Re: Recover CGR1120 from rommon-1 while bootstrap is empty

sdgfsd fjkdtkmvb · ‎04-06-2017

Related link: https://communities.cisco.com/docs/DOC-54368

I got a CGR1120 at rommon-1 with the following outputs:

rommon-1> dir

flash:
cgr1000-universalk9-bundle.SPA.155-3.M5.bin
cgr1000-universalk9-mz.SPA.155-2.T
managed
eem
vlan.dat

bootstrap:

rommon-1>

Let's follow the procedure:

rommon-1> set ip x.x.x.x 255.255.255.128
rommon-1> set gw x.x.x.x

rommon-1> boot tftp://x.x.x.x/recover/cgr1000-hv.srp.SPA.1.5.6

Found Intel IOH GBE [2:0.1] at 0xe020, ROM address 0x0000
Probing...[Intel IOH GBE]
MAC address 0:42:68:37:5e:22
External PHY link UP @ 1000/full
Address: x.x.x.x
Netmask: 255.255.255.128
Server: 0.0.0.0
Gateway: 0.0.0.0
Address: x.x.x.x
Netmask: 255.255.255.128
Server: 0.0.0.0
Gateway: x.x.x.x
Address: x.x.x.x
Netmask: 255.255.255.128
Server: x.x.x.x
Gateway: x.x.x.x
Booting: /start/cgr1000-hv.srp.SPA.1.5.6 console=ttyS0,9600n8nn quiet loader_ve
r="1.9.16"....
Error 13: Invalid or unsupported executable format

rommon-1>

Now I'm stuck:

I can download image bundle, furthermore they are signed (I can verify they are not corrupted), but once I have extracted the needed image from the bundle, no way to verify its hash...

I also tried to boot flash:cgr1000-universalk9-mz.SPA.155-2.T with following result:

-------------------------------------------------------------

Booting image: flash:cgr1000-universalk9-mz.SPA.155-2.T.... [Multiboot-elf, <

0x110000:0xc599aec:0x6667dc>, shtab=0xcd11500
Signature verification was successful, entry=0x110240]

Smart Init is enabled
smart init is sizing iomem
TYPE MEMORY_REQ
Onboard devices &
buffer pools 0x02E44000
-----------------------------------------------
TOTAL: 0x02E44000

Rounded IOMEM up to: 47MB.
Using 10 percent iomem. [47MB/448MB]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, cgr1000 Software (cgr1000-UNIVERSALK9-M), Version 15.5(2)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Wed 25-Mar-15 17:01 by prod_rel_team

No UART on 0x3F8
No UART on 0x2F8
No UART on 0x3E8
No UART on 0x2E8
EOBC idb not initialized

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Installed image archive

13:43:50 UTC Thu Apr 6 2017: Unexpected exception to CPU: vector D, PC = 0x4A5F59

-Traceback= 4A5F59

CPU Register Context:
EAX = 0x00000000 ECX = 0x00000000 EDX = 0x00000000 EBX = 0x00000000
ESP = 0x13522274 EBP = 0x135222AC ESI = 0x00000000 EDI = 0x00000000
EIP = 0x004A5F59 PS = 0x00010246 CS = 0x00000008 SS = 0x00000010
DS = 0x00000010 ES = 0x00000010 FS = 0x00000010 GS = 0x00000010
File flash:crashinfo_20170406-134350-UTC Device Error :No such device
File flash:crashinfo_20170406-134350-UTC Device Error :No such device
File flash:crashinfo_20170406-134350-UTC Device Error :No such device
File flash:crashinfo_20170406-134351-UTC Device Error :No such device
File flash:crashinfo_20170406-134351-UTC Device Error :No such device
File flash:crashinfo_20170406-134351-UTC Device Error :No such device

Version 2.14.1219. Copyright (C) 2011 American Megatrends, Inc.
CGR1000 Routers
Copyright (c) 2011-2013 by Cisco Systems, Inc.

Total memory: 1 GByte
CPU type: Tunnel Creek

BIOS Version: 0ABXI010

Version 2.14.1219. Copyright (C) 2011 American Megatrends, Inc.
CGR1000 Routers
Copyright (c) 2011-2013 by Cisco Systems, Inc.

Total memory: 1 GByte
CPU type: Tunnel Creek

BIOS Version: 0ABXI010

IOFPGA @ 0xd0000000 version=0x30020900, datecode=0xd091e17 CPLD version 0x14
Reset reason (4.0): Application crash

BIOS Version: Build # 14 - Wed 04/30/2014
CGR Loader Stage 1 Version: 1.9.16

-------------------------------------------------------------

Any idea?

