Option 150 dosent work on pnp startup vlan 5

[qukquk]

Hey.

I have some pnp problems booting up a ie3300 switch. For some reason it gets the ip-address but not the tftp bootstrap file - using option 150 (it works on vlan 1) I have change the pnp to startup i vlan 5.

1: After the DTP (trunk negotiation is finished) the Ie3300 switch get and ip address in vlan 5 but it also copy tftp source interface for vlan 1 and not 5 as it should be. so the bootstrap service didn't run.

i tried to clear the switch with the following commands:

no crypto pki certificate pool
crypto key zeroize
config-register 0x2102  write

[CLI exec mode]

delete /force nvram:*.cer
delete /force vlan.dat
delete /force flash:pnp*

output of Ie3300 booting up

%Error opening tftp://255.255.255.255/network-confg (Timed out)
%Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
%Error opening tftp://255.255.255.255/router1-confg (Timed out)
%Error opening tftp://255.255.255.255/router1.cfg (Timed out)

thanks...

[Georg Pauwen]

Hello,

can you post the full running configuration of the IE3300 ?

[qukquk]

Ok!

 here is running-config after reboot:(its complete empty before reboot)

version 16.10

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no platform punt-keepalive disable-kernel-core

no platform punt-keepalive settings

no platform bridge-security all

!

hostname Switch

!

!

no aaa new-model

ptp mode e2etransparent

!

!

!

!

!

ip arp entry learn 1000

!

!

!

login on-success log

no device-tracking logging theft

!

crypto pki trustpoint TP-self-signed-2130907720

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-2130907720

revocation-check none

rsakeypair TP-self-signed-2130907720

!

!

crypto pki certificate chain TP-self-signed-2130907720

certificate self-signed 01

  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 32313330 39303737 3230301E 170D3230 30363235 30353134

  32365A17 0D333030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 31333039

  30373732 30308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201

  0A028201 0100B435 2F038164 CB08F358 0D2641BC 2C0E0B1F EB58F332 8EBCE18B

  7E077836 C2A42403 3E480BAF 3D2E26C3 E7FD7DFB C50BB0CF F016F27A FCF6AC93

  C11ECDEE 1A522B69 568CB923 7ECF12B1 B4F71536 F2E1F794 10FEE30C C3744A9C

  46D9ED99 43AD4F8D 30665411 E9A89409 0BFFE7EF 1AEA3C32 878063BA 8B3B6A00

  EAAEBEC2 2F5182E7 7E46869A FB4114A0 C23368B7 15DD764C 42018797 0EFDECF4

  13DC6220 2F392356 2094E2FF 4E62E9CA 619CEFFD 48BB13E4 39D2254F 1AA65844

  0FFEA99D E1CA1A53 CBBE7940 51C29FC2 B37E9EC4 F8A59022 FD6822A2 DEC0F64E

  2AE3107D B0DF3535 3F6CC35D 8A020ADF 50FB839B 13FF2C61 0FE6823C E3EEBC31

  941890E9 D8910203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF

  301F0603 551D2304 18301680 148B6121 17E7A169 B6372A4D 69295AE4 F522670D

  6C301D06 03551D0E 04160414 8B612117 E7A169B6 372A4D69 295AE4F5 22670D6C

  300D0609 2A864886 F70D0101 05050003 82010100 20EC29EA 01391A36 DEA41A75

  9935D06A 77F573B1 040B649A 180EB70C 11D13ECA D8FBB562 B575234F AC7175A7

  5461540C B4C6374E 9D5B0DC4 24D877F9 8DFAD2D1 956A9ADA 4E591B68 A91EB74F

  D68CAFCB 840E9E2F 67D1B5AF 02E76AB3 72893104 15334717 B7EEC283 9D3676FB

  D1D157F9 37886F88 79EAC4A8 4BF63703 F1FAB200 5DED84A0 2C4A5842 D2E1BDC0

  E3707E4C 06254DFB 6DDDAF02 76364384 6F8A959D 2DD5AF77 7C8F6F6F 7001C228

  4080C7F5 CA1AB34D 7225BBBF EE90E483 FDDDDCBF CDE2FBD6 AC27C1A3 46E4AB6B

  D536BF05 52A04902 7A181329 E609327A 631B7635 748C2844 18D4DEEE 9DB86B18

  B1D2664A D33E8B0B AE99FD12 7D20EFF0 96CADCCF

        quit

!

diagnostic bootup level minimal

license udi pid IE-3300-8T2S sn FOC24120MN8

!

