Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
ragzilla
Sep 9, 2005
don't ask me, i only work here


R1CH posted:

Anyone have any ideas on how to make the DHCP server on my 871W respond faster? I tried reducing ip dhcp ping packets and timeout to really low values. Whenever I plug in a network cable, Windows sits at Acquiring IP address for so long it actually times out and assigns an automatic private IP, then the DHCP IP is assigned about 5 second later. I'm guessing the DHCP server is waiting for an authoritative DHCP server to respond first, is there any way I can tell it that it's the authoritative server?

Did you turn on portfast on all the ethernet ports?

Adbot
ADBOT LOVES YOU

BelDin
Jan 29, 2001

R1CH posted:

Anyone have any ideas on how to make the DHCP server on my 871W respond faster? I tried reducing ip dhcp ping packets and timeout to really low values. Whenever I plug in a network cable, Windows sits at Acquiring IP address for so long it actually times out and assigns an automatic private IP, then the DHCP IP is assigned about 5 second later. I'm guessing the DHCP server is waiting for an authoritative DHCP server to respond first, is there any way I can tell it that it's the authoritative server?

You have portfast turned on the ports? If you don't it will take about 30 seconds for your link to come up.

Edit: Curses!!

some kinda jackal
Feb 25, 2003

 
 

R1CH posted:

Anyone have any ideas on how to make the DHCP server on my 871W respond faster? I tried reducing ip dhcp ping packets and timeout to really low values. Whenever I plug in a network cable, Windows sits at Acquiring IP address for so long it actually times out and assigns an automatic private IP, then the DHCP IP is assigned about 5 second later. I'm guessing the DHCP server is waiting for an authoritative DHCP server to respond first, is there any way I can tell it that it's the authoritative server?

Is portfast enabled on the desired ports?

e: gently caress, beaten twice because I didn't see the next page :q:

R1CH
Apr 7, 2002

The Ron Jeremy of the coding world
I'm assuming portfast was off by default, I turned it on which should hopefully fix it given the description of how it operates. Figures I was looking in completely the wrong place, I had no idea this was even happening :). Thanks.

BelDin
Jan 29, 2001

R1CH posted:

I'm assuming portfast was off by default, I turned it on which should hopefully fix it given the description of how it operates. Figures I was looking in completely the wrong place, I had no idea this was even happening :). Thanks.

One of us three should be right. ;)

jwh
Jun 12, 2002

R1CH posted:

Anyone have any ideas on how to make the DHCP server on my 871W respond faster? I tried reducing ip dhcp ping packets and timeout to really low values. Whenever I plug in a network cable, Windows sits at Acquiring IP address for so long it actually times out and assigns an automatic private IP, then the DHCP IP is assigned about 5 second later. I'm guessing the DHCP server is waiting for an authoritative DHCP server to respond first, is there any way I can tell it that it's the authoritative server?

Enable spanning-tree portfast on the port your PC is connected to on the 871.

Edit: Woah, how did I reply to something so old without seeing the existing replies? Sorry.

Pudgygiant
Apr 8, 2004

Garnet and black? More like gold and blue or whatever the fuck colors these are
Any reason Radio0 on a 1310 would make itself administratively down? I'm stumped. Nobody else has access and it's happening every two days or so. Only log entry is "Line protocol on Interface Dot11Radio0, changed state to down (administratively down)".

ragzilla
Sep 9, 2005
don't ask me, i only work here


Pudgygiant posted:

Any reason Radio0 on a 1310 would make itself administratively down? I'm stumped. Nobody else has access and it's happening every two days or so. Only log entry is "Line protocol on Interface Dot11Radio0, changed state to down (administratively down)".

Are there SSIDs associated with it? They changed behavior at some point to keep the radio interface down until you have SSIDs configured.

Pudgygiant
Apr 8, 2004

Garnet and black? More like gold and blue or whatever the fuck colors these are

ragzilla posted:

Are there SSIDs associated with it? They changed behavior at some point to keep the radio interface down until you have SSIDs configured.

