Category: Networking

Cisco – IOS XE Password Recovery on Catalyst 3850

NOTE: Mr. Bray recommends disabling the ability to recover the password/config with one of these commands (varies):
no service password-recovery     or
system disable password recovery switch all

Apply power to the switch. Immediately press the Mode button while the System LED is flashing. Hold the Mode button until all the system LEDs turn on and remain solid; then release it.

  1. Initialize flash
    Switch: flash_init
  2. Ignore the startup configuration
    Switch: SWITCH_IGNORE_STARTUP_CFG=1
  3. Boot packages.conf
    Switch: boot flash:packages.conf
  4. Terminate the initial configuration dialog by answering No.
    Would you like to enter the initial configuration dialog? [yes/no]: No
  5. At the switch prompt, enter privileged EXEC mode.
    Switch> enable
    Switch#
  6. Copy the startup configuration to running configuration.
    Switch# copy startup-config running-config
    Destination filename [running-config]?
    Press Return in response to the confirmation prompts. The configuration file is now reloaded, and you can change the password.
  7. Enter global configuration mode and change the enable password.
    Switch# configure terminal
    Switch(config)#
  8. Write the running configuration to the startup configuration file.
    Switch# copy running-config startup-config
  9. Confirm that manual boot mode is enabled.
    Switch# show boot
    BOOT variable = flash:packages.conf;
    Manual Boot = yes
    Enable Break = yes
  10. Reload the switch.
    Switch# reload
  11. Return the Bootloader parameters (previously changed in Steps 2 and 3) to their original values.
    Switch: SWITCH_DISABLE_PASSWORD_RECOVERY=1
    Switch: switch: SWITCH_IGNORE_STARTUP_CFG=0
  12. Boot the switch with the packages.conf file from flash.
    Switch: boot flash:packages.conf
  13. After the switch boots up, disable manual boot on the switch.
    Switch(config)# no boot manual

Sauce

Cisco – Loading IOS-XE on Catalyst 3850 (3E and 16.x)

Verify Mode

Be sure you’re in INSTALL mode.

Switch# show version | begin Mode

Switch Ports Model           SW Version     SW Image              Mode  
------------------           ----------     ----------            ----  
*    1 32    WS-C3850-24T    Fuji 16.9.1    CAT3K_CAA-UNIVERSALK9 INSTALL

If you’re in “Bundle Mode”, scroll down to…. “If you’re in Bundle Mode”.  😛

Install Mode:

3.xE to 16.x

Switch# copy tftp://5.28.11.250/cat3k_caa-universalk9.16.09.02.SPA.bin flash:
Switch# dir flash:*.bin
Switch# software install file flash:cat3k_caa-universalk9.16.09.02.SPA.bin new force
*** Switch will reload ***
Switch# request platform software package clean switch all
*** Use "boot flash:packages.conf" if auto boot was not set ***
Switch#show version
Switch# delete flash:cat3k_caa-universalk9.16.09.02.SPA.bin

16.x to 16.x

Switch# copy tftp://5.28.11.250/cat3k_caa-universalk9.16.09.02.SPA.bin flash:
Switch# dir flash:*.bin

If you’re in Bundle Mode:

3.xE to 16.x:

Switch#copy tftp://5.28.11.250/cat3k_caa-universalk9.16.01.01.SPA.bin flash:
Switch#dir flash:*.bin
Switch# config t
Switch(config)# no boot system
Switch(config)# boot system switch all flash:cat3k_caa-universalk9.16.01.01.SPA.bin
Switch(config)# do write memory
Switch(config)# do show boot
Switch(config)# do reload
*** Switch will reload ***
*** Use "boot flash:cat3k_caa-universalk9.16.01.01.SPA.bin" if auto boot was not set ***
Switch# request platform software package clean switch all file flash:
Switch# copy tftp://5.28.11.250/cat3k_caa-universalk9.16.09.02.SPA.bin flash: 
Switch# request platform software package expand switch all file flash:image.bin auto-copy
Switch# config t
Switch(config)# no boot system
Switch(config)# boot system switch all flash:packages.conf
Switch(config)# do write memory
Switch(config)# do reload

 

16.x to 16.x:

Switch#request platform software package clean switch all file flash:
Switch# copy tftp://5.28.11.250/cat3k_caa-universalk9.16.09.02.SPA.bin flash:
Switch# request platform software package expand switch all file flash:image.bin auto-copy
Switch# config t
Switch(config)# no boot system
Switch(config)# boot system switch all flash:packages.conf
Switch(config)# do write memory
Switch(config)# do reload

Sauce

Fix for “%ADJ-5-RESOLVE_REQ_FAIL: Adj resolve request failed for (IP)”

Some high-security devices that don’t respond to ping triggered the following:

%ADJ-5-RESOLVE_REQ_FAIL: Adj resolve request failed for 192.168.1.1 on GigabitEthernet1/0/1

Cisco advised me that these are not an issue, and can be safely disabled with:

no ip cef optimize neighbor resolution

This apparently used to be disabled by default, but has since been enabled.
Sauce