06-22-2012 11:35 PM - edited 03-04-2019 04:46 PM
Hi!
In the Cisco IPS Threat Defense Bulletin 6-21-2012, there is listed a problem with IOS Release 15.0(1)M8 and the issue described in the caveat CSCtz27137:
IOS IPS Important Notice
IOS IPS customers running version 12.4T, 15.0M, or 15.1M - a critical software defect has been identified which may cause your router to reload and be stuck in a boot loop if IOS IPS signature version S639 or later is installed on the device. Recovery of impacted devices is possible only via a serial console connection through the device's ROMMON mode. For customers who are using IOS IPS signatures S638 or earlier, there is no issues. Customers wishing to upgrade the IOS IPS signature version to S639 or later must first be running a fixed version of IOS on the device prior to upgrading the IPS signatures. Fixed versions of IOS include: 15.2(4)M, 15.1(3)T4, 15.2(3)T1, 15.1(4)M5, 12.4(24)T8 and later. Please refer to defect CSCtz27137
for additional details and steps to recover impacted devices.
I have a 7206VXR router (NPE-G1) running 15.0(1)M8 Advanced IP Services and using IOS IPS signature 638, but would like to update to the latest signature. If I do a search on the Cisco web site for CSCtz27137, it brings up Release 15.1(3)T Caveats only.
This is totally confusing to say the least. Which current IOS for the 7200 series with Advanced IP Services is safe to use with an IPS signature greater than 638? I do not want to lose Zone Based Firewall, EIGRP, NAT, and DHCP services.
Thanks!
Richard S.
Solved! Go to Solution.
06-23-2012 09:35 AM
Hello Richard,
>> Fixed versions of IOS include: 15.2(4)M, 15.1(3)T4, 15.2(3)T1, 15.1(4)M5, 12.4(24)T8 and later
the bulletin includes enough information to find an appropriate IOS image to be loaded on the router, the nearest to yours should be 15.1(4)M5.
Hope to help
Giuseppe
06-23-2012 08:35 AM
Do you have a support contract ? If so, you can ask the TAC.
06-23-2012 09:35 AM
Hello Richard,
>> Fixed versions of IOS include: 15.2(4)M, 15.1(3)T4, 15.2(3)T1, 15.1(4)M5, 12.4(24)T8 and later
the bulletin includes enough information to find an appropriate IOS image to be loaded on the router, the nearest to yours should be 15.1(4)M5.
Hope to help
Giuseppe
06-24-2012 04:28 PM
Giuseppe!
Thanks for your assistance...it is greatly appreciated!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide