Model NCS540 doesn't include firmware version on running-config backup

[tonialb]

Hello Cisco Community,

Our DOAT Team, for security reasons, run periodically assurance tests, using their own script on our Cisco backup files. We run periodically backups, a copy of which passes through the scanner of the DOAT team.

Recently we added some Cisco models NCS540. But these models, are causing an issue passing the DOAT scanner. The running-config file doesn't include the firmware version! We don't have this problem in any of other Cisco devices in the network, only with model NCS540!

Is there any workaround to fix this? Or we can't change nothing?

Firmware version is essential on those assurance tests!

Thank you,

[marce1000]

 - Depends on how this DOAT scanner works, running-config never includes firmware version, presumably this is fetched by another command for some reason currently not working on the NCS.

 M.

[Georg Pauwen]

Hello,

--> using their own script on our Cisco backup files

Can you post that script ?

[tonialb]

Hello,

Thanks for your time guys.

@Georg Pauwen
I'll try to ask them, but I'm afraid they won't give it, since it's a forbidden area, even for us.

I think the problem has to do with the content of the running-config file on NCS540. I tested all Cisco models we have. All of them, in the running-config content, include the firmware version. For instance on a Nexus device we have:

NEXUS3172-HT5# sh running-config

!Command: show running-config
!Time: Mon Aug  1 15:52:31 2022

version 7.0(3)I7(3)

On a ASR100x:

ASR1006-MT10#sh running-config
Building configuration...

Current configuration : 685757 bytes
!
! Last configuration change at 09:27:21 recurri Mon Aug 1 2022 by toni
! NVRAM config last updated at 09:27:28 recurri Mon Aug 1 2022 by toni
!
version 17.3

While on NCS540 doesn't show the "version" data at all:

RP/0/RP0/CPU0:NCS540-MC2#sh running-config
Mon Aug  1 14:45:44.387 UTC
Building configuration...
!! IOS XR Configuration
!! Last configuration change at Tue Jul 12 06:54:28 2022 by toni

Apparently, this is how Cisco designed this model. Nothing to change here!

[marce1000]

                        >... this is how Cisco designed this model. Nothing to change here!

  - You need to look at that in a different way, it is not standard for Cisco devices to include the version info's when showing the running config only. This is achieved with the show version command, whatever network management tool is being used it must then be able to execute that command (too).

 M.