signature=a7323807c672e509489d5cf15f7fb325,Cisco 4000 Series ISRs Software Configuration Guide

Upgrading the device to Cisco IOS XE

Denali Release 16.3 for the first time uses the same procedures as specified in

the earlier section. In addition, Cisco IOS XE Denali Release 16.3 requires a

minimum ROMMON version. When the device boots up with Cisco IOS XE Denali image

for the first time, the device checks the installed version of the ROMMON, and

upgrades if the system is running an older version. During the upgrade, do not

power cycle the device. The system automatically power cycles the device after

the new ROMMON is installed. After the installation, the system will boot up

with the Cisco IOS XE image as normal.

Note

When the device boots up for first time and if the device requires

an upgrade, the entire boot process may take several minutes. This process will

be longer than a normal boot due to the ROMMON upgrade.

The following example illustrates the boot process of a consolidated

package:Router# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#boot system tftp://10.81.116.4/rtp-isr4400-54/isr4400.bin

Router(config)#config-register 0x2102

Router(config)#exit

Router# show run | include boot

boot-start-marker

boot system tftp://10.81.116.4/rtp-isr4400-54/isr4400.bin

boot-end-marker

license boot level adventerprise

Router# copy running-config startup-config

Destination filename [startup-config]?

Building configuration...

[OK]

Router# reload

Proceed with reload? [confirm]

Sep 13 17:42:54.445 R0/0: %PMAN-5-EXITACTION: Process manager is exiting: process exit with

reload chassis code

Initializing Hardware ...

System integrity status: c0000600

Key Sectors:(Primary,GOOD),(Backup,GOOD),(Revocation,GOOD)

Size of Primary = 2288 Backup = 2288 Revocation = 300

ROM:RSA Self Test Passed

ROM:Sha512 Self Test Passed

Self Tests Latency: 58 msec

System Bootstrap, Version 12.2(20120618:163328) [username-ESGROM_20120618_GAMMA 101],

DEVELOPMENT SOFTWARE

Copyright (c) 1994-2014 by cisco Systems, Inc.

Compiled Mon 05/27/2014 12:39:32.05 by username

Current image running: Boot ROM0

Last reset cause: LocalSoft

Cisco ISR 4400 platform with 4194304 Kbytes of main memory

IP_ADDRESS: 172.18.42.119

IP_SUBNET_MASK: 255.255.255.0

DEFAULT_GATEWAY: 172.18.42.1

TFTP_SERVER: 10.81.116.4

TFTP_FILE: rtp-isr4400-54/isr4400.bin

TFTP_MACADDR: a4:4c:11:9d:ad:97

TFTP_VERBOSE: Progress

TFTP_RETRY_COUNT: 18

TFTP_TIMEOUT: 7200

TFTP_CHECKSUM: Yes

ETHER_PORT: 0

ETHER_SPEED_MODE: Auto Detect

link up...

Receiving rtp-isr4400-54/isr4400.bin from 10.81.116.4 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

File reception completed.

Boot image size = 504063931 (0x1e0b67bb) bytes

ROM:RSA Self Test Passed

ROM:Sha512 Self Test Passed

Self Tests Latency: 58 msec

Package header rev 1 structure detected

Calculating SHA-1 hash...done

validate_package: SHA-1 hash:

calculated 7294dffc:892a6c35:a7a133df:18c032fc:0670b303

expected 7294dffc:892a6c35:a7a133df:18c032fc:0670b303

Signed Header Version Based Image Detected

Using FLASH based Keys of type = PRIMARY KEY STORAGE

Using FLASH based Keys of type = ROLLOVER KEY STORAGE

RSA Signed DEVELOPMENT Image Signature Verification Successful.

Package Load Test Latency : 5116 msec

Image validated

Detected old ROMMON version 12.2(20150910:184432), upgrade required

Upgrading to newer ROMMON version required by this version of IOS-XE, do not power cycle the system. A reboot will automatically occur for the new ROMMON to take effect.

selected : 1

Booted : 1

Reset Reason: 1

Info: Upgrading entire flash from the rommon package

Switching to ROM 0

Upgrade image MD5 signature is b702a0a59a46a20a4924f9b17b8f0887

Upgrade image MD5 signature verification is b702a0a59a46a20a4924f9b17b8f0887

Switching back to ROM 1

ROMMON upgrade complete.

To make the new ROMMON permanent, you must restart the RP.

ROMMON upgrade successful. Rebooting for upgrade to take effect.

Initializing Hardware ...

System integrity status: 00300610

Key Sectors:(Primary,GOOD),(Backup,GOOD),(Revocation,GOOD)

Size of Primary = 2288 Backup = 2288 Revocation = 300

ROM:RSA Self Test Passed

Expected hash:

ddaf35a193617abacc417349ae204131

12e6fa4e89a97ea20a9eeee64b55d39a

2192992a274fc1a836ba3c23a3feebbd

454d4423643ce80e2a9ac94fa54ca49f

Obtained hash:

ddaf35a193617abacc417349ae204131

12e6fa4e89a97ea20a9eeee64b55d39a

2192992a274fc1a836ba3c23a3feebbd

454d4423643ce80e2a9ac94fa54ca49f

ROM:Sha512 Self Test Passed

Self Tests Latency: 418 msec

Rom image verified correctly

System Bootstrap, Version 12.2(20120618:163328) [username-ESGROM_20120618_GAMMA 101],

DEVELOPMENT SOFTWARE

Copyright (c) 1994-2014 by cisco Systems, Inc.

Compiled Mon 05/27/2014 12:39:32.05 by username

CPLD Version: 33 (MM/DD/YY): 06/23/14 Cisco ISR4351/K9 Slot:0

Current image running: Boot ROM1

Last reset cause: ResetRequest

Reading confreg 0x2102

Reading monitor variables from NVRAM

Enabling interrupts...done

Checking for PCIe device presence...done

Cisco ISR4351/K9 platform with 16777216 Kbytes of main memory

autoboot entry: NVRAM VALUES: bootconf: 0x0, autobootstate: 0

autobootcount: 0, autobootsptr: 0x0

Rommon upgrade requested

Flash upgrade reset 0 in progress

.......

Initializing Hardware ...

Checking for PCIe device presence...done

Reading confreg 2102

System integrity status: 0x300610

Key Sectors:(Primary, GOOD),(Backup,GOOD),(Revocation,GOOD)

Size of Primary = 2288 Backup = 2288 Revocation = 288

RSA Self Test Passed

Expected hash:

DDAF35A193617ABACC417349AE204131

12E6FA4E89A97EA20A9EEEE64B55D39A

2192992A274FC1A836BA3C23A3FEEBBD

454D4423643CE80E2A9AC94FA54CA49F

Obtained hash:

DDAF35A193617ABACC417349AE204131

12E6FA4E89A97EA20A9EEEE64B55D39A

2192992A274FC1A836BA3C23A3FEEBBD

454D4423643CE80E2A9AC94FA54CA49F

Sha512 Self Test Passed

Rom image verified correctly

System Bootstrap, Version 16.2(1r), RELEASE SOFTWARE

Copyright (c) 1994-2016 by cisco Systems, Inc.

Current image running: *Upgrade in progress* Boot ROM0

Last reset cause: BootRomUpgrade

ISR4351/K9 platform with 16777216 Kbytes of main memory

Cisco ISR 4400 platform with 4194304 Kbytes of main memory

IP_ADDRESS: 172.18.42.119

IP_SUBNET_MASK: 255.255.255.0

DEFAULT_GATEWAY: 172.18.42.1

TFTP_SERVER: 10.81.116.4

TFTP_FILE: rtp-isr4400-54/isr4400.bin

TFTP_MACADDR: a4:4c:11:9d:ad:97

TFTP_VERBOSE: Progress

TFTP_RETRY_COUNT: 18

TFTP_TIMEOUT: 7200

TFTP_CHECKSUM: Yes

ETHER_PORT: 0

ETHER_SPEED_MODE: Auto Detect

link up...

Receiving rtp-isr4400-54/isr4400.bin from 10.81.116.4 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

File reception completed.

