10-97
Prerequisites for Configuring Cisco 4G LTE 10-98
Restrictions for Configuring Cisco 4G LTE 10-98
How to Configure Cisco 4G LTE 10-98
Verifying Modem Signal Strength and Service Availability 10-99 Creating, Modifying, or Deleting Modem Data Profiles 10-99
Usage Guidelines for Creating, Modifying, or Deleting Data Profiles 10-100 Configuration Examples 10-100
Configuring a SIM for Data Calls 10-101
Locking and Unlocking a SIM Card Using a PIN Code 10-101 Changing the PIN Code 10-101 Verifying the Security Information of a Modem 10-101 Configuring Automatic Authentication for a Locked SIM 10-101 Configuring an Encrypted PIN for a SIM 10-102 Applying a Modem Profile in a SIM Configuration 10-102
Data Call Setup 10-103
Configuring the Cellular Interface 10-103 Configuring DDR 10-104
Configuring DDR Backup 10-104 Configuring 4G SMS Messaging 10-104 Upgrading Modem Firmware 10-105 Configuring Modem DM Log Collection 10-106 Enabling Modem Crashdump Collection 10-107
Prerequisites 10-107 Displaying Modem Log Error and Dump Information 10-107
Contents
Configuration Examples for 4G LTE 10-108
Example: Basic Cellular Interface Configuration 10-108 Cellular Interface Configuration for Always-On Connection 10-108
Dialer-Watch Configuration without External Dialer Interface 10-109
Dialer-Persistent Configuration with External Dialer Interface 10-109 4G-LTE Wireless WAN as Backup with NAT and IPSec 10-110 SIM Configuration: Examples 10-112
Locking the SIM Card: Example 10-112
Unlocking the SIM Card: Example 10-112
Automatic SIM Authentication: Example 10-113
Changing the PIN Code: Example 10-114
Configuring an Encrypted PIN: Example 10-115 Configuration Examples for 4G Serviceability Enhancement 10-115
Example: Sample Output for the show cellular logs dm-log Command 10-116
Cisco 900 Series Integrated Services Routers Software Configuration Guide
vii
Contents
Example: Sample Output for the show cellular logs modem-crashdump Command 10-116 Example: Sample Output for the show cellular log error Command 10-116 Example: Sample Output for the test cellular modem-error-clear Command 10-117
PLMN Search and Selection 10-117
Restrictions 10-117 Commands 10-118 Searching the Network 10-118 Selecting the Network 10-119 Verifying PLMN Selection 10-120
SNMP MIBs 10-120
SNMP 4G LTE Configuration: Example 10-121
Troubleshooting 10-121
Verifying Data Call Setup 10-122 Checking Signal Strength 10-122 Verifying Service Availability 10-122 Successful Call Setup 10-124
Configuring Secure Storage 11-125
Enabling Secure Storage 11-125
Disabling Secure Storage 11-125
Verifying the Status of Encryption 11-126
Verifying the Platform Identity 11-126
Downgrading the Platform Image to an Older Version 11-127
viii
Cisco 900 Series Integrated Services Routers Software Configuration Guide

Preface

This preface describes the objectives, audience, organization, conventions of this guide, and the references that accompany this document set. The following sections are provided:
Objectives, page ix
Audience, page ix

Objectives

This guide provides information about how to configure the various features of Cisco 900 Series integrated services routers (ISRs).

Audience

This document is written for experienced technical workers who install, monitor, and troubleshoot routers under a service contract, or who work for an information technology (IT) department.

Organization

This document is organized into the following chapters:
Organization, page ix
Conventions, page x
Related Documentation, page xi
Obtaining Documentation and Submitting a Service Request, page xi
Chapter Description
Product Overview Provides an overview of the hardware and software features of Cisco 900
Series ISRs.
Installing the Software Describes how to upgrade Cisco IOS image, Field Replaceable units, and
use Cisco Licenses.
Basic Router Configuration
Describes how to perform the basic router configuration, interface configuration, and routing configuration.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
ix
Chapter Description
Configuring Ethernet Switches
Configuring PPP over Ethernet with NAT
Configuring a LAN with DHCP and VLANs
Configuring Identity Features on Layer 3 Interface
Configuring Security Features
Configuring VDSL2 and ADSL2/2+
Configuring 4G Wireless WA N
Configuring Secure Storage
Describes the procedures for configuring Gigabit Ethernet (GE) switch.
Describes the procedures for configuring Point-to-Point Protocol over Ethernet (PPPoE) clients and network address translation (NAT).
Describes the procedures for configuring LAN with DHCP and VLANs.
Describes configuring the identify features on Layer 3 interfaces.
Describes how to configure security features.
Describes how to configure multimode VDSL2 and ADSl2+ WAN connectivity on a Cisco 900 series ISR.
Describes how to configure the 4G Wireless WAN interface.
Describes how to enable and disable secure storage.

