System Security Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

PDF

System Security Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

LI package installation and removal

Want to summarize with AI?

Log in

Describes the package security controls and directs you to the installation and removal procedures for LI.


As LI is not a part of the Cisco IOS XR image by default, you need to install it separately.


Install and activate the LI package

Install the optional LI feature as it is not included in the Cisco IOS XR image.

Before you begin

Use SCP to transfer the LI RPM files to a folder on the router.

Procedure

  1. Use SCP (secure copy) to transfer the RPM files to a folder on the router.

  2. Start the LI RPM installation.

    Example:

    Router# install source <location-of-the-RPM-package-file> xr-8000-li xr-li noprompt

    For example:

    Router# install source /harddisk:/li-rpms/optional-rpms-argon xr-8000-li xr-li noprompt
  3. Verify the progress of the RPM installation.

    Example:

    RPM Installation (in progress)
    Router#show install request verbose 
    
    User request: install source file:///harddisk:/li-rpms/optional-rpms-argon xr-8000-li xr-li
    Operation ID: 1.1
    State:        In progress since 2023-04-11 17:58:30 UTC
    
    Current activity:    Verify input and download to internal repository if needed
    Next activity:       Veto check
    Time started:        2023-04-11 17:58:44 UTC
    No per-location information.
    Example: RPM Installation (complete)
    
    Router#show install request verbose 
    
    User request: install source file:///harddisk:/li-rpms/optional-rpms-argon xr-8000-li xr-li
    Operation ID: 1.1
    State:        Success since 2023-04-11 18:00:46 UTC
    
    Current activity:    Await user input
    Time started:        2023-04-11 18:00:46 UTC
    
    The following actions are available:
        install package add
        install package remove
        install package upgrade
        install package downgrade
        install package replace
        install package rollback
        install replace
        install rollback
        install source
        install commit         
        install replace reimage

    The output displays the operation identifier, state, current activity, next activity, and start time.

  4. Complete the LI package installation.

    Example:

    Router# install commit
    Install commit operation 1 has started
    Install operation will continue in the background
  5. Verify the progress of the installation commit.

    Example:

    Router# show install request verbose
    User request: install commit
    Operation ID: 1
    State:        In progress since 2023-04-11 18:00:57 UTC
    
    Current activity:    Commit transaction
    Next activity:       Transaction complete
    Time started:        2023-04-11 18:00:57 UTC
    
    No per-location information.
    RP/0/RP0/CPU0:ios#show install request verbose 
    Tue Apr 11 18:09:57.666 UTC
    
    User request: install commit
    Operation ID: 1
    State:        Success since 2023-04-11 18:01:36 UTC
    
    Current activity:    No install operation in progress
    
    The following actions are available:
        install package add
        install package remove
        install package upgrade
        install package downgrade
        install package replace
        install package rollback
        install replace
        install rollback
        install source
        install replace reimage
  6. Verify that the LI package is active.

    Example:

    Router# show install active summary
    Active Packages:    XR: 208    All: 1325
    Label:              7.11.1.01I
    Software Hash:      f73f9988276c2001702066ac8173de2fe5b9501849ca2c98d49f9828b4ab7522
    
    Optional Packages                                                        Version
    ---------------------------------------------------- ---------------------------
    xr-8000-li                                                    7.11.1.01Iv1.0.0-1
    
    ...
    xr-li                                                      7.11.1.01Iv1.0.0-1
    ..

The LI package is installed and listed among the active packages.


Uninstall the LI package

Remove the LI package from the router.

Procedure

  1. Start the LI package removal.

    Example:

    Router# install package remove xr-8000-li xr-li
    Install remove operation 2.1.1 has started
    Install operation will continue in the background
  2. Verify the progress of the uninstallation.

