Fast Software Upgrade

Transcription

1 Information About, page 1 Microcontroller MCU Upgrade, page 1 Restrictions for, page 2 Prerequisites for, page 2 Perform a, page 2 Fast Reload, page 7 Verify the, page 9 Information About During a software upgrade on Cisco Catalyst 3850 switch, user traffic is disrupted until the new software completely boots up. The traffic downtime is a concern for customers running critical applications. Cisco IOS XE Release introduces fast software upgrade feature on Cisco Catalyst 3850 Series Switches, which significantly reduces the traffic downtime during a software upgrade. The fast software upgrade feature is supported on both stacking and standalone systems. Microcontroller MCU Upgrade Cisco Catalyst 3850 has a microcontroller called MCU FPGA. The MCU has its own bootloader and firmware binary to control Power over Ethernet (PoE), environmental devices like temperature, sensors, and so on. During a system reload, if the system detects a change in the software version of the MCU, it allows the MCU to be upgraded. During a fast software upgrade, if the system detects a change in the version of the MCU software in the new image, it downloads the new version of the MCU software to MCU FPGA before the system reload. It then boots up the new image. 1

2 Restrictions for Note The MCU upgrade does not happen during a reload or software upgrade if there is a change in the Bootloader version or the Hardware version of the MCU. If the system is downgraded to a release earlier than Cisco IOS XE , fast reload will be blocked and any change in the MCU software version requires a full reload instead of fast reload. Restrictions for Fast software upgrade is not supported if the switch is configured as Stackwise Virtual System. Fast software upgrade is supported only on access switches with a single logical uplink connection. Fast software upgrade is supported only on the following access switches: WS-C U-L WS-C U-S WS-C U-E Note Use the show platform command to check the SKUs supported. Prerequisites for Before starting a fast software upgrade, ensure that the software on your access switch is Cisco IOS XE Release or later. (This feature is supported from Cisco IOS XE Release ) Perform a Use the following procedure to perform a fast software upgrade: Step 1 Step 2 install remove inactive Clean up the previous package and provision files to free up memory for the new software. install add file image activate fastreload commit Install the new software image with a fast software upgrade Note fastreload is a hidden keyword that does not appear on the CLI help. Example: 2

3 Perform a The following example shows a sample output from the install add fastreload commit command with an MCU upgrade, on a standalone system: stack-upmc#install add file tftp:// /upmc/16_6_1/cat3k_caa-universalk9.bld_v166_throttle_latest_ _ ssa.bin activate fastreload commit install_add_activate_commit: START Fri Jul 21 14:47:23 UTC 2017 Downloading file tftp:// /upmc/16_6_1/cat3k_caa-universalk9.bld_v166_throttle_latest_ _ ssa.bin Finished downloading file tftp:// /upmc/16_6_1/cat3k_caa-universalk9.bld_v166_throttle_latest_ _ ssa.bin to flash:cat3k_caa-universalk9.bld_v166_throttle_latest_ _ ssa.bin install_add_activate_commit: Adding PACKAGE --- Starting initial file syncing --- Info: Finished copying flash:cat3k_caa-universalk9.bld_v166_throttle_latest_ _ ssa.bin to the selected switch(es) Finished initial file syncing --- Starting Add --- Performing Add on all members [1] Add package(s) on switch 1 [1] Finished Add on switch 1 Checking status of Add on [1] Add: Passed on [1] Finished Add install_add_activate_commit: Activating PACKAGE Following packages shall be activated: /flash/cat3k_caa-wlc.bld_v166_throttle_latest_ _ ssa.pkg /flash/cat3k_caa-webui.bld_v166_throttle_latest_ _ ssa.pkg /flash/cat3k_caa-srdriver.bld_v166_throttle_latest_ _ ssa.pkg /flash/cat3k_caa-rpcore.bld_v166_throttle_latest_ _ ssa.pkg /flash/cat3k_caa-rpbase.bld_v166_throttle_latest_ _ ssa.pkg /flash/cat3k_caa-guestshell.bld_v166_throttle_latest_ _ ssa.pkg --- Starting Activate --- Performing Activate on all members [1] Activate package(s) on switch Starting list of software package changes --- Old files list: Removed cat3k_caa-guestshell.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg Removed cat3k_caa-rpbase.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg Removed cat3k_caa-rpcore.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg Removed cat3k_caa-srdriver.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg Removed cat3k_caa-webui.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg New files list: Added cat3k_caa-guestshell.bld_v166_throttle_latest_ _ ssa.pkg Added cat3k_caa-rpbase.bld_v166_throttle_latest_ _ ssa.pkg Added cat3k_caa-rpcore.bld_v166_throttle_latest_ _ ssa.pkg Added cat3k_caa-srdriver.bld_v166_throttle_latest_ _ ssa.pkg Added cat3k_caa-webui.bld_v166_throttle_latest_ _ ssa.pkg Added cat3k_caa-wlc.bld_v166_throttle_latest_ _ ssa.pkg Finished list of software package changes [1] Finished Activate on switch 1 Checking status of Activate on [1] Activate: Passed on [1] Finished Activate --- Starting Commit --- Performing Commit on all members [1] Commit package(s) on switch 1 [1] Finished Commit on switch 1 Checking status of Commit on [1] Commit: Passed on [1] Finished Commit Check fast reload support and verification on switch /usr/binos/conf/fast_rld_prechk.sh: line 49: strstr: readonly function ls: cannot access '/tmp/ufs/*/*': No such file or directory [1]: fast_rld_chk package(s) on switch Starting checking before fast reload --- 3

4 Perform a SUCCESS compatibility check of fast reload Package /flash/cat3k_caa-srdriver.bld_v166_throttle_latest_ _ ssa.pkg is Digitally Signed Package /flash/cat3k_caa-guestshell.bld_v166_throttle_latest_ _ ssa.pkg is Digitally Signed Package /flash/cat3k_caa-rpbase.bld_v166_throttle_latest_ _ ssa.pkg is Digitally Signed Package /flash/cat3k_caa-webui.bld_v166_throttle_latest_ _ ssa.pkg is Digitally Signed Package /flash/cat3k_caa-wlc.bld_v166_throttle_latest_ _ ssa.pkg is Digitally Signed Package /flash/cat3k_caa-rpcore.bld_v166_throttle_latest_ _ ssa.pkg is Digitally Signed SUCCESS to verify packages SUCCESS to check before fast reload Finished checking before fast reload SUCCESS to verify packages SUCCESS to check before fast reload [1]: Finished fast_rld_chk successful on switch 1 (-2) SUCCESS: Finished fast_rld_chk: Success on [1] [1]: Performing pload_svc MM [1] MCU version 104 sw ver 105 MM [2] MCU version 104 sw ver 105 Front-end Microcode IMG MGR: found 4 microcode images for 1 device. Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_0 mismatch: 0 Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_1 mismatch: 1 Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_2 mismatch: 1 Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_3 mismatch: 0 Front-end Microcode IMG MGR: Preparing to program device microcode... Front-end Microcode IMG MGR: Preparing to program device[0], index= bytes... Skipped[0]. Front-end Microcode IMG MGR: Preparing to program device[0], index= bytes. Front-end Microcode IMG MGR: Programming device 0.rwRrw.0%.10%.20%.30%.40%.50%.60%.70%.80%.90%.10% bytes. Front-end Microcode IMG MGR: Preparing to program device[0], index=2 Front-end Microcode IMG MGR: Programming device 0...rrrrrrw..0%...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%w % Front-end Microcode IMG download pre-reload on sub=0 Front-end Microcode IMG MGR: Preparing to program device[0], index= bytes... Skipped[3]. Front-end Microcode IMG MGR: Microcode programming complete in 242 seconds SUCCESS: pload_svc finished Chassis 1 fast reloading, reason - Fast reload command SUCCESS: install_add_activate_commit Fri Jul 21 14:57:37 UTC 2017 stack-upmc#kexec_edison_helper: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint Starting new kernel Will call new kernel at 016e03c0 Bye... SELinux: Could not open policy file <= /etc/selinux/targeted/pooobnd: /scratch/mcpre/bld-bld_v166_throttle_latest_ _152114/binos/drivers/kernel/obj-mips64_cge7-edison/doppler/oobnd/src/oobnd.c: oobnd_module_init: silent roll checkpoint /scratch/mcpre/bld-bld_v166_throttle_latest_ _152114/binos/drivers/kernel/obj-mips64_cge7-edison/doppler/oobnd/src/oobhal.c: 4

5 Perform a oobhal_init_module: silent roll checkpoint contdev.ko loaded. Date May :36:58 Copyright (c) 2011, by cisco Systems, Inc. All rights reserved contdev: reg: lsmpi_contdev_register_handlers dereg: lsmpi_contdev_deregister_handlers contdev: reg: lsmpi_contdev_register_handlers dereg: lsmpi_contdev_deregister_handlers contdev driver initialized. %IOSXEBOOT-f76b58acc246f8da004bb49756a3491d-new_cksum: (rp/0): 4 %IOSXEBOOT-f76b58acc246f8da004bb49756a3491d-saved_cksum: (rp/0): 4 pci 0001:01:00.0: BAR 2: [??? 0x flags 0x102000] has bogus alignment pci 0001:01:00.0: BAR 4: [??? 0x flags 0x102000] has bogus alignment pci 0001:01:00.1: BAR 2: [??? 0x flags 0x102000] has bogus alignment pci 0001:01:00.1: BAR 4: [??? 0x flags 0x102000] has bogus alignment If this is not emulator, STOP, check ERS for new asic revid If this is not emulator, STOP, check ERS for new asic revid Waiting for 120 seconds for other switches to boot Both links down, accelerating discovery and not waiting for other switches Switch number is 1 Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec cisco Systems, Inc. 170 West Tasman Drive San Jose, California Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Experimental Version : [v166_throttle-/scratch/mcpre/bld-bld_v166_throttle_latest_ _ ] Copyright (c) by Cisco Systems, Inc. Compiled Sat 27-May-17 11:33 by mcpre Cisco IOS-XE software, Copyright (c) by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. FIPS: Flash Key Check : Begin FIPS: Flash Key Check : End, Not Found, FIPS Mode Not Enabled This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you 5

6 Perform a agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: If you require further assistance please contact us by sending to export@cisco.com. cisco WS-C U (MIPS) processor (revision T0) with K/6147K bytes of memory. Processor board ID FOC1919X1B8 2048K bytes of non-volatile configuration memory K bytes of physical memory K bytes of Crash Files at crashinfo: K bytes of Flash at flash:. 0K bytes of WebUI ODM Files at webui:. Base Ethernet MAC Address : b0:7d:47:24:46:80 Motherboard Assembly Number : Motherboard Serial Number : FOC19184Z81 Model Revision Number : T0 Motherboard Revision Number : A0 Model Number : WS-C U System Serial Number : FOC1919X1B8 %INIT: waited 0 seconds for NVRAM to be available Defaulting CPP : Policer rate for all classes will be set to their defaults Press RETURN to get started! stack-upmc>en stack-upmc# stack-upmc#sh platform frontend-controller version 0 1 Switch 1 MCU: Software Version System Type 6 Device Id 2 Device Revision 0 Hardware Version 41 Bootloader Version 16 stack-upmc#sh version Cisco IOS XE Software, Version BLD_V166_THROTTLE_LATEST_ _ Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Experimental Version : [v166_throttle-/scratch/mcpre/bld-bld_v166_throttle_latest_ _ ] Copyright (c) by Cisco Systems, Inc. Compiled Sat 27-May-17 11:33 by mcpre Cisco IOS-XE software, Copyright (c) by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: IOS-XE ROMMON BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 4.58, engineering software (D) 6

7 Fast Reload Fast Reload The reload command on the switch is enhanced with the hidden keyword fast to reload without an image upgrade. Following is a sample output of reload fast stack-upmc#reload fast Reload fast command is being issued on Active unit, this will reload fast the whole stack Proceed with reload fast? [confirm] Check fast reload support and verification on switch /usr/binos/conf/fast_rld_prechk.sh: line 49: strstr: readonly function ls: cannot access '/tmp/ufs/*/*': No such file or directory [1]: fast_rld_chk package(s) on switch Starting checking before fast reload SUCCESS compatibility check of fast reload Package /flash/cat3k_caa-srdriver.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg is Digitally Signed Package /flash/cat3k_caa-guestshell.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg is Digitally Signed Package /flash/cat3k_caa-webui.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg is Digitally Signed Package /flash/cat3k_caa-rpbase.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg is Digitally Signed Package /flash/cat3k_caa-rpcore.bld_v166_1_throttle_latest_ _143041_v16_6_0_266.ssa.pkg is Digitally Signed SUCCESS to verify packages SUCCESS to check before fast reload Finished checking before fast reload SUCCESS to verify packages SUCCESS to check before fast reload [1]: Finished fast_rld_chk successful on switch 1 (-2) SUCCESS: Finished fast_rld_chk: Success on [1] Chassis 1 fast reloading, reason - Fast reload command stack-upmc#kexec_edison_helper: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint Starting new kernel Will call new kernel at 016e0310 Bye... oobnd: /scratch/mcpre/bld-bld_v166_1_throttle_latest_ _143041/binos/drivers/kernel/obj-mips64_cge7-edison/doppler/oobnd/src/oobnd.c: oobnd_module_init: silent roll checkpoint /scratch/mcpre/bld-bld_v166_1_throttle_latest_ _143041/binos/drivers/kernel/obj-mips64_cge7-edison/doppler/oobnd/src/oobhal.c: oobhal_init_module: silent roll checkpoint contdev.ko loaded. Date Jul :23:57 Copyright (c) 2011, by cisco Systems, Inc. All rights reserved contdev: reg: lsmpi_contdev_register_handlers dereg: lsmpi_contdev_deregister_handlers contdev: reg: lsmpi_contdev_register_handlers dereg: lsmpi_contdev_deregister_handlers contdev driver initialized. %IOSXEBOOT-f76b58acc246f8da004bb49756a3491d-new_cksum: (rp/0): 4 %IOSXEBOOT-f76b58acc246f8da004bb49756a3491d-saved_cksum: (rp/0): 4 pci 0001:01:00.0: BAR 2: [??? 0x flags 0x102000] has bogus alignment pci 0001:01:00.0: BAR 4: [??? 0x flags 0x102000] has bogus alignment pci 0001:01:00.1: BAR 2: [??? 0x flags 0x102000] has bogus alignment 7

8 Fast Reload pci 0001:01:00.1: BAR 4: [??? 0x flags 0x102000] has bogus alignment If this is not emulator, STOP, check ERS for new asic revid If this is not emulator, STOP, check ERS for new asic revid Both links down, not waiting for other switches Switch number is 1 Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec cisco Systems, Inc. 170 West Tasman Drive San Jose, California Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Experimental Version : [v166_throttle-/scratch/mcpre/bld-bld_v166_1_throttle_latest_ _ ] Copyright (c) by Cisco Systems, Inc. Compiled Wed 19-Jul-17 11:02 by mcpre Cisco IOS-XE software, Copyright (c) by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. FIPS: Flash Key Check : Begin FIPS: Flash Key Check : End, Not Found, FIPS Mode Not Enabled This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: If you require further assistance please contact us by sending to export@cisco.com. cisco WS-C U (MIPS) processor (revision T0) with K/6147K bytes of memory. Processor board ID FOC1919X1B8 2048K bytes of non-volatile configuration memory K bytes of physical memory K bytes of Crash Files at crashinfo: K bytes of Flash at flash:. 8

9 Verify the 0K bytes of WebUI ODM Files at webui:. Base Ethernet MAC Address : b0:7d:47:24:46:80 Motherboard Assembly Number : Motherboard Serial Number : FOC19184Z81 Model Revision Number : T0 Motherboard Revision Number : A0 Model Number : WS-C U System Serial Number : FOC1919X1B8 %INIT: waited 0 seconds for NVRAM to be available Press RETURN to get started! stack-upmc#sh platform frontend-controller version 0 1 Switch 1 MCU: Software Version System Type 6 Device Id 2 Device Revision 0 Hardware Version 41 Bootloader Version 16 stack-upmc#sh version Cisco IOS XE Software, Version BLD_V166_1_THROTTLE_LATEST_ _143041_V16_6_0_266 Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Experimental Version : [v166_throttle-/scratch/mcpre/bld-bld_v166_1_throttle_latest_ _ ] Copyright (c) by Cisco Systems, Inc. Compiled Wed 19-Jul-17 11:02 by mcpre Cisco IOS-XE software, Copyright (c) by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: IOS-XE ROMMON BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 4.58, engineering software (D) Verify the Use the following show commands to verify the software upgrade: Command show switch show version Purpose Run this on a stacking system to ensure that all the systems in the stack are up and running. Run this command to ensure that the software has upgraded to the intended version. 9

10 Verify the 10