cisco catalyst 9400 downgrade firmware issue

[patil.sah1]

Hi All,

I am trying to downgrade firmware from 16.12.4 to 16.12.3a. I get the error as switch not able to read few files and IOS downgrade doesn't happen. 

CTX-R1-LAB-9407-1#dir flash:*bin
Directory of bootflash:/*bin

Directory of bootflash:/

342764 -rw- 446055213 Feb 4 2021 14:01:50 +00:00 cat9k_lite_iosxe.16.12.03a.SPA.bin
10527629312 bytes total (8200060928 bytes free)
CTX-R1-LAB-9407-1#sh boot
BOOT variable = bootflash:packages.conf;flash:packages.conf;bootflash:cat9k_lite_iosxe.16.12.03a.SPA.bin;
MANUAL_BOOT variable = no
BAUD variable = 9600
ENABLE_BREAK variable does not exist
BOOTMODE variable does not exist
IPXE_TIMEOUT variable does not exist
CONFIG_FILE variable =

Standby BOOT variable = bootflash:packages.conf;flash:packages.conf;bootflash:cat9k_lite_iosxe.16.12.03a.SPA.bin;
Standby MANUAL_BOOT variable = no
Standby BAUD variable = 9600
Standby ENABLE_BREAK variable does not exist
Standby BOOTMODE variable does not exist
Standby IPXE_TIMEOUT variable does not exist
Standby CONFIG_FILE variable =

CTX-R1-LAB-9407-1#inst
CTX-R1-LAB-9407-1#install add fil
CTX-R1-LAB-9407-1#$ file bootflash:cat9k_lite_iosxe.16.12.03a.SPA.bin ac
CTX-R1-LAB-9407-1#$flash:cat9k_lite_iosxe.16.12.03a.SPA.bin activate com
CTX-R1-LAB-9407-1#$flash:cat9k_lite_iosxe.16.12.03a.SPA.bin activate commit
install_add_activate_commit: START Fri Feb 5 11:14:06 UTC 2021

System configuration has been modified.
Press Yes(y) to save the configuration and proceed.
Press No(n) for proceeding without saving the configuration.
Press Quit(q) to exit, you may save configuration and re-enter the command. [y/n/q]y
Modified configuration has been saved
install_add_activate_commit: Adding PACKAGE
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---
Copying image file: bootflash:cat9k_lite_iosxe.16.12.03a.SPA.bin to standby
Info: Finished copying bootflash:cat9k_lite_iosxe.16.12.03a.SPA.bin to standby
Finished initial file syncing

--- Starting Add ---
Performing Add on Active/Standby
[R0] Add package(s) on R0
[R0] Finished Add on R0
[R1] Add package(s) on R1
[R1] Finished Add on R1
Checking status of Add on [R0 R1]
Add: Passed on [R0 R1]
Finished Add

Image added. Version: 16.12.3a.0.4
install_add_activate_commit: Activating PACKAGE

gzip: initramfs.cpio.gz: decompression OK, trailing garbage ignored
Following packages shall be activated:
/bootflash/cat9k_lite-webui.16.12.03a.SPA.pkg
/bootflash/cat9k_lite-srdriver.16.12.03a.SPA.pkg
/bootflash/cat9k_lite-rpboot.16.12.03a.SPA.pkg
/bootflash/cat9k_lite-rpbase.16.12.03a.SPA.pkg

This operation may require a reload of the system. Do you want to proceed? [y/n]y
--- Starting Activate ---
Performing Activate on Active/Standby
awk: fatal: cannot open file `/tmp/issu/provision/sw/rp/0/0/srdriver/mount/.pkginfo' for reading (No such file or directory)
awk: fatal: cannot open file `/tmp/issu/provision/sw/rp/0/0/rp_webui/mount/.pkginfo' for reading (No such file or directory)
awk: fatal: cannot open file `/tmp/issu/provision/sw/cc/0/0/cc_srdriver/mount/.pkginfo' for reading (No such file or directory)
awk: fatal: cannot open file `/tmp/issu/provision/sw/rp/0/0/rp_base/mount/.pkginfo' for reading (No such file or directory)
ln: ln: failed to create symbolic link '/tmp/issu/provision/sw/rp/0/0/rp_security/mount'failed to create symbolic link '/tmp/issu/provision/sw/fp/0/0/fp/mount': No such file or directory: No such file or directory