Conventions

This document uses the following conventions:
Convention Indication
bold font Commands and keywords and user-entered text appear in bold font.
italic font Document titles, new or emphasized terms, and arguments for which you supply
values are in italic font.
[ ] Elements in square brackets are optional.
{x | y | z } Required alternative keywords are grouped in braces and separated by
vertical bars.
[ x | y | z ] Optional alternative keywords are grouped in brackets and separated by
vertical bars.
string A nonquoted set of characters. Do not use quotation marks around the string or
the string will include the quotation marks.
courier font Terminal sessions and information the system displays appear in courier font.
< > Non-printing characters such as passwords are in angle brackets.
[ ] Default responses to system prompts are in square brackets.
!, # An exclamation point (!) or a pound sign (#) at the beginning of a line of code
indicates a comment line.
Note Means reader take note.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
x
Tip Means the following information will help you solve a problem.
Caution Means reader be careful. In this situation, you might perform an action that could result in equipment
damage or loss of data.
Timesaver Means the described action saves time. You can save time by performing the action described in
the paragraph.
Warning
Means reader be warned. In this situation, you might perform an action that could result in bodily injury.

Related Documentation

In addition to the Cisco 900 Series ISR Software Configuration Guide (this document), the following reference guides are included:
Type of Document Links
Cisco 900 Series ISR Hardware Installation Guide
Regulatory Compliance and Safety Information for Cisco 900 Series Routers
https://www.cisco.com/c/en/us/td/docs/routers/access/900/hardware/insta llation/guide/b-cisco-ISR900-series-hig.html
https://www.cisco.com/c/en/us/td/docs/routers/access/900/regulatory/com pliance/900rcsi.html

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
xi
xii
Cisco 900 Series Integrated Services Routers Software Configuration Guide

Cisco 900 Series Integrated Services Routers Overview

This chapter provides an overview of Cisco 900 Series Integrated Services Routers (ISRs). The chapter contains the following sections:
Overview of the Cisco 900 Series ISR, page 1
Cisco 900 Series ISR Models, page 2
Cisco 900 Series ISR Features, page 3

Overview of the Cisco 900 Series ISR

Cisco 900 Series ISRs are entry level branch routers that provide secure network connectivity for small offices to a central location. These powerful, fixed-configuration routers provide secure broadband and Metro Ethernet and connectivity. Service providers offering managed Ethernet WAN services can deploy them in customer locations as CPE.
CHA P TER
1
Cisco 900 Series Integrated Services Routers Software Configuration Guide
1

Cisco 900 Series ISR Models

Internet
Access Only
Employee
(Corporate
VPN Access)
Cisco 900
ISP
VPN
Tunnel
Headquarters
Management
Corporate
Campus
Internet
Figure 1-1 explains a scenario where the Cisco 900 Series ISR is deployed to provide remote
connectivity from a small office to central office over secure VPN tunnels. In this scenario corporate users use a separate VLAN than the Internet users.
Figure 1-1 Cisco 900 Series Deployment Example
Chapter Cisco 900 Series Integrated Services Routers Overview
Cisco 900 Series ISR Models
2
Cisco 900 Series ISRs are available in the following models:
Cisco C921-4P
Cisco C921J-4P
Cisco C931-4P
Table 1-1 summarizes the LAN and WAN interface options available for the Cisco 900 Series ISR
models.
Table 1-1 LAN and WAN Interfaces of the Cisco 900 Series ISRs
900 Series Models LAN Interfaces GE WAN Interfaces
Cisco C921-4P 4 port 10/100/1000 Mbps managed
switch
Cisco C921J-4P 4 port 10/100/1000 Mbps managed
switch
C921-4PLTEGB 4 port 10/100/1000 Mbps managed
Cisco 900 Series Integrated Services Routers Software Configuration Guide
switch
2 Gigabit Ethernet ports
2 Gigabit Ethernet ports
2 Gigabit Ethernet ports
Chapter Cisco 900 Series Integrated Services Routers Overview
900 Series Models LAN Interfaces GE WAN Interfaces
C921-4PLTEAU 4 port 10/100/1000 Mbps managed
switch
C921-4PLTENA 4 port 10/100/1000 Mbps managed
switch
C926-4P 4 port 10/100/1000 Mbps managed
switch
C926-4PLTEGB 4 port 10/100/1000 Mbps managed
switch
C927-4P 4 port 10/100/1000 Mbps managed
switch
C927-4PM 4 port 10/100/1000 Mbps managed
switch
C927-4PLTEGB 4 port 10/100/1000 Mbps managed
switch
C927-4PMLTEGB 4 port 10/100/1000 Mbps managed
switch
C927-4PLTEAU 4 port 10/100/1000 Mbps managed
switch
Cisco C931-4P 4 port 10/100/1000 Mbps managed
switch

