Catalyst CPLD upgrade absolutely necessary?

[goyourmin]

hello!

While observing after the update, I found out that it was CPLD Version.

[Question summary]
Q1. I'm not sure. Is it necessary to upgrade the CPLD version in Catalyst?

Q2. Is it possible to perform CPLD upgrade in Catalyst without <filename.pkg> next to bootflash:?

      -upgrade hw-programmable cpld filename bootflash: rp standby

Q3. Do I need to delete the "Server internal" config after the CPLD upgrade is complete?

[story content]

When I read the Cisco documentation, I found out that I had an old version of CPLD and that I had to run additional commands to upgrade to the new version.

Q1. I'm not sure. Is it necessary to upgrade the CPLD version in Catalyst?

Also, if I need to upgrade, can I just follow the documentation?

I have a question about this process.

ex)

Device# configure terminal
Device(config)# service internal
Device(config)# exit
Device# upgrade hw-programmable cpld filename bootflash: rp standby
Device# redundancy force-switchover

Q2.

For the ASR platform, you must enter <filename.pkg> as shown below.
"upgrade hw-programmable cpld filename bootflash:<filename.pkg> rp standby"

Is it possible to perform cpld upgrade in Catalyst without <filename.pkg> next to bootflash:?

"upgrade hw-programmable cpld filename bootflash: rp standby"

Q3. Do I need to delete the "Server internal" config after the CPLD upgrade is complete?

-link

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/17-9/release_notes/ol-17-9-9400/rommon_versions.html

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/17-9/release_notes/ol-17-9-9400/upgrading_the_switch_software.html

Best regards,

[Leo Laohoo]

For Catalyst switches (and only switches), do not make any attempt(s) to upgrade the golden capsule.  (The golden capsule is a back-up of the ROMMON.  In case the active ROMMON fails, the secondary is meant to take over.)  

I have to main reasons why I do not recommend Golden Capsule Upgrade: 

1.  If the ROMMON fails or gets corrupted, do not waste any more time and RMA the switch.  Period. 

2.  Cisco does not test these codes.  Cisco do not have the resources to test these codes.  The chance of the Golden Capsule getting corrupt or completely bricks the switch (because of upgrading the Golden Capsule) is high.  

[goyourmin]

sorry. I didn't understand. I didn't understand the term the golden capsule.
likewise, Aren’t ROMMON and CPLD completely different things?

There is this passage about CPLD in the second link I provided in the text.
"CPLD version upgrade process must be completed after upgrading the software image."

Looking at this sentence alone, it looks like Cisco recommended CPLD upgrade.

[Leo Laohoo]

ROMMON upgrade is mandatory.  If the ROMMON does not get upgraded, there is a chance the router will not boot the desired firmware version.

Depending on the model of the router, ROMMON-to-IOS-firmware matrix are "hidden".  Some router models have this, others do not. 

[goyourmin]

sorry. I have completed upgrading ROMMON. Sorry, I asked a question about CPLD, but I didn't understand why you answered about ROMMON.

[Leo Laohoo · Accepted solution]

Because I never upgrade the CPLD.  I always upgrade the ROMMON.  

[goyourmin]

Thank you very much for your help as always.

However, that sentence in the Cisco documentation confuses me.

I understand this to mean that CPLD must be upgraded.
"CPLD version upgrade process must be completed after upgrading the software image."

[Leo Laohoo]

No idea because I have never made any attempts to upgrade the CPLD.  

[Leo Laohoo]

For routers, always upgrade the ROMMON.  

[Rich R · Accepted solution]

@goyourmin CPLD upgrades are platform and model specific.
Sometimes they are mandatory to support new software, ROMMON or modules.
They are also sometimes used to address hardware/firmware level security vulnerabilities.
The documentation is patchy and variable in quality but you generally have to patch together the answers from IOS release notes, TAC recommended version guides, CISCO PSIRT Security Advisories and firmware/CPLD upgrade guides.
If you don't use the versions recommended in the release notes and guides then you might encounter unexpected problems and behaviour because Cisco only test the hardware and software combinations listed there.

What is the switch model you are referring to?
What version of software are you using?

> Do I need to delete the "Server internal" config after the CPLD upgrade is complete?
You mean "service internal"?  Yes (no service internal) - it is only needed to enable certain debug level commands which Cisco don't believe should normally be exposed on the CLI.  It does no specific harm leaving it enabled but Cisco would recommend leaving it disabled when you don't specifically need it.

> Is it possible to perform cpld upgrade in Catalyst without <filename.pkg> next to bootflash:?
That's what the instructions say...  Commands often do vary slightly between different platforms because the developers in different Cisco business units sometimes implement them differently and that can also be necessary with different hardware platforms.

[goyourmin]

Hello. I've seen the response history late.
I was unable to proceed with the CPLD upgrade as per my concerns.