12-01-2004 01:09 AM - edited 03-02-2019 08:18 PM
Hi!
Trying to set up SDM on a 1721, it complains about that I dont run a SDM-compatible IOS.
I'm running 12.3(4)T9 with the ADVANCED SECURITY feature set. SDM version 2.0
Had the same issues with the older SDM and tried a lot of different IOS versions without no luck. As far as I can tell from the release-notes my IOS should work well with SDM.
Could it be my config that SDM is upset about (but still tells me that it's the IOS). I'm using dot1q subinterfaces, perhaps that's too complicated for SDM?
Any help would be highly appreciated.
Ok - I sure can live without SDM but I'd like to try it out.
Solved! Go to Solution.
01-23-2005 10:20 PM
Thanks for finding out the bug. It should be fixed in the next release.
-Ravikumar
12-02-2004 02:38 AM
Hi,
can you send the output of "show running-config" and "show version"
Thanks,
Ravikumar
12-09-2004 04:26 PM
Sorry for the delay. Thanks for helping.
Here is the running-config after I've clensed it out quite much. Keeping it basic. That didnt help tho, it stills complains about running an incompatible IOS/SDM.
iosfw#sho run
Building configuration...
Current configuration : 1677 bytes
!
! Last configuration change at 00:14:53 UTC Fri Dec 10 2004
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname iosfw
!
boot-start-marker
boot system flash flash:c1700-advsecurityk9-mz.123-4.T9.bin
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 (omitted)
!
username cisco privilege 15 secret xxxxx
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
ip audit notify log
ip audit po max-events 100
ip domain name home.jacobsson.nu
no ftp-server write-enable
!
!
no crypto isakmp enable
!
!
!
!
!
!
interface Ethernet0
no ip address
shutdown
half-duplex
!
interface Ethernet1
no ip address
shutdown
half-duplex
!
interface FastEthernet0
description BPS port 2
no ip address
speed 100
full-duplex
!
interface FastEthernet0.1
description mot ISP (vlan 3)
encapsulation dot1Q 3
ip address dhcp
!
interface FastEthernet0.2
description WLAN (vlan2)
encapsulation dot1Q 2
ip address 172.17.1.254 255.255.255.0
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0.1
network 0.0.0.0 255.255.255.255 area 0
default-information originate always
!
ip classless
no ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
!
!
access-list 1 permit 172.17.0.0 0.0.255.255 log
access-list 1 deny any log
!
control-plane
!
!
line con 0
login local
line aux 0
line vty 0 4
access-class 1 in
privilege level 15
login local
transport input telnet ssh
line vty 5 15
access-class 1 in
privilege level 15
login local
transport input telnet ssh
!
no scheduler allocate
!
end
iosfw#
sho ver:
Cisco IOS Software, C1700 Software (C1700-ADVSECURITYK9-M), Version 12.3(4)T9, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by Cisco Systems, Inc.
Compiled Fri 22-Oct-04 11:45 by cmong
ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1)
iosfw uptime is 4 minutes
System returned to ROM by reload
System restarted at 01:20:27 CET Fri Dec 10 2004
System image file is "flash:c1700-advsecurityk9-mz.123-4.T9.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
Cisco 1721 (MPC860P) processor (revision 0x100) with 57818K/7718K bytes of memory.
Processor board ID FOC060807ZY (2301525146), with hardware revision 0000
MPC860P processor: part number 5, mask 2
2 Ethernet interfaces
1 FastEthernet interface
32K bytes of NVRAM.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
iosfw#
12-13-2004 11:11 PM
Hi,
Hope you accessing the SDM (router) through FastEthernet0.2. If yes, I wonder why the error message is shown.
Are you still seeing the error message even after copying a new set of SDM files to flash??
Can you see any exceptions in Java console?? (If it is IE without plugin, you can invoke java console through View->Java Console. if it is with plugin, then Tools->Sun Java Console)
Ravikumar
12-02-2004 02:44 AM
Hi,
You can also try copying SDM again. BTW, Please let us know the IOS images that you tried SDM with?
Regards,
Ravikumar
12-09-2004 04:27 PM
This is how it looks now:
iosfw#dir
Directory of flash:/
1 -rw- 1463 Nov 30 2004 22:02:21 +01:00 home.html
2 -rw- 1807 Nov 30 2004 22:02:33 +01:00 home.shtml
3 -rw- 270848 Nov 30 2004 22:02:52 +01:00 home.tar
4 -rw- 1187840 Nov 30 2004 22:03:44 +01:00 ips.tar
5 -rw- 3883008 Nov 30 2004 22:13:11 +01:00 sdm.tar
6 -rw- 93095 Nov 30 2004 22:13:42 +01:00 attack-drop.sdf
7 -rw- 1545 Nov 30 2004 22:14:26 +01:00 sdmconfig-1721.cfg
8 -rw- 4750 Nov 30 2004 22:14:40 +01:00 SDM-Updates.xml
9 -rw- 10166640 Nov 30 2004 22:34:24 +01:00 c1700-advsecurityk9-mz.123
-4.T9.bin
10 -rw- 7849 Dec 9 2004 22:16:11 +01:00 iosfw-confg
16515072 bytes total (895576 bytes free)
01-12-2005 10:14 AM
.
01-12-2005 10:15 AM
This is completely insane!!!
Havent taken time to test until today.
By doing "wr erase" and starting with a defaulted router, I entered line by line from the old config to see where it would stop accepting my "ios version/featureset".
It will NOT run SDM with:
hostname iosfw
But if I short the name it works:
hostname fw
!!!!!!!!
Did I hear someone shout BUG? :)
01-23-2005 10:20 PM
Thanks for finding out the bug. It should be fixed in the next release.
-Ravikumar
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide