Cisco 900 Series Integrated Services
Routers Software Configuration Guide
June 6, 2019
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this
URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1721R)
Obtaining Documentation and Submitting a Service Requestxi
Cisco 900 Series Integrated Services Routers Overview1-1
Overview of the Cisco 900 Series ISR1-1
Cisco 900 Series ISR Models1-2
Cisco 900 Series ISR Features1-3
LEDs on the Cisco 900 Series ISR1-3
IOS Images for Cisco 900 Series ISRs1-4
Installing the Software2-5
ROM Monitor2-5
ROM Monitor Mode Command Prompt2-5
Why is the Router in ROM Monitor Mode?2-5
When do I use ROM Monitor?2-6
Tips for Using ROM Monitor Commands2-6
How to Use the ROM Monitor—Typical Tasks2-6
Entering ROM Monitor Mode2-7
Modifying the Configuration Register (confreg)2-8
Obtaining Information on USB Flash Devices2-9
Exiting ROM Monitor Mode2-10
Upgrading ROMMON using Capsule Upgrade2-10
Upgrading the Cisco IOS Software2-11
Information About Upgrading the System Image2-11
Why Would I Upgrade the System Image?2-11
Which Cisco IOS Release Is Running on My Router Now?2-11
How Do I Choose the New Cisco IOS Release and Feature Set?2-11
Where Do I Download the System Image?2-12
How to Upgrade the Cisco IOS Image2-12
Cisco 900 Series Integrated Services Routers Software Configuration Guide
iii
Contents
Saving Backup Copies of Your Old System Image and Configuration2-12
Copying the System Image into Flash Memory2-13
Loading the New System Image2-16
Saving Backup Copies of Your New System Image and Configuration2-19
Licensing2-21
Basic Router Configuration3-23
Default Configuration3-24
Configuring Global Parameters3-25
Configuring I/O Memory Allocation3-26
Interface Ports3-27
Configuring Gigabit Ethernet Interfaces3-27
Configuring a Loopback Interface3-28
Configuring Command-Line Access3-29
Configuring Static Routes3-29
Configuring Dynamic Routes3-30
Configuring Routing Information Protocol3-30
Configuring Enhanced Interior Gateway Routing Protocol3-31
Configuring Ethernet Switches4-33
Configuring VLANs4-33
Example: VLAN configuration4-34
Configuring VTP4-34
Example: Configuring VTP4-35
Configuring 802.1x Authentication4-35
Example: Enabling IEEE 802.1x and AAA on a Switch Port4-36
Configuring Spanning Tree Protocol4-36
Example: Spanning Tree Protocol Configuration4-37
Configuring MAC Address Table Manipulation4-38
Example: MAC Address Table Manipulation4-38
Configuring MAC Address Notification Traps4-39
Example: Configuring MAC Address Notification Traps4-39
Configuring the Switched Port Analyzer4-39
Example: SPAN Configuration4-40
Configuring IGMP Snooping4-40
Example: Configuring IGMP Snooping4-40
Configuring Per-Port Storm Control4-41
Example: Per-Port Storm-Control4-41
Configuring HSRP4-42
iv
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Example: Configuring HSRP4-42
Configuring VRRP4-43
Example: Configuring VRRP4-43
Configuring PPP over Ethernet with NAT5-45
Configuring the Virtual Private Dialup Network Group Number5-46
Configuring Ethernet WAN Interfaces5-46
Configuring the Dialer Interface5-47
Configuring Network Address Translation5-47
Configuration Example5-48
Verifying Your Configuration5-49
Configuring a LAN with DHCP and VLANs6-51
Configuring DHCP6-52
Configuring VLANs6-53
Assign a Switch Port to a VLAN6-53
Contents
Configuring Identity Features on Layer 3 Interface7-57
Authentication Methods7-57
Configuring the IEEE 802.1X7-58
Configuring the MAC Authentication Bypass (MAB)7-58
Controlling Port Authorization State7-59
Configuring the Controlling Port Authorization State7-60
Flexible Authentication7-61
Configuring Flexible Authentication7-61
Host mode7-61
Open Access7-62
Configuring Open Access7-62
Control-Direction (Wake-on-LAN)7-62
Configuring Control-Direction (Wake-on-LAN)7-62
Preauthentication Access Control List7-64
Configuring the Preauthentication Access Control List7-64
Downloadable Access Control List7-65
Filter-ID or Named Access Control List7-65
IP Device Tracking7-65
Configuring Security Features8-67
Configuring SSL VPN8-67
Authentication, Authorization, and Accounting8-68
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Configuring ADSL Auto Mode9-81
Configuring CPE and Peer for ADSL Mode9-81
ADSL Configuration Example9-82
Verifying ADSL Configuration9-84
Verifying CPE to Peer Connection for ADSL9-85
Configuring VDSL Mode9-85
Configuring VDSL Auto Mode9-85
Configuring CPE and Peer for VDSL Mode9-86
VDSL Configuration Example9-86
Verifying VDSL Configuration9-88
Verifying CPE to Peer Connection for VDSL9-89
