Cisco 7200 VSA issue after upgrade to IOS 15.2

[igor.mamuzic]

After upgrade to IOS 15.2(4), VSA module in 7206VXR (NPE-G2) is disabled and we cannot enable it.

Show diag output:

------------------ show diag ------------------

Slot 0:
VSA IPsec Card Port adapter
Port adapter is deactivated
Port adapter insertion time unknown
EEPROM contents at hardware discovery:
PCB Serial Number        : JAF1309ADDT
Hardware Revision        : 1.0
Part Number              : 73-10220-05
Board Revision           : B1
RMA Test History         : 00
RMA Number               : 0-0-0-0
RMA History              : 00
Deviation Number         : 0
Product (FRU) Number     : C7200-VSA          
Version Identifier       : V01
Top Assy. Part Number    : 68-2578-05
CLEI Code                : CNUCAFNAAA
EEPROM format version 4
EEPROM contents (hex):
  0x00: 04 FF C1 8B 4A 41 46 31 33 30 39 41 44 44 54 40
  0x10: 05 0D 41 01 00 82 49 27 EC 05 42 42 31 03 00 81
  0x20: 00 00 00 00 04 00 88 00 00 00 00 CB 94 43 37 32
  0x30: 30 30 2D 56 53 41 20 20 20 20 20 20 20 20 20 20
  0x40: 20 89 56 30 31 20 D9 03 C1 40 CB 87 44 0A 12 05
  0x50: C6 8A 43 4E 55 43 41 46 4E 41 41 41 FF FF FF FF
  0x60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
  0x70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

   ----------------------------------------

If we try to enable it manually from CLI we get the following message:

Router(config)#crypto engine slot 0

VSA will NOT come up until system power-cycle or reload

Of course, after reload nothing happens.

Is VSA incompatible with IOS 15.x? I'm asking because downgrade to 12.4 causes VSA to be active again.

Regards,

Igor
             

[Syed Taukir]

Hi igor,

1) FDP image

Field-programmable devices (FPDs) are hardware devices implemented on router cards that support separate software upgrades. An FPD image package is used to upgrade FPD images

The FPD image package must be compatible with the Cisco IOS software that is running on the router. If an incompatibility exists between an FPD image package and the Cisco IOS software release running the router, the device with the FPD will not operate properly until the incompatibility is resolved.

The FPD automatic upgrade feature searches only for the FPD image package file that is the same version number as the Cisco IOS release being used by the system. For example, if the Cisco IOS release being used is Cisco IOS Release 12.4(5)T1, the system searches for the FPD image package file that supports the specific Cisco IOS release (c7200-fpd-pkg.124-5.T1.pkg).

2) Steps to Upgrade:

From the document below which I already sent you, please refer to the section “How to Upgrade Field-Programmable Devices”

http://www.cisco.com/en/US/docs/routers/7200/configuration/feature_guides/fpd.html

I would recommend you to follow the steps in the “Field-Programmable Device Quick Upgrade (Automatic FPD Upgrade Only)” as that is the recommended and the easiest way.

Steps are:

• The command is present “upgrade fpd auto” in the running-config by default.
• Have the Cisco IOS image in disk2:
• Download the FPD image package to disk2: flash disk
• Reboot the router using the new Cisco IOS release.

Hope this helps

Thanks

Syed