cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1570
Views
0
Helpful
8
Replies

SDM complains about IOS version/feature set.

frejac
Level 1
Level 1

Hi!

Trying to set up SDM on a 1721, it complains about that I dont run a SDM-compatible IOS.

I'm running 12.3(4)T9 with the ADVANCED SECURITY feature set. SDM version 2.0

Had the same issues with the older SDM and tried a lot of different IOS versions without no luck. As far as I can tell from the release-notes my IOS should work well with SDM.

Could it be my config that SDM is upset about (but still tells me that it's the IOS). I'm using dot1q subinterfaces, perhaps that's too complicated for SDM?

Any help would be highly appreciated.

Ok - I sure can live without SDM but I'd like to try it out.

1 Accepted Solution

Accepted Solutions

Thanks for finding out the bug. It should be fixed in the next release.

-Ravikumar

View solution in original post

8 Replies 8

reswaran
Cisco Employee
Cisco Employee

Hi,

can you send the output of "show running-config" and "show version"

Thanks,

Ravikumar

Sorry for the delay. Thanks for helping.

Here is the running-config after I've clensed it out quite much. Keeping it basic. That didnt help tho, it stills complains about running an incompatible IOS/SDM.

iosfw#sho run

Building configuration...

Current configuration : 1677 bytes

!

! Last configuration change at 00:14:53 UTC Fri Dec 10 2004

!

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname iosfw

!

boot-start-marker

boot system flash flash:c1700-advsecurityk9-mz.123-4.T9.bin

boot-end-marker

!

logging buffered 51200 warnings

enable secret 5 (omitted)

!

username cisco privilege 15 secret xxxxx

no aaa new-model

ip subnet-zero

ip cef

!

!

!

!

ip audit notify log

ip audit po max-events 100

ip domain name home.jacobsson.nu

no ftp-server write-enable

!

!

no crypto isakmp enable

!

!

!

!

!

!

interface Ethernet0

no ip address

shutdown

half-duplex

!

interface Ethernet1

no ip address

shutdown

half-duplex

!

interface FastEthernet0

description BPS port 2

no ip address

speed 100

full-duplex

!

interface FastEthernet0.1

description mot ISP (vlan 3)

encapsulation dot1Q 3

ip address dhcp

!

interface FastEthernet0.2

description WLAN (vlan2)

encapsulation dot1Q 2

ip address 172.17.1.254 255.255.255.0

!

router ospf 1

log-adjacency-changes

passive-interface FastEthernet0.1

network 0.0.0.0 255.255.255.255 area 0

default-information originate always

!

ip classless

no ip http server

ip http access-class 1

ip http authentication local

ip http secure-server

!

!

access-list 1 permit 172.17.0.0 0.0.255.255 log

access-list 1 deny any log

!

control-plane

!

!

line con 0

login local

line aux 0

line vty 0 4

access-class 1 in

privilege level 15

login local

transport input telnet ssh

line vty 5 15

access-class 1 in

privilege level 15

login local

transport input telnet ssh

!

no scheduler allocate

!

end

iosfw#

sho ver:

Cisco IOS Software, C1700 Software (C1700-ADVSECURITYK9-M), Version 12.3(4)T9, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2004 by Cisco Systems, Inc.

Compiled Fri 22-Oct-04 11:45 by cmong

ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1)

iosfw uptime is 4 minutes

System returned to ROM by reload

System restarted at 01:20:27 CET Fri Dec 10 2004

System image file is "flash:c1700-advsecurityk9-mz.123-4.T9.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 1721 (MPC860P) processor (revision 0x100) with 57818K/7718K bytes of memory.

Processor board ID FOC060807ZY (2301525146), with hardware revision 0000

MPC860P processor: part number 5, mask 2

2 Ethernet interfaces

1 FastEthernet interface

32K bytes of NVRAM.

16384K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

iosfw#

Hi,

Hope you accessing the SDM (router) through FastEthernet0.2. If yes, I wonder why the error message is shown.

Are you still seeing the error message even after copying a new set of SDM files to flash??

Can you see any exceptions in Java console?? (If it is IE without plugin, you can invoke java console through View->Java Console. if it is with plugin, then Tools->Sun Java Console)

Ravikumar

reswaran
Cisco Employee
Cisco Employee

Hi,

You can also try copying SDM again. BTW, Please let us know the IOS images that you tried SDM with?

Regards,

Ravikumar

This is how it looks now:

iosfw#dir

Directory of flash:/

1 -rw- 1463 Nov 30 2004 22:02:21 +01:00 home.html

2 -rw- 1807 Nov 30 2004 22:02:33 +01:00 home.shtml

3 -rw- 270848 Nov 30 2004 22:02:52 +01:00 home.tar

4 -rw- 1187840 Nov 30 2004 22:03:44 +01:00 ips.tar

5 -rw- 3883008 Nov 30 2004 22:13:11 +01:00 sdm.tar

6 -rw- 93095 Nov 30 2004 22:13:42 +01:00 attack-drop.sdf

7 -rw- 1545 Nov 30 2004 22:14:26 +01:00 sdmconfig-1721.cfg

8 -rw- 4750 Nov 30 2004 22:14:40 +01:00 SDM-Updates.xml

9 -rw- 10166640 Nov 30 2004 22:34:24 +01:00 c1700-advsecurityk9-mz.123

-4.T9.bin

10 -rw- 7849 Dec 9 2004 22:16:11 +01:00 iosfw-confg

16515072 bytes total (895576 bytes free)

.

frejac
Level 1
Level 1

This is completely insane!!!

Havent taken time to test until today.

By doing "wr erase" and starting with a defaulted router, I entered line by line from the old config to see where it would stop accepting my "ios version/featureset".

It will NOT run SDM with:

hostname iosfw

But if I short the name it works:

hostname fw

!!!!!!!!

Did I hear someone shout BUG? :)

Thanks for finding out the bug. It should be fixed in the next release.

-Ravikumar