!

!

spanning-tree mode rapid-pvst

spanning-tree extend system-id

!

!

alarm-profile defaultPort

alarm not-operating

syslog not-operating

notifies not-operating

!

alarm facility power-supply syslog

alarm facility temperature primary relay major

alarm facility temperature primary syslog

alarm facility temperature primary notifies

!

!

transceiver type all

monitoring

!

!

!

!

!

!

!

!

!

!

!

!

!

interface GigabitEthernet1/1

description PNP STARTUP VLAN

switchport trunk allowed vlan 5

switchport mode trunk

!

interface GigabitEthernet1/2

!

interface GigabitEthernet1/3

!

interface GigabitEthernet1/4

!

interface GigabitEthernet1/5

!

interface GigabitEthernet1/6

!

interface GigabitEthernet1/7

!

interface GigabitEthernet1/8

!

interface GigabitEthernet1/9

!

interface GigabitEthernet1/10

!

interface GigabitEthernet2/1

!

interface GigabitEthernet2/2

!

interface GigabitEthernet2/3

!

interface GigabitEthernet2/4

!

interface GigabitEthernet2/5

!

interface GigabitEthernet2/6

!

interface GigabitEthernet2/7

!

interface GigabitEthernet2/8

!

interface Vlan1

ip address dhcp

shutdown

!

interface Vlan5

ip address dhcp

!

ip http server

ip http authentication local

ip http secure-server

ip http client source-interface Vlan1

ip forward-protocol nd

!

ip tftp source-interface Vlan1

!

!

!

!

control-plane

!

!

line con 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

line vty 5 15

login

!

!

mac address-table notification mac-move

!

!

!

!

[Georg Pauwen]

Hello,

what if you change:

ip tftp source-interface Vlan1

to

ip tftp source-interface Vlan5

?

[qukquk]

It's the same thing - I already tired this... 

seems like a bug?

[Georg Pauwen]

Hello,

I actually checked for bugs, but could not find any...

What if you disable DTP altogether on the trunk port with the 'switchport nonegotiate' command ?

[Georg Pauwen]

Also, what is the IP address of the TFTP server ? And do you have anything between the switch and the TFTP server ?

[qukquk]

No there is nothing in between...

The tftp server is a 9300 with connects directly to the IE3300

9300 config:

ip dhcp pool pool1
network 10.1.1.0 255.255.255.0
default-router 10.1.1.1
option 150 ip 10.1.1.1

tftpserver flash:bootstrap.config

_____
639026 -rw- 432 Jul 29 2020 12:38:03 +00:00 bootstrap.config

11353194496 bytes total (7792627712 bytes free)

[qukquk]

from

dhcp ip server packet detail debug from server 9300 

Log Buffer (102400 bytes):

*Jul 29 13:44:39.881: %LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet1/1/3, changed state to down
*Jul 29 13:44:40.882: %LINK-3-UPDOWN: Interface TenGigabitEthernet1/1/3, changed state to down
*Jul 29 13:44:46.500: IP: s=10.1.1.1 (local), d=224.0.0.9 (Vlan5), len 52, sending broad/multicast
*Jul 29 13:44:56.080: IP: s=10.0.0.1 (local), d=224.0.0.9 (Vlan1), len 52, sending broad/multicast
*Jul 29 13:45:12.276: IP: s=10.1.1.1 (local), d=224.0.0.9 (Vlan5), len 52, sending broad/multicast
*Jul 29 13:45:22.233: IP: s=10.0.0.1 (local), d=224.0.0.9 (Vlan1), len 52, sending broad/multicast
*Jul 29 13:45:42.189: IP: s=10.1.1.1 (local), d=224.0.0.9 (Vlan5), len 52, sending broad/multicast
*Jul 29 13:45:42.645: %LINK-3-UPDOWN: Interface TenGigabitEthernet1/1/3, changed state to up
*Jul 29 13:45:44.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet1/1/3, changed state to up
*Jul 29 13:45:48.336: IP: s=10.0.0.1 (local), d=224.0.0.9 (Vlan1), len 52, sending broad/multicast
*Jul 29 13:45:49.735: %LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet1/1/3, changed state to down
*Jul 29 13:45:54.606: %LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet1/1/3, changed state to up
*Jul 29 13:46:07.726: IP: s=10.1.1.1 (local), d=224.0.0.9 (Vlan5), len 52, sending broad/multicast
*Jul 29 13:46:16.613: IP: s=10.0.0.1 (local), d=224.0.0.9 (Vlan1), len 52, sending broad/multicast
*Jul 29 13:46:35.264: IP: s=10.1.1.1 (local), d=224.0.0.9 (Vlan5), len 52, sending broad/multicast
*Jul 29 13:46:36.842: IP: s=0.0.0.0 (Vlan1), d=255.255.255.255 (nil), len 322, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:46:36.842: IP: s=0.0.0.0 (Vlan1), d=255.255.255.255 (nil), len 322, rcvd 2
*Jul 29 13:46:36.842: IP: s=0.0.0.0 (Vlan1), d=255.255.255.255 (nil), len 322, stop process pak for forus packet
*Jul 29 13:46:36.842: Option 82 not present
*Jul 29 13:46:36.842: DHCPD: tableid for 10.0.0.1 on Vlan1 is 0
*Jul 29 13:46:36.842: DHCPD: client's VPN is .
*Jul 29 13:46:36.842: DHCPD: No option 125
*Jul 29 13:46:36.842: DHCPD: No option 124
*Jul 29 13:46:36.842: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:36.842: Option 82 not present
*Jul 29 13:46:36.842: Option 82 not present
*Jul 29 13:46:36.842: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:36.842: DHCPD: DHCPDISCOVER received from client 0046.4f43.3233.3132.5630.3135 on interface Vlan1.
*Jul 29 13:46:36.842: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:36.842: Option 82 not present
*Jul 29 13:46:36.842: Option 82 not present
*Jul 29 13:46:36.842: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:36.842: DHCPD: Selecting relay q from pool
*Jul 29 13:46:36.842: IP: tableid=0, s=10.0.0.1 (local), d=10.0.0.9 (Vlan1) nexthop=10.0.0.9, routed via FIB
*Jul 29 13:46:36.842: IP: s=10.0.0.1 (local), d=10.0.0.9 (Vlan1), len 56, sending
*Jul 29 13:46:36.842: DHCPD: Saving workspace (ID=0x3F000011)
*Jul 29 13:46:36.842: DHCPD: New packet workspace 0x7FD74F984FA0 (ID=0xC0000012)
*Jul 29 13:46:38.343: IP: tableid=0, s=10.0.0.1 (local), d=10.0.0.9 (Vlan1) nexthop=10.0.0.9, routed via FIB
*Jul 29 13:46:38.343: IP: s=10.0.0.1 (local), d=10.0.0.9 (Vlan1), len 56, sending
*Jul 29 13:46:38.843: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:38.843: Option 82 not present
*Jul 29 13:46:38.843: Option 82 not present
*Jul 29 13:46:38.843: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:38.843: DHCPD: DHCPDISCOVER received from client 0046.4f43.3233.3132.5630.3135 on interface Vlan1.DHCPD: Setting only requested parameters

*Jul 29 13:46:38.843: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:38.843: DHCPD: egress Interfce Vlan1

*Jul 29 13:46:38.843: DHCPD: broadcasting BOOTREPLY to client 0029.c23c.2eeb.
*Jul 29 13:46:38.843: IP: s=10.0.0.1 (local), d=255.255.255.255 (Vlan1), len 328, sending broad/multicast
*Jul 29 13:46:38.896: IP: s=0.0.0.0 (Vlan1), d=255.255.255.255 (nil), len 354, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:46:38.896: IP: s=0.0.0.0 (Vlan1), d=255.255.255.255 (nil), len 354, rcvd 2
*Jul 29 13:46:38.896: IP: s=0.0.0.0 (Vlan1), d=255.255.255.255 (nil), len 354, stop process pak for forus packet
*Jul 29 13:46:38.896: Option 82 not present
*Jul 29 13:46:38.896: DHCPD: tableid for 10.0.0.1 on Vlan1 is 0
*Jul 29 13:46:38.896: DHCPD: client's VPN is .
*Jul 29 13:46:38.896: DHCPD: No option 125
*Jul 29 13:46:38.896: DHCPD: Option 124: Vendor Class Information
*Jul 29 13:46:38.896: DHCPD: Enterprise ID: 9
*Jul 29 13:46:38.896: DHCPD: Vendor-class-data-len: 6
*Jul 29 13:46:38.896: DHCPD: Data:
*Jul 29 13:46:38.896: DHCPD: DHCPREQUEST received from client 0046.4f43.3233.3132.5630.3135.
*Jul 29 13:46:38.896: DHCPD: DHCPREQUEST received on interface Vlan1.
*Jul 29 13:46:38.896: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:38.896: DHCPD: Appending system default domain
*Jul 29 13:46:38.896: DHCPD: Using hostname 'Switch.siemensgamesa.com.' for dynamic update (from hostname option)DHCPD: Setting only requested parameters

