Syed Jahanzaib – Personal Blog to Share Knowledge !

April 11, 2018

Short Notes for Cisco 3850-24T IOS XE Upgrade & Stack Configuration

Filed under: Cisco Related — Tags: , — Syed Jahanzaib / Pinochio~:) @ 3:49 PM

ZAIB_ Cisco 3850- 24-t.jpg

 


1# Upgrade Firmware of Cisco 3850 24T-S (INSTALL MODE) by copying FW from TFTP to Switch Flash Directory

Read these first on BUNDLE vs INSTALL mode.

http://blog.qsolved.com/2014/02/what-are-methods-to-boot-and-run-ios-xe.html

http://wannabelab.blogspot.com/2015/09/cisco-catalyst-3650-ios-recovery-via-usb.html

Last week we received new Cisco switches shipment having model WS-C3850-24T which will be replacing existing 3750 stack series in our data center. These switches have 2 methods of booting and running IOS XE software (in 3850).  By default, the switches comes with INSTALL mode. 

Before Upgrading Firmware ,we need to check for current mode in which the switch is currently booted in. [It should be INSTALL mode]

show version | begin Switch Port
Switch Ports Model SW Version SW Image Mode
------ ----- ----- ---------- ---------- ----
* 1 32 WS-C3850-24T 16.3.5b CAT3K_CAA-UNIVERSALK9 INSTALL
Configuration register is 0x102

We can use local USB as well to copy the firmware but since I already have TFTP for centralized backup for all Cisco switches therefore I am using TFTP method in this post.

Having TFTP server will give more leverage of doing various luxuries. copy the latest firmware to TFTP and then from switch console download the switch upgraded ISO and upload it to TFTP root folder. At the time of writing latest IOS XE version for 385024-T-S is cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin

Connect to switch by ssh/telnet or by console and issue following command

copy tftp: flash:
Address or name of remote host []? 192.168.0.1
Source file name []? cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin
Destination file name []? cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin

After some minutes the new IOS will be downloaded to flash directory. in my case it took around 90 seconds to copy 291 MB IOS EX file.

# Switch to enable mode
en
#Issue command to upgrade to new firmware we just downloaded in above steps
request platform software package install switch all file flash:cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin

Switch will now start the upgrade processing …

--- Starting install local lock acquisition on switch 1 ---
Finished install local lock acquisition on switch 1
Expanding image file: flash:cat3k_caa-universalk9.SPA.03.06.08.E.152-2.E8.bin
[1]: Expanding file
[1]: Finished expanding all-in-one software package in switch 1
SUCCESS: Finished expanding all-in-one software package.
[1]: Performing install
 SUCCESS: install Finished
[1]: install package(s) on switch 1
--- Starting list of software package changes ---
Old files list:
 Removed cat3k_caa-guestshell.16.03.05b.SPA.pkg
 Removed cat3k_caa-rpbase.16.03.05b.SPA.pkg
 Removed cat3k_caa-rpcore.16.03.05b.SPA.pkg
 Removed cat3k_caa-srdriver.16.03.05b.SPA.pkg
 Removed cat3k_caa-wcm.16.03.05b.SPA.pkg
 Removed cat3k_caa-webui.16.03.05b.SPA.pkg
New files list:
 Added cat3k_caa-base.SPA.03.06.08E.pkg
 Added cat3k_caa-drivers.SPA.03.06.08E.pkg
 Added cat3k_caa-infra.SPA.03.06.08E.pkg
 Added cat3k_caa-iosd-universalk9.SPA.152-2.E8.pkg
 Added cat3k_caa-platform.SPA.03.06.08E.pkg
 Added cat3k_caa-wcm.SPA.10.2.180.0.pkg
Finished list of software package changes
SUCCESS: Software provisioned. New software will load on reboot.
[1]: Finished install successful on switch 1
Checking status of install on [1]
[1]: Finished install in switch 1
SUCCESS: Finished install: Success on [1]

Now issue reload command to restart/reload the new config.

reload

Continue to reboot.

After the upgrade We will see new version in action !

show version | b SW
Switch Ports Model SW Version SW Image Mode
------ ----- ----- ---------- ---------- ----
* 1 32 WS-C3850-24T 03.06.08E cat3k_caa-universalk9 INSTALLConfiguration
register is 0x102


2# Short Notes on STACK Configuration!

cisco 3850 stack cable.jpg

Stacking is simple ! Example we want to connect 2 switches in stack mode.

1.  Power up the switch master only, let it boot completely,

2.   Attach the stacking cable from 1st switch to second one,

3.  Power up the second switch.

By default there will be no extra config required. and if both switches matches they will be added in STACK automatically.