Cisco 900 Series ISR Features

2 Gigabit Ethernet ports
2 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
2 Gigabit Ethernet ports
Cisco 900 Series ISR Features
Some of the key features supported by Cisco 900 Series ISRs are:
Redundant WAN connections for failover protection and load balancing
Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP; RFC 2338) and
Hot Standby Router Protocol (HSRP)
Network perimeter security with integrated application inspection firewall
Data privacy through high-speed IP Security (IPsec) Triple Data Encryption Standard (3DES) and
Advanced Encryption Standard (AES) encryption
Enforced security policy with intrusion prevention
Security hardware acceleration
Next-generation encryption for secure network communications systems, reliable for the next
decade
Supports LAN connections
Simplifies and centralizes configuration and management of wireless and wireline devices. Supports
WLAN services without requiring a wireless LAN controller
Supports separate console and USB ports
Cisco 900 Series Integrated Services Routers Software Configuration Guide
3
Cisco 900 Series ISR Features

LEDs on the Cisco 900 Series ISR

Table 1-2 describes the LEDs on the Cisco 900 Series ISR.
Table 1-2 LEDs on the Cisco 900 Series ISR
LED Color Description
SYS OFF System is off.
VPN OK Green At least one VPN session is active.
LAN Green(Solid) LAN connection is established
WAN Green(Solid) WAN link is established.
DSL CD OFF Shut.
DSL Data OFF Shut.
RSSI Green (Solid) Signal > –60 dBm
Chapter Cisco 900 Series Integrated Services Routers Overview
Blink Boot up phase or in ROM Monitor
mode.
Steady on Normal operation.
Amber(steady) Thermal trip.
Amber(blink) ROMMON code signing verification
failure.
OFF VPN not connected.
Green (Blinking) Data transmission is happening on the
link.
OFF LAN is not connected.
Green (Blinking) Data transmission is happening on the
link.
OFF WAN link is not connected.
Green(Blinking) Training, or no shut and cable
disconnected.
Green (solid) Trained.
Green(Blinking) TX/RX Data.
Very strong signal
Yellow 60dBm > Signal > -75dBm
Strong signal
Yellow(blinking) 75dBm > Signal > -90dBm
Fair signal
OFF Signal < –90 dBm
Unusable signal
SIM OFF No SIM.
Steady on SIM present in slot.
Blink TXD/RXD data.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
4
Chapter Cisco 900 Series Integrated Services Routers Overview
Cisco 900 Series ISR Features
Cisco 900 Series Integrated Services Routers Software Configuration Guide
5
Cisco 900 Series ISR Features
Chapter Cisco 900 Series Integrated Services Routers Overview
Cisco 900 Series Integrated Services Routers Software Configuration Guide
6

Installing the Software

This chapter describes how to upgrade Cisco IOS images, use ROM Monitor, upgrade Field Programmable units, and the licensing packages supported on Cisco ISR 900 Series routers. This chapter includes the following sections:
ROM Monitor, page 5
Upgrading ROMMON using Capsule Upgrade, page 10
Upgrading the Cisco IOS Software, page 11
Licensing, page 21

ROM Monitor

The ROM monitor firmware runs when the router is powered up or reset. The firmware helps to initialize the processor hardware and boot the operating system software. You can use the ROM monitor to perform certain configuration tasks, such as recovering a lost password or downloading Cisco IOS software.
Before using the ROM monitor, you should understand the following concepts:
ROM Monitor Mode Command Prompt, page 5
CHA P TER
2
Why is the Router in ROM Monitor Mode?, page 5
When do I use ROM Monitor?, page 6
Tips for Using ROM Monitor Commands, page 6

ROM Monitor Mode Command Prompt

The ROM monitor uses the rommon x > command prompt. The x variable begins at 1 and increments each time you press Return or Enter in ROM monitor mode.

Why is the Router in ROM Monitor Mode?

The router boots to ROM monitor mode when one of the following occurs:
During power up or reload, the router did not find a valid system image.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
5
ROM Monitor
The last digit of the boot field in the configuration register is 0 (for example, 0x100 or 0x0).
The Ctrl+C is entered during the first 60 seconds after reloading the router.
To exit ROM monitor mode, see the “Exiting ROM Monitor Mode” section on page 2-10.

When do I use ROM Monitor?

Use ROM monitor in the following situations:
Manually loading a system image—You can load a system image without configuring the router to
load that image in future system reloads or power-cycles. This can be useful for testing a new system image or for troubleshooting. See the “Modifying the Configuration Register (confreg)” section on
page 2-8.
Upgrading the system image when there are no TFTP servers or network connections, and a direct
PC connection to the router console is the only viable option—See information about upgrading the system image in the configuration documentation for your router.
During troubleshooting if the router crashes and hangs—See the “Exiting ROM Monitor Mode”
section on page 2-10.
Disaster recovery—Use the following method for recovering the system image or configuration file:
TFTP download (tftpdnld)—Use this method if you can connect a TFTP server directly to the fixed WAN port on your router. See the “Exiting ROM Monitor Mode” section on page 2-10.
Chapter Installing the Software
Note Recovering the system image is different from upgrading the system image. You need to
recover the system image if it becomes corrupt or if it is deleted because of a disaster that affects the memory device severely enough to require deleting all data on the memory device in order to load a system image.

Tips for Using ROM Monitor Commands

ROM monitor commands are case sensitive.
You can halt any ROM monitor command by entering the Ctrl+C on the PC or terminal.
To find out which commands are available on your router and to display command syntax options,
see the “Modifying the Configuration Register (confreg)” section on page 2-8.

