++ My Network Bio ++

Tuesday, 28 May 2019

Bringing up this new baby

Bringing up this new Cisco ASR 9010 with RSP440 and 24x10GE Linecards, running in IOS-XR 6.x.x. Ready to go live anytime soon

Wednesday, 15 May 2019

Wipe out running configuration in Cisco IOS-XR

For IOS, the equivalent command of "write erase" to IOS-XR is the command "commit replace"

RP/0/RSP0/CPU0:ASR9K(config)#commit replace ?
best-effort Commit the configuration changes via best-effort operation
comment Assign a comment to this commit
confirmed Rollback this commit unless there is a confirming commit
force Override the memory checks
label Assign a label to this commit
save-running Save running configuration to a file
show-error Displays commit failures immediately
<cr> Commit the configuration changes via pseudo-atomic operation

RP/0/RSP0/CPU0:ASR9K(config)#commit replace
Tue May 14 14:20:33.387 SGP

This commit will replace or remove the entire running configuration. This
operation can be service affecting.
Do you wish to proceed? [no]: yes

RP/0/RSP0/CPU0:ios(config)#

Sunday, 12 May 2019

Best Practice Configuration for IOS-XR (Part 1)

There are sample best practice commands that need to be configured in IOS-XR devices for additional security.

Global config:
nsr process-failures switchover
tcp path-mtu-discovery
tcp selective-ack
logging console disable
snmp-server ifmib stats cache
ssh server logging
no telnet vrf $vrf-name ipv4 server
ssh client source-interface $$loopback0
logging events link-status software-interfaces

Admin config:
upgrade fpd all loc all
fpd auto-upgrade

Interface config:
interface name
ipv4 unreachable disable
ipv6 unreachable disable
dampening 1 xxx yyy 1

OSPF config:
router ospf xxx
graceful-restart
router ospfv3 xxx
graceful-restart

MPLS LDP:
mpls ldp neighbor <ip_address> password <pwd>’

AAA:
aaa authorization exec default group tacacs+ none
aaa authorization commands default group tacacs+ none

Monday, 6 May 2019

How to upgrade Field Programmable Device (FPD) on Cisco IOS XR

How to upgrade Field Programmable Device (FPD) on Cisco IOS XR

As per Cisco official documentation, the definition of FPD as follows:
An FPD refers to any programmable hardware device on a router, which includes a Field Programmable Gate Array (FPGA) and Read Only Memory Monitor (ROMMON). Cisco IOS® XR routers use a number of FPDs that are crucial for the function of route processors, line cards, shared port adapters (SPAs), SPA Interface Processors (SIPs), and fan trays.

1. Use the command 'show hw-module' to provide information about the FPD
Sample:

RP/0/RSP0/CPU0:CISCO-A9K#admin show hw-module fpd location all

===================================== ==========================================
Existing Field Programmable Devices
==========================================
HW Current SW Upg/
Location Card Type Version Type Subtype Inst Version Dng?
============ ======================== ======= ==== ======= ==== =========== ====
0/RSP0/CPU0 A9K-RSP880-TR 1.0 lc cbc 0 34.38 No
lc rommon 0 10.59 No
lc fpga2 0 0.57 No
lc fsbl 0 1.103 No
lc lnxfw 0 1.103 No
lc fpga3 0 0.16 No
lc fpga4 0 0.16 No
lc fpga5 0 0.12 No
lc fpga6 0 0.06 No
--------------------------------------------------------------------------------
0/FT0/SP ASR-9010-FAN-V2 1.0 ft cbc 7 29.12 No
--------------------------------------------------------------------------------
0/FT1/SP ASR-9010-FAN-V2 1.0 ft cbc 8 29.12 No
--------------------------------------------------------------------------------
0/BPID0/SP ASR-9010-BPID2 1.0 bp cbc 11 7.105 No
--------------------------------------------------------------------------------
0/PS0/M0/SP PWR-6KW-AC-V3 1.0 pm fpga11 13 4.03^ Yes
pm fpga12 13 4.01^ Yes
pm fpga13 13 4.02^ Yes
--------------------------------------------------------------------------------
0/PS0/M1/SP PWR-6KW-AC-V3 1.0 pm fpga11 14 4.03^ Yes
pm fpga12 14 4.01^ Yes
pm fpga13 14 4.02^ Yes
--------------------------------------------------------------------------------
0/PS1/M0/SP PWR-6KW-AC-V3 1.0 pm fpga11 17 4.03^ Yes
pm fpga12 17 4.01^ Yes
pm fpga13 17 4.02^ Yes
--------------------------------------------------------------------------------
0/PS1/M1/SP PWR-6KW-AC-V3 1.0 pm fpga11 18 4.03^ Yes
pm fpga12 18 4.01^ Yes
pm fpga13 18 4.02^ Yes

