3845 IOS storage issue. 1

[eiregobragh]

Guys,
I've a 3845 Router and I've noticed that it's getting it's IOS image only from the external Flash Card in the slot.

If I do a dir flash: it shows the image on the external flash card.

This posses a security issue in that if someone takes out the flash drive and reboots the Router it will go into ROMMON mode and our network will be down!!!


My question is; Is there an internal onboard flash for the 3845 where I can store an IOS image?

If so how do I find it or go about enabling it?

Many thanks,

Paul



Paul Kilcoyne B. Eng.
Innealtóir/ Engineer

http://www.pknetworks.ie

 

[NetRx]

Hey Paul,

That flash card is probably the only file system. You can run 'show file systems' to see what other storage options you have. However, you have already lost if an unauthorized user can physically touch the device.

Even if the flash system were stored internally, what would prevent them from unplugging the router? Or rebooting and gaining full access by using the password recovery feature?

You need some layer of physical security even if it is as simple as a closet with a lock and key.

Rich
Network Engineer - CCNA

 

[eiregobragh]

Thanks for the tip

Paul Kilcoyne B. Eng.
Innealtóir/ Engineer

http://www.pknetworks.ie

 

[primeaum]

Lets say I have a production 3845 and a spare 3845 on a shelf. Both have the same WIC cards in the same slots. If the production 3845 went down could I remove the compactflash card and put it into the spare 3845? Would it boot and load the config or no?
thanks

 

[lerdalt]

It would not load the config. The config is saved in nvram. HOWEVER...I have done this. You can make a backup of the config to the flash card, then move the card over to the new router and just copy it back into either running or startup-config. Gotcha is that your interfaces will not necessarily be up. You will have to go in and do a "no shut" on your interfaces.

 

[primeaum]

Thank you! I did some digging and found out about the backing up of configs to the flash but didn't know about the interfaces not coming up. This is going to be very very helpful!!!

 

[lerdalt]

I'm pretty sure they will still be administratively shutdown when the router reboots. Just remember to re-save the config. There is another command or set of commands you can use to revert back to the startup config that will then leave the interfaces up, but I can't remember what that is right now. I just saw something about it last week or so.

 

[primeaum]

you mean copy from the flash to the run, no shut the interfaces, then save to run again right?