Re: 1841 not loading BIN from TFTP in ROMMON

Samc2527 · ‎11-10-2018

Hello All,

I've recently purchased a few 1841 routers for a home lab while I study for my CCNA. The routers were purchased off of eBay, and all of them were locked and requiring login before getting to a command line.

I was hoping it would be as simple as putting the CF cards in a reader, wiping them, and transferring a fresh BIN.

After doing that I get the error:

loadprog: bad file magic number: 0x0
boot: cannot load "flash:"

So then I tried to load the BIN via TFTP.

My first attempt was with TFTP64, I would continually receive the error:

Ack block 65535 ignored (received twice)
TIMEOUT waiting for Ack block #65536

I then tried Solarwinds with a similar result:

Dropped because peer didn't respond

These failures happened repeatedly, with different Ethernet cables to isolate any other possibilities of failure.

Any help is appreciated as I'd just like to get these up and running to continue my studies. Thank you!

Deepak Kumar · ‎11-10-2018

Hi,

1. Check the MD5 hash value on of downloaded file (BIN) on your system before uploading to the router and match it on the Cisco website.

2. Disable Antivirus and firewall on your laptop/desktop.

3. check for any ping Drop from the router to laptop.

If the MD5 hash value is mismatch than you have to download the same file again.

Regards,

Deepak Kumar

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

Samc2527 · ‎11-11-2018

Where would I find that information on the Cisco website? It seems a lot of documentation pertaining to the 1841 series has been pulled.

CWolf1 · ‎11-10-2018

@Samc2527 wrote:

loadprog: bad file magic number: 0x0

This error message means the the router is trying to read a corrupt IOS.

Console into the router and reboot. Post the entire boot-up process.

Samc2527 · ‎11-11-2018

System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 processor with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0xc100

Initializing ATA monitor library.......
program load complete, entry point: 0x8000f000, size: 0xc100

Initializing ATA monitor library.......

loadprog: bad file magic number: 0x0
boot: cannot load "flash:"

System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 processor with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0xc100

Initializing ATA monitor library.......
program load complete, entry point: 0x8000f000, size: 0xc100

Initializing ATA monitor library.......

loadprog: bad file magic number: 0x0
boot: cannot load "flash:"

System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 processor with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized
rommon 1 >

Thanks!!

pieterh · ‎11-12-2018

looks to me like you copied the bin for another model router to the flash card.

you said you have multiple routers? do you still have "working" device (locked but booting normal)

you can get the bin off that CF card and put it on another?

and try this to wipe the config only and not the whole flash

Password Recovery Procedure for the Cisco 1700 and 1800 Series Routers

Samc2527 · ‎11-12-2018

The router that is booting is pulling up this lock screen:

program load complete, entry point: 0x8000f000, size: 0x2c3fe90
Self decompressing the image : ########################################################################################################################################################################################################################################################################## [OK]

Smart Init is enabled
smart init is sizing iomem
ID MEMORY_REQ TYPE
0X003AA110 public buffer pools
0X00211000 public particle pools
0X00020000 Crypto module pools
0X0052 0X0001A800 Card in slot 0
0X000021B8 Onboard USB

If any of the above Memory Requirements are
"UNKNOWN", you may be using an unsupported
configuration or there is a software problem and
system operation may be compromised.

Allocating additional 13176105 bytes to IO Memory.
PMem allocated: 245366784 bytes; IOMem allocated: 23068672 bytes

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.1(3)T3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Wed 14-Dec-11 20:21 by prod_rel_team

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Installed image archive
Cisco 1841 (revision 6.0) with 239616K/22528K bytes of memory.
Processor board ID FTX1005Y23V
2 FastEthernet interfaces
1 Serial interface
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
191K bytes of NVRAM.
255488K bytes of ATA CompactFlash (Read/Write)

ip nbar port-map sqlserver tcp 1433 5000
^
% Invalid input detected at '^' marker.

Press RETURN to get started!

*Nov 12 16:03:55.443: SERVICE_MODULE(Serial0/0/0): self test finished: Passed
*Nov 12 16:04:23.035: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized
*Nov 12 16:04:23.039: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled
*Nov 12 16:04:25.247: %LINK-3-UPDOWN: Interface Serial0/0/0, changed state to down
*Nov 12 16:04:26.415: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down
*Nov 12 16:04:26.415: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to down
*Nov 12 16:04:26.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
*Nov 12 16:04:27.607: %SYS-6-CLOCKUPDATE: System clock has been updated from 16:04:27 UTC Mon Nov 12 2018 to 11:04:27 EST Mon Nov 12 2018, configured from console by console.
*Nov 12 16:04:27.611: %SYS-6-CLOCKUPDATE: System clock has been updated from 11:04:27 EST Mon Nov 12 2018 to 11:04:27 EST Mon Nov 12 2018, configured from console by console.
*Nov 12 16:04:28.211: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
*Nov 12 16:04:42.795: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up
*Nov 12 16:04:44.003: %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively down
*Nov 12 16:04:45.079: %SYS-5-CONFIG_I: Configured from memory by console
*Nov 12 16:04:45.315: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Nov 12 16:04:49.595: %SYS-5-RESTART: System restarted --
Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.1(3)T3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Wed 14-Dec-11 20:21 by prod_rel_team
*Nov 12 16:04:49.599: %SNMP-5-COLDSTART: SNMP agent on host Omaha_077 is undergoing a cold start
*Nov 12 16:04:49.923: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Nov 12 16:04:49.947: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Nov 12 16:04:49.951: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Nov 12 16:04:49.951: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Nov 12 16:04:49.951: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFFC

##### #### #######
# # # # #
# # # #
# # # #
# # # #
# # # # #
##### #### #######

User Access Verification

Username:

pieterh · ‎11-12-2018

that looks al right!

the router is loading the firmware and is loading the config, so ths is operational.

it is running

Cisco IOS Software, 1841 Software (C1841-ADVENTERPRISEK9-M), Version 15.1(3)T3, RELEASE SOFTWARE (fc1)

is this also the software you put on the flash card with use of the the card-reader?

if so, how did you wipe the card? did you format as fat ?

for this router start the password recovery procedure as described in the link.

in this proces you will

1) interrupt the normal boot to get into rommon

2) set a config register to NOT load the config

3a) if password recovery is enabled you can continue boot

and do a manual "write erase" to clear the config and clear the account to login

3b) if password recovery is disabled you are prompted to clear the config before boot continues

in both cases you will have a working router with an empty config and continue with a clean can start

Samc2527 · ‎11-12-2018

Thanks for the help pieterh. This is the software that came preloaded on the router. I purchased a total of three, all of which had this same issue.

The first two I used a card reader to erase and reload a BIN on, but now they fail to load flash and boot into rommon. This one has not been erased yet, as I didn't want to kill all three. The cards were indeed formatted as FAT.

I'm having some issues downloading the BIN directly from Cisco, they all say not available. Unsure if this is related to my account type, or something similar.

It looks like I was able to get the router up and running, so thank you! Any advice on how to use this to get the other two up and running?

Thanks again.

Samc2527 · ‎11-12-2018

Just to add- I used the router itself to format the CF card, then used a PC to copy the bin from the working router to the router that only boots to ROMMON. Still will not boot with the error:

Initializing ATA monitor library.......
loadprog: bad file magic number: 0x0
boot: cannot load "flash:"

System Bootstrap, Version 12.3(8r)T9, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.

Initializing cache
Initializing TLB and required TLB entries
Reading monitor variables from NVRAM
Init Rommon Upgrade NVRAM Vars
Init Rommon Upgrade startPLD version 0x10
GIO ASIC version 0x127
Reset IO
Enabling interrupts
Reading cookie
Initializing main memory
Sizing NVRAM
Initializing PCI subsystem
Exiting init

c1841 processor with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled

Readonly ROMMON initialized
rommon 1 >

pieterh · ‎11-12-2018

you've got a running router with 15.1(3)T3

Cisco 1841 (revision 6.0) with 239616K/22528K bytes of memory

and a faulty running Version 12.3(8r)T9

c1841 processor with 262144 Kbytes of main memory

NB! sizes looks similar, at first sight but Flash and RAM size must be sufficient for this specific IOS version.

My guess is the 12.3(8r) version is faulty in some way.

I suggest you copy the 15.1(3)T3 to the other flash card(s)

either you can do this by cardreader

or you can upload this IOS from the operational router to the TFTP server

copy flash:.... tftp:

and then download it to the other router from rommon

Samc2527 · ‎11-13-2018

Pieterh, thank you for the help. I was able to get the running routers bin downloaded via TFTP.

When trying to upload the bin to the other routers I still get the same error:

Connection received from 169.254.43.3 on port 27780 [13/11 08:20:41.129]
Read request for file <c1841-adventerprisek9-mz.151-3.T3.bin>. Mode octet [13/11 08:20:41.129]
Using local port 58123 [13/11 08:20:41.129]
Ack block 65535 ignored (received twice) [13/11 08:29:06.594]
TIMEOUT waiting for Ack block #65536 [13/11 08:29:53.010]

When copying the bin directly to flash via card reader I get this error on boot: (CF was formatted in FAT)

System Bootstrap, Version 12.3(8r)T9, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
PLD version 0x10
GIO ASIC version 0x127
c1841 processor with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with parity disabled