How to Use the ROM Monitor—Typical Tasks

This section provides the following procedures:
Entering ROM Monitor Mode, page 7
Modifying the Configuration Register (confreg), page 8
Obtaining Information on USB Flash Devices, page 9
Exiting ROM Monitor Mode, page 10
Cisco 900 Series Integrated Services Routers Software Configuration Guide
6
Chapter Installing the Software
Note This section does not describe how to perform all possible ROM monitor tasks. Use the command help
to perform any tasks that are not described in this document. See the “Modifying the Configuration
Register (confreg)” section on page 2-8.
Entering ROM Monitor Mode
This section provides two ways to enter ROM monitor mode:
Using the Break Key Sequence to Interrupt the System Reload and Enter ROM Monitor Mode,
page 7
Setting the Configuration Register to Boot to ROM Monitor Mode, page 8
Prerequisites
Connect a terminal or PC to the router console port. For help, see the hardware installation guide for your router.
ROM Monitor
Using the Break Key Sequence to Interrupt the System Reload and Enter ROM Monitor Mode
To enter ROM monitor mode by reloading the router and entering the Break key sequence, follow these steps:
Router> enable Router# reload Press Ctrl+ C
You must press Ctrl+C within 60 seconds after you enter the reload command. Before you press Ctrl+C, wait for the display to show the five dots as shown in this example:
Router#reload Proceed with reload? [confirm]
*Sep 14 08:52:19.147: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command. System Bootstrap, Version 15.8(3r)M0b, RELEASE SOFTWARE (fc1) Copyright (c) 2018 by cisco Systems, Inc. Compiled Mon 03-Sep-2018 9:01:14.57
C931-4P platform with 1048576 Kbytes of main memory
System Integrity Status: 0x00000000 Current image running: Upgrade Last reset cause: Software initiated
Rom image verified correctly
..... <<<<<<<<<<-----------Pressed Ctrl+C to break autoboot and enter ROMMON shell
rommon 1 >
What to Do Next
Proceed to the “Modifying the Configuration Register (confreg)” section on page 2-8.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
7
ROM Monitor
If you use the Break key sequence to enter ROM monitor mode when the router would otherwise
have booted the system image, you can exit ROM monitor mode by entering the i or reset command, which restarts the booting process and loads the system image.
Setting the Configuration Register to Boot to ROM Monitor Mode
This section describes how to enter ROM monitor mode by setting the configuration register to boot to ROM monitor mode at the next system reload or power-cycle.
Caution Do not set the configuration register by using the config-register 0x0 command after you have set the
baud rate. To set the configuration register without affecting the baud rate, use the current configuration register setting by entering the show ver | inc configuration command, and then replacing the last (rightmost) number with a 0 in the configuration register command.
This example shows how to set the configuration register to boot to ROM monitor mode:
Router> Router> enable Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# config-register 0x0 Router(config)# exit Router# *Sep 14 08:56:31.265: %SYS-5-CONFIG_I: Configured from console by console Router#write memory Building configuration... [OK][OK] Router# *Sep 14 08:56:41.715: %SYS-2-PRIVCFG_ENCRYPT: Successfully encrypted private config file Router#reload Proceed with reload? [confirm]
*Sep 14 08:56:47.531: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command. System Bootstrap, Version 15.8(3r)M0b, RELEASE SOFTWARE (fc1) Copyright (c) 2018 by cisco Systems, Inc. Compiled Mon 03-Sep-2018 9:01:14.57
C931-4P platform with 1048576 Kbytes of main memory
System Integrity Status: 0x00000000 Current image running: Upgrade Last reset cause: Software initiated
Rom image verified correctly
Chapter Installing the Software
What to Do Next
Proceed to the “Modifying the Configuration Register (confreg)” section on page 2-8.
Modifying the Configuration Register (confreg)
This section describes how to modify the configuration register by using the confreg ROM monitor command. You can also modify the configuration register setting from the Cisco IOS command-line interface (CLI) by using the config-register command in global configuration mode.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
8
Chapter Installing the Software
Caution Do not set the configuration register by using the config-register 0x0 command after setting the baud
rate. To set the configuration register without affecting the baud rate, use the current configuration register setting by entering the show ver | inc configuration command and then replacing the last (rightmost) number with a 0 in the configuration register command.
Note The modified configuration register value is automatically written into NVRAM, but the new value does
not take effect until you reset or power-cycle the router.
In this example, the configuration register is set to boot the system image from flash memory:
rommon 3 > confreg 0x2102
In this example, no value is entered; therefore, the system prompts for each bit in the register:
rommon 3> confreg
Configuration Summary (Virtual Configuration Register: 0x100) enabled are: [ 0 ] console baud: 9600
boot:...... the ROM Monitor
do you wish to change the configuration? y/n [n]: y enable "diagnostic mode"? y/n [n]: n enable "break/abort has effect"? y/n [n]: n enable "ignore system config info"? y/n [n]: n change console baud rate? y/n [n]: n change the boot characteristics? y/n [n]: y 0 = the ROM Monitor 1-15 = boot system enter boot option [0]: 3
ROM Monitor
Obtaining Information on USB Flash Devices
This example shows how to display the contents of the USB flash device, including directories, files, permissions, and sizes:
rommon 3 > dir usbflash0:
Size Attributes Name
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
8192 drw- System Volume Information
60865852 -rw- c900-åuniversalk9_npe-mz.SPA.158-3.M0b
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
This example shows the targeted USB flash devices that are inserted in the router and the valid device names that may or may not be currently inserted:
rommon 2 > dev
Devices in device table:
id name
tftp: network via tftp
Cisco 900 Series Integrated Services Routers Software Configuration Guide
9
ROM Monitor
flash: Internal flash drive
usbflash0: External USB drive 0
Exiting ROM Monitor Mode
This section describes how to exit ROM monitor mode and enter the Cisco IOS command-line interface (CLI). The method that you use to exit ROM monitor mode depends on how your router entered ROM monitor mode:
If you reload the router and enter the Break key sequence to enter ROM monitor mode when the
router would otherwise have booted the system image, you can exit ROM monitor mode by entering i command or the reset command, which restarts the booting process and loads the system image.
If your router entered ROM monitor mode because it could not locate and load the system image,
perform the steps in the following procedure.
Command or Action Purpose
Step 1
Step 2
dir flash:[directory]
Example:
rommon > dir flash:
boot flash:[directory] [filename]
or
boot filename tftpserver
or
boot [filename]
Example:
ROMMON > boot flash:myimage
Example:
ROMMON > boot someimage 172.16.30.40
Chapter Installing the Software
Displays a list of the files and directories in flash memory.
Locate the system image that you want the router to
load.
If the system image is not in flash memory, use the
second or third option in Step 2.
In order, the examples here direct the router to:
Boot the first image or a specified image in flash
memory.
Boot the specified image over the network from the
specified TFTP server (hostname or IP address).
Boot from the boothelper image because it does not
recognize the device ID. This form of the command is used to netboot a specified image.
You can override the default boothelper image setting by setting the BOOTLDR Monitor environment variable to point to another image. Any system image can be used for this purpose.
Note Options to the boot command are -x (load image but
Example:
ROMMON > boot

