C2960x uncompressed and installed, entry point: 0x3000

tanner.zaitt · ‎02-10-2021

Hello all, last night I had an adventure with upgrading the IOS of C2960X switch..

Here is the output from the point where I began the upgrade to the point of the failed boot on the new IOS:

Switch#$leave-old-sw /imageonly flash:c2960x-universalk9-tar.152-7.E3.tar

examining image...

extracting info (110 bytes)

extracting c2960x-universalk9-mz.152-7.E3/info (688 bytes)

extracting info (110 bytes)

Stacking Version Number: 1.119

System Type: 0x00000000

Ios Image File Size: 0x0197AA00

Total Image File Size: 0x0278D200

Minimum Dram required: 0x08000000

Image Suffix: universalk9-152-7.E3

Image Directory: c2960x-universalk9-mz.152-7.E3

Image Name: c2960x-universalk9-mz.152-7.E3.bin

Image Feature: IP|LAYER_2|SSH|3DES|MIN_DRAM_MEG=128

FRU Module Version: No FRU Version Specified

Old image for switch 1: unknown

Extracting images from archive into flash...

extracting c2960x-universalk9-mz.152-7.E3/c2960x-universalk9-mz.152-7.E3.bin (26714112 bytes)

extracting c2960x-universalk9-mz.152-7.E3/info (688 bytes)

extracting info (110 bytes)

Warning: Unable to allocate memory to display the tar extraction of files,

however upgrade process is still continuing. If you would like to

see the tar extraction output, try upgrading one switch at a time.

Installing (renaming): `flash:update/c2960x-universalk9-mz.152-7.E3' ->

`flash:/c2960x-universalk9-mz.152-7.E3'

EDS file download on SKU match in progress...

New software image installed in flash:/c2960x-universalk9-mz.152-7.E3

All software images installed.

Switch#

Switch#wr mem

Building configuration...

[OK]

Switch#sh boot

BOOT path-list : flash:/c2960x-universalk9-mz.152-7.E3/c2960x-universalk9-mz.152-7.E3.bin

Config file : flash:/config.text

Private Config file : flash:/private-config.text

Enable Break : yes

Manual Boot : no

Allow Dev Key : yes

HELPER path-list :

Auto upgrade : yes

Auto upgrade path :

NVRAM/Config file

buffer size: 524288

Timeout for Config

Download: 0 seconds

Config Download

via DHCP: disabled (next boot: disabled)

Switch#reload

Proceed with reload? [confirm]

Oct 16 08:55:03.886: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.

CPU rev: B

Image passed digital signature verification

Board rev: 5

Testing DataBus...

Testing AddressBus...

Testing Memory from 0x00000000 to 0x1fffffff.../

Using driver version 4 for media type 1

Xmodem file system is available.

Base ethernet MAC Address: aa;bb;cc;dd;ee;ff

The password-recovery mechanism is enabled.

USB EHCI 1.00

USB Console INIT

Initializing Flash...

mifs[5]: 12 files, 1 directories

mifs[5]: Total bytes : 1806336

mifs[5]: Bytes used : 833536

mifs[5]: Bytes available : 972800

mifs[5]: mifs fsck took 0 seconds.

mifs[6]: 1 files, 1 directories

mifs[6]: Total bytes : 3870720

mifs[6]: Bytes used : 971264

mifs[6]: Bytes available : 2899456

mifs[6]: mifs fsck took 1 seconds.

mifs[7]: 5 files, 1 directories

mifs[7]: Total bytes : 258048

mifs[7]: Bytes used : 8192

mifs[7]: Bytes available : 249856

mifs[7]: mifs fsck took 0 seconds.

mifs[8]: 5 files, 1 directories

mifs[8]: Total bytes : 258048

mifs[8]: Bytes used : 8192

mifs[8]: Bytes available : 249856

mifs[8]: mifs fsck took 0 seconds.

mifs[9]: 10 files, 2 directories

mifs[9]: Total bytes : 122185728

mifs[9]: Bytes used : 90234880

mifs[9]: Bytes available : 31950848

mifs[9]: mifs fsck took 72 seconds.

...done Initializing Flash.

Loading "flash:/c2960x-universalk9-mz.152-7.E3/c2960x-universalk9-mz.152-7.E3.bin"...Verifying image flash:/c2960x-universalk9-mz.152-7.E3/c2960x-universalk9-mz.152-7.E3.bin........................................................................................................................................................................................................................................................................................................................................................................................................................Image passed digital signature verification

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

File "flash:/c2960x-universalk9-mz.152-7.E3/c2960x-universalk9-mz.152-7.E3.bin" uncompressed and installed, entry point: 0x3000

executing...

Do you have an idea what is wrong?
The device is:
WS-C2960X-48LPS-L
The current version of the IOS is :

15.2(2)E1

And I try to upgrade to the latest image 15.2.7E3 MD.

Is it possible bug CSCvf24186:
C2960X- switch failed to boot with IOS version 152-2.E5 and 15.2(4)E4
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf24186/?rfs=iqvred
Known Affected Releases: (1)
15.2(4)E

Cold reboot doesn't help, I tried 2 times.

In the end, I just put the switch at the switch mode withholding the mode key front of the switch on the left before connecting the power supply for 30 seconds and I run these commands:
flash_init
load_helper
boot flash:/oldimage/oldimage.bin
Conf t
boot system flash:/oldimage/oldimage.bin
do wr

And I restored the switch with the old Image.

We might try upgrading to 15.2(4)E6 first and then to a new release?
Could you confirm?
Any other with the same issue?
Thank you in advance.
Best Regards.

tanner.zaitt · ‎02-10-2021

In C2960x is it possible to define two images, the new one and the old one?
If the new image failed to boot, the switch can boot from the old image?

The idea is to keep the remote access to the switch.

Because I don't feel well every time send the employe on the site.
And the downtime is too long....
If you update the device remotely without physical access.

Reza Sharifi · ‎02-10-2021

No, in smaller switches like the 2960x you can only have one image listed at a time. If the first image files, you have to point the switch to the second image manually. Can you load the IOS in the main directory of the flash (not imageonly directory) first and try the installation again?

Switch#$leave-old-sw flash:c2960x-universalk9-tar.152-7.E3.tar

HTH

tanner.zaitt · ‎02-10-2021

Hello Reza.

I tried with bin images without tar images and the same issue.

The new image is uploaded to the main flash directory.

Only the old image is under subfolder.

bestrada · ‎06-05-2024

Hello, I realize this is an old thread, but did you find a solution?

I have the same issue with c2960x-universalk9-mz.152-7.E10.bin on WS-C2960X-48TD-L

Thanks,

Leo Laohoo · ‎06-05-2024

What IOS version was the 2960X originally booting from?

Console into the switch and reboot. Post the entire boot-up process.

bestrada · ‎06-05-2024

Hi Leo,

Current firmware is c2960x-universalk9-mz.150-2.EX5

Full process:

SWITCH >en
SWITCH #show version
Cisco IOS Software, C2960X Software (C2960X-UNIVERSALK9-M), Version 15.0(2)EX5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Fri 21-Feb-14 05:54 by prod_rel_team

ROM: Bootstrap program is C2960X boot loader
BOOTLDR: C2960X Boot Loader (C2960X-HBOOT-M) Version 15.2(2r)E1, RELEASE SOFTWARE (fc1)

SWITCH uptime is 10 minutes
System returned to ROM by power-on
System restarted at 17:14:09 US/Mountain Wed Jun 5 2024
System image file is "flash:/c2960x-universalk9-mz.150-2.EX5/c2960x-universalk9-mz.150-2.EX5.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2960X-48TD-L (APM86XXX) processor (revision A0) with 524288K bytes of memory.
Processor board ID FCW1838B1JV
Last reset from power-on
2 Virtual Ethernet interfaces
1 FastEthernet interface
50 Gigabit Ethernet interfaces
2 Ten Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : F0:B2:E5:45:E0:00
Motherboard assembly number : 73-14192-04
Power supply part number : 341-0527-01
Motherboard serial number : FOC1817G8N7
Power supply serial number : LIT1821D56T
Model revision number : A0
Motherboard revision number : A0
Model number : WS-C2960X-48TD-L
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FOC1823U9K7
System serial number : FCW1838B1JV
Top Assembly Part Number : 800-37704-01
Top Assembly Revision Number : A0
Version ID : V01
CLEI Code Number : CMMLH00ARA
Daughterboard revision number : A0
Hardware Board Revision Number : 0x12

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 52 WS-C2960X-48TD-L 15.0(2)EX5 C2960X-UNIVERSALK9-M

Configuration register is 0xF
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #show boot
BOOT path-list : flash:/c2960x-universalk9-mz.150-2.EX5/c2960x-universalk9-mz.150-2.EX5.bin
Config file : flash:/config.text
Private Config file : flash:/private-config.text
Enable Break : yes
Manual Boot : no
HELPER path-list :
Auto upgrade : yes
Auto upgrade path :
NVRAM/Config file
buffer size: 524288
Timeout for Config
Download: 0 seconds
Config Download
via DHCP: disabled (next boot: disabled)
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #show flash

