Can´t access a Catalyst 2960-L Smart Managed switch

[luwro]

Hey everyone,

i recently bought a Cisco Catalyst 2960-L Smart Managed 24 Port Switch. (Model number: WS-C2960L-SM-24PQ)
Unfortunately accessing this switch isn´t possible. The Quick-Setup Guide shipped with the switch claims to just powering on the switch, setting the computers ethernet adapter to DHCP, connecting the computer to one of the switch ports, waiting for the switch to assign an ip-address from the range 192.168.1.0/24 to my pc and opening the web browser heading to http://192.168.1.1

For some reason the DHCP assginment does not working. After analysing whats happening between the switch and my ETH-adapter unsing wireshark i can say that my pc sends DHCP-Discovers, but the switch never attempts to answer one of the requests. After some time my pc gives itself an APIPA Address. The Webinterface is therefore not accessable.

I tried to access the switches cli via console port and usb. That works using Putty or HyperTerminal, the switch gaves me messages during boot. I also can send commands to the switches cli. Enable for example works, but configure command leads to the following message: "Translating "configure"...domain server (255.255.255.255)".

I found out that this kind of Switch can´t be managed via cli, only using the webinterface. But as described above accessing the webGUI isn´t possible due to not getting an ip from the switch.

I tried to give me an ip from the 192.168.1.0/24 range static, but that didn´t worked either.
After some tries i sended "show ip interface brief" to the cli. Here´s what returned:

Interface              IP-Address      OK? Method Status                Protocol
Vlan1                  unassigned      YES NVRAM  administratively down down
GigabitEthernet0/1     unassigned      YES unset  up                    up
GigabitEthernet0/2     unassigned      YES unset  down                  down
GigabitEthernet0/3     unassigned      YES unset  down                  down
GigabitEthernet0/4     unassigned      YES unset  down                  down
GigabitEthernet0/5     unassigned      YES unset  down                  down
GigabitEthernet0/6     unassigned      YES unset  down                  down
GigabitEthernet0/7     unassigned      YES unset  down                  down
GigabitEthernet0/8     unassigned      YES unset  down                  down
GigabitEthernet0/9     unassigned      YES unset  down                  down
GigabitEthernet0/10    unassigned      YES unset  down                  down
GigabitEthernet0/11    unassigned      YES unset  down                  down
GigabitEthernet0/12    unassigned      YES unset  down                  down
GigabitEthernet0/13    unassigned      YES unset  down                  down
GigabitEthernet0/14    unassigned      YES unset  down                  down
GigabitEthernet0/15    unassigned      YES unset  down                  down
GigabitEthernet0/16    unassigned      YES unset  down                  down
GigabitEthernet0/17    unassigned      YES unset  down                  down
GigabitEthernet0/18    unassigned      YES unset  down                  down
GigabitEthernet0/19    unassigned      YES unset  down                  down
GigabitEthernet0/20    unassigned      YES unset  down                  down
GigabitEthernet0/21    unassigned      YES unset  down                  down
GigabitEthernet0/22    unassigned      YES unset  down                  down
GigabitEthernet0/23    unassigned      YES unset  down                  down
GigabitEthernet0/24    unassigned      YES unset  down                  down
GigabitEthernet0/25    unassigned      YES unset  down                  down
GigabitEthernet0/26    unassigned      YES unset  down                  down
GigabitEthernet0/27    unassigned      YES unset  down                  down
GigabitEthernet0/28    unassigned      YES unset  down                  down
TenGigabitEthernet0/1  unassigned      YES unset  down                  down
TenGigabitEthernet0/2  unassigned      YES unset  down                  down
TenGigabitEthernet0/3  unassigned      YES unset  down                  down
TenGigabitEthernet0/4  unassigned      YES unset  down                  down
Switch#

I´m not sure what to do next. Is this Switch broken, or i am doing something wrong?
Thanks.

[paul driver]

Helloo
Not sure i understand you say you cannot access the switch but you have posted the output  show ip interface brief?
You should be able gain access via the cli but you may need to perform a password recovery, which when performed will allow you access the switch with it default configuration.

1) attach console cable to switch and open a terminal session
2) power down switch and depress the mode button on the switch at the same time for about 20 seconds

3) release the mode button and then CTL + Break keys - ,--- this should break the boot process and get into rommon mode.

4)type  flash_init <return)
5) rename flash:config.text flash:config.OLD
6)boot
switch should then boot up and you should be able to gain cli access

now you can work from a default configuration and just save or copy the old config back on the switch and save that.
to do the latter:
enable
rename flash:config.OLD flash:config.text
copy flash:config.text system:running-config

[Richard Burts]

If I am understanding the original post correctly access through the console port is working. And enable access is working. So I am not sure that the password recovery procedure will be helpful. Again if I am understanding correctly the original post part of the issue is that there is no configuration using CLI. Configuration is only done through GUI and GUI is not accessible.

I am surprised at the output shown in the original post. It appears that the switch has no IP address. And all of the interfaces are shown as down/down. Was the PC Ethernet connected at the time this output was generated?

The symptoms suggest to me that the switch did not have a normal boot. Can the original poster connect using the console port, power cycle the switch, and post the output generated during the boot process?

HTH

Rick

[luwro]

Hey Rick,

yes the switch has no ip address according to the show ip interface brief output.

My Computer was connected to GigabitEthernet0/1 at the same time the ouput was generated. Thats why you see its status as "up" the show ip interface brief output.

Here´s the log the switch ouptuts during boot:

General initialization - Version: 1.0.0
Serdes initialization - Version: 1.0.2
Board H/W SKU Id is (5)
DDR3 Training Sequence - Ver TIP-1.27.0
DDR3 Training Sequence - Switching XBAR Window to FastPath Window
DDR3 Training Sequence - Ended Successfully
DDR3 Training Sequence - Start scrubbing
DDR3 Training Sequence - End scrubbing
BootROM: Image checksum verification PASSED


Board SKU ID is (5)
FPU initialized to Run Fast Mode.
FPGA: 1.5
DRAM Size: 512 MB
Xmodem file system is available.
USB EHCI 1.00
### Found Flash Chip id - 0xda01
Using driver version 1 for media type 3
yaffs[9]: Initialization complete.

yaffs[10]: Initialization complete.

yaffs[11]: Initialization complete.

Base ethernet MAC Address: 00:29:c2:55:3f:80
The password-recovery mechanism is enabled.

*** The system will autoboot in 5 seconds ***
Send break character to prevent autobooting.

....................
Loading "flash:c2960l-universalk9-mz.152-6.E2b/c2960l-universalk9-mz.152-6.E2b.bin"...Verifying image flash:c2960l-universalk9-mz.152-6.E2b/c2960l-universalk9-mz.152-6.E2b.bin...........................................................................................................................................................................................................................................
Image passed digital signature verification
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
File "flash:c2960l-universalk9-mz.152-6.E2b/c2960l-universalk9-mz.152-6.E2b.bin" uncompressed and installed, entry point: 0x3000
executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, C2960L Software (C2960L-UNIVERSALK9-M), Version 15.2(6)E2b, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Tue 20-Nov-18 21:04 by prod_rel_team
Initializing flash...
### Found Flash Chip id - 0xDA01
Using driver version 1 for media type 3
yaffs[8]: Initialization complete.

yaffs[9]: Initialization complete.

yaffs[10]: Initialization complete.

...done Initializing flash.


Checking for MCU firmware upgrade..
MCU firmware upgrade not needed (v1.6.1.iap)

Checking for Bootloader upgrade..
New version = Version 15.2(5r)E3            ,
Current version = Version 15.2(6r)E1, RELEASE SO

Boot Loader upgrade not needed(v) DB Recovery 4

INIT: Pp init completed.

INIT: ASIC 0 phases init completed.

INIT: phases init completed.
INIT: features init completed.

POST: ACT2 Authentication : Begin
POST: ACT2 Authentication : End, Status Passed
POST: Thermal Tests : Begin
POST: Thermal Tests : End, Status Passed

POST: PortASIC Port Loopback Tests : Begin
POST: PortASIC Port Loopback Tests : End, Status Passed

Initializing Device Manager......done
Initializing OBFL Module......done


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2960L-SM-24PQ (Marvell PJ4B (584) v7 (Rev 2)) processor (revision A0) with 524288K bytes of memory.
Processor board ID FCW2249A1LK
Last reset from Reload
1 Virtual Ethernet interface
28 Gigabit Ethernet interfaces
4 Ten Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:29:C2:55:3F:80
Motherboard assembly number     : U58O342T39
Power supply part number        : 341-100560-01
Motherboard serial number       : FOC22467CFY
Power supply serial number      : DCC222980ZX
Model revision number           : A0
Motherboard revision number     : 01
Model number                    : WS-C2960L-SM-24PQ
System serial number            : FCW2249A1LK
Top Assembly Part Number        : 74-122243-01
Top Assembly Revision Number    : A0
Version ID                      : V01
CLEI Code Number                : CMM3400ARA
Hardware Board Revision Number  : 0x03



Press RETURN to get started!


