Disable USB Ports on IE-3300-8T2S IOS XE 17.9.5

[kuzmaone66]

Hello Community

I am trying to disable the USB Ports on the Rugged Switch IE-3300-8T2S.

I wonder if that is even possible, since the only command I found "platform usb disable", does not work.

The command above I found in description for IOS XE Version 17.10 and for the Catalyst 9300. We are still running version 17.9.5. Do we have to upgrade or is the command just different in the 17.9 IOS XE?

All the best   kurt

[stephan.l.martin1]

Greetings!

It looks like the command isn’t supported on that particular platform. Depending on the purpose you could try using USB port locks to accomplish the same task.

HTH!

[kurt_faeh]

Hello Stephan

Thanks for the information. I will ask my coleagues to do that if there is no other way.

All the best   kurt

[Albert Mitchell]

try using the command "platform usbflash 0 disable"

its in configuration mode 

IE_Switch(config)#platform usbflash 0 disable

[kurt_faeh]

Hello Albert

Unfortunately there are no platform commands for usb devices. At the moment we have to stick to the recommendation Stephan gave me.

Thanks and have a nice day      kurt

[Albert Mitchell]

in config mode?

in my previous reply i gave an example from an IE3300 switch

[kurt_faeh]

I did try it in config mode.

We have a Switch modell IE-3300-8T2S and running IOS XE Version 17.9.5. Are you using a newer IOS Version then we do?

All the best and thanks for your support.   kurt 

[kurt_faeh]

Hello Albert
I had another go today and that is the result.

csw03(config)#platform usbflash 0 disable
                       ^
% Invalid input detected at '^' marker.

csw03(config)#platform u?
% Unrecognized command
csw03(config)#platform u

And that is the IOS and Hardware information

Cisco IOS Software [Cupertino], IE3x00 Switch Software (IE3x00-UNIVERSALK9-M), Version 17.9.5, RELEASE SOFTWARE (fc1)
Model Number : IE-3300-8T2S

There is no "platform usb" command available on that switch. So I wonder if you are running a newer IOS version than we do or if we have a slightly different Hardware platform?

Thanks for your support and a nice day     kurt

[kurt_faeh]

Hello Albert

Yesterday I did a quick check with the IOS XE Version 17.12.04 and got the same result. There is still no cli command to deactivate the USB ports.

Thanks and all the best   kurt

[Albert Mitchell]

interesting.  it always works for me.   its a mystery.

i tried again on 17.14.01.    but version should not be the issue. 

my IE3300 happens to be running Network Advantage license.  I do not have a USB installed.

when i execute "snow filesystems",  USBFlash does not show up. 

same with "dir ?".  since a USB is not installed, its not listed.

[kurt_faeh]

Hello Albert

I am puzzled as well. We do have the same hardware and running the Network Advantage License to.

We had to update the IOS XE to version 17.12.4 because of the bug described in the Field Notice: FN74171. But there is still no difference regarding the USB ports. There is still no command "platform usbflas" if I switch to the config terminal.

We startet running the ios in Bundle Mode, as the switches got delivered to us, with the boot command "boot system flash:ie3x00-universalk9.17.12.04.SPA.bin".
I know it's clutching at straws but next I installed the IOS in Install Mode. I used the command "install add file usbflas0:ie3x00-universalk9.17.12.04.SPA.bin activate commit" but it is still the same.

Next I forced the switch to boot into the rommon. I can see the two USB Flash interfaces but could not deactivate it either using the set commands.

switch: set

Environment variables in var:
APPLY_RESET=yes
BOOT=flash:ie3x00-universalk9.17.12.04.SPA.bin;
BSI=0
ConfigReg=0x102
DISABLE_USB_FLASH_0=no
DISABLE_USB_FLASH_1=no
PN_SNMP_SYS_CONTACT=Switch
PN_SNMP_SYS_DOMAIN_NAME=
PN_SNMP_SYS_HOSTNAME=Switch
PN_SNMP_SYS_LOCATION=
POST_ENABLE=no
PROFINET_CONN_PREV=0
PROFINET_DEVICE_NAME=
PROFINET_DEV_IM_DATE=
PROFINET_DEV_IM_DISC=
PROFINET_DEV_IM_FUNC=
PROFINET_DEV_IM_LOC=
RANDOM_NUM=1506379400
RET_2_RCALTS=
RET_2_RTS=
SDM_TEMPLATE_ID=0
SYSTEM_SERIAL_NUM=FCW2751Y1EA
TERMLINES=0

Environment variables in qspiflash:

switch:

A complete different question. Which is your preferred installation method Bundle Mode or Install Mode?

Thanks for your support and I wish you happy hollidays and a happy new year.  kurt  

[Albert Mitchell]

Two part answer:

1)  since you're willing to bet into ROMMON, you can disable teh USB this way.  its a possible work around for you. hopefully, you don't have to do this too many times.

here's i did it in ROMMON

switch: set var DISABLE_USB_FLASH_0=yes
switch: set

Environment variables in var:
APPLY_RESET=no
BOOT=flash:ie3x00-universalk9.17.09.05.SPA.bin;
BSI=0
ConfigReg=0x2102
DISABLE_USB_FLASH_0=yes
DISABLE_USB_FLASH_1=no
MANUAL_BOOT=yes

2) Bundle or Install mode:   you're gonna love this.  it depends.

Bundle mode is just easier if you're doing it manually and don't have an application such as Catalyst Center. 

Install mode is easier with an application such as Catalyst Center.  Also Install mode boots faster.   could be worth it if you have frequent reboots or reloads. 

[kurt_faeh]

Hello Albert

Willing or not, that's the only solution I see at the moment if the Security guys force us to deactivate the USB ports. It is still a mistery to me why it works for you but not for me.

Thanks for the information about the var bit, i was very close but that's not enought and thanks for the ISO XE mode explanation too.

All the best    kurt