Yes, and it has a VLAN configured for it as well. It will stay up very consistently for a couple days, it's a good shot. It just administratively goes down. It's a point to point bridge.

thiscommercialsucks
Jun 13, 2009

by T. Mascis
Did you try turning on portfast? Just kidding.


Do a debug dot11 events and see what it says when the interface goes down maybe? I realize this might involve waiting until it randomly goes down again.

bad boys for life
Jun 6, 2003

by sebmojo
Longshot, but is there anyway someones resetting it and it was last written with it admin down?

Pudgygiant
Apr 8, 2004

Garnet and black? More like gold and blue or whatever the fuck colors these are

bad boys for life posted:

Longshot, but is there anyway someones resetting it and it was last written with it admin down?

Great guess, but no it's no shut on the config. Can't believe I didn't think of that though.

I think I'm going to just chalk it up to the Taliban and keep going to reset it every couple days.

ior
Nov 21, 2003

What's a fuckass?

Pudgygiant posted:

Great guess, but no it's no shut on the config. Can't believe I didn't think of that though.

I think I'm going to just chalk it up to the Taliban and keep going to reset it every couple days.

Are you powering the AP via POE, if so, try swapping out the injector.

H.R. Paperstacks
May 1, 2006

This is America
My president is black
and my Lambo is blue

Pudgygiant posted:

Great guess, but no it's no shut on the config. Can't believe I didn't think of that though.

I think I'm going to just chalk it up to the Taliban and keep going to reset it every couple days.

We had this happen on some Cisco CBS3032s, the embedded switches in the Dell Bladecenters. No matter what a co-worker did, he could not get the no shut to drop from the config, even a reboot. But upon checking out the actual reboot itself, the ASIC controlling those 4 ports had failed POST, so the IOS shuts them down due to the failure.

mrbucket
Nov 11, 2004

aaag armrest
I have an 871w running IOS 15.1, the advanced IP services bundle.

Can this thing do IPV6 over a bridge (like if you run wifi on the 871w)? Googling shows that it isnt possible, but in some versions of 15 it is possible, but then it's not again and oh god.

Pudgygiant
Apr 8, 2004

Garnet and black? More like gold and blue or whatever the fuck colors these are

ior posted:

Are you powering the AP via POE, if so, try swapping out the injector.

No, 120v AC, but it could still be a dirty power issue. May have to have our power gen guy check that out.

ior
Nov 21, 2003

What's a fuckass?

mrbucket posted:

I have an 871w running IOS 15.1, the advanced IP services bundle.

Can this thing do IPV6 over a bridge (like if you run wifi on the 871w)? Googling shows that it isnt possible, but in some versions of 15 it is possible, but then it's not again and oh god.

No luck here, i had to bring home a 1252 instead.

Bardlebee
Feb 24, 2009

Im Blind.
Ok, I wanted to get everyones opinion on whether or not my VPN tunnels look sane. Again, I am very new at this. The part I am worried about is if I am understanding access-lists right and I am using it appropriately, that and I am seeing at least on this routers end, does it look like I setup these five IPsec tunnels correctly?

code:

