Disabling smart install on 3750 stack switch

[mahesh18]

Hi Everyone,

Need to know on 3750 switch which has 2 stack memebers

Model WS-C3750G-24T"

sh switch

Switch/Stack Mac Address : 0018.198b.9e80

                                           H/W   Current

Switch#  Role   Mac Address     Priority Version  State

----------------------------------------------------------

*1       Master 0018.198b.9e80     1      0       Ready

2       Member 001a.6d5b.e180     1      0       Ready

currently it has smart install feature configured

sh vstack config
Role: Client (SmartInstall enabled)
Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:

Need to know if it is safe to disable the smartinstall feature in production environment?

What does smart install do?

Reason i need to do this is due to security threat as per link below

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-smartinstall

Regards

MAhesh

[Leo Laohoo · Accepted solution]

Vstack Director IP address: 0.0.0.0

No IP address for VStack so this means VStack is not configured or enabled.  Post the output to the commnand "sh run | i vstack".  If there are no output, then VStack is not really enabled.

[mahesh18]

Hi Leo,

I run  the command  there is no output.

Can you please tell what does smart install do in nutshell?

Regards

MAhesh

[Leo Laohoo · Accepted solution]

Can you please tell what does smart install do in nutshell?

Funny you should ask.  I wrote a blog about it last year.  Have a read when you have the time.

How to use Zero-Touch SmartInstall

PS:  Thanks for taking the time to rate our posts, Mahesh. 

[mahesh18]

Hi Leo,

I read the above article which was very good.

Thanks for Excellent work and helping the community.

Regards

Mahesh

[Leo Laohoo]

Thanks, Mahesh.

I hope the blog will be able to help you in the future. 

[islamsallaj]

I tried to access this article for some reason when I login with my cco tells me I can't access it.

izzy

[alberthilt]

Smart Install is enabled default, so you do not see any config for that!

sh vstack config

-> you see

Role: Client
 Vstack Director IP address: 0.0.0.0

I have the problem on some switches to disable it with

no vstack

command because the switch does know this command but "sh vstack config" shows the role "client"

Switch: WS-C2960G-48TC-L

Software: Version 12.2(52)SE

Can some one tell me how I can disable Smart Install on this switch?

[AWRIGHT337]

You have to run the "no vstack" command under "Configure Terminal (conf t)"

[d-costa]

Hello Leo,

I also have a 3750 switch stack with 4 switchs and have the same issue.

I see Vstack Director IP address: 0.0.0.0, but if I check my running config I get output.

From your post if we don't have a director configured "Vstack Director IP address: 0.0.0.0" we can safely disable vstack on a cisco switch stack production environment safely?

----------------------------------
gigaswitch02#sh run | i vstack
vstack

-----------------------------------

gigaswitch02#show vstack config
 Capability: Director | Client
 Oper Mode: Enabled
 Role: Client
 Vstack Director IP address: 0.0.0.0

 *** Following configurations will be effective only on director ***
 Vstack default management vlan: 1
 Vstack start-up management vlan: 1
 Vstack management Vlans: none
 Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
 Vstack Backup Details:
         Mode: On (default)
         Repository:

-------------------------------------------------

Thanks,

David Costa

[jlopezbo]

To disable smart install feature . If the switches are already install and you will not use smart install there is not any problem to disable this feature
Example


switch#show vstack config
Role: Client (SmartInstall enabled)  >>>>>>>>>>>>(it's enable by default)
Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack start-up management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:
switch#conf ter
switch(config)#no vstack >>>>> Run the command to disable smart install
switch(config)#do show vstack confi
Role: Client (SmartInstall disabled) >>>>>>>>>>> Then the smart install got disable
 Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack start-up management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:
WS-C2960X-24PS-L-SW1(config)#