Solved: Disabling smart install on 3750 stack switch

mahesh18 · ‎11-20-2013

Hi Everyone,

Need to know on 3750 switch which has 2 stack memebers

Model WS-C3750G-24T"

sh switch

Switch/Stack Mac Address : 0018.198b.9e80

H/W Current

Switch# Role Mac Address Priority Version State

----------------------------------------------------------

*1 Master 0018.198b.9e80 1 0 Ready

2 Member 001a.6d5b.e180 1 0 Ready

currently it has smart install feature configured

sh vstack config
Role: Client (SmartInstall enabled)
Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:

Need to know if it is safe to disable the smartinstall feature in production environment?

What does smart install do?

Reason i need to do this is due to security threat as per link below

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-smartinstall

Regards

MAhesh

Leo Laohoo · ‎11-20-2013

Vstack Director IP address: 0.0.0.0

No IP address for VStack so this means VStack is not configured or enabled. Post the output to the commnand "sh run | i vstack". If there are no output, then VStack is not really enabled.

View solution in original post

Leo Laohoo · ‎11-20-2013

Can you please tell what does smart install do in nutshell?

Funny you should ask. I wrote a blog about it last year. Have a read when you have the time.

How to use Zero-Touch SmartInstall

PS: Thanks for taking the time to rate our posts, Mahesh.

View solution in original post

Leo Laohoo · ‎11-20-2013

Vstack Director IP address: 0.0.0.0

No IP address for VStack so this means VStack is not configured or enabled. Post the output to the commnand "sh run | i vstack". If there are no output, then VStack is not really enabled.

mahesh18 · ‎11-20-2013

Hi Leo,

I run the command there is no output.

Can you please tell what does smart install do in nutshell?

Regards

MAhesh

Leo Laohoo · ‎11-20-2013

Can you please tell what does smart install do in nutshell?

Funny you should ask. I wrote a blog about it last year. Have a read when you have the time.

How to use Zero-Touch SmartInstall

PS: Thanks for taking the time to rate our posts, Mahesh.

mahesh18 · ‎11-21-2013

Hi Leo,

I read the above article which was very good.

Thanks for Excellent work and helping the community.

Regards

Mahesh

Leo Laohoo · ‎11-21-2013

Thanks, Mahesh.

I hope the blog will be able to help you in the future.

islamsallaj · ‎02-06-2019

I tried to access this article for some reason when I login with my cco tells me I can't access it.

izzy

alberthilt · ‎11-09-2017

Smart Install is enabled default, so you do not see any config for that!

sh vstack config

-> you see

Role: Client
Vstack Director IP address: 0.0.0.0

I have the problem on some switches to disable it with

no vstack

command because the switch does know this command but "sh vstack config" shows the role "client"

Switch: WS-C2960G-48TC-L

Software: Version 12.2(52)SE

Can some one tell me how I can disable Smart Install on this switch?

AWRIGHT337 · ‎04-09-2018

You have to run the "no vstack" command under "Configure Terminal (conf t)"

d-costa · ‎04-10-2018

Hello Leo,

I also have a 3750 switch stack with 4 switchs and have the same issue.

I see Vstack Director IP address: 0.0.0.0, but if I check my running config I get output.

From your post if we don't have a director configured "Vstack Director IP address: 0.0.0.0" we can safely disable vstack on a cisco switch stack production environment safely?

----------------------------------
gigaswitch02#sh run | i vstack
vstack

-----------------------------------

gigaswitch02#show vstack config
Capability: Director | Client
Oper Mode: Enabled
Role: Client
Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack start-up management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:

-------------------------------------------------

Thanks,

David Costa

jlopezbo · ‎04-04-2019

To disable smart install feature . If the switches are already install and you will not use smart install there is not any problem to disable this feature
Example


switch#show vstack config
Role: Client (SmartInstall enabled)  >>>>>>>>>>>>(it's enable by default)
Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack start-up management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:
switch#conf ter
switch(config)#no vstack >>>>> Run the command to disable smart install
switch(config)#do show vstack confi
Role: Client (SmartInstall disabled) >>>>>>>>>>> Then the smart install got disable
 Vstack Director IP address: 0.0.0.0

*** Following configurations will be effective only on director ***
Vstack default management vlan: 1
Vstack start-up management vlan: 1
Vstack management Vlans: none
Join Window Details:
         Window: Open (default)
         Operation Mode: auto (default)
Vstack Backup Details:
         Mode: On (default)
         Repository:
WS-C2960X-24PS-L-SW1(config)#