ISR4431 ROMMON Upgrade

[ichernyshkov]

Hello.

I am trying to upgrade ROMMON on ISR4431. I get an error message about wrong MD5.

Current ROMMON is 16.9(1r), IOS 16.6.7.

RT#upgrade rom-monitor filename bootflash:isr4400_rommon_1612_2r_SPA.pkg all
Chassis model ISR4431/K9 has a single rom-monitor.

Upgrade rom-monitor

Target copying rom-monitor image file
Booted : 1
Selected : 1
Reset Reason: 0
Switching to ROM 0
Upgrading ROMMON image...
3211264+0 records in
3211264+0 records out
3211264 bytes (3.2 MB, 3.1 MiB) copied, 31.836 s, 101 kB/s
3211264+0 records in
3211264+0 records out
3211264 bytes (3.2 MB, 3.1 MiB) copied, 15.7749 s, 204 kB/s
Verifying ROMMON image...
3211264+0 records in
3211264+0 records out
3211264 bytes (3.2 MB, 3.1 MiB) copied, 16.6036 s, 193 kB/s
Switching back to ROM 1

FAILURE: Upgraded ROMMON image failed verification check.
Upgrade image MD5 signature is fb5b21552ead7be7992583411916fffb
Upgraded ROMMON image MD5 signature is 2611ffa12f95adb4a88c15ad64d72f63

RT#veri /md5 bootflash:isr4400_rommon_1612_2r_SPA.pkg
.............................................................Done!
verify /md5 (bootflash:isr4400_rommon_1612_2r_SPA.pkg) = d2df9d11c547eb80dbab4f0cc8f30ec7

RT#veri /md5 bootflash:isr4400_rommon_169_1r_SPA.pkg
.............................................................Done!
verify /md5 (bootflash:isr4400_rommon_169_1r_SPA.pkg) = a45dfc074b27367aa5130f8db092c2b9

From the software download site:

Release :

16.12(2r)

MD5 Checksum :

d2df9d11c547eb80dbab4f0cc8f30ec7

[Leo Laohoo]

Post the complete output to the command "sh plat".

[ichernyshkov]

RT#sh platform
Chassis type: ISR4431/K9

Slot Type State Insert time (ago)
--------- ------------------- --------------------- -----------------
0 ISR4431/K9 ok 00:31:26
0/0 ISR4431-X-4x1GE ok 00:29:21
0/3 NIM-2T ok 00:29:21
R0 ISR4431/K9 ok, active 00:31:26
F0 ISR4431/K9 ok, active 00:31:26
P0 PWR-4430-AC ok 00:30:59
P1 PWR-4430-AC ok 00:30:59
P2 ACS-4430-FANASSY ok 00:30:59

Slot CPLD Version Firmware Version
--------- ------------------- ---------------------------------------
0 15010638 16.9(1r)
R0 15010638 16.9(1r)
F0 15010638 16.9(1r)

[Leo Laohoo]

Downgrade the ROMMON to 16.7(5r) first and then go straight to 16.12(2r).

[ichernyshkov]

The result is similar:

RT#upgrade rom-monitor filename bootflash:isr4400_rommon_167_5r_SPA.pkg all
Chassis model ISR4431/K9 has a single rom-monitor.

Upgrade rom-monitor

Target copying rom-monitor image file
Booted : 1
Selected : 1
Reset Reason: 0
Switching to ROM 0
Upgrading ROMMON image...
3211264+0 records in
3211264+0 records out
3211264 bytes (3.2 MB, 3.1 MiB) copied, 31.0563 s, 103 kB/s
3211264+0 records in
3211264+0 records out
3211264 bytes (3.2 MB, 3.1 MiB) copied, 18.2471 s, 176 kB/s
Verifying ROMMON image...
3211264+0 records in
3211264+0 records out
3211264 bytes (3.2 MB, 3.1 MiB) copied, 17.9437 s, 179 kB/s
Switching back to ROM 1

FAILURE: Upgraded ROMMON image failed verification check.
Upgrade image MD5 signature is 3c406c0acf01bd5e69c3b1fb1f789165
Upgraded ROMMON image MD5 signature is d1d7194d6fd1e9ac2d0b4d2c2fe2000b

RT#verify /md5 bootflash:isr4400_rommon_167_5r_SPA.pkg
...............................Done!
verify /md5 (bootflash:isr4400_rommon_167_5r_SPA.pkg) = 7b852c2927f74ac9cbe5c713eb2c98fa

[Leo Laohoo]

Downgrade the IOS first and try the ROMMON downgrade/upgrade again.

[ichernyshkov]

Successfully upgraded the second router from 16.7(4r).

The first one, with 16.9(1r), can't be neither downgraded nor upgraded.

I have found this in the docs:

After a device is upgraded to 16.9(1r) ROMMON release, the ROMMON cannot be downgraded to a release earlier than 16.9(1r). All future ROMMON releases can be downgraded to the 16.9(1r) release.

[Leo Laohoo]

Raise a TAC Case and get the router RMA-ed.  

I suspect it can't be upgraded due to CSCvr18589.

[ichernyshkov]

Successfully upgraded ROMMON from 16.9(1r) to 16.12(2r) on IOS 9.16.09.05. I have tried about 6 different versions of IOS, only on 9.16.09.05 it worked.

[Adrian Griffis]

@ichernyshkov This worked for me also, upgrading to IOS 9.16.09.05.

I was running 16.06.* variants and getting the "failed verification check" on ROMMON upgrade file 16.12(2r).