Saturday, April 11, 2015

CCNA Security Lab: Cisco 2511 DRAM Issue

I was about to modify my Cisco 2511 router which I used as a terminal server for my network lab. It just suddenly stopped booting up properly one morning. The bootup error kept on looping and my first instinct was to upgrade the IOS. I was able to break the error loop somehow (or maybe I just got lucky) by using the break sequence (Ctrl + Break) on Teraterm. The only problem was finding out the Break key on my Dell Vostro 3300 laptop. I was able to find it on this link and used Ctrl + Fn + Num Lk/Scrl Lk sequence.


System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 14336 Kbytes of main memory
Local Timeout (control reg=0x118) Error, address: 0x2100281 at 0x1085646 (PC)

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 14336 Kbytes of main memory
Local Timeout (control reg=0x118) Error, address: 0x2100281 at 0x1085646 (PC)

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 14336 Kbytes of main memory
Local Timeout (control reg=0x118) Error, address: 0x2100281 at 0x1085646 (PC)

<OUTPUT TRUNCATED>

%SYS-4-CONFIG_NEWER: Configurations from version 12.2 may not be correctly understood    // I WAS ABLE TO BREAK THE LOOPING ERROR SEQUENCE WITH THE BREAK KEY SEQUENCE

2511-TS#show version
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-IS-L), Version 12.2(15)T17, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by cisco Systems, Inc.
Compiled Sat 13-Aug-05 15:26 by kehsiao
Image text-base: 0x0308038C, data-base: 0x00001000

ROM: System Bootstrap, Version 11.0(10c), SOFTWARE
BOOTLDR: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE (fc1)

2511-TS uptime is 2 minutes
System returned to ROM by bus error at PC 0x1085646, address 0x2100281
System image file is "flash:c2500-is-l.122-15.T17.bin"

cisco 2511 (68030) processor (revision M) with 14336K/2048K bytes of memory.
Processor board ID 16240666, with hardware revision 00000000
Bridging software.
X.25 software, Version 3.0.0.
1 Ethernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
16 terminal line(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read ONLY)

Configuration register is 0x2102

2511-TS#show flash

System flash directory:
File  Length   Name/status
  1   16425536  c2500-is-l.122-15.T17.bin
[16425600 bytes used, 351616 available, 16777216 total]
16384K bytes of processor board System flash (Read ONLY)


I used an AUI Ethernet adapter on my Cisco 2511 router to be able to connect an RJ45 cable and perform the IOS upgrade via TFTP from my PC.


2511-TS#
*Mar  1 00:18:56.467: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to up

2511-TS#show run interface ethernet0
Building configuration...

Current configuration : 94 bytes
!
interface Ethernet0
 ip address 192.168.1.2 255.255.255.0
end


C:\Users\John Lloyd>ipconfig

Windows IP Configuration

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::4562:9b92:c15f:91ff%10
   IPv4 Address. . . . . . . . . . . : 192.168.1.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :


2511-TS#ping 192.168.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms

2511-TS#copy tftp://192.168.1.1/c2500-c-l.122-26.bin flash
                         ****  NOTICE  ****
Flash load helper v1.0
This process will accept the copy options and then terminate
the current system image to use the ROM based image for the copy.
Routing functionality will not be available during that time.
If you are logged in via telnet, this connection will terminate.
Users with console access can see the results of the copy operation.
                         ---- ******** ----
Proceed? [confirm]
Destination filename [c2500-c-l.122-26.bin]?
Accessing tftp://192.168.1.1/c2500-c-l.122-26.bin...
Erase flash: before copying? [confirm]

*Mar  1 00:21:47.735: %SYS-5-RELOAD: Reload requested
** System going down for Flash upgrade **

%SYS-4-CONFIG_NEWER: Configurations from version 12.2 may not be correctly understood.
%FLH: c2500-c-l.122-26.bin from 192.168.1.1 to flash ...

