Using the SD Flash Memory Module

This section describes the Secure Digital (SD) flash memory module (or SD card) used with the Cisco 1240 Connected Grid Router (CGR 1240 or router), and includes instructions for installing and removing the SD card.

These topics are discussed:

blank.gifSD Flash Memory Module

blank.gifAccessing the SD Card

blank.gifSD Card Status

blank.gifSecuring the SD Card with a Password

blank.gifRelated Commands

SD Flash Memory Module

The router features an SD card connector, which supports a single Cisco SD flash memory module (SD card). The SD card stores router data and software, including:

blank.gifRouter operating software

blank.gifRunning configurations

blank.gifNetwork management software configuration

blank.gifNetwork registration data

blank.gifRouter firmware

The topics in this section include:

blank.gifSD Card File System

blank.gifSupported SD Cards

SD Card File System

The SD card uses a Linux-based EXT2/3 file system. The router configuration is stored in a binary file in an invisible partition on the card.

Supported SD Cards

Table 26 lists the SD cards that can be used with the router.

Table 26 Supported SD Flash Modules

Size

2-GB flash memory module

Accessing the SD Card

The SD card and SD card LED are accessed from the router exterior, though the router SD card port, shown in Figure 84.

Caution: Do not remove the SD card from the router; removing the SD card causes the router to stop operating.

The topics in this section include:

blank.gifAccessing the SD Card on a Router with a Mounting Bracket

Accessing the SD Card on a Router with a Mounting Bracket

When the Cisco mounting bracket is attached to the router, the bracket blocks access to the SD card port slot on the router exterior. To access the SD card slot without removing the router from the bracket or any mounting installation that uses the bracket, refer to the instructions in Mounting the Router.

Figure 84 SD Card Port Location on Router Exterior

 

300566.eps

Figure 85 SD Card Slot with SD Card Inserted

 

300567.eps

SD Card Status

blank.gifSD Card LED

SD Card LED

The SD card LED is located directly next to the SD card slot, and is visible when the SD card slot seal is removed. This section describes the LED states and descriptions.

Figure 86 SD Card LED Location

 

300568.eps

Table 27 SD Flash Memory Module LED States

 

Description
Color and State
Description

SD card status

Green solid

SD flash card is installed and operating normally.

Note: If the SD Card is removed, the SD flash memory module LED remains green solid until the router reboots.

Green blinking

A data transfer between the router and the SD card is in progress.

Amber solid

blank.gifAn error occurred when the router accessed the SD flash card.

blank.gifThe router could not find a system software image.

Amber blinking

An unsupported SD card is installed in the slot.

Securing the SD Card with a Password

Note: The CLI cited in this section work for both the CG-OS and Cisco IOS operating systems.

The SD card contents can be secured with a password. Once a password is set, the password must be supplied before data can be accessed on the SD card.

The SD card password must be set during system initialization, and you will be notified that the system must be rebooted for the new password to take effect. The password can be set at the CLI or through the CG-NMS.

To set and remove SD card passwords and display their status, see:

blank.gifSetting and Removing an SD Card Password

blank.gifDisplaying the SD Card Password Status

Setting and Removing an SD Card Password

To set a password for the SD-card, use the sd-card password password command in global configuration mode to set the password. Use the no sd-card password command in global configuration mode to remove the password.

Displaying the SD Card Password Status

The SD Card password status can be:

blank.gifUnlocked

blank.gifLocked

blank.gifPassword set/reset, reboot pending

To determine the status of the SD card password, you can use the show sd-card password status command in user EXEC mode.

cgr1240# show sd-card password status
 
SD-card lock status: [Locked, reboot required to apply.]
 

The command output indicates that the SD card is password secured but the router must be rebooted for the password to apply.

The status of an SD card fully secured by a password the status is [Locked], and an SD card unsecured by a password has [Unlocked] status.

Related Commands

Note: The commands in this section work on routers running the Cisco CG-OS or Cisco IOS operating systems.

blank.gifcopy running-config startup-config

blank.gifsd-card password

blank.gifno sd-card password

blank.gifshow sd-card password status

copy running-config startup-config

To save the router current software configuration to the SD card, use the copy running-config startup-config command in user EXEC mode:

cgr1240# copy running-config startup-config
[########################################] 100%
Copy complete, now saving to disk (please wait)...

sd-card password

To set a password for the SD card, use the sd-card password password command in global configuration mode.

cgr1240(config)# sd-card password password

no sd-card password

To remove the SD card password, use the no sd-card password command in global configuration mode.

cgr1240(config)# no sd-card password
 

show sd-card password status

To determine the status of the SD card password, use the show sd-card password status command in user EXEC mode.

cgr1240# show sd-card password status

Field Replacement of the SD Card

The SD card can contain either the IOS operating system or the CGIOS operating system. There are different procedures for replacing each version.

