Packetwatch.net

Load new software images



Last modified: Nov. 12, 2016

Contents
1 - Summary
2 - Cisco 851 routers
3 - Cisco ASA 5505 firewalls
4 - Cisco Catalyst 3850 switche
5 - Cisco 1130 wireless access points


1 - Summary

This guide will show how to backup the existing software image and load a new
image in different Cisco devices.


2 - Cisco 851 routers

Display the current version that the router is running. In this example, the
router is running IOS 12.4(11)T.
router#show version | include Cisco IOS
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(11)T, RELEASE SOFTWARE (fc2)

Find out the filename of the IOS software. In this example, the filename of the
IOS software is c1130-k9w7-tar.124-25d.JA.tar.
router#show flash | include 850
    2  -rwx    11611200  May 29 2006 02:48:56 -05:00  c850-advsecurityk9-mz.124-11.T.bin

Download the new software image from Cisco and make sure the checksums match
what Cisco provides. After making sure the checksums match upload them to the
TFTP server.
server# sha512 c850-advsecurityk9-mz.124-15.T17.bin
SHA512 (c850-advsecurityk9-mz.124-15.T17.bin) = d7cdfd0a4128cd1cb3b63de9b2be...

Upgrade the router software by running the following.
router#copy tftp://192.168.1.17/c850-advsecurityk9-mz.124-15.T17.bin flash:
Destination filename [c850-advsecurityk9-mz.124-15.T17.bin]?
Accessing tftp://192.168.1.17/c850-advsecurityk9-mz.124-15.T17.bin...
Loading c850-advsecurityk9-mz.124-15.T17.bin from 192.168.1.17 (via FastEthernet4): !!!
[OK - 12764740 bytes]

12764740 bytes copied in 1433.396 secs (8905 bytes/sec)
router#reload

Log back in and check the current version that the router is running. You
should see the new verison listed.
router#show version | include Cisco IOS
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T17, RELEASE SOFTWARE (fc2)


3 - Cisco ASA 5505 firewalls

Display the current version that the firewall is running. In this example, the
firewall is running version 8.2(5) and ASDM version 6.4(5).
asa# show version

Cisco Adaptive Security Appliance Software Version 8.2(5)
Device Manager Version 6.4(5)
...

Find out the filenames of the firewall software and the ASDM software.
    
asa# show flash | include asa
  132  15390720    May 02 2014 09:41:48  asa825-k8.bin
asa# show flash | include asdm
  135  16280544    May 02 2014 09:47:04  asdm-645.bin
    
Make backup of the current software images to a TFTP server. Create the
files on the TFTP server first.
server# touch /tftp/asa825-k8.bin
server# chmod 777 /tftp/asa825-k8.bin
server# touch /tftp/asdm-645.bin
server# chmod 777 /tftp/asdm-645.bin
    
Upload a copy of the software images to the TFTP server.
asa# copy flash:asa825-k8.bin tftp

Source filename [asa825-k8.bin]?

Address or name of remote host []? 192.168.1.30

Destination filename [asa825-k8.bin]?

Writing file tftp://192.168.1.30/asa825-k8.bin...
!!!!!!!!
15390720 bytes copied in 12.660 secs (1282560 bytes/sec)
asa# copy flash:asdm-645.bin tftp  

Source filename [asdm-645.bin]?

Address or name of remote host []? 192.168.1.30
   
Destination filename [asdm-645.bin]?

Writing file tftp://192.168.1.30/asdm-645.bin...
!!!!!!!!
16280544 bytes copied in 13.730 secs (1252349 bytes/sec)

Download the new software images from Cisco and make sure the checksums match
what Cisco provides. After making sure the checksums match upload them to the
TFTP server.
server# sha512 asa847-k8.bin
SHA512 (asa847-k8.bin) = 469f900e3b05906ac38067d031b6dc624dd72e4c534c1dec304...
server# sha512 asdm-743.bin
SHA512 (asdm-743.bin) = ca6087b128640e5a2b8115acbd95dd24abff0ba998fcd088dcb2...

Download a copy of the new software images from the TFTP server.
asa# copy tftp://192.168.1.30/asa847-k8.bin flash:
       
Address or name of remote host [192.168.1.30]?
    
Source filename [asa847-k8.bin]?
    
Destination filename [asa847-k8.bin]?

Accessing tftp://192.168.1.30/asa847-k8.bin...!!!!!!!!
Writing file disk0:/asa847-k8.bin...
!!!!!!!!
24809472 bytes copied in 23.570 secs (1078672 bytes/sec)
asa# copy tftp://192.168.1.30/asdm-743.bin flash:

Address or name of remote host [192.168.1.30]?

Source filename [asdm-743.bin]?

Destination filename [asdm-743.bin]?

Accessing tftp://192.168.1.30/asdm-743.bin...!!!!!!!!
Writing file disk0:/asdm-743.bin...
!!!!!!!!
24810876 bytes copied in 23.880 secs (1078733 bytes/sec)

Run the following to specify which software images the firewall should load
next time it reboots.
asa# config t
asa(config)# boot system disk0:/asa847-k8.bin
asa(config)# asdm image disk0:/asdm-743.bin
asa(config)# end
asa# write memory
Building configuration...
Cryptochecksum: 832ba1b4 7904f434 849515e2 f9d68692

2543 bytes copied in 1.100 secs (2543 bytes/sec)
[OK]

Check to make sure the configuration changes were set correctly.
asa# show configuration | include asa847-k8.bin
boot system disk0:/asa847-k8.bin
asa# show configuration | include asdm
asdm image disk0:/asdm-743.bin

Reboot the firewall
asa# reload
Proceed with reload? [confirm]

Log back in and check the current version that the firewall is running. You
should see the new versions listed.
asa# show version

Cisco Adaptive Security Appliance Software Version 8.4(7)
Device Manager Version 7.4(3)
...

After you are satisfied that the new software is working fine, you can
delete the old software.
asa# delete flash:asa825-k8.bin

Delete filename [asa825-k8.bin]?

Delete disk0:/asa825-k8.bin? [confirm]
asa# delete flash:asdm-645.bin

Delete filename [asdm-645.bin]?

Delete disk0:/asdm-645.bin? [confirm]


4 - Cisco Catalyst 3850 switches

Display the current version that the switch is running. In this example, the
switch is running IOS XE 3.3.0 in install mode. The mode will either be install
or bundle.
switch#show version | begin Switch Port
Switch Ports Model              SW Version        SW Image              Mode
------ ----- -----              ----------        ----------            ----
*    1 56    WS-C3850-48T       03.03.00SE        cat3k_caa-universalk9 INSTALL
...

Find out the filename of the IOS XE software. In this example, the filename of
the IOS XE software is cat3k_caa-universalk9.SPA.03.03.00.SE.150-1.EZ.bin.
switch#show flash | include base
  3   79112096 Nov 27 2013 10:41:20.0000000000 +00:00 cat3k_caa-base.SPA.03.03.00SE.pkg
switch#show flash | include universal
  6   34763952 Nov 27 2013 10:41:21.0000000000 +00:00 cat3k_caa-iosd-universalk9.SPA.150-1.EZ.pkg

Download the new software image from Cisco and make sure the checksums match
what Cisco provides. After making sure the checksums match upload them to the
TFTP server.
server# sha512 cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
SHA512 (cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin) = 483d4f0d25fb9e14cf950a62a7a5a043206...

Download a copy of the new software images from the TFTP server.
switch#copy tftp://192.168.1.30/cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin flash:
Destination filename [cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin]?
Loading cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin from 192.168.1.30 (via Vlan1): !!!...
!!!
[OK - 302988468 bytes]

302988468 bytes copied in 1552.080 secs (195214 bytes/sec)

Install the new software image and reboot the switch.
switch#software install file flash:cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
Preparing install operation ...
[1]: Starting install operation
[1]: Expanding bundle flash:cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
[1]: Copying package files
[1]: Package files copied
[1]: Finished expanding bundle flash:cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
[1]: Verifying and copying expanded package files to flash:
[1]: Verified and copied expanded package files to flash:
[1]: Starting compatibility checks
[1]: Finished compatibility checks
[1]: Starting application pre-installation processing
[1]: Finished application pre-installation processing
[1]: Old files list:
    Removed cat3k_caa-base.SPA.03.03.00SE.pkg
    Removed cat3k_caa-drivers.SPA.03.03.00SE.pkg
    Removed cat3k_caa-infra.SPA.03.03.00SE.pkg
    Removed cat3k_caa-iosd-universalk9.SPA.150-1.EZ.pkg
    Removed cat3k_caa-platform.SPA.03.03.00SE.pkg
    Removed cat3k_caa-wcm.SPA.10.1.100.0.pkg
[1]: New files list:
    Added cat3k_caa-base.SPA.03.06.04.E.pkg
    Added cat3k_caa-drivers.SPA.03.06.04.E.pkg
    Added cat3k_caa-infra.SPA.03.06.04.E.pkg
    Added cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
    Added cat3k_caa-platform.SPA.03.06.04.E.pkg
    Added cat3k_caa-wcm.SPA.10.2.140.0.pkg
[1]: Creating pending provisioning file
[1]: Finished installing software.  New software will load on reboot.
[1]: Committing provisioning file

