Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
12888
Views
10
Helpful
8
Replies

Resolving 'Show install all impact" complains for ISSU

addylplam
Level 1
Level 1

‎03-06-2012 01:03 PM - edited ‎03-01-2019 07:04 AM

I have a simple L2 environment on two 5010's (sw1 and sw2) with an ISL between them on 1/13-20.  They are running 5.0(2) and I want to upgrade them to 5.1(3) via ISSU.  I ran 'show install all impact" and got some errors.  I was able to get pass the first one, but have no idea how to resolve the second one.  I have listed the relevant portion of my config below and would appreciate recommendations on resolving them so I can upgrade via ISSU.  Thank you.

Addy

Config

--------

Int e1/13-20 used for ISL

switchport mode trunk

channel-group 1 mode active

interface port-channel1

switchport mode trunk

spanning-tree port type network

Complaint 1

------------------

Port: port-channel1 in Tree: VLAN0001: Bridge-assurance is enabled...

Please disable BA on the switch and retry ...

I got around the above complaint by taking out 'spanning-tree port type network' on my port-channel.  However, doing this disables Bridge Assurance which is what Cisco recommends not to do. Sounds like ISSU is going against what Cisco recommends.  Comment?

Complaint 2

-----------------

After complaint 1 is fixed, I now got the second one

sw1(config-if)# show install all impact system bootflash:n5000-uk9.5.1.3.N1.1a.bin

Verifying image bootflash:/n5000-uk9-kickstart.5.0.2.N1.1.bin for boot variable

"kickstart".

[####################] 100% -- SUCCESS

Verifying image bootflash:/n5000-uk9.5.1.3.N1.1a.bin for boot variable "system".

[####################] 100% -- SUCCESS

Verifying image type.

[###########         ]  50%

[####################] 100% -- SUCCESS

Extracting "system" version from image bootflash:/n5000-uk9.5.1.3.N1.1a.bin.

[####################] 100% -- SUCCESS

Extracting "kickstart" version from image bootflash:/n5000-uk9-kickstart.5.0.2.N

1.1.bin.

[####################] 100% -- SUCCESS

Extracting "bios" version from image bootflash:/n5000-uk9.5.1.3.N1.1a.bin.

[####################] 100% -- SUCCESS

Performing module support checks.

[####################] 100% -- SUCCESS

Notifying services about system upgrade.

[####################] 100% -- SUCCESS

Compatibility check is done:

Module  bootable          Impact  Install-type  Reason

------  --------  --------------  ------------  ------

     1        no             n/a           n/a  Incompatible image

Images will be upgraded according to following table:

Module       Image         Running-Version             New-Version  Upg-Required

------  ----------  ----------------------  ----------------------  ------------

     1      system             5.0(2)N1(1)            5.1(3)N1(1a)            no

     1   kickstart             5.0(2)N1(1)             5.0(2)N1(1)            no

     1        bios        v1.3.0(09/08/09)        v1.5.0(11/30/10)           yes

     1   power-seq                    v1.2                    v1.2            no

Additional info for this installation:

--------------------------------------

Port: port-channel1 in VLAN0001 is Designated. Topology change could occur durin

g ISSU.

Upgrade needs to be disruptive!!!

sw1(config-if)# show spanning-tree issu-impact                      

For ISSU to Proceed, Check the Following Criteria :

1. No Topology change must be active in any STP instance

2. Bridge assurance(BA) should not be active on any port (except MCT)

3. There should not be any Non Edge Designated Forwarding port (except MCT)

4. ISSU criteria must be met on the VPC Peer Switch as well

Following are the statistics on this switch

No Active Topology change Found!

Criteria 1 PASSED !!

No Ports with BA Enabled Found!

Criteria 2 PASSED!!

List of all the Non-Edge Ports

Port             VLAN Role Sts Tree Type Instance

---------------- ---- ---- --- --------- ---------

port-channel1       1 Desg FWD  PVRST         1

Criteria 3 FAILED !!

ISSU Cannot Proceed! Change the above Config

sw1(config-if)#

I don't have this problem on sw2

sw2# show spanning-tree issu-impact

For ISSU to Proceed, Check the Following Criteria :

1. No Topology change must be active in any STP instance

2. Bridge assurance(BA) should not be active on any port (except MCT)

3. There should not be any Non Edge Designated Forwarding port (except MCT)

4. ISSU criteria must be met on the VPC Peer Switch as well

Following are the statistics on this switch

No Active Topology change Found!

Criteria 1 PASSED !!

No Ports with BA Enabled Found!

Criteria 2 PASSED!!

No Non-Edge Designated Forwarding Ports Found!

Criteria 3 PASSED !!

ISSU Can Proceed! Check Peer Switch.

looking at spanning tree

sw1(config-if)# show spanning-tree

VLAN0001

  Spanning tree enabled protocol rstp

  Root ID    Priority    32769

             Address     000d.ecb1.693c

             This bridge is the root

             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32769  (priority 32768 sys-id-ext 1)

             Address     000d.ecb1.693c

             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

Interface        Role Sts Cost      Prio.Nbr Type

---------------- ---- --- --------- -------- --------------------------------

Po1              Desg FWD 1         128.4096 P2p

Eth1/1           Desg FWD 2         128.129  Edge P2p

Eth1/3           Desg FWD 2         128.131  Edge P2p

Eth1/4           Desg FWD 2         128.132  Edge P2p

Eth1/5           Desg FWD 2         128.133  Edge P2p

Eth1/7           Desg FWD 2         128.135  Edge P2p

Eth1/8           Desg FWD 2         128.136  Edge P2p

Eth1/10          Desg FWD 2         128.138  Edge P2p

Eth1/11          Desg FWD 2         128.139  Edge P2p

sw2# show spanning-tree

VLAN0001

  Spanning tree enabled protocol rstp

  Root ID    Priority    32769

             Address     000d.ecb1.693c

             Cost        1

             Port        4096 (port-channel1)

             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32769  (priority 32768 sys-id-ext 1)

             Address     000d.ecb1.823c

             Hello Time  2  sec  Max Age 20 sec  Forward Delay 15 sec

Interface        Role Sts Cost      Prio.Nbr Type

---------------- ---- --- --------- -------- --------------------------------

Po1              Root FWD 1         128.4096 P2p

Eth1/1           Desg FWD 2         128.129  Edge P2p

Eth1/3           Desg FWD 2         128.131  Edge P2p

Eth1/5           Desg FWD 2         128.133  Edge P2p

Eth1/7           Desg FWD 2         128.135  Edge P2p

Eth1/8           Desg FWD 2         128.136  Edge P2p

Eth1/12          Desg FWD 2         128.140  Edge P2p

Labels:
0 Helpful
8 Replies 8

Prashanth Krishnappa
Cisco Employee
Cisco Employee

‎03-13-2012 05:29 PM

1)If you need to use ISSU, you will need to make non-Peerlink port-channels to spanning-tree type normal which would disable BA.

2)You are using differnt kickstart and system images and hence they are incompatible. Use

5.1(3)N1(1a) image for both kickstart and system images.

Images will be upgraded according to following table:

Module       Image         Running-Version             New-Version  Upg-Required

------  ----------  ----------------------  ----------------------  ------------

     1      system             5.0(2)N1(1)            5.1(3)N1(1a)            no

     1   kickstart             5.0(2)N1(1)             5.0(2)N1(1)            no

     1        bios        v1.3.0(09/08/09)        v1.5.0(11/30/10)           yes

     1   power-seq                    v1.2                    v1.2            no

0 Helpful

addylplam
Level 1
Level 1
In response to Prashanth Krishnappa

‎03-13-2012 06:51 PM

prkrishn, thanks for responding.  However, the problem is not because of incompatible version... Please check the output above for 'show spanning-tree issu-impact' on sw1.  Thanks.

Addy

0 Helpful

Prashanth Krishnappa
Cisco Employee
Cisco Employee
In response to addylplam

‎03-13-2012 07:37 PM

Hi Addy

For ISSU, the N5k needs to be leaf mode. Your switch is failing criteria 3  "There should not be any Non Edge Designated Forwarding port (except MCT)". What is connected to Port-channel 1? Is it a switch ? If its not a network device which runs STP,  you can make it edge port.

0 Helpful

addylplam
Level 1
Level 1
In response to Prashanth Krishnappa

‎03-13-2012 08:36 PM

Simple L2 switch, LACP port channel 1 between ports 13-20.  ISSU was able to proceed on sw2, but sw1 gave error on spanning-tree issu-impact.  int po1 is root on sw2 but designated port on sw1.

0 Helpful

Oleksandr Nesterov
Cisco Employee
Cisco Employee
In response to addylplam

‎03-20-2012 10:02 AM

Addy

Switch cannot run issu if some ports are in designated mode.

Switch has to have no ports in designated mode - this is the meaning of term "leaf"

Reason is that during issu we need to avoid TCN comming on n5k

HTH,

Alex

ajahangi
Level 1
Level 1

‎06-19-2013 02:16 PM

Hi Addy,

Please do this config change:

#conf t

#int po1

#spanning-tree port type network

Try 'sh spanning-tree issu-impact' again and everything should pass.

Cheers!!

Asad Jahangir

ajahangi
Level 1
Level 1
In response to ajahangi

‎06-19-2013 02:50 PM

If you still can't do non-disruptive ISSU, please share output from 'sh vlan'. You might need to change the allowed vlans on your port-cannel. I hope that helps.

--

Asad

0 Helpful

Khoa Pham
Level 1
Level 1
In response to ajahangi

‎10-22-2018 08:24 AM

This fixed my issue. Turned out some ports was mis-configured to be non-edge port. In my case, the command "spanning-tree port type edge trunk" fixed it
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents