cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
10611
Views
0
Helpful
11
Replies

Cisco 2811 Boot from USB

Josh Edwards
Level 4
Level 4

Hello All - I'm trying to get my 2811 router to boot from USB Flash...

I've copied the appropriate IOS Image to the USB Flash drive and added the command "boot system usbflash0:c2800nm-adventerprisek9-mz.151-3.T3.bin"

I've upgraded the bootstrap image:

ROM: System Bootstrap, Version 12.4(13r)T11, RELEASE SOFTWARE (fc1)

however, the router will not boot from the image on the USB Flash... it will skip over it and boot from the image on the CF card...

Any ideas?

11 Replies 11

Leo Laohoo
Hall of Fame
Hall of Fame

Can you please post the "sh log"?

Can you please post the output to the command "sh run | b boot-start-marker"?

Can you also please post the output to the command "dir usbflash0:"?

One last thing, eject the CF and boot with the USB in.  Please post the complete bootup process.  (If the router boots to ROMmon I want to see this.)

2811rtr1#sh log
Syslog logging: enabled (0 messages dropped, 12 messages rate-limited,
                0 flushes, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

No Inactive Message Discriminator.


    Console logging: level debugging, 245 messages logged, xml disabled,
                     filtering disabled
    Monitor logging: level debugging, 0 messages logged, xml disabled,
                     filtering disabled
    Buffer logging:  level debugging, 254 messages logged, xml disabled,
                     filtering disabled
    Logging Exception size (4096 bytes)
    Count and timestamp logging messages: disabled
    Persistent logging: disabled

No active filter modules.

ESM: 0 messages dropped

    Trap logging: level informational, 246 message lines logged

Log Buffer (4096 bytes):
16 01:54:21.789: %SEC-6-IPACCESSLOGP: list 104 denied tcp 17.172.232.215(5223) -> 192.168.1.1(52236), 1 packet
Apr 16 01:54:23.685: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(54610) -> 192.168.1.1(58643), 1 packet
Apr 16 01:54:39.005: %SEC-6-IPACCESSLOGP: list 104 denied tcp 17.172.232.196(5223) -> 192.168.1.1(52230), 1 packet
Apr 16 01:54:39.309: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 1 packet
Apr 16 01:54:39.309: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(52190) -> 192.168.1.1(58643), 2 packets
Apr 16 01:54:39.309: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.60.117.165(61624) -> 192.168.1.1(58643), 2 packets
Apr 16 01:54:42.349: %SEC-6-IPACCESSLOGP: list 104 denied tcp 72.14.204.193(443) -> 192.168.1.1(52234), 1 packet
Apr 16 01:55:26.190: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.203.129.176(60702) -> 192.168.1.1(58643), 1 packet
Apr 16 01:55:39.310: %SEC-6-IPACCESSLOGP: list 104 denied udp 192.168.1.66(1048) -> 239.255.255.250(8082), 99 packets
Apr 16 01:55:39.310: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.203.129.176(58166) -> 192.168.1.1(58643), 1 packet
Apr 16 01:55:51.878: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(55348) -> 192.168.1.1(58643), 1 packet
Apr 16 01:55:55.342: %SEC-6-IPACCESSLOGP: list 104 denied udp 85.26.165.24(5582) -> 192.168.1.1(58643), 1 packet
Apr 16 01:56:37.127: %SEC-6-IPACCESSLOGP: list 104 denied udp 188.66.223.41(28435) -> 192.168.1.1(58643), 1 packet
Apr 16 01:56:39.311: %SEC-6-IPACCESSLOGSP: list 104 denied igmp 192.168.1.254 -> 239.255.255.250 (22), 3 packets
Apr 16 01:56:39.311: %SEC-6-IPACCESSLOGSP: list 104 denied igmp 192.168.1.254 -> 224.0.0.1 (17), 7 packets
Apr 16 01:56:39.311: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(52776) -> 192.168.1.1(58643), 2 packets
Apr 16 01:56:56.743: %SEC-6-IPACCESSLOGP: list 104 denied tcp 173.194.76.109(993) -> 192.168.1.1(55174), 1 packet
Apr 16 01:56:57.807: %SEC-6-IPACCESSLOGP: list 104 denied udp 95.188.232.130(14915) -> 192.168.1.1(58643), 1 packet
Apr 16 01:56:59.847: %SEC-6-IPACCESSLOGP: list 104 denied tcp 173.194.76.109(993) -> 192.168.1.1(55175), 1 packet
Apr 16 01:57:04.987: %SEC-6-IPACCESSLOGP: list 104 denied udp 188.25.7.185(38611) -> 192.168.1.1(58643), 1 packet
Apr 16 01:57:06.667: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.203.129.176(61412) -> 192.168.1.1(58643), 1 packet
Apr 16 01:57:21.916: %SEC-6-IPACCESSLOGP: list 104 denied udp 192.168.1.254(138) -> 192.168.1.255(138), 1 packet
Apr 16 01:57:37.228: %SYS-5-CONFIG_I: Configured from console by admin on vty0 (172.16.50.105)
Apr 16 01:57:39.312: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 8 packets
Apr 16 01:58:15.876: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(56554) -> 192.168.1.1(58643), 1 packet
Apr 16 01:58:27.829: %SEC-6-IPACCESSLOGP: list 104 denied udp 192.168.1.254(1900) -> 239.255.255.250(1900), 1 packet
Apr 16 01:58:32.289: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.203.129.176(62185) -> 192.168.1.1(58643), 1 packet
Apr 16 01:58:39.317: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 15 packets
Apr 16 02:00:38.923: %SEC-6-IPACCESSLOGP: list 104 denied udp 186.124.163.22(16613) -> 192.168.1.1(58643), 1 packet
Apr 16 02:00:39.319: %SEC-6-IPACCESSLOGP: list 104 denied udp 192.168.1.66(1048) -> 239.255.255.250(8082), 99 packets
Apr 16 02:00:57.599: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.203.129.176(63341) -> 192.168.1.1(58643), 1 packet
Apr 16 02:01:08.643: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(57989) -> 192.168.1.1(58643), 1 packet
Apr 16 02:01:39.316: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 2 packets
Apr 16 02:01:39.316: %SEC-6-IPACCESSLOGSP: list 104 denied igmp 192.168.1.254 -> 239.255.255.250 (22), 8 packets
Apr 16 02:01:39.316: %SEC-6-IPACCESSLOGSP: list 104 denied igmp 192.168.1.254 -> 224.0.0.1 (17), 8 packets
Apr 16 02:02:00.648: %SEC-6-IPACCESSLOGP: list 104 denied udp 207.148.141.116(47811) -> 232.9.1.116(6288), 1 packet

2811rtr1#sh run | sec boot

boot-start-marker

boot system usbflash0:c2800nm-adventerprisek9-mz.124-24.T6.bin

boot-end-marker

2811rtr1#

2811rtr1#dir usbflash0:
Directory of usbflash0:/

    1  -rw-    59461208  Apr 10 2012 17:16:00 -06:00  c2800nm-adventerprisek9-mz.124-24.T6.bin

    3  -rw-    66562172  Apr 10 2012 19:05:28 -06:00  c2800nm-adventerprisek9-mz.151-3.T3.bin
    4  -rw-     9709561  Apr 10 2012 16:38:18 -06:00  anyconnect-macosx-i386-3.0.5080-k9.pkg
    5  -rw-    27248290  Apr 10 2012 16:39:56 -06:00  anyconnect-win-3.0.5080-k9.pkg

4010803200 bytes total (3847782400 bytes free)

Hmmmm ... Maybe I should clarify myself. 

Pull out the USB stick.  Wait for 2 seconds and insert it back.  Can you post the "sh log" please?  I want to see if the router can see the removal and insertion of the USB stick.

Can you please post the "sh version" too?

2811rtr1#sh log
Syslog logging: enabled (0 messages dropped, 12 messages rate-limited,
                0 flushes, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

No Inactive Message Discriminator.


    Console logging: level debugging, 287 messages logged, xml disabled,
                     filtering disabled
    Monitor logging: level debugging, 0 messages logged, xml disabled,
                     filtering disabled
    Buffer logging:  level debugging, 296 messages logged, xml disabled,
                     filtering disabled
    Logging Exception size (4096 bytes)
    Count and timestamp logging messages: disabled
    Persistent logging: disabled

No active filter modules.

ESM: 0 messages dropped

    Trap logging: level informational, 288 message lines logged

Log Buffer (4096 bytes):
Apr 16 02:10:58.173: %SEC-6-IPACCESSLOGP: list 104 denied tcp 71.203.129.176(51734) -> 192.168.1.1(58643), 1 packet
Apr 16 02:11:22.157: %USB_HOST_STACK-6-USB_DEVICE_DISCONNECTED: A USB device has been removed from port 0.
Apr 16 02:11:22.273: %USBFLASH-5-CHANGE: usbflash0 has been removed!
Apr 16 02:11:33.309: %USB_HOST_STACK-6-USB_DEVICE_CONNECTED: A Full speed USB device has been inserted in port 0.
Apr 16 02:11:34.005: %USBFLASH-5-CHANGE: usbflash0 has been inserted!
Apr 16 02:11:39.326: %SEC-6-IPACCESSLOGP: list 104 denied tcp 41.135.32.229(60499) -> 192.168.1.1(58643), 1 packet
Apr 16 02:11:39.326: %SEC-6-IPACCESSLOGP: list 104 denied udp 192.168.1.66(1048) -> 239.255.255.250(8082), 100 packets
Apr 16 02:11:39.326: %SEC-6-IPACCESSLOGSP: list 104 denied igmp 192.168.1.254 -> 239.255.255.250 (22), 6 packets
Apr 16 02:11:39.326: %SEC-6-IPACCESSLOGSP: list 104 denied igmp 192.168.1.254 -> 224.0.0.1 (17), 8 packets
2811rtr1#

2811rtr1#sh ver
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(24)T6, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 23-Aug-11 01:30 by prod_rel_team

ROM: System Bootstrap, Version 12.4(13r)T11, RELEASE SOFTWARE (fc1)

2811rtr1 uptime is 44 minutes
System returned to ROM by reload at 19:27:24 MST7MDT Sun Apr 15 2012
System restarted at 19:29:35 MST7MDT Sun Apr 15 2012
System image file is "flash:c2800nm-adventerprisek9-mz.124-24.T6.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 2811 (revision 53.51) with 223232K/38912K bytes of memory.
Processor board ID FTX0941A38C
18 FastEthernet interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
1 cisco service engine(s)
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
3929072K bytes of USB Flash usbflash0 (Read/Write)
62720K bytes of ATA CompactFlash (Read/Write)

Configuration register is 0x2102

Apr 16 02:11:22.273: %USBFLASH-5-CHANGE: usbflash0 has been removed!

Apr 16 02:11:33.309: %USB_HOST_STACK-6-USB_DEVICE_CONNECTED: A Full speed USB device has been inserted in port 0.

Apr 16 02:11:34.005: %USBFLASH-5-CHANGE: usbflash0 has been inserted!

Ok, so the USB stick is detected.

Can you eject the CF, boot the router and post the entire bootup process?

Sorry for the delay - I had to go pickup a USB Serial Port...

2811rtr1#dir usbflash0:
Directory of usbflash0:/

    1  -rw-    59461208  Apr 10 2012 17:16:00 -06:00  c2800nm-adventerprisek9-mz.124-24.T6.bin
    2  -rw-    66562172  Apr 10 2012 19:05:28 -06:00  c2800nm-adventerprisek9-mz.151-3.T3.bin
    3  -rw-     9709561  Apr 10 2012 16:38:18 -06:00  anyconnect-macosx-i386-3.0.5080-k9.pkg
    4  -rw-    27248290  Apr 10 2012 16:39:56 -06:00  anyconnect-win-3.0.5080-k9.pkg

4010803200 bytes total (3847806976 bytes free)
2811rtr1#sh run | sec boot
boot-start-marker
boot system usbflash0:c2800nm-adventerprisek9-mz.124-24.T6.bin
boot-end-marker
2811rtr1#reload
Proceed with reload? [confirm]

Apr 17 23:26:54.671: %SYS-5-RELOAD: Reload requested  by admin on console. Reload Reason: Reload Command.

System Bootstrap, Version 12.4(13r)T11, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2009 by cisco Systems, Inc.

Initializing memory for ECC
.
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled


Upgrade ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0x3d240

usbflash0: contains unexpected values in partition table or boot sector.
Device needs formatting before use!
open(): Open Error = -66
loadprog: error - on file open
boot: cannot load "usbflash0:c2800nm-adventerprisek9-mz.124-24.T6.bin"
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled


Upgrade ROMMON initialized
Compact Flash:not present
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled


Upgrade ROMMON initialized
Compact Flash:not present
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled


Upgrade ROMMON initialized
Entering rommon> prompt after several failed attempts to boot an IOS image.
Please check your internal/external flash drives for the correct IOS image
and issue 'reset' at the rommon> prompt to re-try the boot process.
rommon 1 > dir flash:
dir: cannot open device "flash:"
rommon 2 > dir usbflash0:
program load complete, entry point: 0x8000f000, size: 0x3d240

usbflash0: contains unexpected values in partition table or boot sector.
Device needs formatting before use!
open(): Open Error = -66
dir: cannot open device "usbflash0:"

THIS IS WHERE I RE-INSERTED THE COMPACT FLASH

rommon 3 > reset
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled


Upgrade ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0x3d240

usbflash0: contains unexpected values in partition table or boot sector.
Device needs formatting before use!
open(): Open Error = -66
loadprog: error - on file open
boot: cannot load "usbflash0:c2800nm-adventerprisek9-mz.124-24.T6.bin"
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled


Upgrade ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0xcb80
program load complete, entry point: 0x8000f000, size: 0xcb80

program load complete, entry point: 0x8000f000, size: 0x38b4c90
Self decompressing the image : ############################################################################################################################################################################################################################################################################################################################################## [OK]

Smart Init is disabled. IOMEM set to: 15

Using iomem percentage: 15

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 12.4(24)T6, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 23-Aug-11 01:30 by prod_rel_team


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Installed image archive
Cisco 2811 (revision 51.46) with 223232K/38912K bytes of memory.
Processor board ID FTX0941A38C
18 FastEthernet interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
1 cisco service engine(s)
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
3929072K bytes of USB Flash usbflash0 (Read/Write)
62720K bytes of ATA CompactFlash (Read/Write)
Updating CNF files
CNF files updating complete

Press RETURN to get started!

Another thing to note - I picked up a used Cisco 1GB CF and it behaves the same way - the router will only boot off of the original 64MB CF that it came with...

If formated both the 1GB CF and the USB Stick from the router CLI a few times during troubleshooting... no change in behavior...

I can boot the router from the 64MB CF - then install the 1GB CF - issue dir flash: and see the IOS image - issue a restart and then the router will not boot until I re-install the 64MB CF...

Upgrade ROMMON initialized

program load complete, entry point: 0x8000f000, size: 0x3d240

usbflash0: contains unexpected values in partition table or boot sector.

Device needs formatting before use!

open(): Open Error = -66

loadprog: error - on file open

boot: cannot load "usbflash0:c2800nm-adventerprisek9-mz.124-24.T6.bin"

c2811 platform with 262144 Kbytes of main memory

Main memory is configured to 64 bit mode with ECC enabled

Thanks for the output.  It's very helpful.  I believe this is the reason why the USB boot fails.

Did you get this to work?

no, I've formatted the USB Flash and tried to copy the IOS image back on to it but I get the following error:

2811rtr1#copy flash:c2800nm-adventerprisek9-mz.124-24.T6.bin usbflash0:

Destination filename [c2800nm-adventerprisek9-mz.124-24.T6.bin]?

Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

%Error writing usbflash0:/c2800nm-adventerprisek9-mz.124-24.T6.bin (Bad DFS cluster data passed)

2811rtr1#

Sounds like the USB stick you are using is not compatible.

Another thing, I've never personally used a 4Gb USB stick before on a ISR G1.  I have always used a 2Gb USB stick.