cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4291
Views
10
Helpful
5
Replies

IR829 upgrade Rommon Recovery

iso00
Level 1
Level 1

While attempting to perform a bundle install upgrade from ir800-universalk9-bundle.SPA.159-3.M1.bin to ir800-universalk9-bundle.SPA.159-3.M2.bin, one of my modems failed and is now in ROMMON-1.  I have tried the rommon recovery procedure as described in the link below boot flash:<with the previous working HV> and even tried an older HV yields the results below.  Any advice?

200712-rommon-recovery-procedure-for-the-cisco.html

rommon-1> boot flash:ir800-hv.srp.SPA.3.0.97
Image signature verified
Booting image flash:ir800-hv.srp.SPA.3.0.97
[ 1044.703500] kexec: Starting new kernel

RIF heap (initial): 2774816 bytes
RIF<3> Added 2774816 bytes at <0x2015a8e0> to the RIF heap
RIF: Host RAM: 1467008KB required, 1467729KB available
RIF: Host low RAM: 4808KB required, 1467729KB available
RIF: Host RAM unused by memory regions: 721KB total, 721KB low
Processing SRP...
RIF: used 10568/16384 bytes of stack

##############################################################

LynxSecure TRUNK (No Service Packs installed)
Copyright 2004-2016 Lynx Software Technologies, Inc
All rights reserved.

LynxSecure (x86_64) build ENGINEERING created on 01/27/2016 09:35:28
URL: svn://txx.lynx.com/svn/lynxsecure/engr/psubramaniam/tot-20141010/lynxsecure/src
Revision(s): 11396M
Built by: psubramaniam@paricos62.localdomain

##############################################################

Initializing the Internal Timekeeping...
Initializing the System State Manager...
Initializing LynxSecure global data areas.
Number of CPU(s) : 2
Initializing the CPU Support Package.
Initializing LynxSecure page table...
Initializing the Board Support Package.
Initializing Scheduler...
Initializing the VCPU module...
Starting up the other CPUs...
CPUs online: #0 #1
Initializing Device Configuration Virtualization...
Initializing Subject Resources...
LS<3> DCV: device SATA0 (00:17.0) doesn't support generic reset
Initializing Interrupt Routing...
Initializing Hypercalls...
Heap memory used by LynxSecure: 1766800 (0x1af590) bytes
Launching Subjects
<3> [0.824154] IOAPIC: IOAPIC 1 initialized, implementation version 32
<3> [0.824154] <E1000> e1000_device_init: initialized E1000 device
<3> [0.824154] <E1000> e1000_device_init: initialized E1000 device
<6> PCI: Initializing
<6> PCI: Finished Initializing
Autoboot string flash:ir800-universalk9-mz.SPA.157-3.M4b

Booting image: flash:ir800-universalk9-mz.SPA.157-3.M4b.... [Multiboot-elf, <
0x110000:0x9f299ec:0x3ca948>, shtab=0xa4052f8[csvds]:/ir800-universalk9-mz.SPA.
157-3.M4b... , entry=0x1100b0]
[CU:0]
Jumps to: 0x1100b0

Smart Init is enabled
smart init is sizing iomem
TYPE MEMORY_REQ
Onboard devices &
buffer pools 0x03644000
-----------------------------------------------
TOTAL: 0x03644000

Rounded IOMEM up to: 55MB.
Using 12 percent iomem. [55MB/448MB]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

 

Cisco IOS Software, ir800 Software (ir800-UNIVERSALK9-M), Version 15.7(3)M4b, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2019 by Cisco Systems, Inc.
Compiled Tue 07-May-19 17:22 by prod_rel_team


cellwan_cwmp_init

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco IR829M-2LTE-EA-BK9 (revision 2.0) with 365568K/60416K bytes of memory.Installed image archive

Processor board ID <redacted>
Last reset from Firmware Upgrade

FPGA version: 2.A.0

BIOS: version 25 Production
BIOS: date[YYYY/MM/DD] :[2019/4/26]

MCU Bootloader : 28
MCU Application: 33

2 Serial(sync/async) interfaces
7 Gigabit Ethernet interfaces
11 terminal lines
4 Cellular interfaces
1 cisco Embedded AP (s)
DRAM configuration is 72 bits wide with parity disabled.
256K bytes of non-volatile configuration memory.
976562K bytes of ATA System Flash (Read/Write)
250000K bytes of ATA Bootstrap Flash (Read/Write)

New Algorithm: Copied the BIOS upgrade image to Flash
New Algorithm: Update FPGA Upgrade image to Flash...
FPGA Image upgrade completed.
Starting File System integrity check
NOTE: File System will be deinited and later rebuilt

Starting partition 0 Analysis
Boot Sector/Boot Parameter Block check ...[Passed]
DIB not present
DIB & Monlib check ...[Passed]
Partition Init check ...[Passed]
Directory entries check ...[Passed]
Starting File System integrity check
NOTE: File System will be deinited and later rebuilt

