Cisco 9300 Switch Stack in Install Mode Downgrade

[TW80CJ5]

Hello all...

I have (20 9300's in a switch stack. They are in INSTALL mode with version cat9k_iosxe.17.03.04.SPA.bin

I ran the following command:

Switch# install add file flash:cat9k_iosxe.17.03.04.SPA.bin activate commit.

I need to be able to downgrade to 16.12.05. 

Is it as simple as transferring the 16.12.05 IOS to the flash and running the: "install add file flash:cat9k_iosxe.16.12.05.SPA.bin activate commit" command???

Suggestions welcomed!

[Leo Laohoo]

There is a crash info file that looks interesting. 

[TW80CJ5]

......*******tutelage**********

[Eric R. Jones]

Hello, I took great interest in your post. We have C9300 running 16.12.5 and due to the latest information posted on 16.12.X train we are moving to 17.3.X or 17.4.X. I'm working with Ansible and our Ansible install uses Key Exchanges that are NOT sha1 compatible due to STIG requirements. I was looking for a way to upgrade our current Key Exchanges but does 17.3.X train provide a larger variety of Key Exchanges, ciphers etc...? I've been looking but haven't found that information in release notes.

Also do you have a link to the steps to downgrade an IOS?

I'll be deploying our upgrades with Prime Infrastructure so I'll have to see if downgrading is possible after that. Not sure what PI runs in the background after using "Install mode".

ej

[Leo Laohoo]

---

@Eric R. Jones wrote:

We have C9300 running 16.12.5 and due to the latest information posted on 16.12.X train we are moving to 17.3.X or 17.4.X.

---

Whether it is routers, switches or a clothes iron, no one should be using 16.12.X.  The stability of the code went downhill starting with 16.12.4 and has continued it's downward trend.  

Do not be tempted to use single-release trains, like 17.1.X, 17.2.X, 17.4.X, 17.5.X, 17.7.X, 17.8.X, etc.  Multi-release train are 17.3.X, 17.6.X, 17.9.X -- See the middle number has an interval of "3"?

Read the Release Notes and stay with 17.3.X.  

[Eric R. Jones]

Thanks for the information, stick with 17.3.X and multiples of 3 then. I'll re-read the release notes. 

ej

[TW80CJ5]

EJ...

They dont call him Leo The Legend for no reason...take his advice to heart.

Leo, as always, thanks for the information. I am slowly working all of our compatible devices into 17.3.x...

Good Luck EJ!