IOS XR show install audit

AARON WEINTRAUB · ‎10-11-2012

Hi all, I found this reference to a 'show install audit' on IOS XR, which looks like it would help a lot:

http://www.cisco.com/en/US/docs/routers/asr9000/software/system_management/command/reference/yrasr9kinst.html#wp1501402

but the doc is kind of lacking as to how to specifically build the check-list. For the example given, what does the 'show install active sum' look like on the router?

smilstea · ‎10-11-2012

Hi Aaron,

Further down in the link provided is an example of what an install file should look like as well as a successful and unsuccessful output. The actual audit file is simply a text file with each PIE/SMU listed one per line. With that file and the show install audit command the router verifies whether the PIE's and SMU's listed in the file are both installed and activied on the router.

Show install active summary lists SDR's as well as active packages (http://www.cisco.com/en/US/docs/routers/asr9000/software/system_management/configuration/guide/ycasr9ksdr.html#wp1274438)

HTH,

Sam

AARON WEINTRAUB · ‎10-11-2012

It does not seem to work correctly:

-bash-4.1$ more install-audit

asr9k-optic-4.0.1

router#admin show install summary

Thu Oct 11 18:38:24.582 UTC

Default Profile:

SDRs:

Owner

Active Packages:

disk0:asr9k-p-4.0.1.CSCua63591-1.0.0

disk0:asr9k-p-4.0.1.CSCty86177-1.0.0

disk0:asr9k-p-4.0.1.CSCtq07801-1.0.0

disk0:asr9k-doc-p-4.0.1

disk0:asr9k-mini-p-4.0.1

disk0:asr9k-optic-4.0.1

router#show install audit file rcp://10.10.10.10/install-audit

Thu Oct 11 18:39:28.833 UTC

Info: Package (asr9k-optic-4.0.1) is not active on all applicable nodes.

Install audit operation completed.

Install audit result: FAILED (discrepancies found)

AARON WEINTRAUB · ‎10-11-2012

It looks a little more functional on 4.2.1, but I have no idea where it got the list of installed "packages " from:

router#show install audit file rcp://10.10.10.10/install-audit verbose

Thu Oct 11 18:42:54.114 UTC

Info: Parsing audit file.

Info: Install Audit file contains 1 packages:

Info: asr9k-optic-px-4.2.1

Info: Compare with active packages on the following nodes:

Info: 0/RSP0/CPU0

Info: 0/RSP1/CPU0

Info: 0/0/CPU0

Info: 0/1/CPU0

Info: 0/2/CPU0

Info: 0/3/CPU0

Info: 0/6/CPU0

Info: 0/7/CPU0

Info: Extra package (asr9k-ce-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-ce-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-cpp-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-fpd-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-base-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-mgbl-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-mpls-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-diags-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-infra-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-fwding-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-os-mbi-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-fwding-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-routing-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-service-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr_os_test-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9K-doc-supp-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-security-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-mgbl-supp-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-scfclient-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-diags-supp-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-k9sec-supp-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-infra-test-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-service-supp-4.2.1) is active on all applicable nodes.

Info: Extra package (iosxr-infra-testfiles-4.2.1) is active on all applicable nodes.

Info: Extra package (asr9k-base-4.2.1.CSCua76130-1.0.0) is active on all applicable nodes.

Info: Extra package (asr9k-fwding-4.2.1.CSCua76130-1.0.0) is active on all applicable nodes.

Info: Extra package (asr9k-os-mbi-4.2.1.CSCua76130-1.0.0) is active on all applicable nodes.

Info: Extra package (iosxr-fwding-4.2.1.CSCua76130-1.0.0) is active on all applicable nodes.

Install audit operation completed.

Install audit result: FAILED (discrepancies found)

router#admin show install active summary

Thu Oct 11 18:43:26.558 UTC

Default Profile:

SDRs:

Owner

Active Packages:

disk0:asr9k-px-4.2.1.CSCua76130-1.0.0

disk0:asr9k-services-p-px-4.2.1

disk0:asr9k-infra-test-px-4.2.1

disk0:asr9k-optic-px-4.2.1

disk0:asr9k-mini-px-4.2.1

disk0:asr9k-doc-px-4.2.1

disk0:asr9k-k9sec-px-4.2.1

disk0:asr9k-mpls-px-4.2.1

disk0:asr9k-mgbl-px-4.2.1

disk0:asr9k-fpd-px-4.2.1

There's a larger list in "admin install deactivate ?":

router# admin install deactivate ?