*Mar  1 00:00:01.250:
Board SKU ID is (5)

Sep 30 08:21:55.865: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
Sep 30 08:21:57.357: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
Sep 30 08:22:00.391: %SYS-5-CONFIG_I: Configured from memory by console
Sep 30 08:22:00.799: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C2960L Software (C2960L-UNIVERSALK9-M), Version 15.2(6)E2b, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Tue 20-Nov-18 21:04 by prod_rel_team
Sep 30 08:22:00.932: %SSH-5-ENABLED: SSH 1.99 has been enabled
Sep 30 08:22:02.377: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
Sep 30 08:22:02.416: %USB_CONSOLE-6-MEDIA_USB: Console media-type is USB.
Sep 30 08:22:05.932: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Startup Config Present)
Sep 30 08:22:09.926: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up
Sep 30 08:22:10.926: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up

[luwro]

Hi Paul,

thanks for your reply.

I tried what you suggested. Unfortunately it didn´t worked. After accessing the Rommon-Mode "flash_init" command isnt recongized by the device.

And yes, i can access the switches cli, but i can not access the configure mode on the switch. That seems to come due to the "Smart Managed" capabilities. As i undestood correctly so far this kind of switch is designed be manageable through the webGUI only.

[Deepak Kumar]

Hi,

I know that We can manage this switch using the CLI and webGUI both at the same time. 

What will happen or output once the switch is ready to use (boot process finish)? try with below commands as share output:

Enable  <Hit Enter>

config t <Hit Enter>

[luwro]

Hi,

this is what happens when i send enable & config t to the switch:

Switch>
Switch>enable
Switch#config t
          ^
% Invalid input detected at '^' marker.

Switch#

[Richard Burts]

Thank you for the output I requested showing the boot process. I am quite surprised at the output. I expected to find some issue during the boot process that prevented the switch obtaining an IP address. But the boot process seems to have completed normally. So we need to look for some other explanation of the issue.

You demonstrate that config t is not supported on that switch. What other commands are available? In enable mode can you enter the question mark and post the output?

The boot process indicates that a startup config was used. If the switch supports the show run command could you post the current running config?

HTH

Rick

[FabricioAguilar22585]

I have the same problem, how could you solve it? Please help me

[Richard Burts]

We did not figure out the problem for the original poster. So we do not have much to work with for your issue. So to start can you verify that you have console access to your switch? If so would you go into enable mode and post the output for the command show ?

[FabricioAguilar22585]

Switch#show running-config
Building configuration...

Current configuration : 1533 bytes
!
! Last configuration change at 13:12:36 UTC Fri Feb 21 2020
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
!
!
!
!
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
!
interface GigabitEthernet0/17
!
interface GigabitEthernet0/18
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
!
interface GigabitEthernet0/24
!
interface GigabitEthernet0/25
!
interface GigabitEthernet0/26
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface TenGigabitEthernet0/1
!
interface TenGigabitEthernet0/2
!
interface TenGigabitEthernet0/3
!
interface TenGigabitEthernet0/4
!
interface Vlan1
no ip address
shutdown
!
ip http server
ip http secure-server
ip scp server enable
!
!
!
!
line con 0
line vty 5 15
!
end

Switch#

[Richard Burts]

Thanks for posting the config. It does show clearly that the reason you are not able to access the switch is that the vlan interface does not have an IP address and is shut down. There are several approaches to how to fix the issue. Probably the most simple approach is to access the console in enable mode, then use these commands

config t

interface vlan 1

ip address 192.168.1.1 255.255.255.0

no shut

after making these config changes connect your PC Ethernet to one of the switch ports and manually configure the PC with address 192.168.1.2 255.255.255.0 and gateway of 192.168.1.1. After that you should have access to the switch using telnet or using the GUI.

If you want a somewhat more sophisticated approach use the config changes above to assign an IP to the vlan interface and then configure a DHCP scope for network 192.168.1.0 255.255.255.0 with remote router of 192.168.1.1. Then you could just connect your PC Ethernet and get assigned an IP address.

[DraganIgnjic2737]

For anybody having the same issue here is the solution (spent whole day on this problem - cisco documentation is not ok for this)

Background:

Company bought 2960L for MGMT when I connected to switch it was already booted up and it was not in privileged mode, type enable it requests password on new switch, should be empty, no luck.

show ip interface brief, I see ip on vlan1, OK try web access it requests username/password, usual cisco/cisco does not work......

Go to google my friend and you find common procedure:

- interrupt normal boot

- enter command flash_init, rename config.text and boot

1. flash_init command not found

2. rename - no config file in flash:

??????????????

Solution:

1. if you do not have config.text, create one (it can be empty) this helps with enable password (blank) - i copied config.text from usb

2. if you do not have ip on vlan 1 run setup comand in cli it will create IP 192.168.1.1

3. default username/password - username smartm privilege 15 password 0 c2960lsm

4. default enable password c2960lsm

Hope someone finds this helpful

Regards

Dragan

[Richard Burts]

Dragan

The issue you encountered is somewhat different from the problem in the original post. But you have found a good solution. Glad to know that it works for you, and might well be helpful to others. +5 for posting a good solution.