NOTES:
1. One or more FPD needs an upgrade. This can be accomplished
using the "admin> upgrade hw-module fpd <fpd> location <loc>" CLI.
2. ^ One or more FPD will be intentionally skipped from upgrade using CLI with option "all" or during "Auto fpd".
It can be upgraded only using the "admin> upgrade hw-module fpd <fpd> location <loc>" CLI with exact location.

Note: As you can see those FANs and RSPs no longer require upgrade as from the column Upg/Dng? are stated as "No", while those PWR-6KW power supply are stated as "Yes".
From the message above, it was mentioned that upgrade can be accomplished using the command
"admin> upgrade hw-module fpd <fpd> location <loc>"
It can be upgraded by using this command:
admin>upgrade hw-module fpd all location all
This is to upgrade all the fpd of all the linecards inserted in the router. But not always works as some fpd need to specify the location.

RP/0/RSP0/CPU0:CISCO-A9K(admin)#upgrade hw-module fpd all location all

This can take some time for a full chassis.
Ensure that system is not power cycled during the upgrades.
Please consult the documentation for more information.

***** UPGRADE WARNING MESSAGE: *****
* This upgrade operation has a maximum timout of 90 minutes. *
* If you are executing the cmd for one specific location and *
* card in that location reloads or goes down for some reason *
* you can press CTRL-C to get back the RP's prompt. *
* If you are executing the cmd for _all_ locations and a node *
* reloads or is down please allow other nodes to finish the *
* upgrade process before pressing CTRL-C. *

% RELOAD REMINDER:
- The upgrade operation of the target module will not interrupt its normal
operation. However, for the changes to take effect, the target module
will need to be manually reloaded after the upgrade operation. This can
be accomplished with the use of "hw-module <target> reload" command.
- If automatic reload operation is desired after the upgrade, please use
the "reload" option at the end of the upgrade command.
- The output of "show hw-module fpd location" command will not display
correct version information after the upgrade if the target module is
not reloaded.
NOTE: Chassis CLI will not be accessible while upgrade is in progress.
Continue ? [no]: yes

No fpd on location 0/RSP0/CPU0 need upgrade at this time.
No fpd on location 0/RSP1/CPU0 need upgrade at this time.
No fpd on location 0/0/CPU0 need upgrade at this time.
No fpd on location 0/1/CPU0 need upgrade at this time.
No fpd on location 0/2/CPU0 need upgrade at this time.

Example:
RP/0/RSP0/CPU0:CISCO-A9K(admin)#upgrade hw-module fpd all location 0/PS0/M1/SP

***** UPGRADE WARNING MESSAGE: *****
* This upgrade operation has a maximum timout of 90 minutes. *
* If you are executing the cmd for one specific location and *
* card in that location reloads or goes down for some reason *
* you can press CTRL-C to get back the RP's prompt. *
* If you are executing the cmd for _all_ locations and a node *
* reloads or is down please allow other nodes to finish the *
* upgrade process before pressing CTRL-C. *

% RELOAD REMINDER:
- The upgrade operation of the target module will not interrupt its normal
operation. However, for the changes to take effect, the target module
will need to be manually reloaded after the upgrade operation. This can
be accomplished with the use of "hw-module <target> reload" command.
- If automatic reload operation is desired after the upgrade, please use
the "reload" option at the end of the upgrade command.
- The output of "show hw-module fpd location" command will not display
correct version information after the upgrade if the target module is
not reloaded.
NOTE: Chassis CLI will not be accessible while upgrade is in progress.
Continue ? [no]: yes

FPD upgrade in progress on some hardware, reload/configuration change
on those is not recommended as it might cause HW programming failure
and result in RMA of the hardware.