JUST MAKE SURE THAT …

1.  All switches are running the same IOS version, same Feature Set (example IP Base);

Setting Switch Priority for MASTER

We can set switch priority to decide which switch should be MASTER. To do this, Power ON the Master switch only and issue following command

sh switch

Switch/Stack Mac Address : 009a.d29c.daXX - Local Mac Address
Mac persistency wait time: Indefinite
H/W Current
Switch# Role Mac Address Priority Version State
------------------------------------------------------------
*1 Active 009a.d29c.daXX 15 V07 Ready

Note down your switch number.

# switch to ENABLE mode
en
# Set Switch Priority
switch 1 priority 15
# WRITE CONFIG
wr
# RELOAD the configuration / reboot
reload

now boot second switch.

Once all Done. Issue following command to confirm the STACKING status.

Switch#sh switch
Switch/Stack Mac Address : 009a.d29c.da00 - Local Mac Address
Mac persistency wait time: Indefinite
H/W Current
Switch# Role Mac Address Priority Version State
------------------------------------------------------------
*1 Active 009a.d29c.da00 15 V07 Ready
2 Standby 682c.7b3c.4180 1 V07 Ready

Check Stack Ports status

Switch#show switch stack-ports
Switch# Port1 Port2
----------------------------
1 OK DOWN
2 OK DOWN

3# Some Useful STACK commands

show license right-to-use
switch stack-bandwidth
show switch detail

Following is one good Link for 3750 stack configuration …

https://www.petenetlive.com/KB/Article/0001205


4# Connecting Cisco 3850 Switch via USB console cable !

Following cable was used in this scenario

Console Cable 6 ft with USB Type A and mini-B

Console Cable 6 ft with USB Type A and mini-B

To connect with switch console using USB cable, first download & install the Cisco  USB Driver from my google drive

https://drive.google.com/drive/u/0/folders/0B8B_P2ljEc2xQlpvRUQ2QWVfR0E

Now plugin the USB cable into your desktop/laptp, Open Putty and connect to switch with settings mentioned in the image, make sure to change port as per your local system setting

3850 putty setting


Regard’s
Syed Jahanzaib ~

April 10, 2018

Symantec SEPM 12.x Migration to 14.x


sepm

Today was a hectic day. We received new series of HP G5/8th Gen laptop which supports Windows 10 only  , & when we tried to installed SEPM 12.x client, it stated that the App is not compatible with this version of windows. That was really an hectic news for us because our SEPM server was based on windows 2003 32bit & there is no straightforward method for in-place upgrade to SEPM 14. It requires minimum 64bit of server window 2008 or above server . Any way we managed to migrate SEPM 12.1.6 to SEPM 14.x on Windows 2012 R2 64bit at a cost of whole day brainstorming.

Following are steps I followed for the migration of SEPM v12 W2003 32bit to SEPM v14 on Windows 2012 R2 64bit.


First Take Backup of current SEPM 12.x DB

Step 1# Back up the Database

  1. Click Start Programs Symantec Endpoint Protection Manager > Database Backup and Restore.
  2. Click Back Up. The database backup file name is date_timestamp.zip and is located in the following directory:

\Program Files\Symantec\Symantec Endpoint Protection Manager\data\backup

Copy above folder at some centralized file server folder or USB.

Step 2# Back up the Disaster Recovery File

Copy the following folder at some centralized file server folder or USB.

\Program Files\Symantec\Symantec Endpoint Protection Manager\Server Private Key Backup\

Now shutdown current SEPM Server machine & proceed to install SEPM on new machine


Step  3# Install SEPM on new Windows 2012 R2 server

on New Windows 2012 R2 , configure same Computer name & IP Address which was setup on old SEPM server.

Install the Same SEPM version, in my case it was 12.1.6 MP6.

Once installation is done, & When the Management Server Configuration Wizard runs, select Custom configuration & choose Use a recovery file. Point to the backup folder we took in Step 1/2.

As showed in the image below …

1- sav restore from backup.JPG

Once its done, Start the SEPM console one time to confirm if all is running ok.

Step 4# Restore the database:

To restore DB, Stop the following services,

  • Symantec Endpoint Protection Manager
  • Symantec Endpoint Protection Manager Webserver
  1. Click Start Programs Symantec Endpoint Protection Manager > Database Backup and Restore.
  2. Click Restore.

Once All done, reboot server one time and make sure all services are started properly in the SERVICES console.


User Rights Assignment in Group Policy.

If your SEPM is an member of Active Directory then services will not start dueto lack of LOGON AS SERVICE rights.

As a workaround I installed GROUP POLICY MANAGEMENT on the new SEPM server, and edit Group Policy to add following users in LOGON AS SERVICE section.