*Jul 29 13:46:38.897: DHCPD: Option 125 not present in the msg.
*Jul 29 13:46:38.897: DHCPD: egress Interfce Vlan1

*Jul 29 13:46:38.897: DHCPD: broadcasting BOOTREPLY to client 0029.c23c.2eeb.
*Jul 29 13:46:38.897: IP: s=10.0.0.1 (local), d=255.255.255.255 (Vlan1), len 328, sending broad/multicast
*Jul 29 13:46:43.430: IP: s=10.0.0.1 (local), d=224.0.0.9 (Vlan1), len 52, sending broad/multicast
*Jul 29 13:46:49.388: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:46:49.388: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, rcvd 2
*Jul 29 13:46:49.388: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, stop process pak for forus packet
*Jul 29 13:46:50.386: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:46:50.386: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, rcvd 2
*Jul 29 13:46:50.386: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, stop process pak for forus packet
*Jul 29 13:46:52.389: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:46:52.389: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, rcvd 2
*Jul 29 13:46:52.389: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, stop process pak for forus packet
*Jul 29 13:46:56.439: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:46:56.440: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, rcvd 2
*Jul 29 13:46:56.440: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 72, stop process pak for forus packet
*Jul 29 13:47:01.724: Option 82 not present
*Jul 29 13:47:01.724: DHCPD: tableid for 10.0.0.1 on Vlan1 is 0
*Jul 29 13:47:01.724: DHCPD: client's VPN is .
*Jul 29 13:47:01.724: DHCPD: No option 125
*Jul 29 13:47:01.724: DHCPD: No option 124
*Jul 29 13:47:01.724: DHCPD: DHCPRELEASE message received from client 0046.4f43.3233.3132.5630.3135 (10.0.0.9).
*Jul 29 13:47:01.724: DHCPD: Option 125 not present in the msg.
*Jul 29 13:47:01.724: DHCPD: removing ARP entry (10.0.0.9 vrf default).
*Jul 29 13:47:01.786: Option 82 not present
*Jul 29 13:47:01.786: DHCPD: tableid for 10.0.0.1 on Vlan1 is 0
*Jul 29 13:47:01.786: DHCPD: client's VPN is .
*Jul 29 13:47:01.786: DHCPD: No option 125
*Jul 29 13:47:01.786: DHCPD: No option 124
*Jul 29 13:47:01.786: DHCPD: DHCPRELEASE message received from client 0046.4f43.3233.3132.5630.3135 (10.0.0.9).
*Jul 29 13:47:01.786: DHCPD: No binding found for client 0046.4f43.3233.3132.5630.3135
*Jul 29 13:47:01.786: DHCPD: Finding a relay for client 0046.4f43.3233.3132.5630.3135 on interface Vlan1.
*Jul 29 13:47:01.786: DHCPD: Option 125 not present in the msg.
*Jul 29 13:47:01.786: DHCPD: cannot find a relay
*Jul 29 13:47:01.898: IP: s=10.1.1.1 (local), d=224.0.0.9 (Vlan5), len 52, sending broad/multicast
*Jul 29 13:47:02.078: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 50, input feature, MCI Check(109), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 29 13:47:02.078: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 50, rcvd 2
*Jul 29 13:47:02.078: IP: s=10.0.0.9 (Vlan1), d=255.255.255.255 (nil), len 50, stop process pak for forus packet
*Jul 29 13:47:03.297: Option 82 not present
*Jul 29 13:47:03.297: DHCPD: tableid for 10.0.0.1 on Vlan1 is 0
*Jul 29 13:47:03.297: DHCPD: client's VPN is .
*Jul 29 13:47:03.297: DHCPD: No option 125
*Jul 29 13:47:03.297: DHCPD: No option 124
*Jul 29 13:47:03.298: DHCPD: DHCPRELEASE message received from client 0046.4f43.3233.3132.5630.3135 (10.0.0.9).
*Jul 29 13:47:03.298: DHCPD: No binding found for client 0046.4f43.3233.3132.5630.3135
*Jul 29 13:47:03.298: DHCPD: Finding a relay for client 0046.4f43.3233.3132.5630.3135 on interface Vlan1.
*Jul 29 13:47:03.298: DHCPD: Option 125 not present in the msg.
*Jul 29 13:47:03.298: DHCPD: cannot find a relay
ZTP-MASTER# show ip dhcp binding 
A.B.C.D IP address in dotted-decimal notation