Configuring VLAN 0 Priority Tagging9-90
Enabling ADSL2/2+ Annex M Mode on Over POTS VDSL2/ADSL Multimode Annex A SKUs9-90
Enabling Seamless Rate Adaption9-91
Configuring UBR+9-91
Troubleshooting9-91
Collecting DSL Training Logs9-92
Upgrading DSL Firmware9-92
vi
Configuring 4G Wireless WAN10-95
Overview of 4G LTE10-95
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Cisco 4G LTE Features10-97
Prerequisites for Configuring Cisco 4G LTE10-98
Restrictions for Configuring Cisco 4G LTE10-98
How to Configure Cisco 4G LTE10-98
Verifying Modem Signal Strength and Service Availability10-99
Creating, Modifying, or Deleting Modem Data Profiles10-99
Usage Guidelines for Creating, Modifying, or Deleting Data Profiles10-100
Configuration Examples10-100
Configuring a SIM for Data Calls10-101
Locking and Unlocking a SIM Card Using a PIN Code10-101
Changing the PIN Code10-101
Verifying the Security Information of a Modem10-101
Configuring Automatic Authentication for a Locked SIM10-101
Configuring an Encrypted PIN for a SIM10-102
Applying a Modem Profile in a SIM Configuration10-102
Data Call Setup10-103
Configuring the Cellular Interface10-103
Configuring DDR10-104
Dialer-Watch Configuration without External Dialer Interface10-109
Dialer-Persistent Configuration with External Dialer Interface10-109
4G-LTE Wireless WAN as Backup with NAT and IPSec10-110
SIM Configuration: Examples10-112
Locking the SIM Card: Example10-112
Unlocking the SIM Card: Example10-112
Automatic SIM Authentication: Example10-113
Changing the PIN Code: Example10-114
Configuring an Encrypted PIN: Example10-115
Configuration Examples for 4G Serviceability Enhancement10-115
Example: Sample Output for the show cellular logs dm-log Command10-116
Cisco 900 Series Integrated Services Routers Software Configuration Guide
vii
Contents
Example: Sample Output for the show cellular logs modem-crashdump Command10-116
Example: Sample Output for the show cellular log error Command10-116
Example: Sample Output for the test cellular modem-error-clear Command10-117
PLMN Search and Selection10-117
Restrictions10-117
Commands10-118
Searching the Network10-118
Selecting the Network10-119
Verifying PLMN Selection10-120
SNMP MIBs10-120
SNMP 4G LTE Configuration: Example10-121
Troubleshooting10-121
Verifying Data Call Setup10-122
Checking Signal Strength10-122
Verifying Service Availability10-122
Successful Call Setup10-124
Configuring Secure Storage11-125
Enabling Secure Storage11-125
Disabling Secure Storage11-125
Verifying the Status of Encryption11-126
Verifying the Platform Identity11-126
Downgrading the Platform Image to an Older Version11-127
viii
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Preface
This preface describes the objectives, audience, organization, conventions of this guide, and the
references that accompany this document set. The following sections are provided:
• Objectives, page ix
• Audience, page ix
Objectives
This guide provides information about how to configure the various features of Cisco 900 Series
integrated services routers (ISRs).
Audience
This document is written for experienced technical workers who install, monitor, and troubleshoot
routers under a service contract, or who work for an information technology (IT) department.
Organization
This document is organized into the following chapters:
• Organization, page ix
• Conventions, page x
• Related Documentation, page xi
• Obtaining Documentation and Submitting a Service Request, page xi
ChapterDescription
Product OverviewProvides an overview of the hardware and software features of Cisco 900
Series ISRs.
Installing the SoftwareDescribes how to upgrade Cisco IOS image, Field Replaceable units, and
use Cisco Licenses.
Basic Router
Configuration
Describes how to perform the basic router configuration, interface
configuration, and routing configuration.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
ix
ChapterDescription
Configuring Ethernet
Switches
Configuring PPP over
Ethernet with NAT
Configuring a LAN with
DHCP and VLANs
Configuring Identity
Features on Layer 3
Interface
Configuring Security
Features
Configuring VDSL2 and
ADSL2/2+
Configuring 4G Wireless
WA N
Configuring Secure
Storage
Describes the procedures for configuring Gigabit Ethernet (GE) switch.
Describes the procedures for configuring Point-to-Point Protocol over
Ethernet (PPPoE) clients and network address translation (NAT).
Describes the procedures for configuring LAN with DHCP and VLANs.
Describes configuring the identify features on Layer 3 interfaces.
Describes how to configure security features.
Describes how to configure multimode VDSL2 and ADSl2+ WAN
connectivity on a Cisco 900 series ISR.
Describes how to configure the 4G Wireless WAN interface.
Describes how to enable and disable secure storage.
Conventions
This document uses the following conventions:
ConventionIndication
bold fontCommands and keywords and user-entered text appear in bold font.
italic fontDocument titles, new or emphasized terms, and arguments for which you supply
values are in italic font.
[ ]Elements in square brackets are optional.
{x | y | z }Required alternative keywords are grouped in braces and separated by
vertical bars.
[ x | y | z ]Optional alternative keywords are grouped in brackets and separated by
vertical bars.
stringA nonquoted set of characters. Do not use quotation marks around the string or
the string will include the quotation marks.
courier fontTerminal sessions and information the system displays appear in courier font.
< >Non-printing characters such as passwords are in angle brackets.
[ ]Default responses to system prompts are in square brackets.
!, #An exclamation point (!) or a pound sign (#) at the beginning of a line of code
indicates a comment line.
NoteMeans reader take note.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
x
TipMeans the following information will help you solve a problem.
CautionMeans reader be careful. In this situation, you might perform an action that could result in equipment
damage or loss of data.
TimesaverMeans the described action saves time. You can save time by performing the action described in
the paragraph.
Warning
Means reader be warned. In this situation, you might perform an action that could result in
bodily injury.
Related Documentation
In addition to the Cisco 900 Series ISR Software Configuration Guide (this document), the following
reference guides are included:
Type of DocumentLinks
Cisco 900 Series ISR
Hardware Installation
Guide
Regulatory Compliance
and Safety Information
for Cisco 900 Series
Routers
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional
information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and
revised Cisco technical documentation, at:
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS)
feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds
are a free service and Cisco currently supports RSS version 2.0.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
xi
xii
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Cisco 900 Series Integrated Services Routers
Overview
This chapter provides an overview of Cisco 900 Series Integrated Services Routers (ISRs). The chapter
contains the following sections:
• Overview of the Cisco 900 Series ISR, page 1
• Cisco 900 Series ISR Models, page 2
• Cisco 900 Series ISR Features, page 3
Overview of the Cisco 900 Series ISR
Cisco 900 Series ISRs are entry level branch routers that provide secure network connectivity for small
offices to a central location. These powerful, fixed-configuration routers provide secure broadband and
Metro Ethernet and connectivity. Service providers offering managed Ethernet WAN services can deploy
them in customer locations as CPE.
CHA P TER
1
Cisco 900 Series Integrated Services Routers Software Configuration Guide
1
Cisco 900 Series ISR Models
Internet
Access Only
Employee
(Corporate
VPN Access)
Cisco 900
ISP
VPN
Tunnel
Headquarters
Management
Corporate
Campus
Internet
Figure 1-1 explains a scenario where the Cisco 900 Series ISR is deployed to provide remote
connectivity from a small office to central office over secure VPN tunnels. In this scenario corporate
users use a separate VLAN than the Internet users.
Figure 1-1Cisco 900 Series Deployment Example
Chapter Cisco 900 Series Integrated Services Routers Overview
Cisco 900 Series ISR Models
2
Cisco 900 Series ISRs are available in the following models:
• Cisco C921-4P
• Cisco C921J-4P
• Cisco C931-4P
Table 1-1 summarizes the LAN and WAN interface options available for the Cisco 900 Series ISR
models.
Table 1-1LAN and WAN Interfaces of the Cisco 900 Series ISRs
900 Series ModelsLAN Interfaces GE WAN Interfaces
Cisco C921-4P4 port 10/100/1000 Mbps managed
switch
Cisco C921J-4P4 port 10/100/1000 Mbps managed
switch
C921-4PLTEGB4 port 10/100/1000 Mbps managed
Cisco 900 Series Integrated Services Routers Software Configuration Guide
switch
2 Gigabit Ethernet ports
2 Gigabit Ethernet ports
2 Gigabit Ethernet ports
Chapter Cisco 900 Series Integrated Services Routers Overview
900 Series ModelsLAN Interfaces GE WAN Interfaces
C921-4PLTEAU4 port 10/100/1000 Mbps managed
switch
C921-4PLTENA 4 port 10/100/1000 Mbps managed
switch
C926-4P 4 port 10/100/1000 Mbps managed
switch
C926-4PLTEGB4 port 10/100/1000 Mbps managed
switch
C927-4P 4 port 10/100/1000 Mbps managed
switch
C927-4PM4 port 10/100/1000 Mbps managed
switch
C927-4PLTEGB4 port 10/100/1000 Mbps managed
switch
C927-4PMLTEGB 4 port 10/100/1000 Mbps managed
switch
C927-4PLTEAU 4 port 10/100/1000 Mbps managed
switch
Cisco C931-4P4 port 10/100/1000 Mbps managed
switch
Cisco 900 Series ISR Features
2 Gigabit Ethernet ports
2 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
1 Gigabit Ethernet ports
2 Gigabit Ethernet ports
Cisco 900 Series ISR Features
Some of the key features supported by Cisco 900 Series ISRs are:
• Redundant WAN connections for failover protection and load balancing
• Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP; RFC 2338) and
Hot Standby Router Protocol (HSRP)
• Network perimeter security with integrated application inspection firewall
• Data privacy through high-speed IP Security (IPsec) Triple Data Encryption Standard (3DES) and
Advanced Encryption Standard (AES) encryption
• Enforced security policy with intrusion prevention
• Security hardware acceleration
• Next-generation encryption for secure network communications systems, reliable for the next
decade
• Supports LAN connections
• Simplifies and centralizes configuration and management of wireless and wireline devices. Supports
WLAN services without requiring a wireless LAN controller
• Supports separate console and USB ports
Cisco 900 Series Integrated Services Routers Software Configuration Guide
3
Cisco 900 Series ISR Features
LEDs on the Cisco 900 Series ISR
Table 1-2 describes the LEDs on the Cisco 900 Series ISR.
Table 1-2LEDs on the Cisco 900 Series ISR
LED ColorDescription
SYSOFFSystem is off.
VPN OKGreenAt least one VPN session is active.
LAN Green(Solid) LAN connection is established
WAN Green(Solid) WAN link is established.
DSL CDOFFShut.
DSL DataOFFShut.
RSSIGreen (Solid)Signal > –60 dBm
Chapter Cisco 900 Series Integrated Services Routers Overview
BlinkBoot up phase or in ROM Monitor
mode.
Steady on Normal operation.
Amber(steady)Thermal trip.
Amber(blink)ROMMON code signing verification
failure.
OFF VPN not connected.
Green (Blinking)Data transmission is happening on the
link.
OFFLAN is not connected.
Green (Blinking)Data transmission is happening on the
link.
OFFWAN link is not connected.
Green(Blinking)Training, or no shut and cable
disconnected.
Green (solid) Trained.
Green(Blinking)TX/RX Data.
Very strong signal
Yellow60dBm > Signal > -75dBm
Strong signal
Yellow(blinking)75dBm > Signal > -90dBm
Fair signal
OFFSignal < –90 dBm
Unusable signal
SIMOFFNo SIM.
Steady onSIM present in slot.
BlinkTXD/RXD data.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
4
Chapter Cisco 900 Series Integrated Services Routers Overview
Cisco 900 Series ISR Features
Cisco 900 Series Integrated Services Routers Software Configuration Guide
5
Cisco 900 Series ISR Features
Chapter Cisco 900 Series Integrated Services Routers Overview
Cisco 900 Series Integrated Services Routers Software Configuration Guide
6
Installing the Software
This chapter describes how to upgrade Cisco IOS images, use ROM Monitor, upgrade Field
Programmable units, and the licensing packages supported on Cisco ISR 900 Series routers. This chapter
includes the following sections:
• ROM Monitor, page 5
• Upgrading ROMMON using Capsule Upgrade, page 10
• Upgrading the Cisco IOS Software, page 11
• Licensing, page 21
ROM Monitor
The ROM monitor firmware runs when the router is powered up or reset. The firmware helps to initialize
the processor hardware and boot the operating system software. You can use the ROM monitor to
perform certain configuration tasks, such as recovering a lost password or downloading Cisco IOS
software.
Before using the ROM monitor, you should understand the following concepts:
• ROM Monitor Mode Command Prompt, page 5
CHA P TER
2
• Why is the Router in ROM Monitor Mode?, page 5
• When do I use ROM Monitor?, page 6
• Tips for Using ROM Monitor Commands, page 6
ROM Monitor Mode Command Prompt
The ROM monitor uses the rommon x > command prompt. The x variable begins at 1 and increments
each time you press Return or Enter in ROM monitor mode.
Why is the Router in ROM Monitor Mode?
The router boots to ROM monitor mode when one of the following occurs:
• During power up or reload, the router did not find a valid system image.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
5
ROM Monitor
• The last digit of the boot field in the configuration register is 0 (for example, 0x100 or 0x0).
• The Ctrl+C is entered during the first 60 seconds after reloading the router.
To exit ROM monitor mode, see the “Exiting ROM Monitor Mode” section on page 2-10.
When do I use ROM Monitor?
Use ROM monitor in the following situations:
• Manually loading a system image—You can load a system image without configuring the router to
load that image in future system reloads or power-cycles. This can be useful for testing a new system
image or for troubleshooting. See the “Modifying the Configuration Register (confreg)” section on
page 2-8.
• Upgrading the system image when there are no TFTP servers or network connections, and a direct
PC connection to the router console is the only viable option—See information about upgrading the
system image in the configuration documentation for your router.
• During troubleshooting if the router crashes and hangs—See the “Exiting ROM Monitor Mode”
section on page 2-10.
• Disaster recovery—Use the following method for recovering the system image or configuration file:
–
TFTP download (tftpdnld)—Use this method if you can connect a TFTP server directly to the
fixed WAN port on your router. See the “Exiting ROM Monitor Mode” section on page 2-10.
Chapter Installing the Software
NoteRecovering the system image is different from upgrading the system image. You need to
recover the system image if it becomes corrupt or if it is deleted because of a disaster that
affects the memory device severely enough to require deleting all data on the memory device
in order to load a system image.
Tips for Using ROM Monitor Commands
• ROM monitor commands are case sensitive.
• You can halt any ROM monitor command by entering the Ctrl+C on the PC or terminal.
• To find out which commands are available on your router and to display command syntax options,
see the “Modifying the Configuration Register (confreg)” section on page 2-8.
How to Use the ROM Monitor—Typical Tasks
This section provides the following procedures:
• Entering ROM Monitor Mode, page 7
• Modifying the Configuration Register (confreg), page 8
• Obtaining Information on USB Flash Devices, page 9
• Exiting ROM Monitor Mode, page 10
Cisco 900 Series Integrated Services Routers Software Configuration Guide
6
Chapter Installing the Software
NoteThis section does not describe how to perform all possible ROM monitor tasks. Use the command help
to perform any tasks that are not described in this document. See the “Modifying the Configuration
Register (confreg)” section on page 2-8.
Entering ROM Monitor Mode
This section provides two ways to enter ROM monitor mode:
• Using the Break Key Sequence to Interrupt the System Reload and Enter ROM Monitor Mode,
page 7
• Setting the Configuration Register to Boot to ROM Monitor Mode, page 8
Prerequisites
Connect a terminal or PC to the router console port. For help, see the hardware installation guide for
your router.
ROM Monitor
Using the Break Key Sequence to Interrupt the System Reload and Enter ROM Monitor Mode
To enter ROM monitor mode by reloading the router and entering the Break key sequence, follow these
steps:
Router> enable
Router# reload
Press Ctrl+ C
You must press Ctrl+C within 60 seconds after you enter the reload command. Before you press Ctrl+C,
wait for the display to show the five dots as shown in this example:
Router#reload
Proceed with reload? [confirm]
*Sep 14 08:52:19.147: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload
Command.
System Bootstrap, Version 15.8(3r)M0b, RELEASE SOFTWARE (fc1)
Copyright (c) 2018 by cisco Systems, Inc.
Compiled Mon 03-Sep-2018 9:01:14.57
C931-4P platform with 1048576 Kbytes of main memory
System Integrity Status: 0x00000000
Current image running: Upgrade
Last reset cause: Software initiated
Rom image verified correctly
..... <<<<<<<<<<-----------Pressed Ctrl+C to break autoboot and enter ROMMON shell
rommon 1 >
What to Do Next
• Proceed to the “Modifying the Configuration Register (confreg)” section on page 2-8.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
7
ROM Monitor
• If you use the Break key sequence to enter ROM monitor mode when the router would otherwise
have booted the system image, you can exit ROM monitor mode by entering the i or reset command,
which restarts the booting process and loads the system image.
Setting the Configuration Register to Boot to ROM Monitor Mode
This section describes how to enter ROM monitor mode by setting the configuration register to boot to
ROM monitor mode at the next system reload or power-cycle.
CautionDo not set the configuration register by using the config-register 0x0 command after you have set the
baud rate. To set the configuration register without affecting the baud rate, use the current configuration
register setting by entering the show ver | inc configuration command, and then replacing the last
(rightmost) number with a 0 in the configuration register command.
This example shows how to set the configuration register to boot to ROM monitor mode:
Router>
Router> enable
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# config-register 0x0
Router(config)# exit
Router#
*Sep 14 08:56:31.265: %SYS-5-CONFIG_I: Configured from console by console
Router#write memory
Building configuration...
[OK][OK]
Router#
*Sep 14 08:56:41.715: %SYS-2-PRIVCFG_ENCRYPT: Successfully encrypted private config file
Router#reload
Proceed with reload? [confirm]
*Sep 14 08:56:47.531: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload
Command.
System Bootstrap, Version 15.8(3r)M0b, RELEASE SOFTWARE (fc1)
Copyright (c) 2018 by cisco Systems, Inc.
Compiled Mon 03-Sep-2018 9:01:14.57
C931-4P platform with 1048576 Kbytes of main memory
System Integrity Status: 0x00000000
Current image running: Upgrade
Last reset cause: Software initiated
Rom image verified correctly
Chapter Installing the Software
What to Do Next
Proceed to the “Modifying the Configuration Register (confreg)” section on page 2-8.
Modifying the Configuration Register (confreg)
This section describes how to modify the configuration register by using the confreg ROM monitor
command. You can also modify the configuration register setting from the Cisco IOS command-line
interface (CLI) by using the config-register command in global configuration mode.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
8
Chapter Installing the Software
CautionDo not set the configuration register by using the config-register 0x0 command after setting the baud
rate. To set the configuration register without affecting the baud rate, use the current configuration
register setting by entering the show ver | inc configuration command and then replacing the last
(rightmost) number with a 0 in the configuration register command.
NoteThe modified configuration register value is automatically written into NVRAM, but the new value does
not take effect until you reset or power-cycle the router.
In this example, the configuration register is set to boot the system image from flash memory:
rommon 3 > confreg 0x2102
In this example, no value is entered; therefore, the system prompts for each bit in the register:
do you wish to change the configuration? y/n [n]: y
enable "diagnostic mode"? y/n [n]: n
enable "break/abort has effect"? y/n [n]: n
enable "ignore system config info"? y/n [n]: n
change console baud rate? y/n [n]: n
change the boot characteristics? y/n [n]: y
0 = the ROM Monitor
1-15 = boot system
enter boot option [0]: 3
ROM Monitor
Obtaining Information on USB Flash Devices
This example shows how to display the contents of the USB flash device, including directories, files,
permissions, and sizes:
This example shows the targeted USB flash devices that are inserted in the router and the valid device
names that may or may not be currently inserted:
rommon 2 > dev
Devices in device table:
id name
tftp: network via tftp
Cisco 900 Series Integrated Services Routers Software Configuration Guide
9
ROM Monitor
flash: Internal flash drive
usbflash0: External USB drive 0
Exiting ROM Monitor Mode
This section describes how to exit ROM monitor mode and enter the Cisco IOS command-line interface
(CLI). The method that you use to exit ROM monitor mode depends on how your router entered ROM
monitor mode:
• If you reload the router and enter the Break key sequence to enter ROM monitor mode when the
router would otherwise have booted the system image, you can exit ROM monitor mode by entering
i command or the reset command, which restarts the booting process and loads the system image.
• If your router entered ROM monitor mode because it could not locate and load the system image,
perform the steps in the following procedure.
Command or ActionPurpose
Step 1
Step 2
dir flash:[directory]
Example:
rommon > dir flash:
boot flash:[directory] [filename]
or
boot filenametftpserver
or
boot [filename]
Example:
ROMMON > boot flash:myimage
Example:
ROMMON > boot someimage 172.16.30.40
Chapter Installing the Software
Displays a list of the files and directories in flash memory.
• Locate the system image that you want the router to
load.
• If the system image is not in flash memory, use the
second or third option in Step 2.
In order, the examples here direct the router to:
• Boot the first image or a specified image in flash
memory.
• Boot the specified image over the network from the
specified TFTP server (hostname or IP address).
• Boot from the boothelper image because it does not
recognize the device ID. This form of the command is
used to netboot a specified image.
You can override the default boothelper image setting
by setting the BOOTLDR Monitor environment
variable to point to another image. Any system image
can be used for this purpose.
NoteOptions to the boot command are -x (load image but
Example:
ROMMON > boot
Upgrading ROMMON using Capsule Upgrade
You can upgrade ROMMON using capsule upgrade. This example shows how to upgrade ROMMON
using Capsule Upgrade:
NoteBefore you upgrade, make sure that you have the Capsule image
‘c900-CapsuleUpdateFile.15.8-3rM0b’ in the router flash.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
10
do not execute) and -v (verbose).
Chapter Installing the Software
Use the showmon -v command to verify the ROMMON version. This example shows the command
output:
rommon 1 > showmon -v
System Bootstrap, Version 15.8(3r)M0b, RELEASE SOFTWARE (fc1)
Copyright (c) 2018 by cisco Systems, Inc.
Compiled Mon 03-Sep-2018 9:01:14.57
Upgrading the Cisco IOS Software
Your router comes pre-installed with the Cisco IOS image. However, you can install the new version in
order to keep router features up to date. This section describes how to upgrade the Cisco Internet
Operating System (IOS) software image on a Cisco 900 series ISR.
• Information About Upgrading the System Image, page 11
• How to Upgrade the Cisco IOS Image, page 12
Upgrading the Cisco IOS Software
Information About Upgrading the System Image
To upgrade the system image on your router, review the following sections:
• Why Would I Upgrade the System Image?, page 11
• Which Cisco IOS Release Is Running on My Router Now?, page 11
• How Do I Choose the New Cisco IOS Release and Feature Set?, page 11
• Where Do I Download the System Image?, page 12
Why Would I Upgrade the System Image?
System images contain the Cisco IOS software. Your router was shipped with an image installed. At
some point, you may want to load a different image onto the router or the access point. For example, you
may want to upgrade your IOS software to the latest release, or you may want to use the same Cisco IOS
release for all the routers in a network. Each system image contains different sets of Cisco IOS features,
therefore select an appropriate system image to suit your network requirements.
Which Cisco IOS Release Is Running on My Router Now?
To determine the Cisco IOS release that is currently running on your router, and the filename of the
system image, enter the show version command in user EXEC or privileged EXEC mode.
How Do I Choose the New Cisco IOS Release and Feature Set?
To determine which Cisco IOS releases and feature are supported on your platform, go to Cisco Feature
Navigator at http://www.cisco.com/go/cfn. You must have an account at Cisco.com. If you do not have
an account or have forgotten your username or password, click Cancel at the login dialog box and follow
the instructions that appear.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
11
Upgrading the Cisco IOS Software
Where Do I Download the System Image?
To download a system image you must have an account at Cisco.com to gain access to the following
websites. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box, and follow the instructions that appear.
If you know the Cisco IOS release and feature set you want to download, go directly to
https://software.cisco.com/download/home
For more information about Loading and Managing System images, go to
This section provides information about upgrading the Cisco IOS image on the router.
• Saving Backup Copies of Your Old System Image and Configuration, page 12
• Copying the System Image into Flash Memory, page 13
Chapter Installing the Software
• Loading the New System Image, page 16
• Saving Backup Copies of Your New System Image and Configuration, page 19
Saving Backup Copies of Your Old System Image and Configuration
To avoid unexpected downtime in the event you encounter serious problems using a new system image
or startup configuration, we recommend that you save backup copies of your current startup
configuration file and Cisco IOS software system image file on a server.
The following examples show how to copy a startup configuration to a TFTP server and how to copy
from flash memory to an FTP server.
Copying the Startup Configuration to a TFTP Server: Example
The following example shows the startup configuration being copied to a TFTP server:
Router# copy nvram:startup-config tftp:
Remote host[]? 192.0.0.1
Name of configuration file to write [rtr2-confg]? rtr2-config-b4upgrade
Write file rtr2-confg-b4upgrade on host 192.0.0.1?[confirm] <cr>
![OK]
Copying from Flash Memory to a TFTP Server: Example
The following example uses the dir flash: command in privileged EXEC mode to learn the name of the
system image file and the copy flash: tftp: command in privileged EXEC mode to copy the system
image to a TFTP server. The router uses the default username and password.
12
Router# copy flash: tftp:
Source filename [running-config]?
Address or name of remote host []? 192.0.0.1
Destination filename [router-confg]? running-config
983 bytes copied in 0.048 secs (20479 bytes/sec)
Cisco 900 Series Integrated Services Routers Software Configuration Guide
1936031744 bytes total (1871634432 bytes free)
Router#
Copying the System Image into Flash Memory
This section describes how to copy the system image into the flash memory card for your router.
NoteThe router should have sufficient disk or flash memory to store the Cisco IOS. The router should also
have sufficient memory (DRAM) to run the Cisco IOS. If the router does not have sufficient memory
(DRAM), the router will have boot problems when it boots through the new Cisco IOS.
To copy the system image into the flash memory card for your router, choose one of the following
methods:
• Entering ROM Monitor Mode, page 7
• Using the ROM Monitor to Copy the System Image over a Network, page 14
Upgrading the Cisco IOS Software
• Loading the New System Image, page 16
Using TFTP or Remote Copy Protocol to Copy the System Image into Flash Memory
This section describes how to use TFTP or Remote Copy Protocol (RCP) to upgrade the system image.
This is the recommended and most common method of upgrading the system image.
Prerequisites
The following details the logistics of upgrading the system image.
• Install a TFTP server or an RCP server application on a TCP/IP-ready workstation or PC. Many
third-party vendors provide free TFTP server software, which you can find by searching for “TFTP
server” in a web search engine.
If you use TFTP:
–
Configure the TFTP application to operate as a TFTP server, not a TFTP client.
–
Specify the outbound file directory to which you will download and store the system image.
• Download the new Cisco IOS software image into the workstation or PC. See the “Where Do I
Download the System Image?” section on page 2-12.
• Establish a console session to the router. We recommend that you connect your PC directly to the
router console port. See the hardware installation guide for your router.
• Verify that the TFTP or RCP server has IP connectivity to the router. If you cannot successfully ping
between the TFTP or RCP server and the router, do one of the following:
–
Configure a default gateway on the router.
–
Make sure that the server and the router each have an IP address in the same network or subnet. .
Cisco 900 Series Integrated Services Routers Software Configuration Guide
13
Upgrading the Cisco IOS Software
TipFor more detailed information on how to perform the prerequisites, see the Software Installation and
Upgrade Procedure tech note.
To copy the system image into the flash memory card for your router, follow these steps:
Step 1enable
Use this command to enter privileged EXEC mode. Enter your password if prompted:
Router> enable
Password: <password>
Router#
Step 2copy tftp: flash:
or
copyrcpflash
Use one of these commands to copy a file from a server to flash memory:
Router# copy tftp: flash:
Chapter Installing the Software
Step 3When prompted, enter the IP address of the TFTP or RCP server:
Step 4When prompted, enter the filename of the Cisco IOS software image to be installed:
Step 5When prompted, enter the filename as you want it to appear on the router. Typically, the same filename
Step 6If an error message appears that says, “Not enough space on device”, delete files from flash and try
Step 7If the error message does not appear, enter no when prompted to erase the flash memory before copying:
What to Do Next
Address or name of remote host []? 10.10.10.2
Source filename []? c900-universalk9-mz.bin
NoteThe filename is case sensitive.
is entered as was used in Step 4:
Destination filename []? c900-universalk9-mz.bin
again. To delete files from flash, use the delete flash: filename command.
Accessing tftp://10.10.10.2/c900-universalk9-mz.bin...
Erase flash: before copying? [confirm] no
Proceed to the “Loading the New System Image” section on page 2-16.
Using the ROM Monitor to Copy the System Image over a Network
This section describes how to download a Cisco IOS software image from a remote TFTP server to the
router flash memory by using the tftpdnld ROM monitor command.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
14
Chapter Installing the Software
Prerequisites
NoteYou can use the tftpdnld command only to download files to the router. You cannot use tftpdnld to get
Step 1Enter ROM monitor mode.
Step 2Set the IP address of the router. For example:
Step 3Set the IP subnet mask. For example:
Upgrading the Cisco IOS Software
Before you can enter the tftpdnld ROM monitor command, you must set the ROM monitor environment
variables.
Connect the TFTP server to a fixed network port on your router.
files from the router.
To download a Cisco IOS software image from a remote TFTP server to the router flash memory by using
the tftpdnld ROM monitor command, follow these steps:
rommon > IP_ADDRESS=172.16.23.32
rommon > IP_SUBNET_MASK=255.255.255.224
Step 4Set the default gateway address. For example:
rommon > DEFAULT_GATEWAY=172.16.23.40
Step 5Set the TFTP server IP address, which is the location from which the software will be downloaded:
rommon > TFTP_SERVER=172.16.23.33
Step 6Set the name and directory location to which the image file will be downloaded onto the router. For
example:
rommon > TFTP_FILE=archive/rel22/<image name>
Step 7(Optional) Set the input port to use a Gigabit Ethernet port. Usage is GE_PORT=[0 | 1 | 2]. For example:
rommon > GE_PORT=0
Step 8Use the set command to display the ROM monitor environment variables to verify that you have
configured them correctly. For example:
rommon > set
Step 9Download the system image, as specified by the ROM monitor environmental variables, using the
tftpdnld [-r] command. Without the -r option, the command downloads the specified image and saves
it in flash memory. Using the -r option downloads and boots the new software but does not save the
software to flash memory.
rommon 5 > tftpdnld -r
Attempting to boot from [tftp:]
What to Do Next
Proceed to the “Loading the New System Image” section on page 2-16.
Cisco 900 Series Integrated Services Routers Software Configuration Guide
15
Upgrading the Cisco IOS Software
Loading the New System Image
This section describes how to load the new system image that you copied into flash memory. First,
determine whether you are in ROM monitor mode or in the Cisco IOS CLI, then choose one of the
following methods of loading the new system image:
• Loading the New System Image from the Cisco IOS Software, page 16
• Loading the New System Image from ROM Monitor Mode, page 18
Loading the New System Image from the Cisco IOS Software
To load the new system image from the Cisco IOS software, follow these steps.
Step 1dir flash:
Use this command to display a list of all files and directories in flash memory:
1936031744 bytes total (1871634432 bytes free)
Router#
Chapter Installing the Software
NoteDetermine whether the new system image is the first file or the only file listed in the dir flash:
command output ( is not required if it is the first file or only file listed).
Step 2configure terminal
Use this command to enter global configuration mode:
Router# configure terminal
Router(config)#
Step 3no boot system
Use this command to delete all entries in the bootable image list, which specifies the order in which the
router attempts to load the system images at the next system reload or power cycle:
Router(config)# no boot system
Step 4If the new system image is the first file or the only file displayed in the dir flash: command output, you
do not need to perform the following step.
boot systemflash:system-image-filename
Use this command to load the new system image after the next system reload or power cycle. For
example:
Router(config)# boot system flash:c900-universalk9-mz.bin
Step 5(Optional) Repeat to specify the order in which the router should attempt to load any backup system
images.
Step 6exit
16
Cisco 900 Series Integrated Services Routers Software Configuration Guide
Loading...
+ 114 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.