Directory of flash:/

2 -rwx 5669 Jun 5 2024 16:55:45 -06:00 private-config.text
3 -rwx 976 Dec 2 2018 03:38:51 -07:00 vlan.dat
4 -rwx 26786816 Jun 5 2024 16:59:56 -06:00 c2960x-universalk9-mz.152-7.E10.bin
5 -rwx 8932 Jun 5 2024 16:55:45 -06:00 config.text
7 drwx 512 Jul 3 2014 20:51:46 -06:00 c2960x-universalk9-mz.150-2.EX5
646 -rwx 3096 Jun 5 2024 11:16:00 -06:00 multiple-fs

122185728 bytes total (71764992 bytes free)
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #verify /md5 flash:c2960x-universalk9-mz.152-7.E10.bin
......................................................................................................................................................................................................................................................
................................................................................................................................................Done!
verify /md5 (flash:c2960x-universalk9-mz.152-7.E10.bin) = 259145e87189bcf2b0b41ec8399dec98

SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #conf t
Enter configuration commands, one per line. End with CNTL/Z.
sw-datacenter05mfved(config)#$ flash:c2960x-universalk9-mz.152-7.E10.bin
sw-datacenter05mfved(config)#exit
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
Building configuration...
[OK]
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #show boot
BOOT path-list : flash:c2960x-universalk9-mz.152-7.E10.bin
Config file : flash:/config.text
Private Config file : flash:/private-config.text
Enable Break : yes
Manual Boot : no
HELPER path-list :
Auto upgrade : yes
Auto upgrade path :
NVRAM/Config file
buffer size: 524288
Timeout for Config
Download: 0 seconds
Config Download
via DHCP: disabled (next boot: disabled)
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #
SWITCH #reload
Proceed with reload? [confirm]

Jun 5 17:27:53.739 US/Moun: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.

CPU rev: B
Image passed digital signature verification
Board rev: 18
Testing DataBus...
Testing AddressBus...
Testing Memory from 0x00000000 to 0x1fffffff.../
Using driver version 4 for media type 1
Xmodem file system is available.
Base ethernet MAC Address: f0:b2:e5:45:e0:00
The password-recovery mechanism is enabled.
USB EHCI 1.00
USB EHCI 1.00
USB Console INIT
Initializing Flash...
mifs[5]: 12 files, 1 directories
mifs[5]: Total bytes : 1806336
mifs[5]: Bytes used : 833536
mifs[5]: Bytes available : 972800
mifs[5]: mifs fsck took 0 seconds.
mifs[6]: 1 files, 1 directories
mifs[6]: Total bytes : 3870720
mifs[6]: Bytes used : 971264
mifs[6]: Bytes available : 2899456
mifs[6]: mifs fsck took 1 seconds.
mifs[7]: 5 files, 1 directories
mifs[7]: Total bytes : 258048
mifs[7]: Bytes used : 8192
mifs[7]: Bytes available : 249856
mifs[7]: mifs fsck took 0 seconds.
mifs[8]: 5 files, 1 directories
mifs[8]: Total bytes : 258048
mifs[8]: Bytes used : 8192
mifs[8]: Bytes available : 249856
mifs[8]: mifs fsck took 0 seconds.
mifs[9]: 626 files, 19 directories
mifs[9]: Total bytes : 122185728
mifs[9]: Bytes used : 50420736
mifs[9]: Bytes available : 71764992
mifs[9]: mifs fsck took 46 seconds.
...done Initializing Flash.
Loading "flash:c2960x-universalk9-mz.152-7.E10.bin"...Verifying image flash:c2960x-universalk9-mz.152-7.E10.bin.........................................................................................................................................................................................................................................................................................................................................................................................................................Image passed digital signature verification
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
File "flash:c2960x-universalk9-mz.152-7.E10.bin" uncompressed and installed, entry point: 0x3000
executing...
Loading "flash:/c2960x-universalk9-mz.152-7.E10.bin"...Verifying image flash:/c2960x-universalk9-mz.152-7.E10.bin.........................................................................................................................................................................................................................................................................................................................................................................................................................Image passed digital signature verification

It stalls there.

Cold reboot is the same. I can break out of it and reload the original file.

Thanks,

Leo Laohoo · ‎06-05-2024

Is the switch able to go back to the "original" EX5 IOS version?

bestrada · ‎06-06-2024

Hi Leo,

Yes, after reseating power, I can press the mode button and boot from the original IOS version that came with the switch.

mifs[8]: Bytes available : 249856
mifs[8]: mifs fsck took 0 seconds.
mifs[9]: filesystem check interrupted!
...done Initializing Flash.

