topic named extended access-list in 7200 in Routing and SD-WAN

named extended access-list in 7200

apingleton — Tue, 05 Mar 2019 01:49:57 GMT

Hello,

I've got a 7200 vxr that I'm trying to create a named extended access-list in.

I got to conf t

if I go into ip after that the only commands available for access-list are log-update, logging, and resequence.

so if I go back to the main config menu access-list is an available command

but then from the main config menu, if I type: access-list extended eth0_in it says invalid input detected at the carrot marker which is under the first character of the work extended.

also, at the main config menu, if I type: ip access-list extended eth0_in it again give me the invalid input detected at the word extended.

I don't understand what I am missing to get this to work.

I would greatly appreciate any help anyone could give me on this.

Thanks,

Allen

named extended access-list in 7200

AhmedSonba — Thu, 11 Oct 2012 19:18:41 GMT

Hello Allen,

Can you post the show version output here to see what Version of IOS yo are running since Named Access list where

introduced in Cisco IOS Software Release 11.2

Please refer to the following link for more information

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml#ipnamacl

Hope it will Help

Ahmed Sonba

named extended access-list in 7200

apingleton — Thu, 11 Oct 2012 19:22:31 GMT

Sure, here it is:

Cisco Internetwork Operating System Software

IOS (tm) 7200 Software (C7200-KBOOT-M), Version 12.3(6), RELEASE SOFTWARE (fc3)

Thank you for your valuable time,

Allen

named extended access-list in 7200

AhmedSonba — Thu, 11 Oct 2012 19:43:08 GMT

Hello Allen,

Its rather strange honstly because I have tried it on my router and its working fine

ip access-list ?

extended Extended Access List

log-update Control access list log updates

logging Control access list logging

resequence Resequence Access List

standard Standard Access Lis

also I have copied and past your command "ip access-list extended eth0_in"

and it worked just fine on my router .

Can you try it again and copy and post the out come here

Ahmed Sonba

named extended access-list in 7200

apingleton — Thu, 11 Oct 2012 20:20:30 GMT

Sure here is the command you listed above:

OMEGA-edge(boot)#conf t

Enter configuration commands, one per line. End with CNTL/Z.

OMEGA-edge(boot)(config)#ip access-list ?

log-update Control access list log updates

logging Control access list logging

resequence Resequence Access List

OMEGA-edge(boot)(config)#ip access-list

Here is the command trying to make the ACL:

OMEGA-edge(boot)(config)#ip access-list extended eth0_in

% Invalid input detected at '^' marker.

This is very confusing.

Thank you for your advice on this,

Allen

named extended access-list in 7200

Giuseppe Larosa — Thu, 11 Oct 2012 21:08:27 GMT

Hello Allen,

>> OMEGA-edge(boot)

your router hasn't loaded a full IOS image this is the meaning of the (boot), so you have a more basic problem then named extended access-list.

check with

show version

show bootvar

you need then to find out if a complete IOS image is present in flash

Hope to help

Giuseppe

named extended access-list in 7200

apingleton — Thu, 11 Oct 2012 21:12:47 GMT

Okay, I just reset it to defaults, here is the full show version:

Router(boot)#show version

Cisco Internetwork Operating System Software

IOS (tm) 7200 Software (C7200-KBOOT-M), Version 12.3(6), RELEASE SOFTWARE (fc3)

Compiled Wed 11-Feb-04 15:56 by kellythw

Image text-base: 0x60008AF4, data-base: 0x609CA000

ROM: System Bootstrap, Version 12.2(4r)B2, RELEASE SOFTWARE (fc2)

Router uptime is 18 minutes

System returned to ROM by reload at 12:10:54 UTC Thu Oct 11 2012

System image file is "bootflash:c7200-kboot-mz.123-6.bin"

Last reload reason: Reload command

cisco 7206VXR (NPE400) processor (revision A) with 491520K/32768K bytes of memory.

Processor board ID 36577128

R7000 CPU at 350MHz, Implementation 39, Rev 3.3, 256KB L2 Cache

6 slot VXR midplane, Version 2.11

Last reset from power-on

Bridging software.

X.25 software, Version 3.0.0.

PCI bus mb0_mb1 has 400 bandwidth points

PCI bus mb2 has 0 bandwidth points

2 FastEthernet/IEEE 802.3 interface(s)

125K bytes of non-volatile configuration memory.

8192K bytes of Flash internal SIMM (Sector size 256K).

Configuration register is 0x2102

And here is the show bootvar:

Router(boot)#show bootvar

BOOT variable does not exist

CONFIG_FILE variable does not exist

BOOTLDR variable does not exist

Configuration register is 0x2102

How can I tell if this is not a full version of IOS???????

named extended access-list in 7200

AhmedSonba — Thu, 11 Oct 2012 21:21:17 GMT

Hello Giuseppe

Is it possible that Allen has a corrupted IOS image in his flash ? which is resulting this problem

Ahmed Sonba

Re: named extended access-list in 7200

Giuseppe Larosa — Fri, 12 Oct 2012 10:53:26 GMT

Hello Allen,

>> System image file is "bootflash:c7200-kboot-mz.123-6.bin"

notice the boot in the image filename your router is not running a full IOS image, it is just a bootloader with limited functionality

post

dir bootflash:

dir slot0:

dir slot1:

dir /all

Ahmed:

the full IOS image can be missing or corrupted as you noted.

In a device like this the full IOS image is usually on a PCMCIA flash card that can be easily removed (slot0: or slot1:)

Example:

taken from a C7200 with a full IOS image (some time ago)

mclaren#sh ver

Cisco Internetwork Operating System Software

IOS (tm) 7200 Software (C7200-JK9S-M), Version 12.2(15)T14, RELEASE SOFTWARE (fc4)

Technical Support: http://www.cisco.com/techsupport

Compiled Sat 28-Aug-04 16:22 by cmong

Image text-base: 0x60008954, data-base: 0x62146000

ROM: System Bootstrap, Version 11.1(13)CA, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

>>BOOTLDR: 7200 Software (C7200-BOOT-M), Version 11.3(2)AA, EARLY DEPLOYMENT, RELEASE SOFTWARE (fc1)

mclaren uptime is 5 days, 4 hours, 59 minutes

System returned to ROM by power-on

System restarted at 11:34:22 UTC Wed Jan 5 2005

>>System image file is "slot0:c7200-jk9s-mz.122-15.T14.bin"

Hope to help

Giuseppe

Re: named extended access-list in 7200

apingleton — Fri, 12 Oct 2012 17:02:16 GMT

Hello everyone,

Just wanted to finish this up. You were right Giuseppe, it wasn't loading the actual IOS image into it.

The router was a spare of someone else in the company given to me to use and they grabbed one that had no image on it.

I've got another one now that works perfectly.

Thank both of you very much for your help with this, and your valuable time in doing so,

Allen