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname WG-STSC
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3872896560
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3872896560
 revocation-check none
 rsakeypair TP-self-signed-3872896560
!
!
crypto pki certificate chain TP-self-signed-3872896560
 certificate self-signed 01
  30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 33383732 38393635 3630301E 170D3130 30363235 31363337
  35315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38373238
  39363536 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100BE8A B5790460 A9253C5A 38A1933A 19925684 71E3593E F352827B CA66CCC1
  024EEC73 63C2FB7E DE069B52 F335D5EA A1A0839F A9E6104E EC45ABFA 8DA03006
  BD0FE01F 35D15726 8D8E23E5 21BCD930 D220CE65 4528F3DC BA15C82F 4720549B
  5EA44127 8DA7E630 EC359BC4 502C5E31 9DC8DA5E FF3D0393 DE10ED8D BC0013F5
  2FD30203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
  551D1104 12301082 0E57472D 53545343 2E574753 54534330 1F060355 1D230418
  30168014 176C5BC2 2E35E8A6 02309904 DA180631 A77880D9 301D0603 551D0E04
  16041417 6C5BC22E 35E8A602 309904DA 180631A7 7880D930 0D06092A 864886F7
  0D010104 05000381 81008D31 D77BC5FC 24ECF53F D08E4371 5677043A 6A3F0D17
  4E066A7B 8AB49E22 3B8F260F B8BB3723 2F10042A 66D44365 04F56FDB CD6DD582
  7C1C0E80 E73093F2 00880ECB 11050139 A40B8767 F6D7EF2B BA3DDE2F 8DFA7D3C
  58B8C04C 209A6D80 2C55F9B2 53BC4827 C92DEB9E E3865133 B6111C49 E98E486D
  8C638C74 52170C4E AEBA
        quit
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 192.168.2.1 192.168.2.105
ip dhcp excluded-address 192.168.2.200 192.168.2.254
!
ip dhcp pool 192.168.2.0/24
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server 66.196.216.10
!
ip dhcp pool 192.168.2.0\24
   dns-server 192.168.2.113 255.255.255.0
!
!
ip domain name WGSTSC
!
multilink bundle-name authenticated
!
!
username admin privilege 15 secret 5 $1$okPG$sSaKRYxgE8z7A/oZYTN9k0
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 5
 lifetime 3600
crypto isakmp key pass address 66.64.51.100
crypto isakmp key pass address 209.206.174.555
crypto isakmp key pass address 24.153.154.777
crypto isakmp key pass address 97.77.188.666
crypto isakmp key pass address 216.201.140.999
!
crypto ipsec security-association lifetime seconds 28800
!
crypto ipsec transform-set esp-aes-sha esp-aes esp-sha-hmac
crypto ipsec transform-set esp-3des-sha1 esp-3des esp-sha-hmac
!
crypto map vpn 5 ipsec-isakmp
 description San Tunnel
 set peer 209.206.174.555
 set transform-set esp-3des-sha1
 match address 105
crypto map vpn 6 ipsec-isakmp
 description New Tunnel
 set peer 97.77.188.666
 set pfs group2
 match address 106
crypto map vpn 7 ipsec-isakmp
 description Lar Tunnel
 set peer 24.153.154.777
 set transform-set esp-3des-sha1
 set pfs group2
 match address 107
crypto map vpn 9 ipsec-isakmp
 description Top Tunnel
 set peer 216.201.140.999
 set transform-set esp-3des-sha1
 set pfs group2
 match address 109
crypto map vpn 10 ipsec-isakmp
 description HardyOak Tunnel
 set peer 66.64.51.100
 set transform-set esp-3des-sha1
 set pfs group2
 match address 101
!
archive
 log config
  hidekeys
!
!
!
!
!
interface Tunnel0
 no ip address
 ip mtu 1400
!
interface FastEthernet0
 ip address 216.201.143.222 255.255.255.240
 ip mtu 1460
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map vpn
 crypto ipsec df-bit clear
!
interface FastEthernet1
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface FastEthernet9
 speed 100
!
interface Vlan1
 ip address 192.168.2.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Async1
 no ip address
 encapsulation slip
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 216.201.143.111
!
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload
!
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.11.0 0.0.0.255
access-list 102 remark SDM_ACL Category=16
access-list 102 deny   ip 192.168.2.0 0.0.0.255 192.168.11.0 0.0.0.255
access-list 102 permit ip 192.168.2.0 0.0.0.255 any
access-list 105 permit ip 192.168.2.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 106 permit ip 192.168.2.0 0.0.0.255 192.168.6.0 0.0.0.255
access-list 107 permit ip 192.168.2.0 0.0.0.255 192.168.7.0 0.0.0.255
access-list 109 permit ip 192.168.2.0 0.0.0.255 192.168.9.0 0.0.0.255
!
!
!
route-map SDM_RMAP_1 permit 1
 match ip address 102
!
!
!
!
control-plane
!
!
line con 0
line 1
 modem InOut
 stopbits 1
 speed 115200
 flowcontrol hardware
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 privilege level 15
 login local
 transport input ssh
line vty 16
 privilege level 15
 login local
 transport input all
!
end

