取消
显示结果 
搜索替代 
您的意思是: 
cancel
3388
查看次数
0
有帮助
10
回复

Cisco ISR 1111-8P随机重新启动

Translator
Community Manager
Community Manager

你好,

大约6个月前,我购买了一台Cisco C1111-8P ISR路由器,该路由器采用IOS XE 16.12.04版。
它用作DSL拨号的边缘路由器。所以没有特别的配置。(确定,直接IPv6和隧道HE-Uplink的基于源的路由;静态IP)。

到目前为止,它还运行良好。但上个月,我意外重启了路由器。

系统日志(远程日志记录服务器)保持为空。此时没有SSH登录或出现任何错误消息。

 

输入

bootflash:/tracelogs/ I found 3 files named shutdown_cc0.log, shutdown_fp0.log and shutdown_rp0.log


我把他们挂在这张帖子上。

在每个文件中,我都能找到一

pvp pvp_0-0.17986_0.20220217042043.bin

此FRU上如何开始关闭的日志


我可以找到压缩后解压缩的文件。很遗憾,它不是文本文件。

你知道,我如何去调查那些重装?

是否保存以附加该bin日志或是否包含任何敏感信息?

 

非常感谢任何帮助。

1 个已接受解答

已接受的解答

Translator
Community Manager
Community Manager

@MarkusD写道:

抱歉,此文件中有许多敏感信息。我必须在此处再次删除它。


不,不是的。  它是来自QFP的核心转储。  只有TAC有权读取。  

需要睡觉。 

我明天再看看。 

如果由于没有维护合同而无法下载软件,请留意思科安全公告

在接下来的几周内,将发布PSIRT/软件漏洞通告,并将影响17.3.4及更低版本的所有IOS-XE。  修复将在16.12.7和17.3.5中(不确定其余部分)。  

发生这种情况时,请仔细阅读安全公告。  每个安全公告都应包含一个名为“Customers Without Service Contracts”(无服务合同的客户)部分,该部分应为:  


无服务合同的客户

直接从思科购买但未持有思科服务合同的客户和通过第三方供应商购买但未通过销售点获得固定软件的客户,应通过联系思科TAC获得升级 

 

客户应该拥有可用的产品序列号,并准备提供此建议的URL,作为有权免费升级的证明。


看吧。  明白。  

希望这能有帮助。

 

 

在原帖中查看解决方案

10 条回复10

Translator
Community Manager
Community Manager

查找一些漏洞,此版本在此路由器上运行多长时间,如果您有机会升级到最新稳定,请检查或联系TAC。

Translator
Community Manager
Community Manager

路由器随附此固件。
我没有此路由器的Smartnet合同。因此,我想我无法联系TAC。

是否有方法以人类可读的方式显示pvp binlog?

Translator
Community Manager
Community Manager

 

                                       >.....你知道,我如何去调查这些重载吗?

— 使用https://cway.cisco.com/cli接到ISR(SSH),在右上角按或运行

Crashdump Analyzer

如前所述,请考虑升级到最新的建议版本:https://software.cisco.com/download/home/286321996/type/282046477/release/Amsterdam-17.3.4a

 M.

 

Translator
Community Manager
Community Manager

将完整输出发布到以下命令:

  1. sh version
  2. dir
  3. dir bootflash:core

 

Translator
Community Manager
Community Manager

非常感谢您的回复。

以下是上述命令的输出:

 

sh version
Cisco IOS XE Software, Version 16.12.04 Cisco IOS Software [Gibraltar], ISR Software (ARMV8EL_LINUX_IOSD-UNIVERSALK9-M), Version 16.12.4, RELEASE SOFTWARE (fc5) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2020 by Cisco Systems, Inc. Compiled Thu 09-Jul-20 20:16 by mcpre Cisco IOS-XE software, Copyright (c) 2005-2020 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: 16.12(2r) Router uptime is 1 day, 4 hours, 38 minutes Uptime for this control processor is 1 day, 4 hours, 40 minutes System returned to ROM by LocalSoft at 20:58:12 CET Sun Nov 7 2021 System restarted at 07:02:28 CET Tue Mar 1 2022 System image file is "bootflash:c1100-universalk9.16.12.04.SPA.bin" Last reload reason: LocalSoft This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Suite License Information for Module:'esg' -------------------------------------------------------------------------------- Suite Suite Current Type Suite Next reboot -------------------------------------------------------------------------------- FoundationSuiteK9 None Smart License None securityk9 appxk9 Technology Package License Information: ----------------------------------------------------------------- Technology Technology-package Technology-package Current Type Next reboot ------------------------------------------------------------------ appxk9 None Smart License None uck9 None Smart License None securityk9 None Smart License None ipbase ipbasek9 Smart License ipbasek9 The current throughput level is unthrottled Smart Licensing Status: UNREGISTERED/No Licenses in Use cisco C1111-8P (1RU) processor with 1398091K/6147K bytes of memory. Processor board ID FCZ2530R27V 2 Virtual Ethernet interfaces 10 Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 4194304K bytes of physical memory. 2863103K bytes of flash memory at bootflash:. 0K bytes of WebUI ODM Files at webui:. Configuration register is 0x2102

 

dir

Directory of bootflash:/ 11 drwx 16384 Jul 20 2021 08:49:31 +01:00 lost+found 138721 drwx 4096 Nov 7 2021 21:01:10 +01:00 .prst_sync 12 -rw- 35 Aug 14 2021 11:58:04 +01:00 pnp-tech-time 13 -rw- 79731 Aug 14 2021 11:58:13 +01:00 pnp-tech-discovery-summary 14 -rw- 542525852 Jul 20 2021 08:52:04 +01:00 c1100-universalk9.16.12.04.SPA.bin 97921 drwx 4096 Mar 1 2022 07:01:49 +01:00 .installer 89761 drwx 4096 Mar 1 2022 06:59:51 +01:00 core 122401 drwx 4096 Jul 20 2021 08:57:12 +01:00 .rollback_timer 114241 drwx 4096 Jul 20 2021 08:57:13 +01:00 gs_script 15 -rw- 132108 Mar 1 2022 07:02:26 +01:00 memleak.tcl 40801 drwx 4096 Jul 20 2021 08:57:23 +01:00 virtual-instance 48961 drwx 4096 Aug 14 2021 12:06:57 +01:00 .dbpersist 57121 drwx 53248 Mar 2 2022 11:32:25 +01:00 tracelogs 65281 drwx 4096 Jul 20 2021 08:57:45 +01:00 .attrib 16 -rw- 30 Mar 1 2022 07:02:42 +01:00 throughput_monitor_params 73441 drwx 4096 Jul 20 2021 08:57:50 +01:00 onep 146881 drwx 4096 Mar 1 2022 07:02:49 +01:00 license_evlog 17 -rw- 656 Aug 14 2021 12:35:52 +01:00 vlan.dat 18 -rw- 11318 Aug 14 2021 21:18:38 +01:00 running_210814.txt 21 -rw- 274 Oct 30 2021 21:11:41 +01:00 btdecode_err 19 -rw- 8325 Aug 22 2021 14:28:06 +01:00 startup_210822.txt 20 -rw- 12429 Aug 22 2021 15:13:03 +01:00 shaping-test_210822.txt 22 -rw- 2672640 Oct 16 2021 12:13:52 +01:00 nbar2_http_default.tar 171361 drwx 4096 Oct 16 2021 12:13:54 +01:00 nbar2 106081 drwx 4096 Oct 16 2021 12:20:50 +01:00 guest-share 36 -rw- 9757 Nov 9 2021 16:12:04 +01:00 startup_211109.txt 2908606464 bytes total (2112970752 bytes free)

 

dir bootflash:core
Directory of bootflash:/core/ 97923 drwx 4096 Jul 20 2021 08:57:11 +01:00 modules 89762 -rw- 1 Mar 2 2022 11:32:56 +01:00 .callhome 89763 -rw- 15232975 Aug 14 2021 20:54:21 +01:00 Router_RP_0_qfp-ucode-tsn-le_17679_20210814-205402-CET.core.gz 89764 -rw- 19512780 Nov 1 2021 16:26:20 +01:00 Router_RP_0_qfp-ucode-tsn-le_17657_20211101-162559-CET.core.gz 89765 -rw- 19655984 Feb 17 2022 01:19:36 +01:00 Router_RP_0_qfp-ucode-tsn-le_17692_20220217-011914-CET.core.gz 89766 -rw- 18477992 Feb 17 2022 05:18:10 +01:00 Router_RP_0_qfp-ucode-tsn-le_17891_20220217-051749-CET.core.gz 89767 -rw- 16080432 Mar 1 2022 06:59:51 +01:00 Router_RP_0_qfp-ucode-tsn-le_17734_20220301-065931-CET.core.gz 2908606464 bytes total (2112905216 bytes free)

 

Translator
Community Manager
Community Manager

再重新加载。这次拨号器接口的PPPoE隧道首先重新连接。

 

根据我的日志,发生了以下情况:

Mar  2 10:57:22.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to down
Mar 2 10:58:18.832: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up

11:04时,路由器再次重新启动。

Translator
Community Manager
Community Manager

@MarkusD写道:
Router_RP_0_qfp-ucode-tsn-le_17734_20220301-065931-CET.core.gz

上传此文件。 

或者,提交TAC案例,并让他们验证这是否是CSCvy57684

Translator
Community Manager
Community Manager

请求的文件已附加。

我必须再次压缩它,因为此处不允许gz分机。

抱歉,此文件中有许多敏感信息。我必须在此处再次删除它。

不过,非常感谢您的帮助。

Translator
Community Manager
Community Manager

@MarkusD写道:

抱歉,此文件中有许多敏感信息。我必须在此处再次删除它。


不,不是的。  它是来自QFP的核心转储。  只有TAC有权读取。  

需要睡觉。 

我明天再看看。 

如果由于没有维护合同而无法下载软件,请留意思科安全公告

在接下来的几周内,将发布PSIRT/软件漏洞通告,并将影响17.3.4及更低版本的所有IOS-XE。  修复将在16.12.7和17.3.5中(不确定其余部分)。  

发生这种情况时,请仔细阅读安全公告。  每个安全公告都应包含一个名为“Customers Without Service Contracts”(无服务合同的客户)部分,该部分应为:  


无服务合同的客户

直接从思科购买但未持有思科服务合同的客户和通过第三方供应商购买但未通过销售点获得固定软件的客户,应通过联系思科TAC获得升级 

 

客户应该拥有可用的产品序列号,并准备提供此建议的URL,作为有权免费升级的证明。


看吧。  明白。  

希望这能有帮助。

 

 

Translator
Community Manager
Community Manager
快捷链接