System flash directory:
File  Length   Name/status
  1   16425536  c2500-is-l.122-15.T17.bin
[16425600 bytes used, 351616 available, 16777216 total]
Accessing file 'c2500-c-l.122-26.bin' on 192.168.1.1...
Loading c2500-c-l.122-26.bin from 192.168.1.1 (via Ethernet0): ! [OK]

Erasing device... eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee ...erased
Loading c2500-c-l.122-26.bin from 192.168.1.1 (via Ethernet0):

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

<OUTPUT TRUNCATED>

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 8083776/16777216 bytes]

Verifying checksum...  OK (0xD82E)
Flash copy took 0:03:59 [hh:mm:ss]
%FLH: Re-booting system after download
F3: 7626516+457228+583040 at 0x3000060

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706


Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-C-L), Version 12.2(26), RELEASE SOFTWARE (fc2)

Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Sat 31-Jul-04 03:31 by eaarmas
Image text-base: 0x030416FC, data-base: 0x00001000

cisco 2511 (68030) processor (revision M) with 14336K/2048K bytes of memory.
Processor board ID 16240666, with hardware revision 00000000
Bridging software.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
TN3270 Emulation software.
1 Ethernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
16 terminal line(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read ONLY)


Press RETURN to get started!


00:00:07: %LINK-3-UPDOWN: Interface Ethernet0, changed state to up
00:00:07: %LINK-3-UPDOWN: Interface Serial0, changed state to down
00:00:07: %LINK-3-UPDOWN: Interface Serial1, changed state to down
00:00:10: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to up
*Mar  1 00:00:16.135: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to up
*Mar  1 00:00:21.167: %LINK-5-CHANGED: Interface Serial0, changed state to administratively down
*Mar  1 00:00:21.779: %LINK-5-CHANGED: Interface Serial1, changed state to administratively down
*Mar  1 00:00:22.183: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down
*Mar  1 00:00:22.435: %SYS-5-CONFIG_I: Configured from memory by console
*Mar  1 00:00:22.603: %SYS-5-RESTART: System restarted --
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-C-L), Version 12.2(26), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2004 by cisco Systems, Inc
2511-T.
Compiled Sat 31-Jul-04 03:31 by eaarmas
*Mar  1 00:00:22.611: %SNMP-5-COLDSTART: SNMP agent on host 2511-TS is undergoing a cold start
*Mar  1 00:00:22.779: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1, changed state to down
2511-TS>enable
Password:
2511-TS#show version
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-C-L), Version 12.2(26), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Sat 31-Jul-04 03:31 by eaarmas
Image text-base: 0x030416FC, data-base: 0x00001000

ROM: System Bootstrap, Version 11.0(10c), SOFTWARE
BOOTLDR: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE (fc1)

2511-TS uptime is 0 minutes
System returned to ROM by reload
System image file is "flash:/c2500-c-l.122-26.bin"

cisco 2511 (68030) processor (revision M) with 14336K/2048K bytes of memory.
Processor board ID 16240666, with hardware revision 00000000
Bridging software.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
TN3270 Emulation software.
1 Ethernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
16 terminal line(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read ONLY)

Configuration register is 0x2102

2511-TS#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
Ethernet0                  192.168.1.2     YES NVRAM  up                    up
Loopback0                  1.1.1.1         YES NVRAM  up                    up
Serial0                    unassigned      YES NVRAM  administratively down down
Serial1                    unassigned      YES NVRAM  administratively down down

2511-TS#show flash

System flash directory:
File  Length   Name/status
  1   8083776  /c2500-c-l.122-26.bin
[8083840 bytes used, 8693372 available, 16777212 total]
16384K bytes of processor board System flash (Read ONLY)


The problem still persists even after doing the IOS upgrade. I wasn't able to break the looping booutp error this time. I suspect the router's internal components was badly shaken when I was re-arranging my Cisco gear in preparation for CCNA Security lab.


I tried to reseat the DRAM first and was able to find instructions from this helpful link. You can open the 2511 router by first removing the upper middle screw found at the bottom of the router. With the use of a big flat head screw driver, you can open the metal case by inserting the screw driver in the hole that says Pry slot. Slowly twist the screw driver in a counterclockwise motion to further open the metal case.

You can now slide the upper metal case and see the whole mother board. The DRAM slot is located on the right-hand side near the fan and you can remove it by slowly sliding the small metal lock on the opposite side. I rebooted the router a few times and it was able boot the IOS and load the startup config properly afterwards. This saved me big time from buying another memory stick and possibly disposing my precious Cisco 2511 router.