[1]: Do you want to proceed with reload? [yes/no]: yes

System configuration has been modified. Save? [yes/no]: yes
Building configuration...
Compressed configuration from 7381 bytes to 3788 bytes[OK]
[1]: Reloading

Log back in and check the current version that the switch is running. You
should see the new versions listed.
switch#show version | begin Switch Port
Switch Ports Model              SW Version        SW Image              Mode
------ ----- -----              ----------        ----------            ----
*    1 56    WS-C3850-48T       03.06.04.E        cat3k_caa-universalk9 INSTALL
...

After you are satisfied that the new software is working fine, you can
delete the old software.
switch#software clean
Preparing clean operation ...
[1]: Cleaning up unnecessary package files
[1]: No path specified, will use booted path flash:packages.conf
[1]: Cleaning flash:
[1]: Preparing packages list to delete ...
     In use files, will not delete:
       cat3k_caa-base.SPA.03.06.04.E.pkg
       cat3k_caa-drivers.SPA.03.06.04.E.pkg
       cat3k_caa-infra.SPA.03.06.04.E.pkg
       cat3k_caa-iosd-universalk9.SPA.152-2.E4.pkg
       cat3k_caa-platform.SPA.03.06.04.E.pkg
       cat3k_caa-wcm.SPA.10.2.140.0.pkg
       packages.conf
[1]: Files that will be deleted:
    cat3k_caa-base.SPA.03.03.00SE.pkg
    cat3k_caa-drivers.SPA.03.03.00SE.pkg
    cat3k_caa-infra.SPA.03.03.00SE.pkg
    cat3k_caa-iosd-universalk9.SPA.150-1.EZ.pkg
    cat3k_caa-platform.SPA.03.03.00SE.pkg
    cat3k_caa-universalk9.SPA.03.06.04.E.152-2.E4.bin
    cat3k_caa-wcm.SPA.10.1.100.0.pkg
    packages.conf.00-

[1]: Do you want to proceed with the deletion? [yes/no]: yes
[1]: Clean up completed


5 - Cisco 1130 wireless access points

Display the current version that the wireless access point is running. In this
example, the wireless access point is running IOS 12.4(25d)JA.

wap#show version | include Cisco IOS
Cisco IOS Software, C1130 Software (C1130-K9W7-M), Version 12.4(25d)JA, RELEASE SOFTWARE (fc1)

Find out the filename of the IOS software. In this example, the filename of the
IOS software is c1130-k9w7-tar.124-25d.JA.tar.
wap#show flash | include 1130
    7  drwx         320  Jul 22 2013 21:22:20 -05:00  c1130-k9w7-mx.124-25d.JA

Download the new software image from Cisco and make sure the checksums match
what Cisco provides. After making sure the checksums match upload them to the
TFTP server.
server# sha512 c1130-k9w7-tar.124-25d.JA2.tar
SHA512 (c1130-k9w7-tar.124-25d.JA2.tar) = 46b1a3e0f13df24c774c22848af72d8bb0...

Upgrade the access point software by running the following.
wap#archive download-sw /force-reload /overwrite tftp://192.168.1.17/c1130-k9w7-tar.124-25d.JA2.tar      
examining image...
Loading c1130-k9w7-tar.124-25d.JA2.tar from 192.168.1.17 (via BVI1): !
extracting info (286 bytes)
Image info:
    Version Suffix: k9w7-.124-25d.JA2
    Image Name: c1130-k9w7-mx.124-25d.JA2
    Version Directory: c1130-k9w7-mx.124-25d.JA2
    Ios Image Size: 5028352
    Total Image Size: 5775872
    Image Feature: WIRELESS LAN
    Image Family: C1130
    Wireless Switch Management Version: 7.0.94.21
...

Log back in and check the current version that the wireless access point is
running. You should see the new version listed.
wap#show version | include Cisco IOS    
Cisco IOS Software, C1130 Software (C1130-K9W7-M), Version 12.4(25d)JA2, RELEASE SOFTWARE (fc1)


Last modified: Thu Jan 1 00:00:00 1970 UTC
Packetwatch Research 2002-2017.