AMA: Cisco Catalyst Center Software Image Management (SWIM)

[Brooke Hammer]

Ask Me Anything Event

Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from  Friday, June 21, 2024 through Friday, July 12, 2024. Our colleagues Saurabh Khillare, and Absar UI Farooq will be waiting to assist you and resolve any questions that have not been clarified, or answer any new questions that you may have. We are waiting for you!

More about this event:

Join us for an Ask Me Anything (AMA) event where you can dive deep into Cisco Catalyst Center Software Image Management (SWIM)!

What is it?• Cisco Catalyst Center inventory offers various automation capabilities. One of them is Software Image upgrades using Software Image Management (SWIM).
• Using SWIM users can upgrade, downgrade or SMU patch their network devices managed on Catalyst Center inventory. In matter of few clicks we can perform image upgrades on upto 100 devices in a go.
• We can distribute the golden image on device flash during production hours too and schedule activation at non business hours or in maintenance window.

Get Expert Advice!
• This AMA session is your chance to get expert insights on this powerful feature.
• Whether you're a seasoned network pro or just starting out, feel free to ask any questions you have about SWIM, image repository or Cisco Catalyst Center in general.

Official Resources:

• SWIM Documentation

• Youtube: SWIM

Note: Please post your post as a comment below no later than July 12, 2024.

Post your question below by clicking "Reply"

(Answers will be processed depending on the availability of the experts)
Don't forget to thank the expert by giving it a helpful vote!

---

Our experts

Saurabh Khillare Technical Consulting Engineer

Absar Ul Farooq Technical Consulting Engineer

For more information, visit the Cisco Catalyst Center discussion forums . If you have questions or are experiencing technical problems with any of the Cisco products, post your question, request information or use the Cisco Community before opening a case with the TAC.

[auifaroo]

Yes, Cisco DNA Center (DNAC) aka Catalyst Centre does support a two-step process for updating IOS images on network devices.

Two-Step Process:

Step 1: Push and Validate the Image

• Push the Image:
  • Using Cisco DNAC, you can deploy the IOS image to the network devices. This involves uploading the image to the DNA Center repository and then pushing it to the target devices.
• Validate the Image:
  • After the image is pushed, DNAC will perform an integrity check to confirm that the image file on the device matches the original file. This validation ensures that the file has been transferred correctly and is ready for activation.

Step 2: Activate and Reload

• Schedule Activation and Reload:
  • Once the image integrity is validated, you can schedule the activation of the new IOS image during a maintenance window (MW). This can be done through the DNAC interface, where you specify the time for the activation to minimize disruption.
• Activate the Image:
  • During the maintenance window, DNAC will activate the new image. This involves setting the new image as the boot image on the device.
• Reload the Device:
  • Finally, DNAC will reload the device to boot with the new image. This step is crucial to apply the new firmware and ensure the device operates with the updated software.

[alexhunter]

Hello,

I'm just wondering as we have a constant need to upgrade our Cisco switch estate IOS versions due to CareCerts, vulnerabilities, compliance etc. Is there any sort of plan to within the SWIM feature on Catalyst Centre to alert the user that there is a new Cisco recommended gold star image to download for that series of switch model in future releases?

[dmacieje]

Hey everyone, 

quick question: Does SWIM have a timeout? I would be attempting to upgrade images over WAN. 

[auifaroo]

Yes, the SWIM distribution task has a timeout of 600 minutes. If the file is not copied to the device within this period, the distribution task will fail.

When upgrading over WAN, please ensure that network latency is low enough to support a smooth upgrade process.

[Farooq-amir0697]

Are there any pre requisite we need to take care of before we upgrade via SWIM?

[auifaroo]

Before performing an image upgrade, the following pre-requisites should be reviewed.

1.     Check the Minimum Software Releases Requirements on Devices

Cisco DNA Center requires the software releases on devices to meet the ones listed in Minimum Supported Software Version column of supported devices spreadsheet below: https://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/products-device-support-tables-list.html

2.     Devices have CLI /SNMP or HTTPS/SCP credentials.

Network devices should be in managed state or the administrators have CLI/SNMP or HTTPS/SCP credentials for Cisco DNA Center to discover them and bring them in managed state before performing a Software Image upgrade. This requirement is only for Day N scenario.

3.     CCO Credentials

Though this is not a mandatory requirement for SWIM but its strongly recommended to add CCO credentials. Otherwise, certain features like ROMMON upgrade or suggested and latest image display list of images will not function. CCO Credentials is also required to download the KGV file for Integrity Verification of Software Images.

4.     Integrity Verification of Software Images

The Integrity Verification application monitors software images that are stored in Cisco DNA Center for unexpected changes or invalid values that could indicate your devices are compromised. During the import process, the system determines image integrity by comparing the software and hardware platform checksum value of the image that you are importing to the checksum value identified for the platform in the Known Good Values (KVG) file to ensure that the two values match.

[bdevi]

Are there any specific ports that need to be opened to carry out the SWIM task?

[bdevi]

Does DNAC support the .bin format images for stack devices?