04-18-2018 02:07 PM - edited 03-10-2019 01:00 AM
does anyone familiar if Cisco routers support smart Install future ? if yes can you please let me know which models
we are trying to make sure SMI future is disabled on cisco switches and not sure if routers support it as well .
Thanks
Solved! Go to Solution.
04-26-2018 02:16 PM
@cyberops123 wrote:
(SmartInstall enabled)
Whether the switch is an IBD or IBC, it doesn't matter. The thing to look out for is the "enabled" portion. If one is not using Smart Install then turn it off or the appliance will get "pwned".
04-18-2018 02:17 PM
Not all routers support Smart Install.
For a list of supported routers (Table 1), go HERE.
04-20-2018 11:37 AM
thanks for the share Leo I can see that some of the 3900 routers are using SMI and thats what we have right now but I am looking for a command that I can use in CLI to verify it (like sh vstack status ) I couldnt see this in the article .
and I guess SMI is using port TCP 4786/4787 default and I might need to block those ports as well from outside .
04-20-2018 04:59 PM - edited 04-20-2018 05:00 PM
(Switch models as old as 2940/2950/2955, 3550 and EARLIER are not covered by this response. I am not yet sure how the new Catalyst 9K behaves.)
I got some good news and some bad news.
The GOOD news
The list of routers & switches that support Smart Install can be found HERE. What is missing in the list are the 3650/3850 and 4500/6500 Supervisor cards. This list is important.
IF you have appliances found in this list, this means the only way to disable Smart Install is to use the command "no vstack" or "no vstack config".
The BAD news (a really bad one)
If you have appliances (routers &/or Catalyst switches) not in this list, the ACL must be applied. This is very important.
04-26-2018 01:18 PM
04-26-2018 01:36 PM
@cyberops123 wrote:
Role: Not Director (SmartInstall enabled)
This means Smart Install is still enabled. Use the command "no vstack" or "no vstack config" to disable Smart Install.
04-26-2018 02:13 PM
04-26-2018 02:16 PM
@cyberops123 wrote:
(SmartInstall enabled)
Whether the switch is an IBD or IBC, it doesn't matter. The thing to look out for is the "enabled" portion. If one is not using Smart Install then turn it off or the appliance will get "pwned".
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide