Chapter 8

show license feature

- Allows you to view the technology package licenses and feature licenses that are supported on your router along with several status variables related to software activation and licensing. This includes both licensed and unlicensed features.

show license

- Determines the licenses that are active on your system. It also displays a group of lines for each feature in the currently running IOS image along with several status variables related to software activation and licensing, both licensed and unlicensed features

show license udi

- Displays the unique device identifier (UDI) of the router, which comprises the product ID (PID) and serial numbers of the router.

show version

- Displays various pieces of information about the current IOS version, including the licensing details at the end of the command's output

What to do if the IOS in flash does not load and the TFTP host does not produce an IOS?

- Load the mini-IOS from ROM like this: Router(config)#boot system rom Router(config)#do show run | include boot system

Licensing

- There are three different technology packages available for purchase that can be installed as additional feature package on top of the prerequisite IP Base (default). - These are as follows: • Data - MPLS, ATM, and multiprotocol support • Unified Communication - VoIP and IP telephony • Security - Cisco IOS Firewall, IPS, IPsec, 3DES, and VPN.

How to uninstall a license

- To uninstall the license you need to disable the technology package, using the no license boot module command with the keyword disable at the end of the command line: Router#license boot module c2900 technology-package securityk9 disable - The second step is to clear the license. To achieve this from the router, use the license clear command and then remove the license with the no license module command: Router#license clear securityk9 Router#config t Router(config)#no license boot module c2900 technology-package securityk9 disable Router(config)#exit Router#reload

What are the main steps for recovering a password?

1. Boot the router and interrupt the boot sequence by performing a break, which will take the router into ROM monitor mode. This is done by pressing the CTRL+Break key combination. 2. Change the configuration register to turn on bit 6 (with the 0x2142), with the config-register command. To change the bit value on a Cisco ISR series router, you just enter the following: command at the rommon 1>prompt: rommon1>confreg 0x2142 *Message* - You must reset or power cycle for new config to take effect rommon 2>reset 3. Reload the router. From the ISR series router, type I (for initialize) or reset. From an older series router, type I. 4. Say "no" to entering setup mode, then enter privileged mode. 5. Copy the startup-config file to running-config, and don't forget to verify that your interfaces are re-enabled. The configuration is now running in random memory access (RAM), and you're in privileged mode, meaning you can now view and change the configuration. But you can't view the enable secret setting for the password since it is encrypted. To change the password do this 6. Change the password. Router#config t Router(config)#enable secret dylan 7. Reset the configuration register to the default value (0x2102). Router#config t Router(config)#config-register 0x2102 8. Save the router configuration 9. Reload the router.

What should the configuraiton register value be after you successfully complete the password recovery procedure and return the router to normal operation?

All Cisco routers have a default configuration register setting of 0X2102, which tells the router to load the IOS from flash memory and the configuration from NVRAM.

Back up an IOS image

By using the privileged-mode command copy flash tftp, you can back up a file from flash memory to a TFTP (network) server.

Restore or upgrade an IOS image

By using the privileged-mode command copy tftp flash, you can restore or upgrade a file from a TFTP (network) server to flash memory.

Summary of the license commands

Following cards

You save the configuraiton on a router with the copy running-config startup-config command and reboot the router. The router, however, comes up with a blank configuration. What can the problem be?

If you save a configuration and reload the router and it comes up either in setup mode or as a blank configuration, chances are the configuration register setting is incorrect.

Describe best practices to prepare to back up an IOS image to a network server

Make sure that you can access the network server, ensure that the network server has adequate space for the code image, and verify the file naming and path requirements.

What command to use to check memory space?

Router#sh flash OR - The amount of RAM and flash is actually easy to tally using the show version command on routers: Router#show version

To change the configuration register what command do you use?

Router(config)#config-register 0x2142 Router(config)#do sh ver

Checking the current configuration register value

Router>sh version

cd/pwd

Same as with Unix and DOS, cd is the command you use to change directories. Use the pwd command to print (shows) the working directory.

more

Same as with Unix, this will take a text file and let you look at it on a card. You can use it to check out your configuration file or your backup configuration file.

dir

Same as with Windows, this command lets you view files in a directory. Type dir, hit Enter, and by default you get the contents of the flash:/ directory output.

Understand configuration register commands and settings

The 0X2102 settings is the default on all Cisco routers and tells the router to look in NVRAM for the boot sequence. 0X2101 tells the router to boot from ROM, and 0X2142 tells the router not to load the startup-config in NVRAM to provide password recovery.

Which command loads a new version of the Cisco IOS into a router?

The command copy tftp flash will allow you to copy a new IOS into flash memory on your router.

Understand and use Cisco IFS file system management commands

The commands to use are dir, copy, more, delete, erase, or format, cd and pwd, and mkdir and rmdir, as well as system:running-config and nvram:startup-config

What does the command confreg 0x2142 provide?

The default configuration setting is 0X2102, which tells the router to load the IOS from flash and the configuration from NVRAM. 0X2142 tells the router to bypass the configuration in NVRAM so taht you can perform password recovery.

The configuration register setting of the 0X2102 provides what function to a router?

The default configuration setting of 0X2102 tells the router to look in NVRAM for the boot sequence.

Which command will install a Right-To-Use license so you can use an evaluation version of a feature?

The license boot module command installs a Right-To-Use license feature on a router

Which command determines the licenses that are active on your system along with several status variables?

The show license command determines the license that are active on your system. It also displays a group of lines for each feature in the currently running IOS image along with serveral status variables related to software activation and licensing, both licensed and unlicensed features.

Remember the verification commands used for licensing in the new ISR G2 routers

The show license command determines the licenses that are active on your system. The show license feature command allows you to view the technology package licenses and feature licenses that are supported on your router. The show license udi command displays the unique device identifier (UDI) of the router, which comprises the product ID (PID) and serial number of the router, and the show version command displays information about the current IOS version, including the licensing details at the end of the command's output.

Identify the steps in the router boot sequence

The steps in the boot sequence are POST, loading the IOS, and copying the startup configuration from NVRAM to RAM.

Perform password recovery

The steps in the password recovery process are interrupt the router boot sequence, change the configuration register, reload the router and enter privileged mode, copy the startup-config file to running-config and verify that your interfaces are re-enabled, change/set the password, save the new configuration, reset the configuration register, and reload the router.

show file

This command will give you the skinny on a specified file or file system, but it's kind of obscure because people don't use it a lot.

copy

This is one popular command, often used to upgrade, restore, or back up an IOS. But as I said, when you use it, it's really important to focus on the details--what you're copying, where it's coming from, and where it's going to land. Example: R1#copy tftp://1.1.1.2/c1841-advipservicesk9-mz.124-12.bin/ flash:/c1841-advipservicesk9-mz.124-12.bin

delete

Three guesses--yep, it deletes stuff. But with some types of routers, not as well as you'd think. That's because even though it whacks the file, it doesn't always free up the space it was using. To actually get the space back, you have to use something called the squeeze command too. Example: R1#delete flash:c1841-ipbase-mz.124-1c.bin

Which command will copy the IOS to a backup host on your network?

To copy the IOS to a backup host, which is stored in flash memory by default, use the copy flash tftp command.

Remember how to install a permanent and Right-To-Use license

To install a permanent license on a router, use the install license url command. To install an evaluation feature, use the license boot module command.

mkdir/rmdir

Use these commands on certain routers and switches to create and delete directories--the mkdir command for creation and the rmdir command for deletion. Use the cd and pwd commands to change into these directories.

erase/format

Use these with care--make sure that when you're copying files, you say no to dialog that asks you if you want to erase the file system! The type of memroy you're using determines if you can nix the flash drive or not.

license boot module

installs a Right-To-Use license feature on a router

license install url

installs a license key file into a router

Notes

• Add the prefix 0x to configuration register address. The 0x means that the digits that follow are in hexadecimal. • The show version command will display system hardware configuration information, system serial number, the software version, and the names of the boot images on a router.

What are the steps towards verifying an attempt to copy the image to or from the router

• TFTP server software must be running on the lap or workstation • The Ethernet connection between the router and the workstation must be made with crossover cable. • The workstation must be on the same subnet as the router's Ethernet interface. • The copy flash tftp command must be supplied the IP address of the workstation if you are copying from router flash. • And if you're "into" flash, you need to verify that there's enough room in flash memory to accommodate the file to be copied.