Frozen Sabre
May 11, 2006

Bardlebee posted:

Ok, I wanted to get everyones opinion on whether or not my VPN tunnels look sane. Again, I am very new at this. The part I am worried about is if I am understanding access-lists right and I am using it appropriately, that and I am seeing at least on this routers end, does it look like I setup these five IPsec tunnels correctly?

<snip>

Those look okay to me, and a quick check of the cisco docs looks pretty much the same so I'd be inclined to give them the thumbs up.

Erwin
Feb 17, 2006

I have a question about NAT traversal for SIP (I think). We switched to a new VOIP provider for our 20+ VOIP phones. They recommended an 1841 router for our largest location with 17 phones. Now we're having a problem with a few phones randomly not registering to their SIP server, and from what I can tell, it's because the 1841 doesn't translate SIP packets when NATing. The VOIP provider's response is to use our Juniper SSG140 for NATing, turning the 1841 into a fancy T1 interface, and something I'd like to avoid.

Is there no way to get the 1841 to play nice with SIP? I'm really annoyed that the provider's 'best practice' suggestion turns out to not be SIP-aware (at the time, I was not SIP-aware-aware and didn't realize that I should look out for such a thing).

SamDabbers
May 26, 2003



Erwin posted:

I have a question about NAT traversal for SIP (I think). We switched to a new VOIP provider for our 20+ VOIP phones. They recommended an 1841 router for our largest location with 17 phones. Now we're having a problem with a few phones randomly not registering to their SIP server, and from what I can tell, it's because the 1841 doesn't translate SIP packets when NATing. The VOIP provider's response is to use our Juniper SSG140 for NATing, turning the 1841 into a fancy T1 interface, and something I'd like to avoid.

Is there no way to get the 1841 to play nice with SIP? I'm really annoyed that the provider's 'best practice' suggestion turns out to not be SIP-aware (at the time, I was not SIP-aware-aware and didn't realize that I should look out for such a thing).

Try something like this: (assuming FastEthernet1 is your "inside" interface)

code:
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall sip
ip inspect name firewall rtsp
ip inspect name firewall rtp
interface FastEthernet1
ip inspect firewall in

CrazyLittle
Sep 11, 2001





Clapping Larry
Actually I work at an all cisco shop with polycom voip phones, and we're specifically exempting SIP with these:

code:
no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060

Erwin
Feb 17, 2006

CrazyLittle posted:

Actually I work at an all cisco shop with polycom voip phones, and we're specifically exempting SIP with these:

code:
no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060

These are polycom phones on a hosted broadsoft platform, so I'd imagine it's this. Can you explain what this is doing? The problem, as I understand it, is that NAT isn't rewriting the SIP headers with the translated RTP port. I'm not great with IOS yet, so I'm just curious.

Not that I don't believe you, I would just like to understand what's happening :)

some kinda jackal
Feb 25, 2003

 
 
Not that I'm doubting your guys' troubleshooting, but what would cause only a few phones to fail SIP registration? Sounds like it should be an all-or-none scenario.

CrazyLittle
Sep 11, 2001





Clapping Larry
The way our upstream explained it to us is: that Cisco's SIP fixup causes more problems than it fixes, and both polycom and broadsoft already have their own workarounds built-in. So if you disable fixup for SIP protocol, then you fix the sip-header related issues.

And what's more bizarre is that it's not an all-or-nothing problem. The most common manifestation we run into is one-way audio. The sip headers are intact enough to allow the call to connect but only one RTP stream actually makes it through, so either the caller OR the receiver can hear... but not both.