Upgrading ROMMON using Capsule Upgrade

You can upgrade ROMMON using capsule upgrade. This example shows how to upgrade ROMMON using Capsule Upgrade:
router# > upgrade rom-monitor file flash:c900-CapsuleUpdateFile.15.8-3rM0b
Note Before you upgrade, make sure that you have the Capsule image
c900-CapsuleUpdateFile.15.8-3rM0b’ in the router flash.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
10
do not execute) and -v (verbose).
Chapter Installing the Software
Use the showmon -v command to verify the ROMMON version. This example shows the command output:
rommon 1 > showmon -v
System Bootstrap, Version 15.8(3r)M0b, RELEASE SOFTWARE (fc1) Copyright (c) 2018 by cisco Systems, Inc. Compiled Mon 03-Sep-2018 9:01:14.57

Upgrading the Cisco IOS Software

Your router comes pre-installed with the Cisco IOS image. However, you can install the new version in order to keep router features up to date. This section describes how to upgrade the Cisco Internet Operating System (IOS) software image on a Cisco 900 series ISR.
Information About Upgrading the System Image, page 11
How to Upgrade the Cisco IOS Image, page 12
Upgrading the Cisco IOS Software

Information About Upgrading the System Image

To upgrade the system image on your router, review the following sections:
Why Would I Upgrade the System Image?, page 11
Which Cisco IOS Release Is Running on My Router Now?, page 11
How Do I Choose the New Cisco IOS Release and Feature Set?, page 11
Where Do I Download the System Image?, page 12
Why Would I Upgrade the System Image?
System images contain the Cisco IOS software. Your router was shipped with an image installed. At some point, you may want to load a different image onto the router or the access point. For example, you may want to upgrade your IOS software to the latest release, or you may want to use the same Cisco IOS release for all the routers in a network. Each system image contains different sets of Cisco IOS features, therefore select an appropriate system image to suit your network requirements.
Which Cisco IOS Release Is Running on My Router Now?
To determine the Cisco IOS release that is currently running on your router, and the filename of the system image, enter the show version command in user EXEC or privileged EXEC mode.
How Do I Choose the New Cisco IOS Release and Feature Set?
To determine which Cisco IOS releases and feature are supported on your platform, go to Cisco Feature Navigator at http://www.cisco.com/go/cfn. You must have an account at Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box and follow the instructions that appear.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
11
Upgrading the Cisco IOS Software
Where Do I Download the System Image?
To download a system image you must have an account at Cisco.com to gain access to the following websites. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box, and follow the instructions that appear.
If you know the Cisco IOS release and feature set you want to download, go directly to
https://software.cisco.com/download/home
For more information about Loading and Managing System images, go to
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fundamentals/configuration/15mt/fundamentals-15­mt-book/cf-config-overview.html

How to Upgrade the Cisco IOS Image

This section provides information about upgrading the Cisco IOS image on the router.
Saving Backup Copies of Your Old System Image and Configuration, page 12
Copying the System Image into Flash Memory, page 13
Chapter Installing the Software
Loading the New System Image, page 16
Saving Backup Copies of Your New System Image and Configuration, page 19
Saving Backup Copies of Your Old System Image and Configuration
To avoid unexpected downtime in the event you encounter serious problems using a new system image or startup configuration, we recommend that you save backup copies of your current startup configuration file and Cisco IOS software system image file on a server.
The following examples show how to copy a startup configuration to a TFTP server and how to copy from flash memory to an FTP server.
Copying the Startup Configuration to a TFTP Server: Example
The following example shows the startup configuration being copied to a TFTP server:
Router# copy nvram:startup-config tftp:
Remote host[]? 192.0.0.1
Name of configuration file to write [rtr2-confg]? rtr2-config-b4upgrade Write file rtr2-confg-b4upgrade on host 192.0.0.1?[confirm] <cr> ![OK]
Copying from Flash Memory to a TFTP Server: Example
The following example uses the dir flash: command in privileged EXEC mode to learn the name of the system image file and the copy flash: tftp: command in privileged EXEC mode to copy the system image to a TFTP server. The router uses the default username and password.
12
Router# copy flash: tftp: Source filename [running-config]? Address or name of remote host []? 192.0.0.1 Destination filename [router-confg]? running-config 983 bytes copied in 0.048 secs (20479 bytes/sec)
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Chapter Installing the Software
Router# Router# dir flash: Directory of flash:/
1 -rw- 64383100 Sep 17 2018 05:58:14 +00:00 c900-universalk9-mz.SSA_09-10 2 -rw- 1524 Sep 17 2018 05:55:30 +00:00 c900_startupconfig-backup 3 -rw- 919 Sep 17 2018 05:58:44 +00:00 PSZ22241BW6_20180906052515287.zip
1936031744 bytes total (1871634432 bytes free) Router#
Copying the System Image into Flash Memory
This section describes how to copy the system image into the flash memory card for your router.
Note The router should have sufficient disk or flash memory to store the Cisco IOS. The router should also
have sufficient memory (DRAM) to run the Cisco IOS. If the router does not have sufficient memory (DRAM), the router will have boot problems when it boots through the new Cisco IOS.
To copy the system image into the flash memory card for your router, choose one of the following methods:
Entering ROM Monitor Mode, page 7
Using the ROM Monitor to Copy the System Image over a Network, page 14
Upgrading the Cisco IOS Software
Loading the New System Image, page 16
Using TFTP or Remote Copy Protocol to Copy the System Image into Flash Memory
This section describes how to use TFTP or Remote Copy Protocol (RCP) to upgrade the system image. This is the recommended and most common method of upgrading the system image.
Prerequisites
The following details the logistics of upgrading the system image.
Install a TFTP server or an RCP server application on a TCP/IP-ready workstation or PC. Many
third-party vendors provide free TFTP server software, which you can find by searching for “TFTP server” in a web search engine.
If you use TFTP:
Configure the TFTP application to operate as a TFTP server, not a TFTP client.
Specify the outbound file directory to which you will download and store the system image.
Download the new Cisco IOS software image into the workstation or PC. See the “Where Do I
Download the System Image?” section on page 2-12.
Establish a console session to the router. We recommend that you connect your PC directly to the
router console port. See the hardware installation guide for your router.
Verify that the TFTP or RCP server has IP connectivity to the router. If you cannot successfully ping
between the TFTP or RCP server and the router, do one of the following:
Configure a default gateway on the router.
Make sure that the server and the router each have an IP address in the same network or subnet. .
Cisco 900 Series Integrated Services Routers Software Configuration Guide
13
Upgrading the Cisco IOS Software
Tip For more detailed information on how to perform the prerequisites, see the Software Installation and
Upgrade Procedure tech note.
To copy the system image into the flash memory card for your router, follow these steps:
Step 1 enable
Use this command to enter privileged EXEC mode. Enter your password if prompted:
Router> enable Password: <password> Router#
Step 2 copy tftp: flash:
or
copy rcp flash
Use one of these commands to copy a file from a server to flash memory:
Router# copy tftp: flash:
Chapter Installing the Software
Step 3 When prompted, enter the IP address of the TFTP or RCP server:
Step 4 When prompted, enter the filename of the Cisco IOS software image to be installed:
Step 5 When prompted, enter the filename as you want it to appear on the router. Typically, the same filename
Step 6 If an error message appears that says, “Not enough space on device”, delete files from flash and try
Step 7 If the error message does not appear, enter no when prompted to erase the flash memory before copying:
What to Do Next
Address or name of remote host []? 10.10.10.2
Source filename []? c900-universalk9-mz.bin
Note The filename is case sensitive.
is entered as was used in Step 4:
Destination filename []? c900-universalk9-mz.bin
again. To delete files from flash, use the delete flash: filename command.
Accessing tftp://10.10.10.2/c900-universalk9-mz.bin... Erase flash: before copying? [confirm] no
Proceed to the “Loading the New System Image” section on page 2-16.
Using the ROM Monitor to Copy the System Image over a Network
This section describes how to download a Cisco IOS software image from a remote TFTP server to the router flash memory by using the tftpdnld ROM monitor command.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
14
Chapter Installing the Software
Prerequisites
Note You can use the tftpdnld command only to download files to the router. You cannot use tftpdnld to get
Step 1 Enter ROM monitor mode.
Step 2 Set the IP address of the router. For example:
Step 3 Set the IP subnet mask. For example:
Upgrading the Cisco IOS Software
Before you can enter the tftpdnld ROM monitor command, you must set the ROM monitor environment variables.
Connect the TFTP server to a fixed network port on your router.
files from the router.
To download a Cisco IOS software image from a remote TFTP server to the router flash memory by using the tftpdnld ROM monitor command, follow these steps:
rommon > IP_ADDRESS=172.16.23.32
rommon > IP_SUBNET_MASK=255.255.255.224
Step 4 Set the default gateway address. For example:
rommon > DEFAULT_GATEWAY=172.16.23.40
Step 5 Set the TFTP server IP address, which is the location from which the software will be downloaded:
rommon > TFTP_SERVER=172.16.23.33
Step 6 Set the name and directory location to which the image file will be downloaded onto the router. For
example:
rommon > TFTP_FILE=archive/rel22/<image name>
Step 7 (Optional) Set the input port to use a Gigabit Ethernet port. Usage is GE_PORT=[0 | 1 | 2]. For example:
rommon > GE_PORT=0
Step 8 Use the set command to display the ROM monitor environment variables to verify that you have
configured them correctly. For example:
rommon > set
Step 9 Download the system image, as specified by the ROM monitor environmental variables, using the
tftpdnld [-r] command. Without the -r option, the command downloads the specified image and saves it in flash memory. Using the -r option downloads and boots the new software but does not save the software to flash memory.
rommon 5 > tftpdnld -r Attempting to boot from [tftp:]
What to Do Next
Proceed to the “Loading the New System Image” section on page 2-16.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
15
Upgrading the Cisco IOS Software
Loading the New System Image
This section describes how to load the new system image that you copied into flash memory. First, determine whether you are in ROM monitor mode or in the Cisco IOS CLI, then choose one of the following methods of loading the new system image:
Loading the New System Image from the Cisco IOS Software, page 16
Loading the New System Image from ROM Monitor Mode, page 18
Loading the New System Image from the Cisco IOS Software
To load the new system image from the Cisco IOS software, follow these steps.
Step 1 dir flash:
Use this command to display a list of all files and directories in flash memory:
Router# dir flash:
Directory of flash:/
1 -rw- 64383100 Sep 17 2018 05:58:14 +00:00 c900-universalk9-mz.SSA_09-10 2 -rw- 1524 Sep 17 2018 05:55:30 +00:00 c900_startupconfig-backup 3 -rw- 919 Sep 17 2018 05:58:44 +00:00 PSZ22241BW6_20180906052515287.zip
1936031744 bytes total (1871634432 bytes free) Router#
Chapter Installing the Software
Note Determine whether the new system image is the first file or the only file listed in the dir flash:
command output ( is not required if it is the first file or only file listed).
Step 2 configure terminal
Use this command to enter global configuration mode:
Router# configure terminal
Router(config)#
Step 3 no boot system
Use this command to delete all entries in the bootable image list, which specifies the order in which the router attempts to load the system images at the next system reload or power cycle:
Router(config)# no boot system
Step 4 If the new system image is the first file or the only file displayed in the dir flash: command output, you
do not need to perform the following step.
boot system flash:system-image-filename
Use this command to load the new system image after the next system reload or power cycle. For example:
Router(config)# boot system flash:c900-universalk9-mz.bin
Step 5 (Optional) Repeat to specify the order in which the router should attempt to load any backup system
images.
Step 6 exit
16
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Loading...
+ 114 hidden pages