Firmware Upgrade Nexus 7000

1. Log into Nexus and copy the .bin files to the bootflash:

NEXUS7000# copy tftp://10.9.62.51/n7000-s1-dk9.6.2.8a.bin bootflash:
NEXUS7000# copy tftp://10.9.62.51/n7000-s1-kickstart.6.2.8a.bin bootflash:

2. Check if supervisor redundancy is enable with the command show system redundancy status:

Redundancy mode
---------------
administrative: HA
operational: HA

This supervisor (sup-2)
-----------------------
Redundancy state: Active
Supervisor state: Active
Internal state: Active with HA standby

Other supervisor (sup-1)
------------------------
Redundancy state: Standby
Supervisor state: HA standby
Internal state: HA standby

3. Check for any incompatibilities using the command show incompatibility system bootflash:///n7000-s1-dk9.6.2.8a.bin:

Checking incompatible configuration(s)
No incompatible configurations

Checking dynamic incompatibilities:
-----------------------------------
No incompatible configurations

4. Perform impact check using the command show install all impact kickstart n7000-s1-kickstart.6.2.8a.bin system n7000-s1-dk9.6.2.8a.bin:

NEXUS7000# show install all impact kickstart n7000-s1-kickstart.6.2.8a.bin system n7000-s1-dk9.6.2.8a.bin
Installer will perform impact only check. Please wait.

Verifying image bootflash:/n7000-s1-kickstart.6.2.8a.bin for boot variable "kickstart".
[####################] 100% -- SUCCESS

Verifying image bootflash:/n7000-s1-dk9.6.2.8a.bin for boot variable "system".
[####################] 100% -- SUCCESS

Verifying image type.
[####################] 100% -- SUCCESS

Extracting "system" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "kickstart" version from image bootflash:/n7000-s1-kickstart.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "bios" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "lc-d-n7k" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "cmp" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "cmp-bios" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Performing module support checks. [####################] 100% -- SUCCESS

Notifying services about system upgrade. [####################] 100% -- SUCCESS

Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
9 yes non-disruptive reset
10 yes non-disruptive reset
11 yes non-disruptive rolling
12 yes non-disruptive rolling
13 yes non-disruptive rolling
14 yes non-disruptive rolling
15 yes non-disruptive rolling

Images will be upgraded according to following table:
Module Image Running-Version(pri:alt) New-Version Upg-Required
------ ---------- ---------------------------------------- -------------------- ------------
9 system 6.2(8) 6.2(8a) yes
9 kickstart 6.2(8) 6.2(8a) yes
9 bios v3.22.0(02/20/10): v3.22.0(02/20/10) v3.22.0(02/20/10) no
9 cmp 6.2(8) 6.2(8a) yes
9 cmp-bios 02.01.05 02.01.05 no
10 system 6.2(8) 6.2(8a) yes
10 kickstart 6.2(8) 6.2(8a) yes
10 bios v3.22.0(02/20/10): v3.22.0(02/20/10) v3.22.0(02/20/10) no
10 cmp 6.2(8) 6.2(8a) yes
10 cmp-bios 02.01.05 02.01.05 no
11 lc-d-n7k 6.2(8) 6.2(8a) yes
11 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
12 lc-d-n7k 6.2(8) 6.2(8a) yes
12 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
13 lc1n7k 6.2(8) 6.2(8a) yes
13 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
14 lc1n7k 6.2(8) 6.2(8a) yes
14 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
15 lc1n7k 6.2(8) 6.2(8a) yes
15 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no

Additional info for this installation:
--------------------------------------

Service "lacp" in vdc 1: LACP: Upgrade will be disruptive as 4 switch ports and 0 fex ports are not upgrade ready!!
Issue the "show lacp issu-impact" cli for more details.

5. In this case there were switch ports that are not ready for upgrade due to a LACP issue. If the message above also appears to you, check for more details at the end of this guide.

6. Check the impact of the upgrade in LACP interfaces.

NEXUS7000# show lacp issu-impact
For ISSU to Proceed, Check the following:
1. All port-channel member port should be in a steady state.
2. LACP rate fast should not be enabled on member ports.

All the port are ISSU ready

7. If all issues are already solved, check the upgrade impact again:

NEXUS7000# show install all impact kickstart n7000-s1-kickstart.6.2.8a.bin system n7000-s1-dk9.6.2.8a.bin
Installer will perform impact only check. Please wait.

Verifying image bootflash:/n7000-s1-kickstart.6.2.8a.bin for boot variable "kick start".
[####################] 100% -- SUCCESS

Verifying image bootflash:/n7000-s1-dk9.6.2.8a.bin for boot variable "system".
[####################] 100% -- SUCCESS

Verifying image type.
[####################] 100% -- SUCCESS

Extracting "system" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "kickstart" version from image bootflash:/n7000-s1-kickstart.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "bios" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "lc-d-n7k" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "cmp" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Extracting "cmp-bios" version from image bootflash:/n7000-s1-dk9.6.2.8a.bin.
[####################] 100% -- SUCCESS

Performing module support checks. [####################] 100% -- SUCCESS

Notifying services about system upgrade. [####################] 100% -- SUCCESS

Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
9 yes non-disruptive reset
10 yes non-disruptive reset
11 yes non-disruptive rolling
12 yes non-disruptive rolling
13 yes non-disruptive rolling
14 yes non-disruptive rolling
15 yes non-disruptive rolling

Images will be upgraded according to following table:
Module Image Running-Version(pri:alt) New-Version Upg-Required
------ ---------- ---------------------------------------- -------------------- ------------
9 system 6.2(8) 6.2(8a) yes
9 kickstart 6.2(8) 6.2(8a) yes
9 bios v3.22.0(02/20/10): v3.22.0(02/20/10) v3.22.0(02/20/10) no
9 cmp 6.2(8) 6.2(8a) yes
9 cmp-bios 02.01.05 02.01.05 no
10 system 6.2(8) 6.2(8a) yes
10 kickstart 6.2(8) 6.2(8a) yes
10 bios v3.22.0(02/20/10): v3.22.0(02/20/10) v3.22.0(02/20/10) no
10 cmp 6.2(8) 6.2(8a) yes
10 cmp-bios 02.01.05 02.01.05 no
11 lc-d-n7k 6.2(8) 6.2(8a) yes
11 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
12 lc-d-n7k 6.2(8) 6.2(8a) yes
12 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
13 lc1n7k 6.2(8) 6.2(8a) yes
13 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
14 lc1n7k 6.2(8) 6.2(8a) yes
14 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no
15 lc1n7k 6.2(8) 6.2(8a) yes
15 bios v1.10.21(11/26/12):v1.10.21(11/26/12) v1.10.21(11/26/12) no

8. At this time, no issues were pointed and the upgrade will be non-disruptive. Use the command install all to start the upgrade.

NEXUS7000# install all kickstart n7000-s1-kickstart.6.2.8a.bin system n7000-s1-dk9.6.2.8a.bin parallel

Switch over into standby

9. The upgrade will eventually terminate the SSH session. When that happens, open a new one and issue the command below to continue following the upgrade process.

NEXUS7000# show install all status
There is an on-going installation...
Enter Ctrl-C to go back to the prompt.

Continuing with installation, please wait
Trying to start the installer...

Module 9:
Waiting for module online.
-- SUCCESS

Non-disruptive upgrading.

Module 13 upgrade completed successfully.
.

Module 14 upgrade completed successfully.
.

Module 15 upgrade completed successfully.
.

Module 12 upgrade completed successfully.
.

Module 11 upgrade completed successfully.
.

Non-disruptive upgrading.
-- SUCCESS

Module 9:
Upgrading CMP image.
Warning: please do not reload or power cycle CMP module at this time.
-- SUCCESS

Module 10:
Upgrading CMP image.
Warning: please do not reload or power cycle CMP module at this time.
-- SUCCESS

Recommended action::
"Please reload CMP(s) manually to have it run in the newer version.".

Install has been successful.

10. Once the process in finished, restart the CMP modules (that doesn’t impact switch ports):

NEXUS7000# reload cmp module 10
NEXUS7000# reload cmp module 9

IMPORTANT NOTE: 1)http://www.mostlynetworks.com/2013/07/no-issu-for-you/:

If you are comming from the step 5 and have got any LACP issues that could turn the upgrade into disruptive, check this note.

We need that LACP_Timeout values (in bold) to match in both ends, the Local Port and the Neighbor. Set both to the long timeout for ISSU to be happy.

For ISSU to Proceed, Check the following:
1. All port-channel member port should be in a steady state.
2. LACP rate fast should not be enabled on member ports.

The following ports are not ISSU ready
Eth12/10 , Eth11/7 , Eth12/7 , Eth11/10 ,

OK, so Eth12/10 , Eth11/7 , Eth12/7 , Eth11/10 are going to prevent an ISSU because of an LACP issue, let’s check out the LACP details.

Nexu6# sh lacp interface e1/28
Interface Ethernet1/28 is up
Channel group is 28 port channel is Po28
PDUs sent: 21679
PDUs rcvd: 750
Markers sent: 0
Markers rcvd: 0
Marker response sent: 0
Marker response rcvd: 0
Unknown packets rcvd: 0
Illegal packets rcvd: 0
Lag Id: [ [(0, 90-e2-ba-23-9e-8c, 0, 0, 100), (7f9b, 0-23-4-ee-be-2,
801c, 8000, 11c)] ]
Operational as aggregated link since Tue Jul 23 15:00:18 2013
Local Port: Eth1/28 MAC Address= 54-7f-ee-ef-cd-ab
System Identifier=0x8000,54-7f-ee-ef-cd-ab
Port Identifier=0x8000,0x11c
Operational key=32796
LACP_Activity=active
LACP_Timeout=Long Timeout (30s)
Synchronization=IN_SYNC
Collecting=true
Distributing=true
Partner information refresh timeout=Short Timeout (3s)
Actor Admin State=(Ac-1:To-1:Ag-1:Sy-0:Co-0:Di-0:De-0:Ex-0)
Actor Oper State=(Ac-1:To-0:Ag-1:Sy-1:Co-1:Di-1:De-0:Ex-0)
Neighbor: 0x100
MAC Address= 90-e2-ba-23-9e-8c
System Identifier=0x0,90-e2-ba-23-9e-8c
Port Identifier=0x0,0x100
Operational key=0
LACP_Activity=active
LACP_Timeout=short Timeout (1s)
Synchronization=IN_SYNC
Collecting=true
Distributing=true
Partner Admin State=(Ac-0:To-1:Ag-0:Sy-0:Co-0:Di-0:De-0:Ex-0)
Partner Oper State=(Ac-1:To-1:Ag-1:Sy-1:Co-1:Di-1:De-0:Ex-0)

References   [ + ]

Leave a Reply

Your email address will not be published. Required fields are marked *