...and of course that's not the only "cisco magic" problem. There's always a fight over linkspeed auto-negotiation on all the cisco fastethernet-based hardware, like 1700 routers, or older switches. Gigabit fixes it, thankfully.

CrazyLittle fucked around with this message at 19:18 on Jul 28, 2010

GOOCHY
Sep 17, 2003

In an interstellar burst I'm back to save the universe!

CrazyLittle posted:

The way our upstream explained it to us is: that Cisco's SIP fixup causes more problems than it fixes, and both polycom and broadsoft already have their own workarounds built-in. So if you disable fixup for SIP protocol, then you fix the sip-header related issues.

And what's more bizarre is that it's not an all-or-nothing problem. The most common manifestation we run into is one-way audio. The sip headers are intact enough to allow the call to connect but only one RTP stream actually makes it through, so either the caller OR the receiver can hear... but not both.

Yep. I work for a CLEC that provides hosted VoIP services via Broadsoft with mostly Polycom handsets. I see this every now and then when our new turn up group configs a new install improperly.

Erwin
Feb 17, 2006

CrazyLittle posted:

The way our upstream explained it to us is: that Cisco's SIP fixup causes more problems than it fixes, and both polycom and broadsoft already have their own workarounds built-in. So if you disable fixup for SIP protocol, then you fix the sip-header related issues.

And what's more bizarre is that it's not an all-or-nothing problem. The most common manifestation we run into is one-way audio. The sip headers are intact enough to allow the call to connect but only one RTP stream actually makes it through, so either the caller OR the receiver can hear... but not both.

...and of course that's not the only "cisco magic" problem. There's always a fight over linkspeed auto-negotiation on all the cisco fastethernet-based hardware, like 1700 routers, or older switches. Gigabit fixes it, thankfully.

Yeah, our only problem so far has been 3 phones failing initial registration. The only solution the provider had initially was to provision another phone for one of the users. Restarting the bad phone didn't work, factory resetting it didn't work, rebuilding the config didn't work. The only thing I didn't clear was its DHCP lease. The other two broken phones I just put on our data network for now.

The fact that you say polycom and broadsoft have their own workarounds makes it click in my head. The cisco is fixing up headers, but [i]over[i/]fixing it so that RTP traffic comes back to the wrong port.

I hate when providers can't figure something out so they give you a band-aid, and you have to figure out the real solution on your own (by asking about it on SA in this case).

Boner Buffet
Feb 16, 2006
Not a question, but I'm on hold with TAC and I just realized they have had the same MOH for years now. There are maybe two audio tracks that loop.

n0tqu1tesane
May 7, 2003

She was rubbing her ass all over my hands. They don't just do that for everyone.
Grimey Drawer
It's better than Tandberg's hold music. It's a one minute classical loop.

ate shit on live tv
Feb 15, 2004

by Azathoth
N5K_Bottom# ping 127.0.0.1
Access to this hostname/IP address is not permitted

Woot no tcp/ip stack here.

inignot
Sep 1, 2003

WWBCD?
Huh. Cisco put out a book on tcl for ios.

http://www.amazon.com/TcL-Scripting-Cisco-Networking-Technology/dp/1587059452/ref=sr_1_1?ie=UTF8&s=books&qid=1280436005&sr=8-1

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer
how the hell do I boot to an alternate IOS image on a 2911?

