思科C9800在HA状态下如何进行升级

[donghongrui]

公司预将思科C9800两台HA从17.6.5升级到17.6.6a,关于升级的GUI和CLI两种方式如何操作，AP镜像如何更新，请帮忙解答

[ilay · Accepted solution]

1.检查目标版本的ReleaseNotes，检查升级路径（17.6.5-17.6.6同属一个主版本，可以跳过检查，如果升级跨版本过多，务必检查releasenotes，查看是否可以直接升级）

2.备份设备的配置文件，准备好所需的升级文件

3.执行升级（CLI模式）//在相应的停机窗口内进行操作

3.1 将升级文件放到ftp/sftp或http的服务器上（通过usb设备直接拷贝也可，不建议tftp，wlc的升级文件目前都比较大，tftp属实浪费时间）

3.2 通过install add file FILE-PATH的命令先安装文件到设备上面

c9800a#install add file http://10.9.2.90/C9800-CL-universalk9.17.09.04a.SPA.bin
install_add: START Thu Dec 28 06:06:39 CST 2023
<5>%INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install add http://10.0.2.90/C9800-CL-universalk9.17.09.04a.SPA.bin
Downloading file http://10.9.2.90/C9800-CL-universalk9.17.09.04a.SPA.bin
Finished downloading file http://10.9.2.90/C9800-CL-universalk9.17.09.04a.SPA.bin to bootflash:C9800-CL-universalk9.17.09.04a.SPA.bin
install_add: Adding PACKAGE
install_add: Checking whether new add is allowed ....

--- Starting initial file syncing ---
[1]: Copying bootflash:C9800-CL-universalk9.17.09.04a.SPA.bin from chassis 1/R0 to chassis 2/R0
[2]: Finished copying to chassis 2/R0
Info: Finished copying bootflash:C9800-CL-universalk9.17.09.04a.SPA.bin to the selected chassis
Finished initial file syncing

--- Starting Add ---
Performing Add on all members
[1] Add package(s) on chassis 1/R0
[1] Finished Add on chassis 1/R0
[2] Add package(s) on chassis 2/R0
[2] Finished Add on chassis 2/R0
Checking status of Add on [1/R0 2/R0]
Add: Passed on [1/R0 2/R0]
Finished Add

Image added. Version: 17.09.04a.0.6
SUCCESS: install_add Thu Dec 28 06:12:27 CST 2023
<5>%INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install add PACKAGE bootflash:C9800-CL-universalk9.17.09.04a.SPA.bin
c9800a# //安装过程中注意看上面输出的消息，观察是否有错误

3.3 执行ap镜像预下载

c9800a#ap image predownload  //如果需要使用issu模式升级，该操作必须执行

c9800a#show ap image //查看ap的镜像状态，当ap完成预下载之后执行下一步

3.4 激活新版本的镜像文件

c9800a#install activate [issu] // issu是的升级方式能减小业务中断的时间，该过程会先激活备设备的镜像，然后重启，等待备设备使用新镜像重新上线之后，再激活主设备，然后主设备重启，此时备设备会变成active状态，然后等待ap重新上线即可。

如不添加issu参数，两台设备会同时激活新镜像文件，然后同时进行重启

以下是按照issu操作执行的输出。

c9800a#install activate issu
install_activate: START Thu Dec 28 06:30:27 CST 2023
<5>%INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install activate ISSU
install_activate: Activating ISSU

NOTE: Going to start Activate ISSU install process

STAGE 0: System Level Sanity Check
===================================================
--- Verifying install_issu supported ---
--- Verifying standby is in Standby Hot state ---
--- Verifying booted from the valid media ---
--- Verifying AutoBoot mode is enabled ---
--- Verifying Platform specific ISSU admission criteria ---
--- Verifying Image ISSU Compatibility ---
Finished Initial System Level Sanity Check

STAGE 1: Installing software on Standby
===================================================
--- Starting install_remote ---
[2] install_remote package(s) on chassis 2/R0
WARNING: Found 2680 disjoint TDL objects.
[2] Finished install_remote on chassis 2/R0
install_remote: Passed on [2/R0]
Finished install_remote

STAGE 2: Restarting Standby
===================================================
--- Starting standby reload ---
Finished standby reload

--- Starting wait for Standby to reach terminal redundancy state ---
Finished wait for Standby to reach terminal redundancy state

STAGE 3: Installing software on Active
===================================================
--- Starting install_active ---
WARNING: Found 2680 disjoint TDL objects.
[1] install_active package(s) on chassis 1/R0
[1] Finished install_active on chassis 1/R0
install_active: Passed on [1/R0]
Finished install_active

/usr/binos/conf/install_issu_activate.sh: line 307: Rtrace_notice: command not found

STAGE 4: Restarting Active (switchover to standby)
===================================================
--- Starting active reload ---
New software will load after reboot process is completed
SUCCESS: install_activate Thu Dec 28 06:40:45 CST 2023

此时等待主设备重启之后检查ha状态即可

3.5 提交安装

当设备均升级完成之后，执行install commit命令，完成升级步骤。

4.执行升级GUI

通过WEB界面升级比较简单，直接进入到Administration-->Software Management --> Softeware Upgrade中操作就行

直接本地浏览升级的文件，然后先"Download &Install" 再 "Save Configuration & Activate"，最后 "commit"就完事儿了 ISSU选项直接勾选就行，其他选项默认即可，

务必升级完之后commit一下

参考1：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-6/config-guide/b_wl_17_6_cg/m_upgrade_9800cl.html

参考2：https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-6/release-notes/rn-17-6-9800.html

[Xin Lei]

nice~~~

[donghongrui]

请问，issu的升级方式能减小业务中断的时间。如果现网业务是可以中断的情况下，ISSU选项可以不进行勾选吗；今日进行了尝试，发现升级的过程时间很久。

[ilay]

可以啊，不勾选ISSU就是两台控制器一起重启升级，升级过程中所有AP是掉线的状态，等到控制器升级启动完成之后，ap才会重新注册。

时间应该差不了太多，AP自动更新重新上线需要额外再花一点时间，如果不是cat91xx系列的ap，这个时间可能会更长一点（估计得10-15分钟左右，cat91系列的会快一些）

实际升级的中断时间=控制器升级重启的时间+ap升级重新注册的时间 建议适当多留一点割接时间

=====

再说一下ISSU，ISSU的升级过程中会保证HA中至少有一台设备是正常工作的状态，中断基本上就是个ap重启重新注册的时间。ISSU升级过程中有提现下载新镜像到ap的过程，所以会省掉ap下载镜像所需的时间。

[sufee]

谢谢分享！！！学习了！！！！