ZTP-MASTER# show ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type State Interface
Hardware address/
User name
10.1.1.10 0063.6973.636f.2d30. Jul 30 2020 01:47 PM Automatic Active Vlan5
3032.392e.6332.3363.
2e32.6565.622d.566c.
35

Client got 10.1.1.10 in vlan 5

[qukquk]

#show cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
D - Remote, C - CVTA, M - Two-port Mac Relay

Device ID Local Intrfce Holdtme Capability Platform Port ID
Switch Ten 1/1/3 166 R S I IE-3300-8 Gig 1/1

Total cdp entries displayed : 1
ZTP-MASTER#show run int ten1/1/3
Building configuration...

Current configuration : 64 bytes
!
interface TenGigabitEthernet1/1/3
switchport mode trunk
end

ZTP-MASTER#

[paul driver]

Hello

Just to confirm

You have a switch with default configuration that you wish to boot up and have it receive dhcp addressing and configuration from the dhcp server and this works but then after its booted you check the switches config and it shows a tftp source interface for vlan 1 and not vlan 5?

Now you have deleted files from the flash and the rtr isnt even booting correctly?

[qukquk]

correct :-)

[qukquk]

i dont understand why i there is no option 150 in the offer packet from the dhcp server?

[qukquk]

from the ie3300:

interface Vlan5
ip address dhcp
!
ip http server
ip http authentication local
ip http secure-server
ip http client source-interface Vlan1
ip forward-protocol nd
!
!
!
!
!
control-plane
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
line vty 5 15
login
!
!
!
!
!
!
!
end

Switch#
*Jul 29 15:54:37.696: %SYS-5-CONFIG_P: Configured programmatically by process PnP Agent Discovery from console as vty0
*Jul 29 15:54:37.696: %PNP-6-PNP_SAVING_TECH_SUMMARY: Saving PnP tech summary (pnp-tech-discovery-summary)... Please wait. Do not interrupt.
*Jul 29 15:54:41.456: %SYS-5-CONFIG_P: Configured programmatically by process PnP Agent Discovery from console as vty0
*Jul 29 15:54:45.406: %SYS-5-CONFIG_P: Configured programmatically by process PnP Agent Discovery from console as vty0
*Jul 29 15:54:46.403: %PNP-6-PNP_TECH_SUMMARY_SAVED_OK: PnP tech summary (pnp-tech-discovery-summary) saved successfully.
*Jul 29 15:54:46.403: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Config Wizard)
%Error opening tftp://255.255.255.255/router-confg (Timed out)
%Error opening tftp://255.255.255.255/ciscortr.cfg (Timed out)
*Jul 29 15:55:44.275: AUTOINSTALL: Tftp script execution not successful for Vl1.

[paul driver]

Hello
The dhcp server is on the cat9300 and has a scope(pool) for its vlan 1 SVI but you dont have a scope (pool) for vlan 5 SVI  or even a vlan 5 SVI.
So why do you want this host switch to obtain addressing and configuration from the vlan1 dhcp pool and not from a dhcp pool from vlan 5 especially as that host switch is connected to the cat 9300 via a trunk with vlan 5 only being allowed to traverse it.
Suggest you create a DHCP scope and SVI for vlan5 on the c9300 and test again