ROUTER#show flash
-#- --length-- -----date/time------ path
1 62558836 Apr 07 2010 22:11:32 c2900-universalk9-mz.SPA.150-1.M1.bin
2 2903 Apr 07 2010 22:26:06 cpconfig-29xx.cfg
3 2915328 Apr 07 2010 22:26:20 cpexpress.tar
4 1038 Apr 07 2010 22:26:30 home.shtml
5 115712 Apr 07 2010 22:26:38 home.tar
6 1697952 Apr 07 2010 22:26:52 securedesktop-ios-3.1.1.45-k9.pkg
7 415956 Apr 07 2010 22:27:02 sslclient-win-1.1.4.176.pkg
8 62662920 Jul 26 2010 02:29:04 c2900-universalk9-mz.SPA.150-1.M3.bin

129765376 bytes available (130387968 bytes used)


I have tried:
boot system disk0:c2900-universalk9-mz.SPA.150-1.M3.bin
wr mem
reload

boot system flash:c2900-universalk9-mz.SPA.150-1.M3.bin
wr mem
reload

boot system flash c2900-universalk9-mz.SPA.150-1.M3.bin
wr mem
reload

boot system flash0:c2900-universalk9-mz.SPA.150-1.M3.bin
wr mem
reload


boot system flash flash0:c2900-universalk9-mz.SPA.150-1.M3.bin
wr mem
reload

and every time i get:

System returned to ROM by reload at 21:05:36 CDT Tue Jul 27 2010
System restarted at 21:18:50 CDT Tue Jul 27 2010
System image file is "flash0:c2900-universalk9-mz.SPA.150-1.M1.bin"
Last reload reason: Reload Command

I verified the md5 checksum, and the image is correct. I have a feeling I am just a dumbshit typing the wrong thing for boot system ... but I don't know what.

I guess I could just delete the old IOS image, but I would rather do it this way, for safety.

inignot
Sep 1, 2003

WWBCD?
sh run | inc boot

How many boot statements do you have? You may need to delete prior statements to boot the file you want.

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer

inignot posted:

sh run | inc boot

How many boot statements do you have? You may need to delete prior statements to boot the file you want.
I have removed them after restarting, before trying a new one. Sorry, I should have specified that. Currently,

boot-start-marker
boot system disk0:c2900-universalk9-mz.SPA.150-1.M3.bin
boot-end-marker

which also did not work.

abigserve
Sep 13, 2009

this is a better avatar than what I had before
Stupid question, whats your config register set to? (sh ver; at the bottom). It should be 2102.

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer

abigserve posted:

Stupid question, whats your config register set to? (sh ver; at the bottom). It should be 2102.
Configuration register is 0x2102

spigety
Apr 4, 2005
hi.
Okay, I was wondering if what I want to do is possible, so maybe someone can answer this for me.

Currently, my home network is a westell adsl modem in bridged mode, with a computer running monowall doing the actual authentication for pppoe.

I have a 2650xm router that I am looking to buy a wic-1adsl for and use that as a modem instead. Is it possible to set the 2650xm to a bridged mode similar to how my original setup with monowall handling the pppoe was? Maybe another suggestion?

I understand this is pretty convoluted, but there are a number of reasons I would like to do it this way if possible.

ate shit on live tv
Feb 15, 2004

by Azathoth
boot system flash flash:c2900-universalk9-mz.SPA.150-1.M3.bin

The way to verify the device name is correct is do a dir /all and it will tell you whether its is disk0:, flash:, bootflash: etc. Yea its kind of inconsistent, but what can you do?

The other thing you can do is
conf t
config-register 0x0
wr
reload
get into rommon and type dev, see what the devices are called and then do
BOOT=flash:c2900-universalk9-mz.SPA.150-1.M3.bin
confreg 0x2102
sync
reset

ate shit on live tv fucked around with this message at 20:23 on Jul 31, 2010

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer

Powercrazy posted:

The other thing you can do is
conf t
config-register 0x0
wr
reload
get into rommon and type dev, see what the devices are called and then do
BOOT=flash:c2900-universalk9-mz.SPA.150-1.M3.bin
confreg 0x2102
sync
reset
Does this require physical access to the device?

Adbot
ADBOT LOVES YOU

n0tqu1tesane
May 7, 2003

She was rubbing her ass all over my hands. They don't just do that for everyone.
Grimey Drawer

adorai posted:

Does this require physical access to the device?

Yeah, it does. Only way to do anything in rommon mode is through the console port.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply