從ROMMON模式恢復Catalyst 9800控制器
簡介
本檔案介紹如何根據ROMMON模式且快閃記憶體中沒有映像來復原Catalyst 9800控制器。
必要條件
需求
思科建議您瞭解以下主題：
- Catalyst無線控制器9800
採用元件
本文中的資訊係根據以下軟體和硬體版本：
- Catalyst 9800版本16.10.1
本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。
設定
虛擬9800(9800-CL)的密碼復原程式
步驟1.重啟9800-CL。您很快會看到一個啟動選擇螢幕：
步驟2.在此螢幕上按C以獲取grub提示。
步驟3.您可以使用config指令變更該提示中的組態註冊 0x2142。
步驟4.按ESC鍵以返回引導選擇提示符，並選擇要在正常映像上引導的 packages.conf。
步驟5.您的WLC無需配置即可啟動。找回來。
步驟6.不要忘記重複步驟1中的步驟，將配置暫存器重新設定為原始值0x2002，以便在重新啟動時儲存並載入配置。
通過ROMMON的裝置的密碼恢復過程
步驟1。當您在載入影象的系統的控制檯上看到#####列印時，請傳送Break鍵。然後，系統中斷啟動過程並進入ROMMON提示符。按鍵盤上的break或ctrl+break時，可以執行此操作。您也可以從終端程式傳送break(例如Putty Special Command > Break，Teraterm Control > Send Break)。
注意：密碼恢復要求將系統放入ROMMON中。在傳統Cisco IOS®中，配置暫存器設定確定系統是否可以返回ROMMON。當發出中斷時，0x2102的配置暫存器將阻止返回ROMMON。預設情況下，所有9800裝置(9800-40、9800-80、9800-L)均具有配置暫存器集0x2102。但是，由於它們運行基於Linux的Cisco IOS XE®，因此忽略了此情況，防止返回ROMMON的唯一方法是配置命令no service password-recovery。
注意： 在運行早於16.12(3r)的ROMMON的9800-L上，配置暫存器中的這個位可防止進入ROMMON進行密碼恢復。
修正:如果運行較舊的ROMMON，請按照以下說明升級ROMMON:Cisco Catalyst 9800-L無線控制器的升級現場可程式設計器
因應措施：如果無法完成升級；將配置暫存器修改為0x2002作為解決方法，並防止鎖定到ROMMON。
File size is 0x01d191f3 Located C9800-rpboot.16.10.01.SPA.pkg Image size 30511603 inode num 874837, bks cnt 7450 blk size 8*512 ################################################################################ ################################################################################ ################################################################################ ########################################################## Boot image size = 30511603 (0x1d191f3) bytes ROM:RSA Self Test Passed ROM:Sha512 Self Test Passed Package header rev 3 structure detected Calculating SHA-1 hash...done validate_package_cs: SHA-1 hash: calculated e36f46af:2c06b38d:eeb6e65b:ffaeb429:a6982d29 expected e36f46af:2c06b38d:eeb6e65b:ffaeb429:a6982d29 Validating main package signatures monitor: command "boot" aborted due to user interrupt rommon 1 >
步驟2.在ROMMON提示符下使用confreg 0x2142命令將配置暫存器更改為0x2142。
rommon 1 > confreg 0x2142 You must reset or power cycle for new config to take effect
步驟3.要儲存rommon配置更改，請在sync rommon提示符下執行，reset rommon將應用從rommon提示符進行的更改。
rommon 2 > sync
rommon 3 > reset
Resetting .......
Initializing Hardware ...
System integrity status: 90170200 12030107
System Bootstrap, Version 16.10(2r), RELEASE SOFTWARE
Copyright (c) 1994-2018 by cisco Systems, Inc.
Current image running: Boot ROM0
Last reset cause: LocalSoft
C9800-40-K9 platform with 33554432 Kbytes of main memory
File size is 0x000015c9
Located packages.conf
Image size 5577 inode num 874834, bks cnt 2 blk size 8*512
#
File size is 0x01d191f3
Located C9800-rpboot.16.10.01.SPA.pkg
Image size 30511603 inode num 874837, bks cnt 7450 blk size 8*512
################################################################################
################################################################################
################################################################################
##########################################################
Boot image size = 30511603 (0x1d191f3) bytes
ROM:RSA Self Test Passed
ROM:Sha512 Self Test Passed
Package header rev 3 structure detected
Calculating SHA-1 hash...done
validate_package_cs: SHA-1 hash:
calculated e36f46af:2c06b38d:eeb6e65b:ffaeb429:a6982d29
expected e36f46af:2c06b38d:eeb6e65b:ffaeb429:a6982d29
Validating main package signatures
RSA Signed RELEASE Image Signature Verification Successful.
Image validated
Jun 21 02:30:21.565: %PMAN-3-PROC_EMPTY_EXEC_FILE: R0/0: pvp: Empty executable u
sed for process bt_logger
Jun 21 02:30:24.561: %PMAN-3-PROC_EMPTY_EXEC_FILE: R0/0: pvp: Empty executable u
sed for process bt_logger
Both links down, not waiting for other chassis
Chassis number is 1
Jun 21 02:30:25.327: %PMAN-3-PROC_EMPTY_EXEC_FILE: R0/0: pvp: Empty executable u
sed for process bt_logger
Jun 21 02:30:27.293: %PMAN-3-PROC_EMPTY_EXEC_FILE: R0/0: pvp: Empty executable u
sed for process bt_logger
Jun 21 02:30:33.770: %PMAN-3-PROC_EMPTY_EXEC_FILE: R0/0: pvp: Empty executable u
sed for process bt_logger
Jun 21 02:30:37.045: %PMAN-3-PROC_EMPTY_EXEC_FILE: R0/0: pvp: Empty executable u
sed for process bt_logger
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software [Gibraltar], C9800 Software (C9800_IOS XE), Version 16.10.1, R
ELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Mon 19-Nov-18 08:27 by mcpre
PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO SOFTWARE PRODUCT, PRODUCT FEATURE,
AND/OR SUBSEQUENTLY PROVIDED SOFTWARE FEATURES (COLLECTIVELY, THE
"SOFTWARE"), AND/OR WITH SUCH SOFTWARE CONSTITUTES YOUR FULL
ACCEPTANCE OF THE FOLLOWING TERMS. YOU MUST NOT PROCEED FURTHER IF YOU
ARE NOT WILLING TO BE BOUND BY ALL THE TERMS SET FORTH HEREIN.
Your use of the Software is subject to the Cisco End User License Agreement
(EULA) and any relevant supplemental terms (SEULA) found at
http://www.cisco.com/c/en/us/about/legal/cloud-and-software/software-terms.html.
You hereby acknowledge and agree that certain Software and/or features are
licensed for a particular term, that the license to such Software and/or
features is valid only for the applicable term and that such Software and/or
features may be shut down or otherwise terminated by Cisco after expiration
of the applicable license term (for example, 90-day trial period). Cisco reserves
the right to terminate any such Software feature electronically or by any
other means available. While Cisco may provide alerts, it is your sole
responsibility to monitor your usage of any such term Software feature to
ensure that your systems and networks are prepared for a shutdown of the
Software feature.
cisco C9800-40-K9 (1GL) processor (revision 1GL) with 7866660K/6147K bytes of me
mory.
FIPS: Flash Key Check : Key Not Found, FIPS Mode Not Enabled
Processor board ID TTM22500DAL
1 Virtual Ethernet interface
4 Ten Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
33554432K bytes of physical memory.
26255359K bytes of eUSB flash at bootflash:.
234365527K bytes of SATA hard disk at hard disk:.
0K bytes of WebUI ODM Files at webui:.
Base Ethernet MAC Address : D4:C9:3C:CC:F2:E0
Installation mode is INSTALL
Press RETURN to get started!
*Jun 21 02:31:00.165: %IOS XE_PLATFORM-3-WDC_NOT_FOUND: WDC returned length: 0
*Jun 21 02:31:00.185: %SMART_LIC-6-EXPORT_CONTROLLED: Usage of export controlled
features is not allowedAdding registry invocations for the WLC platform
*Jun 21 02:31:01.743: %SMART_LIC-6-AGENT_READY: Smart Agent for Licensing is ini
tialized
*Jun 21 02:31:01.743: %SMART_LIC-6-AGENT_ENABLED: Smart Agent for Licensing is e
nabled
*Jun 21 02:31:01.743: %SMART_LIC-6-EXPORT_CONTROLLED: Usage of export controlled
features is not allowed
*Jun 21 02:31:04.732: mcp_pm_subsys_init : Init done sucessfullyRA Tracing tool
registry return: 0SID Manager, starting initialization ...
*Jun 21 02:31:05.511: Notifications initializedSID Manager, completed initializa
tion ...
*Jun 21 02:31:07.298: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for typ
e vlan
*Jun 21 02:31:08.999: %CRYPTO-4-AUDITWARN: Encryption audit check could not be p
erformed
*Jun 21 02:31:09.081: %VOICE_HA-7-STATUS: CUBE HA-supported platform detected.
*Jun 21 02:31:09.317: %IOSXE_VMAN-3-MSGINITFAIL: Failed to initialize required V
irt-manager resource: Initalize MQIPC
*Jun 21 02:31:09.333: mcp_pm_init_done : Called
*Jun 21 02:31:09.338: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Jun 21 02:31:09.345: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Jun 21 02:31:09.345: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0
, changed state to up
*Jun 21 02:31:09.346: %LINEPROTO-5-UPDOWN: Line protocol on Interface LI-Null0,
changed state to up
*Jun 21 02:31:09.346: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state
to down
*Jun 21 02:31:09.351: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Jun 21 02:30:33.738: %PMAN-3-PROC_EMPTY_EXEC_FILE: Chassis 1 R0/0: pvp: Empty e
xecutable used for process bt_logger
*Jun 21 02:30:37.011: %PMAN-3-PROC_EMPTY_EXEC_FILE: Chassis 1 R0/0: pvp: Empty e
xecutable used for process bt_logger
*Jun 21 02:30:39.576: %CMFP-6-CRYPTO_MODULE: Chassis 1 R0/0: cman_fp: Crypto Har
dware Module is present
*Jun 21 02:31:01.754: %LMRP-3-RTU_UNINITIALIZED: Chassis 1 R0/0: lman: RTU not y
et initialized: stack enabled 0
*Jun 21 02:31:09.489: %SMART_LIC-6-HA_ROLE_CHANGED: Smart Agent HA role changed
to Active.
*Jun 21 02:31:10.295: %IOSXE_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-
intf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001
*Jun 21 02:31:10.344: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, cha
nged state to down
*Jun 21 02:31:10.345: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, ch
anged state to up
*Jun 21 02:31:10.394: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, cha
nged state to up
*Jun 21 02:31:10.394: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEth
ernet0, changed state to down
*Jun 21 02:31:10.394: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, cha
nged state to up
*Jun 21 02:31:10.966: %ONEP_BASE-6-SS_ENABLED: ONEP: Service set Base was enable
d by Default
*Jun 21 02:31:12.842: %SYS-6-STARTUP_CONFIG_IGNORED: System startup configuratio
n is ignored based on the configuration register setting.
*Jun 21 02:31:12.854: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/0, interfa
ces disabled
*Jun 21 02:31:12.913: %SPA_OIR-6-OFFLINECARD: SPA (BUILT-IN-4X10G/1G) offline in
subslot 0/0
*Jun 21 02:31:12.919: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Jun 21 02:31:12.920: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F0
*Jun 21 02:31:12.946: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Jun 21 02:31:12.946: %IOSXE_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Jun 21 02:31:13.111: % Redundancy mode change to SSO
*Jun 21 02:31:13.112: %VOICE_HA-7-STATUS: NONE->SSO; SSO mode can not take effe
ct until after a platform reload.
*Jun 21 02:31:13.231: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Jun 21 02:31:14.793: %SYS-5-RESTART: System restarted --
Cisco IOS Software [Gibraltar], C9800 Software (C9800_IOSXE), Version 16.10.1, R
ELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Mon 19-Nov-18 08:27 by mcpre
*Jun 21 02:31:14.834: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Jun 21 02:31:14.834: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Jun 21 02:31:16.976: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state
to up
*Jun 21 02:31:17.079: %SYS-6-BOOTTIME: Time taken to reboot after reload = 325
seconds
*Jun 21 02:31:17.977: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEth
ernet0, changed state to up
*Jun 21 02:31:21.579: %SPA_OIR-6-ONLINECARD: SPA (BUILT-IN-4X10G/1G) online in s
ubslot 0/0
*Jun 21 02:31:21.638: %IOSXE_SPA-6-UPDOWN: Interface TenGigabitEthernet0/0/0, li
nk down due to remote fault
*Jun 21 02:31:21.708: %IOSXE_SPA-6-UPDOWN: Interface TenGigabitEthernet0/0/1, li
nk down due to local fault
*Jun 21 02:31:21.748: %IOSXE_SPA-6-UPDOWN: Interface TenGigabitEthernet0/0/2, li
nk down due to local fault
*Jun 21 02:31:21.788: %IOSXE_SPA-6-UPDOWN: Interface TenGigabitEthernet0/0/3, li
nk down due to local fault
*Jun 21 02:31:21.855: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Start
up Config Present)
*Jun 21 02:31:23.541: %LINK-3-UPDOWN: Interface TenGigabitEthernet0/0/0, changed
state to down
*Jun 21 02:31:23.571: %LINK-3-UPDOWN: Interface TenGigabitEthernet0/0/1, changed
state to down
*Jun 21 02:31:23.572: %LINK-3-UPDOWN: Interface TenGigabitEthernet0/0/2, changed
state to down
*Jun 21 02:31:23.575: %LINK-3-UPDOWN: Interface TenGigabitEthernet0/0/3, changed
state to down
*Jun 21 02:31:24.680: %IOSXE_SPA-6-UPDOWN: Interface TenGigabitEthernet0/0/0, li
nk down due to local fault
*Jun 21 02:31:23.618: %LINK-3-UPDOWN: SIP0/0: Interface TenGigabitEthernet0/0/0,
changed state to down
*Jun 21 02:31:29.036: %PKI-2-NON_AUTHORITATIVE_CLOCK: PKI functions can not be i
nitialized until an authoritative time source, like NTP, can be obtained.
*Jun 21 02:31:29.491: %LINK-3-UPDOWN: Interface TenGigabitEthernet0/0/0, changed
state to up
*Jun 21 02:31:30.492: %LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabit
Ethernet0/0/0, changed state to up
*Jun 21 02:31:29.491: %LINK-3-UPDOWN: SIP0/0: Interface TenGigabitEthernet0/0/0,
changed state to up
*Jun 21 02:31:30.495: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, cha
nged state to up
*Jun 21 02:31:37.119: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named CISCO_IDEVID_SU
DI_LEGACY has been generated or imported by pki-sudi
*Jun 21 02:31:39.050: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named CISCO_IDEVID_SU
DI has been generated or imported by pki-sudi
步驟4.現在無需任何配置即可引導系統。忽略啟動配置嚮導。
步驟5.系統啟動後，將startup-config複製到running-config。
步驟6.重新配置啟用密碼或登入憑據，並檢查是否可以通過telnet或ssh訪問裝置。
C9800-40#telnet 172.22.175.1 Trying 172.22.175.1 ... Open User Access Verification Username: admin Password: C9800-40#
步驟7.將配置暫存器改回0x2002。
C9800-40(config)#config-register 0x2002
附註：不要使用0x2102。對於0x2102，不允許您傳送中斷。
步驟8.儲存config。
C9800-40#write memory Building configuration... [OK]
通過USB裝置的密碼恢復過程
從ROMMON啟動WLC
如果您在ROMMON中停滯，且啟動不起作用：
rommon 12 > boot File size is 0x0001dfe6 Located memleak.tcl Image size 122854 inode num 12, bks cnt 30 blk size 8*512 ## Boot image size = 122854 (0x1dfe6) bytes Unsigned package found, aborting package loading... Failed to Free memory block at address 0x00000000cd50b000 File size is 0x00000023 Located pnp-tech-time Image size 35 inode num 13, bks cnt 1 blk size 8*512 Boot image size = 35 (0x23) bytes Unsigned package found, aborting package loading... Failed to Free memory block at address 0x00000000cd4d3000 File size is 0x0001ad3f Located pnp-tech-discovery-summary Image size 109887 inode num 14, bks cnt 27 blk size 8*512 # Boot image size = 109887 (0x1ad3f) bytes Unsigned package found, aborting package loading... Failed to Free memory block at address 0x00000000cd49b000 File size is 0x00000268 Located vlan.dat Image size 616 inode num 15, bks cnt 1 blk size 8*512 Boot image size = 616 (0x268) bytes Unsigned package found, aborting package loading... Failed to Free memory block at address 0x00000000cd463000 boot: cannot determine first file name on device "bootflash:/" rommon 13 >
快閃記憶體沒有任何映像可啟動：
rommon 13 > dir bootflash: File System: EXT2/EXT3 11 16384 drwx------ lost+found 850305 4096 drwxr-xr-x .installer 588673 4096 drwxrwxrwx .prst_sync 948417 4096 drwxr-xr-x .rollback_timer 1381745 4096 drwxr-xr-x dc_profile_dir 12 122854 -rw-r--r-- memleak.tcl 506913 4096 drwxr-x--- vman_fdb 670433 4096 drwxr-xr-x .dbpersist 793073 4096 drwxr-xr-x onep 13 35 -rw-r--r-- pnp-tech-time 14 109887 -rw-r--r-- pnp-tech-discovery-summary 15 616 -rw-r--r-- vlan.dat
您可以通過以下任一方法恢復該盒：
- 通過USB筆驅動器載入影象。
- 通過Gigabit0（帶外管理介面）載入映像。
通過USB載入影象
步驟1.將.bin檔案裝入9800控制器的USB筆驅動器。(在9800-80上，由於Cisco錯誤ID CSCvn8287，在ROMMON中無法識別USB 3.0快閃記憶體驅動器)。
附註：對於虛擬9800-CL，該過程是相同的，但您必須將USB驅動器插入VM主機並將其對映到VM。
步驟2.將USB驅動程式連線到9800的USB埠0。
前檢視：
步驟3.從主控台登入控制器並確保其可以讀取USB。
rommon 19 > dir usb0: File System: FAT32 ! !--Output omitted-- ! 335644 1009389904-rw- <filename>SSA.bin
步驟4.將9800配置為從USB映像引導。
rommon 21 > boot usb0:.bin Located qwlc-universalk9_wlc.BLD_V169_THROTTLE_LATEST_20180601_191011.SSA.bin, start cluster is 335644 ########################################################################################################
########################################################################################################
########################################################################################################
步驟5.9800運作後，將映像從USB複製到bootflash:
WLC# copy usb0:.bin bootflash:
Destination filename [qwlc-universalk9_wlc.BLD_V169_THROTTLE_LATEST_20180601_191011.SSA.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
步驟6.將9800從套件組合模式更改為安裝模式。
從USB啟動控制器時，它會以套件組合模式啟動：
! !--Output omitted-- ! FIPS: Flash Key Check : Key Not Found, FIPS Mode Not Enabled Processor board ID TTM22071510 1 Virtual Ethernet interface 4 Ten Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 33554432K bytes of physical memory. 26910719K bytes of eUSB flash at bootflash:. 234365527K bytes of SATA hard disk at hard disk:. 15243680K bytes of USB flash at usb0:. 0K bytes of WebUI ODM Files at webui:. Base Ethernet MAC Address : 00:A3:8E:23:A2:40 Installation mode is BUNDLE %INIT: waited 0 seconds for NVRAM to be available
從16.12的UI中，可以選擇在下次升級時移至INSTALL模式。提供包括當前版本在內的任何軟體檔案，以進入INSTALL模式。
步驟7.編輯boot 變數（如果它尚未指向packages.conf檔案）。
WLC#configure terminal Enter configuration commands, one per line. End with CNTL/Z. WLC(config)#no boot system WLC(config)#boot system bootflash:packages.conf WLC(config)#end WLC#write Building configuration... [OK] WLC#show boot BOOT variable = flash:packages.conf,12; CONFIG_FILE variable does not exist BOOTLDR variable does not exist Configuration register is 0x2102 Standby not ready to show bootvar
確保配置暫存器為0x2002。
步驟8.重新載入WLC:
WLC#reload
程式完成後，控制器會以安裝模式啟動。
WLC#show version
! !--Output omitted-- !
Installation mode is INSTALL Configuration register is 0x2002
從TFTP載入映像
要從網路載入映像，您必須將GigabitEthernet0管理埠物理連線到訪問埠。
在ROMMON中，您可以隨時使用命令驗證變數set。
rommon 1 > set PS1=rommon ! > ?=0 DEFAULT_GATEWAY=10.1.1.1 ETHER_SPEED_MODE=4 TFTP_RETRY_COUNT=36 SWITCH_NUMBER=1 DLC_DONE=TRUE RET_2_RTS= RET_2_RCALTS= MCP_STARTUP_TRACEFLAGS=00000000:00000000 TFTP_MACADDR=00:db:ad:ba:d0:52 IP_SUBNET_MASK=255.255.255.0 IP_ADDRESS=10.1.1.152 TFTP_SERVER=10.1.1.1 TFTP_FILE=C9800-80-universalk9_wlc.BLD_V1610_1_THROTTLE_LATEST_20181016_174328_2.bin BSI=0 RANDOM_NUM=1650632109
然後，您可以逐個設定變數。不需要像對其他設set 備ROMMON一樣在變數名稱之前鍵入。鍵入變數名稱時避免出現拼寫錯誤，因為沒有驗證任何排序。
rommon 2 > IP_ADDRESS=10.48.71.113 rommon 3 > IP_SUBNET_MASK=255.255.255.128 rommon 4 > DEFAULT_GATEWAY=10.48.71.5
IP設定就緒後，您可以使用下一個命令從TFTP映像進行開機：
rommon 5 > boot tftp://10.48.39.33/C9800-80-universalk9_wlc.16.10.01.SPA.bin
IP_ADDRESS: 10.48.71.113
IP_SUBNET_MASK: 255.255.255.128
DEFAULT_GATEWAY: 10.48.71.5
TFTP_SERVER: 10.48.39.33
TFTP_FILE: C9800-80-universalk9_wlc.16.10.01.SPA.bin
TFTP_MACADDR: 70:6d:15:35:99:ff
TFTP_VERBOSE: Progress
TFTP_RETRY_COUNT: 36
TFTP_TIMEOUT: 7200
TFTP_BLKSIZE: 1460
TFTP_CHECKSUM: Yes
ETHER_PORT: 3
ETHER_SPEED_MODE: 1000MB/HD
link up
Receiving C9800-80-universalk9_wlc.16.10.01.SPA.bin from 10.48.39.33
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
您最終會進入Cisco IOS命令列。不要忘記將Cisco IOS映像實際複製到快閃記憶體或硬碟，並正確設定引導變數。一旦檔案複製到快閃記憶體或硬碟中，您可以從USB（先前於步驟6中）繼續此程式：
疑難排解
當您嘗試從記憶體、USB或TFTP中的檔案啟動時，如果您一直看到rommon告訴您「Please reset before booting」，如下所示：
rommon 4 > boot bootflash:C9800-L-universalk9_wlc.V176_1.SPA.bin
Please reset before booting您只需使配置暫存器無效並重置即可。重新啟動後，問題消失，您可以從任何源啟動。
confreg 0x0
reset
其他有用ROMMON命令
命令dev 列出可用的儲存裝置（bootflash、硬碟、usb等）。
該命令showmon 顯示ROMMON版本。
相關資訊
修訂記錄
| 修訂 | 發佈日期 | 意見 |
|---|---|---|
5.0 |
01-Jul-2025
|
重新認證 |
4.0 |
07-May-2024
|
更新的品牌要求和格式。 |
3.0 |
04-Mar-2024
|
已新增故障排除部分 |
2.0 |
11-Apr-2023
|
更新格式。重新認證。 |
1.0 |
15-Jan-2019
|
初始版本 |
意見