The system has been interrupted, or encountered an error
during initialization of the flash filesystem. The following
commands will initialize the flash filesystem, and finish
loading the operating system software:

flash_init
boot

switch: flash_init
Initializing Flash...
mifs[9]: 626 files, 19 directories
mifs[9]: Total bytes : 122185728
mifs[9]: Bytes used : 50424320
mifs[9]: Bytes available : 71761408
mifs[9]: mifs fsck took 49 seconds.
...done Initializing Flash.

switch: boot flash:/c2960x-universalk9-mz.150-2.EX5/c2960x-universalk9-mz.150-2.EX5.bin

The switch boots fine with the original IOS and config intact.

Thanks

Leo Laohoo · ‎06-06-2024

Please try a different IOS version.

If a different IOS version still does not work, remove the lid and take a photo of the entire motherboard. I want to compare the motherboard to known counterfeit models.

Aside from comparing the motherboard for possible counterfeit, another method to determine is load the switch with a different IOS version. Nearly all the counterfeit switches, with the help of a soldered "daughter board" in some models, can only run either EX4 or EX5. Upgrade to a different IOS version and the switch will either go into ROMMON or simply "hang".

Pictures of counterfeit 2960X motherboard can be found HERE.

bestrada · ‎06-07-2024

Hi Leo,

I was able to load c2960x-universalk9-mz.152-2.E. This is the oldest of version of 15.2 available from Cisco.

I then tried to load c2960x-universalk9-mz.152-7.E10 again to see if it's an upgrade path issue, but it hung again.

I will try other ISO to find what latest version will load.

Thanks

bestrada · ‎06-07-2024

After several different versions, I loaded c2960x-universalk9-mz.152-4.E6.bin.

However, during boot up, I noticed these logs:

POST: ACT2 Authentication : Begin
POST: ACT2 Authentication : End, Status Failed
extracting front_end/front_end_ucode_info (43 bytes)
Software version is different so extracting
the whole bundle

extracting ucode_info (76 bytes)
front_end/ (directory)
extracting front_end/fe_type_9 (81125 bytes)
extracting front_end/front_end_ucode_info (43 bytes)

Front-end Microcode IMG MGR: Installed 3 image(s) in cache:

Front-end Microcode IMG MGR: found microcode images for 3 devices.
Image for front-end 0: flash:/front_end_ucode_cache/ucode.0
Image for front-end 7: flash:/front_end_ucode_cache/ucode.0
Image for front-end 14: flash:/front_end_ucode_cache/ucode.0

Front-end Microcode IMG MGR: Preparing to program device microcode...
Front-end Microcode IMG MGR: Preparing to program device[0]...28824 bytes.
Front-end Microcode IMG MGR: Programming device 0...rwRrrrrrrwsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspsssssssspwRr!
Front-end Microcode IMG MGR: Microcode programming complete for device 0.
Front-end Microcode IMG MGR: Microcode programming complete.

*Jan 2 00:00:00.076: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c2960x_lanbase Next reboot level = lanbase and License = No valid license found
Jun 7 15:54:59.094: in Switch 0. Cannot read pid from Flexstack module

Jun 7 15:55:58.852: %ILET-1-AUTHENTICATION_FAIL: This Switch may not have been manufactured by Cisco or with Cisco's authorization. This product may contain software that was copied in violation of Cisco's license terms. If your use of this product is the cause of a support issue, Cisco may deny operation of the product, support under your warranty or under a Cisco technical support program such as Smartnet. Please contact Cisco's Technical Assistance Center for more information.

I reverted back to

c2960x-universalk9-mz.152-2.E

but still get those authentication errors

Leo Laohoo · ‎06-07-2024

@bestrada wrote:
POST: ACT2 Authentication : End, Status Failed

I'd RMA that switch.

2960X, 6840, 3650/3850 have an I2C chip which is know to fail and when it fails, the switch will stop working because it believes that it is a counterfeit.

bestrada · ‎06-14-2024

Hi Leo,

Do you need and active support contract to RMA a switch in this scenario?

Leo Laohoo · ‎06-14-2024

@bestrada wrote:
Do you need and active support contract to RMA a switch in this scenario?

Each 2960X/XR purchased comes with Enhanced Limited Lifetime Hardware Warranty. There is no need to have a valid Service Contract to RMA a faulty switch.

The End-of-Life date for the 2960X/XR is 31 October 2027 so it should be possible to RMA the switch.