ln: failed to create symbolic link '/tmp/issu/provision/sw/rp/0/0/rp_daemons/mount': No such file or directory
ln: failed to create symbolic link '/tmp/issu/provision/sw/cc/0/0/cc/mount': No such file or directory
ln: failed to create symbolic link '/tmp/issu/provision/sw/rp/0/0/rp_iosd/mount': No such file or directory
[R0] Activate package(s) on R0
[R0] Finished Activate on R0
[R1] Activate package(s) on R1
[R1] Finished Activate on R1
Checking status of Activate on [R0 R1]
Activate: Passed on [R0 R1]
Finished Activate

--- Starting Commit ---
Performing Commit on Active/Standby
[R0] Commit package(s) on R0
[R0] Finished Commit on R0
[R1] Commit package(s) on R1
[R1] Finished Commit on R1
Checking status of Commit on [R0 R1]
Commit: Passed on [R0 R1]
Finished Commit

Thanks in Advance

[balaji.bandi]

what is the goal to downgrade  ? is this new kit ?

As per my understanding if the device shipped with 16.12.4 - you can not downgrade, that is the base IOS XE it support

New hardware modules (supervisors or line card modules) that are introduced in a release cannot be downgraded. The release in which a module is introduced is the minimum software version for that model. We recommend upgrading all existing hardware to the same release as the latest hardware.

show module will give us more information ?

read the release notes :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/16-12/release_notes/ol-16-12-9400.html#concept_eks_tx1_jmb

[patil.sah1]

Hi Balaji,

Yes, its new box. The goal to downgrade is we have approved security version from customer to keep all devices on same version

However we are able to downgrade from 16.12.4 to 16.12.3a on 9200 platform without any issue

Output of show module

CTX-R1-LAB-9407-1#sh module
Chassis Type: C9407R

Mod Ports Card Type Model Serial No.
---+-----+--------------------------------------+--------------+--------------
1 48 48-Port 10/100/1000 (RJ-45) C9400-LC-48T JAE243717Y3
2 24 24-Port 10 Gigabit Ethernet (SFP+) C9400-LC-24XS JAE242727HL
3 12 Supervisor 1 XL Module with 25G C9400-SUP-1XL-Y JAE24450ECN
4 12 Supervisor 1 XL Module with 25G C9400-SUP-1XL-Y JAE24450EDL
5 24 24-Port 1 Gigabit Ethernet (SFP) C9400-LC-24S JAE24380XYY

Mod MAC addresses Hw Fw Sw Status
---+--------------------------------+----+------------+------------------+--------
1 5488.DE09.70D0 to 5488.DE09.70FF 1.1 16.12.2r 16.12.04 ok
2 9077.EEFF.87C0 to 9077.EEFF.87D7 1.0 16.12.2r 16.12.04 ok
3 802D.BFB8.C1EC to 802D.BFB8.C1F7 1.1 16.12.2r 16.12.04 ok
4 802D.BFB8.C1F6 to 802D.BFB8.C201 1.1 16.12.2r 16.12.04 ok
5 5488.DE09.D880 to 5488.DE09.D897 1.0 16.12.2r 16.12.04 ok

Mod Redundancy Role Operating Mode Configured Mode Redundancy Status
---+-------------------+---------------+---------------+------------------
3 Active sso sso Active
4 Standby sso sso Standby Hot

Chassis MAC address range: 44 addresses from 802d.bfb8.c1c0 to 802d.bfb8.c1eb

CTX-R1-LAB-9407-1#

[balaji.bandi · Accepted solution]

i can see the module supported in the matrix of release notes

make sure you have right image  -  Software Images (section)

[Leo Laohoo]

---

@patil.sah1 wrote:

cat9k_lite_iosxe.16.12.03a.SPA.bin

---

WTF are you doing? 

The file you are trying to activate into a 9400-SUP-1 is only suitable for a 9200/9200L.  

9400 has a different filename.  

[patil.sah1]

Thanks Leo, Customer has already copied the file in flash. I missed that part to check .Thanks