Nexus 9300 firmware and CoPP strict policy

[bigkeoni64]

Hello

I currently have to download firmware to a Nexus 9300 switch remotely, but do not have access to the MGMT interface. The CoPP policy is set to strict. I can reach the 9300 through the default vrf.

What kind of issues will I run into if I try to load the code via the default vrf into bootflash: ?

If so, are there any work arounds?

[Sergiu.Daniluk]

Hi @bigkeoni64 

I do not see any issues in using the default vrf, but I would recommend you to use scp of ftp to copy the nxos image.

Stay safe,

Sergiu

[bigkeoni64]

Thanks Sergiu - not even a strict CoPP policy will cause issues with policing and cutting down the bandwidth?

[Sergiu.Daniluk · Accepted solution]

Even if it does, scp / ftp works over TCP, so I would expect retransmissions to happen. 

Stay safe,

Sergiu

[bigkeoni64]

OK, finally got it to work, but wow is that slow. Average of 2Mb/sec - but it beats having someone to drive out there.

[bigkeoni64]

Well, it appears that I cannot even connect. I have both feature bash-shell & scpserver enabled and I am getting this error message from WinSCP:

[Sergiu.Daniluk]

Check this one out:

https://community.cisco.com/t5/data-center-and-cloud-documents/getting-winscp-on-n9k-to-work-settings-config-required/ta-p/3818490