03-06-2012 01:03 PM - edited 03-01-2019 07:04 AM
I have a simple L2 environment on two 5010's (sw1 and sw2) with an ISL between them on 1/13-20. They are running 5.0(2) and I want to upgrade them to 5.1(3) via ISSU. I ran 'show install all impact" and got some errors. I was able to get pass the first one, but have no idea how to resolve the second one. I have listed the relevant portion of my config below and would appreciate recommendations on resolving them so I can upgrade via ISSU. Thank you.
Addy
Config
--------
Int e1/13-20 used for ISL
switchport mode trunk
channel-group 1 mode active
interface port-channel1
switchport mode trunk
spanning-tree port type network
Complaint 1
------------------
Port: port-channel1 in Tree: VLAN0001: Bridge-assurance is enabled...
Please disable BA on the switch and retry ...
I got around the above complaint by taking out 'spanning-tree port type network' on my port-channel. However, doing this disables Bridge Assurance which is what Cisco recommends not to do. Sounds like ISSU is going against what Cisco recommends. Comment?
Complaint 2
-----------------
After complaint 1 is fixed, I now got the second one
sw1(config-if)# show install all impact system bootflash:n5000-uk9.5.1.3.N1.1a.bin
Verifying image bootflash:/n5000-uk9-kickstart.5.0.2.N1.1.bin for boot variable
"kickstart".
[####################] 100% -- SUCCESS
Verifying image bootflash:/n5000-uk9.5.1.3.N1.1a.bin for boot variable "system".
[####################] 100% -- SUCCESS
Verifying image type.
[########### ] 50%
[####################] 100% -- SUCCESS
Extracting "system" version from image bootflash:/n5000-uk9.5.1.3.N1.1a.bin.
[####################] 100% -- SUCCESS
Extracting "kickstart" version from image bootflash:/n5000-uk9-kickstart.5.0.2.N
1.1.bin.
[####################] 100% -- SUCCESS
Extracting "bios" version from image bootflash:/n5000-uk9.5.1.3.N1.1a.bin.
[####################] 100% -- SUCCESS
Performing module support checks.
[####################] 100% -- SUCCESS
Notifying services about system upgrade.
[####################] 100% -- SUCCESS
Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
1 no n/a n/a Incompatible image
Images will be upgraded according to following table:
Module Image Running-Version New-Version Upg-Required
------ ---------- ---------------------- ---------------------- ------------
1 system 5.0(2)N1(1) 5.1(3)N1(1a) no
1 kickstart 5.0(2)N1(1) 5.0(2)N1(1) no
1 bios v1.3.0(09/08/09) v1.5.0(11/30/10) yes
1 power-seq v1.2 v1.2 no
Additional info for this installation:
--------------------------------------
Port: port-channel1 in VLAN0001 is Designated. Topology change could occur durin
g ISSU.
Upgrade needs to be disruptive!!!
sw1(config-if)# show spanning-tree issu-impact
For ISSU to Proceed, Check the Following Criteria :
1. No Topology change must be active in any STP instance
2. Bridge assurance(BA) should not be active on any port (except MCT)
3. There should not be any Non Edge Designated Forwarding port (except MCT)
4. ISSU criteria must be met on the VPC Peer Switch as well
Following are the statistics on this switch
No Active Topology change Found!
Criteria 1 PASSED !!
No Ports with BA Enabled Found!
Criteria 2 PASSED!!
List of all the Non-Edge Ports
Port VLAN Role Sts Tree Type Instance
---------------- ---- ---- --- --------- ---------
port-channel1 1 Desg FWD PVRST 1
Criteria 3 FAILED !!
ISSU Cannot Proceed! Change the above Config
sw1(config-if)#
I don't have this problem on sw2
sw2# show spanning-tree issu-impact
For ISSU to Proceed, Check the Following Criteria :
1. No Topology change must be active in any STP instance
2. Bridge assurance(BA) should not be active on any port (except MCT)
3. There should not be any Non Edge Designated Forwarding port (except MCT)
4. ISSU criteria must be met on the VPC Peer Switch as well
Following are the statistics on this switch
No Active Topology change Found!
Criteria 1 PASSED !!
No Ports with BA Enabled Found!
Criteria 2 PASSED!!
No Non-Edge Designated Forwarding Ports Found!
Criteria 3 PASSED !!
ISSU Can Proceed! Check Peer Switch.
looking at spanning tree
sw1(config-if)# show spanning-tree
VLAN0001
Spanning tree enabled protocol rstp
Root ID Priority 32769
Address 000d.ecb1.693c
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 000d.ecb1.693c
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Interface Role Sts Cost Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Po1 Desg FWD 1 128.4096 P2p
Eth1/1 Desg FWD 2 128.129 Edge P2p
Eth1/3 Desg FWD 2 128.131 Edge P2p
Eth1/4 Desg FWD 2 128.132 Edge P2p
Eth1/5 Desg FWD 2 128.133 Edge P2p
Eth1/7 Desg FWD 2 128.135 Edge P2p
Eth1/8 Desg FWD 2 128.136 Edge P2p
Eth1/10 Desg FWD 2 128.138 Edge P2p
Eth1/11 Desg FWD 2 128.139 Edge P2p
sw2# show spanning-tree
VLAN0001
Spanning tree enabled protocol rstp
Root ID Priority 32769
Address 000d.ecb1.693c
Cost 1
Port 4096 (port-channel1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 000d.ecb1.823c
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Interface Role Sts Cost Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Po1 Root FWD 1 128.4096 P2p
Eth1/1 Desg FWD 2 128.129 Edge P2p
Eth1/3 Desg FWD 2 128.131 Edge P2p
Eth1/5 Desg FWD 2 128.133 Edge P2p
Eth1/7 Desg FWD 2 128.135 Edge P2p
Eth1/8 Desg FWD 2 128.136 Edge P2p
Eth1/12 Desg FWD 2 128.140 Edge P2p
03-13-2012 05:29 PM
1)If you need to use ISSU, you will need to make non-Peerlink port-channels to spanning-tree type normal which would disable BA.
2)You are using differnt kickstart and system images and hence they are incompatible. Use
5.1(3)N1(1a) image for both kickstart and system images.
Images will be upgraded according to following table:
Module Image Running-Version New-Version Upg-Required
------ ---------- ---------------------- ---------------------- ------------
1 system 5.0(2)N1(1) 5.1(3)N1(1a) no
1 kickstart 5.0(2)N1(1) 5.0(2)N1(1) no
1 bios v1.3.0(09/08/09) v1.5.0(11/30/10) yes
1 power-seq v1.2 v1.2 no
03-13-2012 06:51 PM
prkrishn, thanks for responding. However, the problem is not because of incompatible version... Please check the output above for 'show spanning-tree issu-impact' on sw1. Thanks.
Addy
03-13-2012 07:37 PM
Hi Addy
For ISSU, the N5k needs to be leaf mode. Your switch is failing criteria 3 "There should not be any Non Edge Designated Forwarding port (except MCT)". What is connected to Port-channel 1? Is it a switch ? If its not a network device which runs STP, you can make it edge port.
03-13-2012 08:36 PM
Simple L2 switch, LACP port channel 1 between ports 13-20. ISSU was able to proceed on sw2, but sw1 gave error on spanning-tree issu-impact. int po1 is root on sw2 but designated port on sw1.
03-20-2012 10:02 AM
Addy
Switch cannot run issu if some ports are in designated mode.
Switch has to have no ports in designated mode - this is the meaning of term "leaf"
Reason is that during issu we need to avoid TCN comming on n5k
HTH,
Alex
06-19-2013 02:16 PM
Hi Addy,
Please do this config change:
#conf t
#int po1
#spanning-tree port type network
Try 'sh spanning-tree issu-impact' again and everything should pass.
Cheers!!
Asad Jahangir
06-19-2013 02:50 PM
If you still can't do non-disruptive ISSU, please share output from 'sh vlan'. You might need to change the allowed vlans on your port-cannel. I hope that helps.
--
Asad
10-22-2018 08:24 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide