Upgrade virtual image(UTD) with ISR1111X-8P by SD-WAN vmanage

[DaeHeon Kang]

Hi

I am trying to upgrade virtual image(UTD) with ISR1111X-8P by SD-WAN vmanage.

But it fails with the message "Following devices do not have container software services"

How can I solve this?

[rushikesh88]

Anyone got resolution? Also how to upgrade UTD container using CLI of the cEdge?

[dada27]

Hi,

Lack of memory could be the reason why Security App container can't be installed.

Pleas share output of :

#sh memory platform

[bogdan.sileanu]

Hi,

This looks like the virtual image did not get installed on that router. To confirm this look in Monitoring / Network, select the router, real time, at 'Device Options:' select 'SecurityApp Version Status' and check if there is any installed version. If not:

1)Make sure you have the correct virtual image for your router;s version: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/security-virtual-image.html

2)Make sure the virtual image/container is actually needed on that device: in the device template associated make sure there is a security police added and also a container profile.

3) Make sure the security policy added has required services configured (IPS, URL, AMP)

If you have those then just push the config again: Configuration / Devices / find your router and from '...' select change device values, do not change anything and next ..next ...

At this point vManage will push the virtual image, install it and apply its config.

[husseino]

You must attach a security policy (with UDT configuration) with container profile to the device before you do the upgrade. You can attach a policy with default container profile to get the upgrade through.