New site template

I get tired of a template after a few months it seems.

This one's a bit bleak, but I think, easier to read.

Upgrading the IOS in a WS-C3550-24

Four down, one to go. Until next week, that is...

A 3550 is a bit different than a router:

Check the boot flash first:

Switch#sh boot
BOOT path-list:       flash:c3550-ipbasek9-mz.122-44.SE6/c3550-ipbasek9-mz.122-44.SE6.bin
Config file:          flash:/config.text
Private Config file:  flash:/private-config.text
Enable Break:         no
Manual Boot:          no
HELPER path-list:
NVRAM/Config file
      buffer size:    393216

Back up old IOS image to the TFTP:
Switch#copy flash:flash:c3550-ipbasek9-mz.122-44.SE6 tftp://10.0.1.2/c3550-ipb$

Address or name of remote host [10.0.1.2]?
Destination filename [c3550-ipbasek9-mz.122-44.SE6]?

Had trouble with this, ended up just erasing flash as there is not room for both on the flash:

Switch#erase flash:
Erasing the flash filesystem will remove all files! Continue? [confirm]
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 15998976
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 15997952
flashfs[1]: flashfs fsck took 9 seconds.
Erase of flash: complete

Then pull your new IOS from the TFTP server

Switch#copy tftp://10.1.0.2/c3550-ipservicesk9-mz.122-44.SE6.bin flas

Switch#$rvicesk9-mz.122-44.SE6.bin flash:c3550-ipservicesk9-mz.122-44.SE6.bin
Destination filename [c3550-ipservicesk9-mz.122-44.SE6.bin]?
Accessing tftp://10.1.0.2/c3550-ipservicesk9-mz.122-44.SE6.bin...
Loading c3550-ipservicesk9-mz.122-44.SE6.bin from 10.1.0.2 (via Vlan1): !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 9707290 bytes]
9707290 bytes copied in 132.904 secs (73040 bytes/sec)

and direct the boot system to the image:

Switch(config)#boot system flash:c3550-ipservicesk9-mz.122-44.SE6.bin
Switch#copy running-config startup-config
Destination filename [startup-config]?

flashing a new IOS to a router (2600)

This is what I'm doing now for the systems I have, you may have to as well.

1. download a freeware TFTP server app. http://www.solarwinds.com/products/freetools/free_tftp_server.aspx
2. set up your interface on your system with an IP, or default gateway that get's you to the router.

3. assure that you can ping across to and from the FTP server, in this case, my Laptop (Remember to turn any firewalls off !)

NCGA2250-R1#ping 10.1.0.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.0.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

4. Fire up your TFTP server software 

 

configuration settings

Set the path to your IOS image

Then hit the start button...

run the copy flash command on the router

add the IP of the TFTP server host:

Address or name of remote host []? 10.1.0.2

 File name:

Source filename []? c2600-ik9o3s3-mz.123-24.bin

 Destination name, generally default:

Destination filename [c2600-ik9o3s3-mz.123-24.bin]?
Accessing tftp://10.1.0.2/c2600-ik9o3s3-mz.123-24.bin...

TFTP server window will look like this:

Confirm flash erase, and it will start the copy:

Erase flash: before copying? [confirm]y

Erasing the flash filesystem will remove all files! Continue? [confirm]
Erasing device... eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee ...erasedee
Erase of flash: complete
Loading c2600-ik9o3s3-mz.123-24.bin from 10.1.0.2 (via Ethernet0/0): !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 16078740 bytes]

Verifying checksum...  OK (0x8F7F)
16078740 bytes copied in 134.512 secs (119534 bytes/sec)
Router#)

After this, I wiped the running config.

Password reset on a 2600

Often the stuff you pick up from ebay sellers will need to be wiped, and IOS reloaded, or upgraded.


Password reset for the 2600:

Check the current IOS on startup for password prompts and if there is one set,

1. power the router on, and press CTRL + BREAK, until you get this:

     rommon 1 >

2. rommon 1 > confreg 0x2142

3. rommon 2 > reset

4. copy NVRAM into memory: copy startup-config running-config. Don't go to global config mode yet.

5.  Show the running config to find what passwords have been set.

6. enter IOS and change passwords, and then save config.

7.  enter: config-register 0x2102 or whatever the initial confreg was.

8. save the running config to start up config: copy running-config startup-config.

Home Lab build-out step-by-by step

I realized I started the blog (way back in 2011) after I had already built my original lab.

So, I'll use this opportunity to add a bit of a how-to on what you will likely encounter when building a home lab.

What my lab will now encompass.

Rack 1

• 3x Cisco 2611xm, 256/64 memory, running c2600-advipservicesk9-mz.124-1c
• 2x Cisco 3550, running c3550-ipservicesk9-mx.122-44.SE6
• 2x Cisco 3560, running c3560-ipservicesk9-mz.122-55.SE.bin
• Probably 4x 1721's as hosts, not sure yet.
• Synaccess NPC-88G2 Remote Power Reboot and Console Port Management System (8 port access router, and power strip)

Rack 2

• 4x Cisco 1841, 256/64 memory, running c1841-advipservicesk9-mz.151-2.T2
• 3x Cisco  3550, running c3550-ipservicesk9-mx.122-44.SE6
• 2611 running as a Frame-Relay switch
• 2611 running as a BB router
• Synaccess NPC-88G2 Remote Power Reboot and Console Port Management System (8 port access router, and power strip)

Still have to purchase the 1841's, the 172x's, and the Frame relay switch.

Changing gears, Building the UBER home Lab.

I am moving into a brave new world of Cisco Studying, and returning to live equipment.

There will be some exciting new developments over the next month or so if everything goes to plan.

The Old home lab, lol.

After I cleaned it up some...

And the beginnings of the new lab. Stay tuned. I should have equipment coming in through the next few weeks.

New Lucent 42u relay racks picked up off craigslist for next to nothing, along with 300+, 25ft, 14ft, and 1 ft jumper cables, and enough network install equipment to sell for probably $1k. See my auctions on Ebay if interested.

http://www.ebay.com/itm/251281953634?ssPageName=STRK:MESELX:IT&_trksid=p3984.m1555.l2649

Three EMI 3550's

pretty good shape

Idling 3550 draws between 45 and 50 watts.

I'm refreshing all those old skills. Downloading Solarwinds TFTP server. The first of the two 2611's still had the owners config on it. Probably a no-no. The 3550's are clean.

Well, perhaps forget about IE 10 being the best for the CLN learning labs.

Couldn't get into the labs today in IE. Just got a login loop.

Working so far in Chrome.

We'll see.

Working on L2 security today.

This lab is Flash Based and only the pertinent commands will work.

It's a bit disappointing after the Unix simulator lab, which works so well, and is very much GNS3-like.

Tried to clear the configs on the Unix simulator lab and see if I can use it to implement this lab, but you can't set the port to nonegotiate, and so, doesn't allow switchport port-security to be implemented on the port.

Ohh, well.

VLANS, VTP, and Etherchannel in Cisco Learning Labs

Couple notes:

1. Login and logout of the Learning labs is iffy at best.

2. The ability to pull up every device in CLI is not guaranteed, and if you lose the ability to get to a device, see note number 1, as that may also come into play, and the only way to get that device back is to logout, then log back in to the learning labs. So then you need to close out your browser, and start from scratch. Internet explorer 10 appears to work the best with the Learning labs, as compared to Chrome and Firefox, believe it or not.

3. I hope the test doesn't have any labs as extensive as these, but you can't fault them for creating relatively real case scenarios. My Switching knowledge will be much higher through repetition after completing these labs.

EtherChannels are interesting, but the CBT nuggets videos are a little bit sparse in emphasizing some things that are relatively important. I had to go back through a couple times to catch the thrown out phrase, that then led me to the Cisco book section that illustrated what I needed to know.

Getting going, now, but a little behind on switch

Cisco fixed my login issues, and made me feel like a valued customer in doing so.

I had a few honey do's this week that got me behind, but I'm now into the groove. I would guess that I won't be ready to test for switch until beginning of next week.

I'm into the Cisco Labs, and am finding that they work quite well. I haven't tried exiting the labs without saving configs, but if you do save the configs, they save on the Unix box or whatever they are using for this. I think it is showing up as a Solaris, so Unix, obviously. Makes me wonder how the configs are saved, directly on the node I'm using, or virtualized in some way.

I'm finishing up Design and Implement VLANs, Trunks, and EtherChannel.

The format is a little strange to get used to, and what the actual objectives are, can be difficult to pull out of what is listed, but then, getting it from an unversed customer could also be. At this point in one's career, one should be able to be knowledgeable of Cisco campus options and be able to sell a customer on those options, at least that is what I think Cisco is expecting here.

On another note, I managed to catch this perfectly, entirely unintentionally.

Two years, 25,000 hits later. Hopefully this has been of use to others as well as myself.

Cisco Learning Network Learning Labs

A word to the wise. When you get the e-mail with your login credentials for using the learning labs in the Cisco store, tattoo it to your body. Amazingly, but really not amazing for the CLN, there is NO password reset function in the learning labs.

I don't know why Cisco struggles so mightily with basic website functionality that everyone else in the known universe has had down pat for 10+ years, but they do.

I actually had to open a support case with Cisco, to hopefully, generate a new password. Only 1-2 business days of studying wasted.

Additionally, the CLN will be down for the better part of a day from this Thursday, 5pm, until Friday at 12 noon. That long of a maintenance period is pretty non-standard, but par for the course with the CLN, and so lucky for me to occur during the two weeks I have set aside for this cert push.

Cisco, you make it hard to love you.

The Big Push

I have taken two weeks off work to attempt to take and pass both SWITCH and T-SHOOT.

I've probably bit off a bit more than I can chew, but in the past, I've tended to surprise myself in situations like this.

Hopefully, I will be taking Switch next monday, and then T-shoot the monday after that.

Go...