    Example:

    Uninstallation (in progress)
    Router# show install request verbose
    User request: install package remove xr-8000-li xr-li
    Operation ID: 2.1.1
    State:        In progress since 2023-04-11 18:18:05 UTC
    
    Current activity:    Package add or other package operation
    Next activity:       Await user input
    Time started:        2023-04-11 18:18:44 UTC
    Timeout in:          39m 34s
    Locations responded: 0/1
    
    Location 0/RP0/CPU0:
      Packaging operation stage: Package operations - completed 6/6
      No client notifications waiting
    Uninstallation (complete)
    
    Router#show install request verbose 
    
    User request: install package remove xr-8000-li xr-li
    Operation ID: 2.1.1
    State:        Success since 2023-04-11 18:19:37 UTC
    
    Current activity:    Await user input
    Time started:        2023-04-11 18:19:37 UTC
    
    The following actions are available:
        install package add
        install package remove
        install package upgrade
        install package downgrade
        install package abort latest
        install package abort all-since-apply
        install apply restart
        install apply reload
        install replace reimage
    
    Least impactful apply method: install apply restart
  3. Apply the LI package uninstallation with the least impactful restart method and verify the progress.

    The available apply methods include restart and reload. The restart method is the least impactful method.

    Example:

    Router# install apply restart
    Install apply operation 2.1 has started
    Install operation will continue in the background
    
    Apply restart (in progress)
    
    Router#show install request verbose 
    Tue Apr 11 18:22:04.298 UTC
    
    User request: install apply restart
    Operation ID: 2.1
    State:        In progress since 2023-04-11 18:20:44 UTC
    
    Current activity:    Post-apply operation cleanup
    Next activity:       Await user input
    Time started:        2023-04-11 18:21:07 UTC
    
    No per-location information.
    Apply restart (complete)
    
    Router#show install request verbose 
    Tue Apr 11 18:22:21.102 UTC
    
    User request: install apply restart
    Operation ID: 2.1
    State:        Success since 2023-04-11 18:22:09 UTC
    
    Current activity:    Await user input
    Time started:        2023-04-11 18:22:09 UTC
    
    The following actions are available:
        install package add
        install package remove
        install package upgrade
        install package downgrade
        install package replace
        install package rollback
        install replace
        install rollback
        install source
        install commit
        install replace reimage
  4. Complete the LI package uninstallation.

    Example:

    Router# install commit
    Install commit operation 2 has started
    Install operation will continue in the background
  5. Verify the LI package uninstallation.

    • Router# show install request verbose
      User request: install commit
      Operation ID: 2
      State:        Success since 2023-04-11 18:23:35 UTC
      
      Current activity:    No install operation in progress
      
      The following actions are available:
          install package add
          install package remove
          install package upgrade
          install package downgrade
          install package replace
          install package rollback
          install replace
          install rollback
          install source
          install replace reimage
    • 
      Router# show install active summary
      Active Packages:    XR: 206    All: 1323
      Label:              7.11.1.01I
      Software Hash:      cdef36e9cf22ba3a1c1217d7b05b41a45b7e9ff6e8f30d871a1c52b91bf16047
      
      Optional Packages                                                        Version
      ---------------------------------------------------- ---------------------------
      xr-8000-l2mcast                                               7.11.1.01Iv1.0.0-1
      xr-8000-mcast                                                 7.11.1.01Iv1.0.0-1
      xr-8000-netflow                                               7.11.1.01Iv1.0.0-1
      xr-bgp                                                        7.11.1.01Iv1.0.0-1
      xr-ipsla                                                      7.11.1.01Iv1.0.0-1
      xr-is-is                                                      7.11.1.01Iv1.0.0-1
      xr-lldp                                                       7.11.1.01Iv1.0.0-1
      xr-mcast                                                      7.11.1.01Iv1.0.0-1
      xr-mpls-oam                                                   7.11.1.01Iv1.0.0-1
      xr-netflow                                                    7.11.1.01Iv1.0.0-1
      xr-ops-script-repo                                            7.11.1.01Iv1.0.0-1
      xr-ospf                                                       7.11.1.01Iv1.0.0-1
      xr-perf-meas                                                  7.11.1.01Iv1.0.0-1
      xr-perfmgmt                                                   7.11.1.01Iv1.0.0-1
      xr-track                                                      7.11.1.01Iv1.0.0-1

The LI package is removed and no longer appears in the active package summary.