  • NT SERVICE\semsrv
  • NT SERVICE\semwebsrv
  • NT SERVICE\SQLANYs_sem5
  • NT SERVICE\semapisrv

Since I was editing Domain Group Policy from the SEPM server itself, that is why I changed Location to local PC and then above accounts was added successfully. As a workaround we can add user SID as well. See following command to get SID of accounts and SID accordingly.

sc showsid semsrv
sc showsid semwebsrv

Step 5# Upgrade

Now run the 14.x setup , and choose upgrade. the upgrade process is quite simple and generally requires clicking next button.

 

 

Client SEPM 14.x Server Console

sepm server.JPG

Client SEPM 14.x Client

client sepm.JPG


Few Helpful links for Broadcom Symantec:

To access Symantec web admin Console

https://SERVER_NAME_OR_IP:8443/console/apps/sepm

Use Admin or your named id that was configured during setup

– Backup DB Location

C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\data\backup

To access Broadcom Support Panel over the internet

https://support.broadcom.com

To View Latest SEPM server version & history

https://knowledge.broadcom.com/external/article/154575/versions-system-requirements-release-dat.html

– To View Virus Definitions & Security Updates version

https://www.broadcom.com/support/security-center/definitions?pid=sep14

– DR – Recovery

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Managing-management-servers-sites-and-databases/disaster-recovery-best-practices-for-endpoint-prot-v18588940-d15e2803.html

-Checking that Symantec Endpoint Protection Manager has the latest content

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/how-to-update-content-and-definitions-on-the-clien-v38539566-d79e6/downloading-content-from-liveupdate-to-the-v39542706-d79e978/checking-that-has-the-latest-content-v16999196-d79e2480.html

– Upgrade to latest (embedded db vs sql express)

https://knowledge.broadcom.com/external/article/151303/endpoint-protection-manager-moving-from.html

– SEPM Heart beat cycle is 2 hours

https://community.broadcom.com/symantecenterprise/communities/community-home/digestviewer/viewthread?MessageKey=b5d32122-1421-4483-8d19-5ec5df072cbc&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=digestviewer#:~:text=07%3A53%20AM-,Heartbeat%20is%20two%20hours.,changes%2C%20upload%20logs%2C%20etc.

April 6, 2018

Veeam B&R 9.5 Update 3 Error: This Veeam Backup & Replication installation can not be updated automatically

Filed under: Microsoft Related, Veeam B&R — Tags: — Syed Jahanzaib / Pinochio~:) @ 2:32 PM

Recently when we tried to apply veeam B&R update 3 , we encountered following error …

This Veeam Backup & Replication installation can not be updated automatically. Please contact Veeam customer support for assistance with manual update.

vbr95up3 error.JPG

After some investigation it found that it can occur dueto either you are running trial or if you have problem with the license files. Therefore as a workaround to enforce Update Pack 3 which was required dueto requirement of addition of Esxi 6.5 Vcenter, I followed below steps …

Rename following files

VeeamLicense.dll > to > VeeamLicense.dll.old
[ available in C:\Program Files\Common Files\Veeam\ ]

veComLic.dll > to > veComLic.dll.old
[ available in C:\Program Files\Common Files\Veeam\Backup And Replication ]

Now run the Update Pack 3 and it will run smoothly.

v95up3

Once Done, execute Veeam , It may show license is invalid, just ignore and move forward, it may ask you to update component, just do it, when done, close the veeam.

Now go back to

  • C:\Program Files\Common Files\Veeam
  • C:\Program Files\Common Files\Veeam\Backup And Replication

You may see new VeeamLicense.dll veComLic.dll files, just remove them, (or rename them to.new) and rename the previous .old VeeamLicense.dll.old & veComLic.dll.old files to original names. (by removing .old from there names)

Now start Veeam again, & hopefully this time all will be fine.

 

v br 95 up3 final.JPG


Veeam Installation setup Stuck during .Netframework installation in Windows 7 64bit SP1

During Setup launching if it ask to install .net framework and then stuck on its installation phase, close the setup task from task manager, and then disconnect any USB you may have attached to this system, and then re-run the setup and it will work Insha Allah.

SQL installation fail error during Veeam post-run setup

If you are running windows 7 sp1 64bit, and the setup failed sql installation, then downlaod sql express 2012 edition from microsoft , install it and then run the setup or re-run / install.

cracking

I heard that if you have veeam 9.5 crack which consists of 2 files, first stop all veeam services, then run the .reg file , then copy veComLic.dll to C:\Program Files\Common Files\Veeam\Backup And Replication. and start veeam services or restart pc.