disk0:asr9k-base-4.2.1.CSCua76130-1.0.0 Package to deactivate

disk0:asr9k-doc-px-4.2.1 Package to deactivate

disk0:asr9k-fpd-px-4.2.1 Package to deactivate

disk0:asr9k-fwding-4.2.1.CSCua76130-1.0.0 Package to deactivate

disk0:asr9k-infra-test-px-4.2.1 Package to deactivate

disk0:asr9k-k9sec-px-4.2.1 Package to deactivate

disk0:asr9k-mgbl-px-4.2.1 Package to deactivate

disk0:asr9k-mpls-px-4.2.1 Package to deactivate

disk0:asr9k-optic-px-4.2.1 Package to deactivate

disk0:asr9k-os-mbi-4.2.1.CSCua76130-1.0.0 Package to deactivate

disk0:asr9k-px-4.2.1.CSCua76130-1.0.0 Package to deactivate

disk0:asr9k-service-supp-4.2.1 Package to deactivate

disk0:asr9k-services-p-px-4.2.1 Package to deactivate

disk0:iosxr-fwding-4.2.1.CSCua76130-1.0.0 Package to deactivate

but the audit comes up with a lot of iosxr-???? packages that I can't seem to find.

smilstea · ‎10-11-2012

Hi Aaron,

I am actually not sure why there is a difference in 4.0.1 and 4.2.1, however the commands both show if all nodes contain the packages listed in the audit file. The only real difference appears to be the "extra packages" listed.

The easiest way to explain all the "extra packages" is that the mini-px is your base install file and when it installs expands into other packages such as routing and fwding among several others.

To get rid of inactive packages you can use (admin) install remove inactive sync

HTH,

Sam

AARON WEINTRAUB · ‎10-11-2012

It actually looks like the audit bases its information off of the packages listed in 'show install active detail' and compares it against that...

router#admin show install active detail

Thu Oct 11 19:16:28.792 UTC

Secure Domain Router: Owner

Node 0/RSP0/CPU0 [RP] [SDR: Owner]

Boot Device: disk0:

Boot Image: /disk0/asr9k-os-mbi-4.2.1.CSCua76130-1.0.0/0x100305/mbiasr9k-rsp3.vm

Active Packages:

disk0:asr9k-px-4.2.1.CSCua76130-1.0.0

disk0:asr9k-base-4.2.1.CSCua76130-1.0.0

disk0:asr9k-fwding-4.2.1.CSCua76130-1.0.0

disk0:iosxr-fwding-4.2.1.CSCua76130-1.0.0

disk0:asr9k-os-mbi-4.2.1.CSCua76130-1.0.0

disk0:asr9k-services-p-px-4.2.1

disk0:asr9k-service-supp-4.2.1

disk0:iosxr-service-4.2.1

disk0:asr9k-infra-test-px-4.2.1

disk0:iosxr-infra-testfiles-4.2.1

disk0:iosxr_os_test-4.2.1

disk0:iosxr-infra-test-4.2.1

disk0:asr9k-optic-px-4.2.1

disk0:asr9k-optics-supp-4.2.1

disk0:asr9k-mini-px-4.2.1

disk0:asr9k-ce-4.2.1

disk0:asr9k-cpp-4.2.1

disk0:asr9k-scfclient-4.2.1

disk0:asr9k-diags-supp-4.2.1

disk0:asr9k-fwding-4.2.1

disk0:asr9k-base-4.2.1

disk0:asr9k-os-mbi-4.2.1

disk0:iosxr-ce-4.2.1

disk0:iosxr-diags-4.2.1

disk0:iosxr-routing-4.2.1

disk0:iosxr-fwding-4.2.1

disk0:iosxr-infra-4.2.1

disk0:asr9k-doc-px-4.2.1

disk0:asr9K-doc-supp-4.2.1

disk0:asr9k-k9sec-px-4.2.1

disk0:asr9k-k9sec-supp-4.2.1

disk0:iosxr-security-4.2.1

disk0:asr9k-mpls-px-4.2.1

disk0:iosxr-mpls-4.2.1

disk0:asr9k-mgbl-px-4.2.1

disk0:asr9k-mgbl-supp-4.2.1

disk0:iosxr-mgbl-4.2.1

disk0:asr9k-fpd-px-4.2.1