Leo Laohoo · ‎04-06-2017

cgr1000-hv.srp.SPA.1.5.6

First of, I'm going to say I'm not familiar with this hardware. So I'm going to ask this stupid question: What is this filename? I can't seem to find any information from the Cisco website.

cgr1000-universalk9-mz.SPA.155-2.T

Two things I want to point out with this filename:

The filename doesn't have a valid extension for the appliance to read easily. I mean it will, finally, read it but with difficulty. The Cisco website has listed the file extension of .BIN.
Next, the most critical of them all, see the last letter? "T". Notice there's no number at the end? This means it's version "0", and is considered to be the most dangerous version number anyone can get. Version "0" means it's the first version to be released and no one has yet found any bugs that have been fixed with later version. Another thing is the "T". This means this IOS belongs to the "T" train. Cisco would like to call this the "Technology" train. But some people, me among them, would call this the "terrible" train because this train is like the "betas" of beta. I tend to recommend people to leave a healthy distance from the "T" train unless there is an operation requirement.

sdgfsd fjkdtkmvb · ‎04-06-2017

Thanks, for you answer.

I should also admit I'm much more familiar with switching...

I'm going to explain a littlte bit further.

CGR-1120 came installed with 15.5-2.T, I met the issue while trying to go to 15.5-3.M5.

Only IOSes download format available for this router are Bundle containing 3 files (and a manifest):

- cgr1000-hv.srp.SPA.1.5.6 (name varies depending of release numbering) is update code intended for Hypervisor

- cgr1000-universalk9-mz.SPA.155-3.M5 (name varies depending of release numbering) is IOS

- cgr1000-ref-gos.img.1.30.gz (name varies depending of release numbering) is Guest OS

Structure of the bundle is :

cgr1000-universalk9-bundle.SPA.155-3.M5.bin containing

-> cgr1000-universalk9-bundle.SPA.155-3.M5 containing

--> cgr1000-hv.srp.SPA.1.5.6

--> cgr1000-ref-gos.img.1.30.gz containing

---> cgr1k-ref-gos.img containing

----> 0.img

--> cgr1000-universalk9-mz.SPA.155-3.M5 containing

---> cgr1000-universalk9-m

--> MANIFEST

Usually you should be able to upgrade CGR1120 router using "Bundle Install <Bundle Name>" from enable prompt.

In this case, we are in rommon-1. So basically we cannot use bundle command.

My understanding of this hardware (by looking at support documents and community) is that you must first update bootstrap using hypervisor intended file (cgr1000-hv.srp.SPA.1.5.6) in order to reach rommon-2 and then update using IOS intended file (cgr1000-universalk9-mz.SPA.155-3.M5).

I also noticed that the way these CGR behave (specially in rommon) seems very different from "usual Cisco routers".

I hope this explanation allows a better understanding.

Diana Karolina Rojas · ‎02-25-2021

Hello!

I know that this is an old discution but did you find the solution to this problem? I am experiencing something similar.

Best Regards,

vetlew · ‎08-05-2022

Hi, had the same Error 13 message when trying to recover from a faulty SD flash card on a CGR1120 when using a Mac with local TFTP server (SecureCRT TFTP). Bundle file was also unarchived with the Mac.

Checked signature of Hypervisor and OSx images with the content in the MANIFEST file, and everything seemed to be ok, exept the CGR1120 wouldn't recognize the downloaded Hypervisor file (Error 13) after the TFTP boot from the Mac.

Changed to a Linux PC and unarchived the bundle file into a TFTP directory there. TFTP boot of Hypervisor from the Linux PC then went without errors, bringing up Rommon-2> prompt without any issues. Same with TFTP boot of the IOx image. Could then reformat and fix the SD card, and do a bundle install of the bundle file.

Here is a link to a recovery procedure that worked well on a Linux PC, but not from a Mac: https://www.cisco.com/c/en/us/support/docs/routers/1000-series-connected-grid-routers/210444-Troubleshoot-IOS-hypervisor-and-system-i.html

Best Regards Vetle

Ziga M · ‎01-05-2024

rommon-2> boot cgr1000-universalk9-bundle.SPA.158-3.M9.bin
Booting image: cgr1000-universalk9-bundle.SPA.158-3.M9.bin.... [Multiboot-klu
dge, loadaddr=0x1c100000, text-and-data=0xb969000

Error 13: Invalid or unsupported executable format

problem seems to be that prior to rommon, hypervisor boots. And I was unable to boot to different version. Solution was booting to same version as hypervisor is loaded. after that use "bundle install flash" command. that will also upgrade hypervisor