Boot image size = 504063931 (0x1e0b67bb) bytes

Image Base is: 0x56834018

Image Size is: 0x1E089706

Package header rev 1 structure detected

Package type:30000, flags:0x0

IsoSize = 503874534

Parsing package TLV info:

000: 000000090000001D4B45595F544C565F - KEY_TLV_

010: 5041434B4147455F434F4D5041544942 - PACKAGE_COMPATIB

020: 494C495459000000000000090000000B - ILITY

030: 4652555F52505F545950450000000009 - FRU_RP_TYPE

040: 000000184B45595F544C565F5041434B - KEY_TLV_PACK

050: 4147455F424F4F544152434800000009 - AGE_BOOTARCH

060: 0000000E415243485F693638365F5459 - ARCH_i686_TY

070: 5045000000000009000000144B45595F - PE KEY_

080: 544C565F424F4152445F434F4D504154 - TLV_BOARD_COMPAT

090: 0000000900000012424F4152445F6973 - BOARD_is

0A0: 72343330305F54595045000000000009 - r4300_TYPE

0B0: 000000184B45595F544C565F43525950 - KEY_TLV_CRYP

0C0: 544F5F4B4559535452494E4700000009 - TO_KEYSTRING

TLV: T=9, L=29, V=KEY_TLV_PACKAGE_COMPATIBILITY

TLV: T=9, L=11, V=FRU_RP_TYPE

TLV: T=9, L=24, V=KEY_TLV_PACKAGE_BOOTARCH

TLV: T=9, L=14, V=ARCH_i686_TYPE

TLV: T=9, L=20, V=KEY_TLV_BOARD_COMPAT

TLV: T=9, L=18, V=BOARD_isr4300_TYPE

TLV: T=9, L=24, V=KEY_TLV_CRYPTO_KEYSTRING

TLV: T=9, L=10, V=EnCrYpTiOn

TLV: T=9, L=11, V=CW_BEGIN=$$

TLV: T=9, L=19, V=CW_FAMILY=$isr4300$

TLV: T=9, L=59, V=CW_IMAGE=$isr4300-universalk9.2016-06-29_23.31_paj.SSA.bin$

TLV: T=9, L=19, V=CW_VERSION=$16.3.1$

TLV: T=9, L=52, V=CW_DESCRIPTION=$Cisco IOS Software, IOS-XE Software$

TLV: T=9, L=9, V=CW_END=$$

Found DIGISIGN TLV type 12 length = 392

RSA Self Test Passed

Expected hash:

DDAF35A193617ABACC417349AE204131

12E6FA4E89A97EA20A9EEEE64B55D39A

2192992A274FC1A836BA3C23A3FEEBBD

454D4423643CE80E2A9AC94FA54CA49F

Obtained hash:

DDAF35A193617ABACC417349AE204131

12E6FA4E89A97EA20A9EEEE64B55D39A

2192992A274FC1A836BA3C23A3FEEBBD

454D4423643CE80E2A9AC94FA54CA49F

Sha512 Self Test Passed

Found package arch type ARCH_i686_TYPE

Found package FRU type FRU_RP_TYPE

Calculating SHA-1 hash...Validate package: SHA-1 hash:

calculated 8B082C48:35C23C9E:8A091441:D6FACEE6:B5111533

expected 8B082C48:35C23C9E:8A091441:D6FACEE6:B5111533

Image validated

Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

(c) of the Commercial Computer Software - Restricted

Rights clause at FAR sec. 52.227-19 and subparagraph

(c) (1) (ii) of the Rights in Technical Data and Computer

Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Experimental Version 16.3(20160527:095327)

[v163_throttle]

Copyright (c) 1986-2016 by Cisco Systems, Inc.

Compiled Tue 27-May-16 21:28 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2016 by cisco Systems, Inc.

All rights reserved. Certain components of Cisco IOS-XE software are

licensed under the GNU General Public License ("GPL") Version 2.0. The

software code licensed under GPL Version 2.0 is free software that comes

with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such

GPL code under the terms of GPL Version 2.0. For more details, see the

documentation or "License Notice" file accompanying the IOS-XE software,

or the applicable URL provided on the flyer accompanying the IOS-XE

software.

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Warning: the compile-time code checksum does not appear to be present.

cisco ISR4451/K9 (2RU) processor with 1133585K/6147K bytes of memory.

Processor board ID FGL1619100P

4 Gigabit Ethernet interfaces

32768K bytes of non-volatile configuration memory.

4194304K bytes of physical memory.

7393215K bytes of Compact flash at bootflash:.

7816688K bytes of USB flash at usb0:.

Press RETURN to get started!