SD Card Replacement with the IOS Operating System

1.blank.gif If your router is using a battery backup system, you will need to disable it before powering down the device.

CGR1000# battery charge-discharge disable
 

2.blank.gif Unplug the power cord from the router.

3.blank.gif Once the router has powered off, remove the old SD card from the SD card slot.

4.blank.gif Insert the new SD card into the SD card slot.

5.blank.gif Connect the power cord to the router.

6.blank.gif If there is no change in the binary version of the OS, the router will autoboot correctly.

a.blank.gif Once the router completely boots up and is running, skip to step 13.

7.blank.gif If there is a difference in the binary version of the OS, the router will stop at the rommon-1 prompt

8.blank.gif.From the rommon-1 prompt, confirm the availability of hypervisor and the IOS image using the following commands:

rommon-1> dir
flash: cgr1000-universalk9-mz.SPA.156-3.M2
bootstrap: bootstrap:cgr1000-hv.srp.SPA.2.0.12
 

9.blank.gif Set the hypervisor boot string using the following command:

rommon-1> set BOOT_HV=bootstrap:cgr1000-hv.srp.SPA.2.0.12
 

10.blank.gif Set the IOS boot string using the following command:

rommon-1> set BOOT=flash:cgr1000-universalk9-mz.SPA.156-3.M2
 

11.blank.gif Reload the router:

rommon-1> reboot
 

12.blank.gif Once the router has reloaded and comes back up, it is ready to use.

13.blank.gif If your router is using a battery backup system, you will need to re-enable it.

CGR1000# battery charge-discharge enable
 

SD Card Replacement with the CGOS Operating System

The procedure for replacing the SD card running CGOS is more complex because the CGOS stores all the configuration and encrypted private keys and certificates in different SD card partitions. IOS stores all of these in the NVRAM of the CGR1000 router mainboard.

Prior to replacing the SD card, make sure that the running configuration on the SD card is backed up to a tftp server. For example:

CGR1000# copy running-config tftp://192.168.0.1/original-config
 

After backing up the running configuration, replace the SD card using the following steps:

1.blank.gif If your router is using a battery backup system, you will need to disable it before powering down the device.

CGR1000# backup-battery inhibit discharge
 

2.blank.gif Unplug the power cord from the router.

3.blank.gif Once the router has powered off, remove the old SD card from the SD card slot.

4.blank.gif Insert the new SD card into the SD card slot.

5.blank.gif Connect the power cord to the router.

6.blank.gif If there is no change in the binary version of the CG-OS kickstart and system images, the router will autoboot correctly. Once the router completely boots up, go to step 11.

7.blank.gif If there is a difference in the binary version of the CG-OS kickstart and system images, the router will stop at the loader> prompt.

8.blank.gif From the prompt, confirm the availability of kickstart and the system images using the following commands:

loader> dir
bootflash:
cgr1000-uk9-kickstart.5.2.1.CG4.5.SPA.bin
cgr1000-uk9.5.2.1.CG4.5.SPA.bin
 

9.blank.gif Boot the kickstart image:

loader> boot bootflash:cgr1000-uk9-kickstart.5.2.1.CG4.5.SPA.bin
 

10.blank.gif Once the kickstart image has finished booting, load the system image:

CGR1000(boot)# load bootflash:cgr1000-uk9.5.2.1.CG4.5.SPA.bin
 

11.blank.gif When the system image finishes loading, the System Admin Account Setup dialog will be shown.

12.blank.gif Enter a password for the admin account when the prompt Enter the password for admin: is shown.

13.blank.gif Skip the Basic configuration dialog by entering no.

14.blank.gif Log into the router using admin and password that you entered in the step 12.

15.blank.gif Configure the IP address for an Ethernet interface (e.g. Ethernet 2/1) and use tftp to copy the configuration file you obtained from the original SD card to the bootflash. For example:

cgr1000# copy tftp://192.168.0.1/original-config bootflash:original-config
 

16.blank.gif Restore the original configuration.

cgr1000# copy bootflash:original-config running-config
 

17.blank.gif Set the CG-GOS boot kickstart and system variables:

cgr1000(config)# boot kickstart bootflash:/cgr1000-uk9-kickstart.5.2.1.CG4.5.SPA.bin
cgr1000(config)# boot system bootflash:/cgr1000-uk9.5.2.1.CG4.5.SPA.bin
 

18.blank.gif Save the running-config to the startup-config, and reload the router:

cgr1000# copy running-config startup-config
cgr1000# reload
 

19.blank.gif Once the router has reloaded and comes back up, it is ready to use.

20.blank.gif If the router has any certificate trustpoint in the original configuration, its certificate and CA certificate must be re-acquired for the trust-point via SCEP or manual certificate import.

21.blank.gif If your router is using a battery backup system, you will need to re-enable it:

CGR1000# backup-battery un-inhibit discharge