Starting the upgrade/download of following FPDs:
=========== ==== ======= ======= =========== =========
Current Upg/Dng
Location Type Subtype Upg/Dng Version Version
=========== ==== ======= ======= =========== =========
0/PS0/M1/SP pm fpga11 upg 4.03 4.04
pm fpga12 upg 4.01 4.02
pm fpga13 upg 4.02 4.03
------------------------------------------------------

Upgrading Delta Power Module Firmware
0/PS0/M1/SP : module: Delta AC V3, upgrade supprted: Parallel

Current power supply 0/PS0/M1/SP firmware version: (Logic 4.3) (Secondary 4.2) (Primary 4.1)

Starting firmware upgrade of power supply 0/PS0/M1/SP Primary 54V micro-controller 0
File path = /net/node0_RSP0_CPU0/disk0:/asr9k-fpd-6.2.3.sp4-1.0.0/fpd/ucode/delta_v3_ac_primary_mcu.bin.gz, Image start 0x1800, No of pages = 64, No of blocks/page = 4, xmit_size = 64

Unzipping the file /net/node0_RSP0_CPU0/disk0:/asr9k-fpd-6.2.3.sp4-1.0.0/fpd/ucode/delta_v3_ac_primary_mcu.bin.gz

Unzipping of file /net/node0_RSP0_CPU0/disk1a:/fpd/delta_v3_ac_primary_mcu.bin.gz complete

FPD upgrade in progress. Max timeout remaining 89 min.
Upgraded power supply 0/PS0/M1/SP firmware version: (Logic 4.3) (Secondary 4.2) (Primary 4.2)

FPD upgrade in progress. Max timeout remaining 88 min.

Upgrading Delta Power Module Firmware
0/PS0/M1/SP : module: Delta AC V3, upgrade supprted: Serial

Current power supply 0/PS0/M1/SP firmware version: (Logic 4.3) (Secondary 4.2) (Primary 4.2)

Starting firmware upgrade of power supply 0/PS0/M1/SP Secondary 5V micro-controller 0
File path = /net/node0_RSP0_CPU0/disk0:/asr9k-fpd-6.2.3.sp4-1.0.0/fpd/ucode/delta_v3_ac_sec5v_mcu.bin.gz, Image start 0x2000, No of pages = 896, No of blocks/page = 1, xmit_size = 64

Unzipping the file /net/node0_RSP0_CPU0/disk0:/asr9k-fpd-6.2.3.sp4-1.0.0/fpd/ucode/delta_v3_ac_sec5v_mcu.bin.gz

Unzipping of file /net/node0_RSP0_CPU0/disk1a:/fpd/delta_v3_ac_sec5v_mcu.bin.gz complete

FPD upgrade in progress. Max timeout remaining 87 min.
FPD upgrade in progress. Max timeout remaining 86 min.
FPD upgrade in progress. Max timeout remaining 85 min.
Upgraded power supply 0/PS0/M1/SP firmware version: (Logic 4.4) (Secondary 4.2) (Primary 4.2)

Upgrading Delta Power Module Firmware
0/PS0/M1/SP : module: Delta AC V3, upgrade supprted: Parallel

Current power supply 0/PS0/M1/SP firmware version: (Logic 4.4) (Secondary 4.2) (Primary 4.2)

Starting firmware upgrade of power supply 0/PS0/M1/SP Secondary 54V micro-controller 0
File path = /net/node0_RSP0_CPU0/disk0:/asr9k-fpd-6.2.3.sp4-1.0.0/fpd/ucode/delta_v3_ac_sec54v_mcu.bin.gz, Image start 0x2000, No of pages = 640, No of blocks/page = 1, xmit_size = 64

Unzipping the file /net/node0_RSP0_CPU0/disk0:/asr9k-fpd-6.2.3.sp4-1.0.0/fpd/ucode/delta_v3_ac_sec54v_mcu.bin.gz

Unzipping of file /net/node0_RSP0_CPU0/disk1a:/fpd/delta_v3_ac_sec54v_mcu.bin.gz complete

FPD upgrade in progress. Max timeout remaining 84 min.
FPD upgrade in progress. Max timeout remaining 83 min.
FPD upgrade in progress. Max timeout remaining 82 min.
FPD upgrade in progress. Max timeout remaining 81 min.
FPD upgrade in progress. Max timeout remaining 80 min.
Upgraded power supply 0/PS0/M1/SP firmware version: (Logic 4.4) (Secondary 4.3) (Primary 4.2)

Successfully upgraded fpga11 for PWR-6KW-AC-V3 on location 0/PS0/M1/SP from 4.03 to 4.04
Successfully upgraded fpga12 for PWR-6KW-AC-V3 on location 0/PS0/M1/SP from 4.01 to 4.02
Successfully upgraded fpga13 for PWR-6KW-AC-V3 on location 0/PS0/M1/SP from 4.02 to 4.03

FPD upgrade has ended.

Saturday, 4 May 2019

Steps in Upgrading Cisco IOS-XR code

These are the steps in upgrading Cisco IOS-XR from 5.x.x to 6.x.x

1. Download from Cisco website the necessary files for the upgrade, usually images are in package installation envelope (.pie) format.
One way of transferring files to the router is via USB port, thus copy these files in your USB thumb drive and insert in USB port in your active RSP linecard.

2. Copy files from usb to harddisk.

RP/0/RSP0/CPU0:CISCO-A9K#dir usb:

Directory of usb:

131648 -rw- 23790534 Wed Jul 11 13:20:51 2018 asr9k-mpls-px.pie-6.x.x
131744 -rw- 4826385 Wed Jul 11 13:20:54 2018 asr9k-doc-px.pie-6.x.x
131840 -rw- 493632091 Wed Jul 11 13:24:28 2018 asr9k-fpd-px.pie-6.x.x
131936 -rw- 27112275 Wed Jul 11 13:24:45 2018 asr9k-k9sec-px.pie-6.x.x
132032 -rw- 38070588 Wed Jul 11 13:25:05 2018 asr9k-mgbl-px.pie-6.x.x
132128 -rw- 487071236 Wed Jul 11 13:20:36 2018 asr9k-mini-px.pie-6.x.x

RP/0/RSP0/CPU0:CISCO-A9K#copy usb:/harddisk:/asr9k-mpls-px.pie-6.x.x harddisk:
Destination filename [/harddisk:/asr9k-mpls-px.pie-6.x.x]?
CCCCCCCCCCCCCCCCCCCCCCC
23790534 bytes copied in 2 sec ( 9111656)bytes/sec

RP/0/RSP0/CPU0:CISCO-A9K#copy usb:/asr9k-doc-px.pie-6.x.x harddisk:
Destination filename [/harddisk:/asr9k-doc-px.pie-6.x.x]?
CCCCC
4826385 bytes copied in 0 sec

RP/0/RSP0/CPU0:CISCO-A9K#copy usb:/asr9k-fpd-px.pie-6.x.x harddisk:
Destination filename [/harddisk:/asr9k-fpd-px.pie-6.x.x]?
CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
493632091 bytes copied in 54 sec ( 9014135)bytes/sec

RP/0/RSP0/CPU0:CISCO-A9K#copy usb:/asr9k-k9sec-px.pie-6.x.x harddisk:
Destination filename [/harddisk:/asr9k-k9sec-px.pie-6.x.x]?
CCCCCCCCCCCCCCCCCCCCCCCCCC
27112275 bytes copied in 3 sec ( 8240813)bytes/sec

RP/0/RSP0/CPU0:CISCO-A9K#copy usb:/asr9k-mgbl-px.pie-6.x.x harddisk:
Destination filename [/harddisk:/asr9k-mgbl-px.pie-6.x.x]?
CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
38070588 bytes copied in 4 sec ( 8258262)bytes/sec

RP/0/RSP0/CPU0:CISCO-A9K#copy usb:/asr9k-mini-px.pie-6.x.x harddisk:
Destination filename [/harddisk:/asr9k-mini-px.pie-6.x.x]?
CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
487071236 bytes copied in 62 sec ( 7826449)bytes/sec

3. Verify the files if copied successfully and compare the file sizes if the same.
RP/0/RSP0/CPU0:CISCO-A9K#dir harddisk:*6.x.x*
Directory of harddisk:

25064 -rw- 23790534 Thu May 2 09:25:03 2019 asr9k-mpls-px.pie-6.x.x
25065 -rw- 4826385 Thu May 2 09:25:21 2019 asr9k-doc-px.pie-6.x.x
25066 -rw- 493632091 Thu May 2 09:26:24 2019 asr9k-fpd-px.pie-6.x.x
25067 -rw- 27112275 Thu May 2 09:27:35 2019 asr9k-k9sec-px.pie-6.x.x
25068 -rw- 38070588 Thu May 2 09:27:50 2019 asr9k-mgbl-px.pie-6.x.x
25069 -rw- 487071236 Thu May 2 09:29:03 2019 asr9k-mini-px.pie-6.x.x

4. Add the packages for activation later on

RP/0/RSP0/CPU0:CISCO-A9K#admin install add harddisk:/asr9k-mpls-px.pie-6.x.x harddisk:/asr9k-doc-px.pie-6.x.x harddisk:/asr9k-fpd-px.pie-6.x.x harddisk:/asr9k-k9sec-px.pie-6.x.x harddisk:/asr9k-mgbl-px.pie-6.x.x harddisk:/asr9k-mini-px.pie-6.x.x harddisk:/asr9k-px-6.x.x.k9-sp4.pie synchronous
Install operation 15 '(admin) install add /harddisk:/asr9k-mpls-px.pie-6.x.x /harddisk:/asr9k-doc-px.pie-6.x.x /harddisk:/asr9k-fpd-px.pie-6.x.x /harddisk:/asr9k-k9sec-px.pie-6.x.x
/harddisk:/asr9k-mgbl-px.pie-6.x.x /harddisk:/asr9k-mini-px.pie-6.x.x synchronous' started by user 'admin' via CLI .
/ 1% complete:

Info: disk0:asr9k-mpls-px-6.x.x
Info: disk0:asr9k-doc-px-6.x.x
Info: disk0:asr9k-fpd-px-6.x.x
Info: disk0:asr9k-k9sec-px-6.x.x
Info: disk0:asr9k-mgbl-px-6.x.x
Info: disk0:asr9k-mini-px-6.x.x
Info:
Info: The packages can be activated across the entire router.
Info:
/ 100% complete: The operation can no longer be aborted (ctrl-c for options)
Install operation 15 completed successfully at 01:52:39 SGP Mon Apr 29 2019.

5. Verify the packages, it will be in the Inactive Packages list if added successfully.

RP/0/RSP0/CPU0:CISCO-A9K#admin show install inactive summary
Mon Apr 29 01:53:36.445 SGP
Default Profile:
SDRs:
Owner
Inactive Packages:
disk0:asr9k-mpls-px-6.x.x
disk0:asr9k-doc-px-6.x.x
disk0:asr9k-fpd-px-6.x.x
disk0:asr9k-k9sec-px-6.x.x
disk0:asr9k-mgbl-px-6.x.x
disk0:asr9k-mini-px-6.x.x

6. Activate the packages. Take note that this will reload the router after the installation. You can use wildcard to install all 6.x.x packages so no need to specify one by one

RP/0/RSP0/CPU0:CISCO-A9K#admin install activate disk0:*6.x.x* synchronous
Install operation 21 '(admin) install activate disk0:asr9k-mpls-px-6.x.x disk0:asr9k-doc-px-6.x.x disk0:asr9k-fpd-px-6.x.x disk0:asr9k-k9sec-px-6.x.x disk0:asr9k-mgbl-px-6.x.x disk0:asr9k-mini-px-6.x.x synchronous' started by user 'admin' via CLI at 04:19:03 SGP Mon Apr 29 2019.

/ 1% complete: The operation can still be aborted (ctrl-c for options)

7. Install commit to commit the active software
Logs:
%INSTALL-INSTMGR-4-ACTIVE_SOFTWARE_COMMITTED_INFO : The currently active software is not committed. If the system reboots then the committed software will be used. Use 'install commit' to commit the active software.

RP/0/RSP0/CPU0:CISCO-A9K#admin install commit

Mon Apr 29 04:31:40.468 SGP
Install operation 22 '(admin) install commit' started by user 'admin' via CLI at
04:31:40 SGP Mon Apr 29 2019.
/ 20% complete: The operation can no longer be aborted (ctrl-c for options
Install operation 22 completed successfully at 04:31:51 SGP Mon Apr 29 2019.

8.Verify if the new code is committed successfully
RP/0/RSP0/CPU0:CISCO-A9K#admin show install committed summary

Mon Apr 29 04:32:04.140 SGP
Default Profile:
SDRs:
Owner
Committed Packages:
disk0:asr9k-mpls-px-6.x.x
disk0:asr9k-doc-px-6.x.x
disk0:asr9k-fpd-px-6.x.x
disk0:asr9k-k9sec-px-6.x.x
disk0:asr9k-mgbl-px-6.x.x
disk0:asr9k-mini-px-6.x.x

Thursday, 2 May 2019

GNS3 setup

GNS3 setup

My old school multi-platform setup. Cisco IOS 7200 ver.15 + juniper 12.1R9 (JunOS Olive) + Cisco IOS XRv 5.1.1 running in MacOS + GNS3
This is the setup I did to practice on my RPL for IOS-XR which unfortunately that time we still don't have the lab environment.

Installation Files needed for IOS-XR

Installation Files needed for IOS-XR
The required files can only be downloaded via Cisco official website and needs an authorized account. Just go to 'Software Download' and search for the product name. Select for the software types, sample as follows:

IOS XR Service Packs
IOS XR Software (this is where you can download main packages)
IOS XR Software Maintenance Upgrades (SMU)
IOS XR Software Maintenance Upgrades (SMU) Bundles

The files needed depend on user or organization requirements, services offered and features that they wanted to run.
For basic installation, these are the following installation files needed . Main packages as follow:

Composite Package:
Filename:asr9k-mini-px.pie-x.x.x
Feature Set: Cisco IOS XR IP Unicast Routing Core Bundle
Description: Contains the required core packages, including OS, Admin, Base, Forwarding, Modular Services Card, Routing, SNMP Agent, and Alarm Correlation.
The mini pie file is used for upgrading to the new release

Optional Packages:
Filename:asr9k-mgbl-px.pie-x.x.x
Feature Set: Cisco IOS XR Manageability Package
Description:CORBA2 agent, XML3 Parser, and HTTP server packages. This PIE also contains some SNMP MIB infrastructure. Certain MIBs won't work if this PIE is not installed.
IPSLA and environment MIBs are part of the mgbl pie.

Filename:asr9k-fpd-px.pie-x.x.x
Feature Set: Cisco IOS XR FPD Package
Description:Firmware pie for all LC and RSP FPGAs and ASICs.

Filename:asr9k-k9sec-px.pie-x.x.x
Feature Set: Cisco IOS XR Security Package
Description:Support for Encryption, Decryption, IP Security (IPSec), Secure Shell (SSH), Secure Socket Layer (SSL), and Public-key infrastructure (PKI) (IPSec is supported only for OSPFv3).

Filename:asr9k-mpls-px.pie-x.x.x
Feature Set: Cisco IOS XR MPLS Package
Description:MPLS Traffic Engineering (MPLS-TE), Label Distribution Protocol (LDP), MPLS Forwarding, MPLS Operations, Administration, and Maintenance (OAM), Link Manager Protocol (LMP), Optical User Network Interface (OUNI), Resource Reservation Protocol (RSVP), and Layer-3 VPN.

Filename:asr9k-doc-px.pie-x.x.x
Feature Set: Cisco IOS XR Documentation Package
Description:.man pages for Cisco IOS XR Software on the Cisco ASR 9000 Series Aggregation Services Router Chassis.

You can download necessary SMUs as per your vendor's recommendation, else download the latest Service packs that will include all those patches or bug fixes.
asr9k-px-x.x.x.k9-sp1

After installation, you should the following packages activated and committed in the router:

RP/0/RSP0/CPU0:ios-xr#show install active summary
Default Profile:
SDRs:
Owner
Active Packages:
disk0:asr9k-mini-px-x.x.x
disk0:asr9k-doc-px-x.x.x
disk0:asr9k-fpd-px-x.x.x
disk0:asr9k-k9sec-px-x.x.x
disk0:asr9k-mgbl-px-x.x.x
disk0:asr9k-mpls-px-x.x.x
disk0:asr9k-px-x.x.x.spx-1.0.0

RP/0/RSP0/CPU0:ios-xr#show install committed summary
Default Profile:
SDRs:
Owner
Committed Packages:
disk0:asr9k-mini-px-x.x.x
disk0:asr9k-doc-px-x.x.x
disk0:asr9k-fpd-px-x.x.x
disk0:asr9k-k9sec-px-x.x.x
disk0:asr9k-mgbl-px-x.x.x
disk0:asr9k-mpls-px-x.x.x
disk0:asr9k-px-x.x.x.spx-1.0.0