Starting partition 0 Analysis
Boot Sector/Boot Parameter Block check ...[Passed]
DIB not present
DIB & Monlib check ...[Passed]
Partition Init check ...[Passed]
Directory entries check ...[Passed]
Note: vds not reachable

Powering down cellular modem, please wait...
Powering down cellular modem, please wait...
*Aug 6 14:45:12.838: %ACT2-5-STARTED: ACT2 process started.
*Aug 6 14:45:14.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface wlan-ap0, changed state to up
*Aug 6 14:45:14.391: %LINK-3-UPDOWN: Interface GigabitEthernet5, changed state to up
*Aug 6 14:45:14.391: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Aug 6 14:45:14.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Aug 6 14:45:15.923: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet5, changed state to up
*Aug 6 14:45:15.923: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Aug 6 14:45:18.246: %IR800_BIOS-2-IR800_BIOS_UPGRADE_REQUIRED: Running version: 25, available version: 24
*Aug 6 14:45:35.575: %IR800_FPGA-2-UPGRADE_REQUIRED: FPGA upgrade is in progress. Current version = 2.A.0, new version = 2.9.0. System will upgrade now and then reboot automatically.
*Aug 6 14:45:43.346: %IR800_FPGA-2-UPGRADE_COMPLETED: FPGA upgrade completed successfully.
*Aug 6 14:45:43.398: %SYS-5-RELOAD: Reload requested by FPGA/BIOS. Reload Reason: Firmware Upgrade Completed.
*Aug 6 14:45:44.658: %IR800_ENV-5-IR800_VDS_FAIL_NOTIFIED_GOS_SHUTDOWN: Failed to notified VDS for graceful shutdown.
IR829 Loader Stage 1 Version 1.22

FPGA version 0x20a00 built 2019-4-1
Booted from the upgrade FPGA; SecureBoot did not fallback
Reset reason: software upgrade
BIOS Platform: IR800
BIOS Version: 25
SecureBoot core version: F01047R15.017cc1eea2019-02-08
Microloader version: MA0061R06.0404022015
Booted from the upgrade BIOS


Updating the Upgradable FPGA
DO NOT power cycle the router!!!
ERROR: Image signature verification failed
Failed to verify the Upgradable FPGA image
The configuration reset button has been pressed.
SRP autoboot is set to 'bootstrap:ir800-hv.srp.SPA.3.1.6'
IOS autoboot is set to 'flash:ir800-universalk9-mz.SPA.157-3.M4b'
Config reg configured to Autoboot
Autoboot is ON, variable: bootstrap:ir800-hv.srp.SPA.3.1.6
ERROR: Image signature verification failed
rommon-1>

 

 

 

5 Replies 5

Leo Laohoo
Hall of Fame
Hall of Fame

@iso00 wrote:
Updating the Upgradable FPGA
DO NOT power cycle the router!!!
ERROR: Image signature verification failed
Failed to verify the Upgradable FPGA image

The file with the filename "ir800-hv.srp.SPA.3.0.97" is corrupt.  Download the file again from the Cisco website and make sure to compare the MD5 hash value before proceeding any further.  The MD5 hash value needs to match.  

@Leo Laohoo  Thank you for your suggestion.  I verified the MD5 after download and extract on local disk and again after copying to USB against the MANIFEST. rommon-1 did not have a hash tool to verify after copying to flash.  I tried booting directly from the verified file on USB and experienced the same behavior. boot usb:ir800-hv.srp.SPA.3.0.97

 

IR829 Loader Stage 1 Version 1.22

FPGA version 0x20a00 built 2019-4-1
Booted from the upgrade FPGA; SecureBoot did not fallback
Reset reason: software upgrade
BIOS Platform: IR800
BIOS Version: 25
SecureBoot core version: F01047R15.017cc1eea2019-02-08
Microloader version: MA0061R06.0404022015
Booted from the upgrade BIOS


Updating the Upgradable FPGA
DO NOT power cycle the router!!!
ERROR: Image signature verification failed
Failed to verify the Upgradable FPGA image
Config reg configured to Autoboot
Autoboot is ON, variable: bootstrap:ir800-hv.srp.SPA.3.1.6
ERROR: autoboot image not valid, autoboot suspended

 

 

rommon-1> show version
IR829 Loader Stage 1 Version 1.22

FPGA version 0x20a00 built 2019-4-1
Booted from the upgrade FPGA; SecureBoot did not fallback
Reset reason: software upgrade
BIOS Platform: IR800
BIOS Version: 25
SecureBoot core version: F01047R15.017cc1eea2019-02-08
Microloader version: MA0061R06.0404022015
Booted from the upgrade BIOS

Ok ... I got a stupid question: Instead of 15.9(3)M2, have you tried upgrading to 15.9(3)M1?
Just want to see if this is a bug with the M2 firmware.

@Leo Laohoo Yes, my original post is booting flash:ir800-hv.srp.SPA.3.0.97 which I confirmed is in the 15.9(3)M1 bin file.  I also downloaded fresh M1 verified the hash and booted via USB which yielded the same result. 

Open a TAC Case.
I've never seen this behaviour before.