Downgrading Cisco 3850 from 16.6.2 to 16.3.6

[Mehmet Can]

Hello Everyone,

I have a question. 

We have 3 pieces Cisco 3850 Switchies. Working on sotfware 16.6.2 but this version contain some big bugs. I checked on cisco 16.3.6 ios is suggested by cisco.

So, i need to downgrade my switchies and i searched on cisco downgrade prosedure but i could not reach any information.

Can i install this version without any problem? :)

[brselzer · Accepted solution]

Hello,

Two things,

1) You can do a downgrade no problem. The command you want is request platform software package install switch all file:[filename] auto-copy

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-3/release_notes/ol-16-3-3850.html

2) Going from 16.6.2 to 16.3.6 is not really a downgrade, you are moving from one train to another. 16.6.2 was released Nov 2017 and 16.3.6 was released Mar 2018. The 16.3.x train is our standard maintenance train where we release bug fixes. The first couple releases of the 16.6.x train where our early release trains that included support for new features and platforms. Eventually, the 16.6.x train will take over as the standard maintenance train.

Hope that helps!

[Mehmet Can]

Thanks for reply.
So, what's your offer? Should i downgrade to 16.3.6 or upgrade to newest version?

[brselzer]

Hello,

16.3.6 is the current recommended version.

Hope that helps!

[dlubansky]

My 3850 doesn't accept those command but has these which also fail:
#install add file flash:/cat3k_caa-universalk9.16.06.03.SPA.bin activate commit
Switch Ports Model SW Version SW Image Mode
------ ----- ----- ---------- ---------- ----
* 1 56 WS-C3850-48P 16.6.1 CAT3K_CAA-UNIVERSALK9 INSTALL
2 56 WS-C3850-48P 16.6.1 CAT3K_CAA-UNIVERSALK9 INSTALL


nvs-useh-100-mdf-0b-a1#install ?
abort Abort the current install operation
activate Activate an installed package
add Install a package file to the system
auto-abort-timer Install auto-abort-timer
commit Commit the changes to the loadpath
deactivate Deactivate an install package
label Add a label name to any installation point
remove Remove installed packages

[dlubansky]

Get this response:
nvs-useh-100-mdf-0b-a1#install add file flash:/cat3k_caa-universalk9.16.06.03.SPA.bin activate commit
install_add_activate_commit: START Tue Oct 23 17:05:41 UTC 2018
FAILED: install_add_activate_commit : flash:/cat3k_caa-universalk9.16.06.03.SPA.bin is not valid file or cannot be handled by install CLI.
nvs-useh-100-mdf-0b-a1#

[brselzer]

Hello,

The command you want is:

 request platform software package install switch all file:[filename] 

If you do "request platform software ?" does it not have the commands? 

Hope that helps!

[dlubansky]

Yes and this has worked on multiple 3850 stacks however I have to stacks where it appears there was old code on one switch and therefore not enough room so the installation failed and not when I run the command it tried to just to the last switch and still fails. What files do I need to delete so it tried to start the installation fresh on all the switches in the stack instead of just the 4th switch.

[brselzer]

Hello,

You should be able to run the following command:

request platform software package clean switch all

This will remove all the files you do not need on all the switches. Then you can try to copy the file again. 

Hope that helps!

[dlubansky]

This actually was done in the past on the two switches installation failed on but will do it one more time and see if the installation still begins on the 4th switch instead of the first.

[dlubansky]

Still failing even after performing the clean first:

nvs-useh-137-283-02-a1#$ersalk9.16.03.07.SPA.bin force new auto-copy verbose
--- Starting install local lock acquisition on switch 4 ---
Finished install local lock acquisition on switch 4

Expanding image file: flash-1:cat3k_caa-universalk9.16.03.07.SPA.bin
[1]: Copying flash-1:cat3k_caa-universalk9.16.03.07.SPA.bin from switch 1 to switch 2 3 4
[2 3 4]: Finished copying to switch 2 3 4
[1 2 3 4]: Expanding file
[1 2 3 4]: Finished expanding all-in-one software package in switch 1 2 3 4
SUCCESS: Finished expanding all-in-one software package.
... expand successful
[1 2 3 4]: Performing install
SUCCESS: install finished
... Operation install completed. Checking for status
[1]: install package(s) on switch 1
--- Starting local lock acquisition on switch 1 ---
Finished local lock acquisition on switch 1

--- Starting file path checking ---
Finished file path checking

--- Starting image file verification ---
Checking image file names
Locating image files and validating name syntax
Found cat3k_caa-guestshell.16.03.07.SPA.pkg
Found cat3k_caa-rpbase.16.03.07.SPA.pkg
Found cat3k_caa-rpcore.16.03.07.SPA.pkg
Found cat3k_caa-srdriver.16.03.07.SPA.pkg
Found cat3k_caa-wcm.16.03.07.SPA.pkg
Found cat3k_caa-webui.16.03.07.SPA.pkg
Inspecting image file types
WARNING: In-service installation of RP Base package
WARNING: requires software reboot of target RP
WARNING: Automatically setting the on-reboot flag
WARNING: In-service installation of guestshell package
WARNING: requires software reboot of target
Processing image file constraints
Creating candidate provisioning file
Finished image file verification

--- Starting candidate package set construction ---
Verifying existing software set
Processing candidate provisioning file
Constructing working set for candidate package set
Constructing working set for running package set
Checking command output
Constructing merge of running and candidate packages
Checking if resulting candidate package set would be complete
Finished candidate package set construction

--- Starting ISSU compatibility verification ---
Running version not found; not extracting binary trace metadata
FAILED: ISSU compatibility check failed
[1]: Finished install failed on switch 1
[2]: install package(s) on switch 2
--- Starting local lock acquisition on switch 2 ---
Finished local lock acquisition on switch 2

--- Starting file path checking ---
Finished file path checking

--- Starting image file verification ---
Checking image file names
Locating image files and validating name syntax
Found cat3k_caa-guestshell.16.03.07.SPA.pkg
Found cat3k_caa-rpbase.16.03.07.SPA.pkg
Found cat3k_caa-rpcore.16.03.07.SPA.pkg
Found cat3k_caa-srdriver.16.03.07.SPA.pkg
Found cat3k_caa-wcm.16.03.07.SPA.pkg
Found cat3k_caa-webui.16.03.07.SPA.pkg
Inspecting image file types
WARNING: In-service installation of RP Base package
WARNING: requires software reboot of target RP
WARNING: Automatically setting the on-reboot flag
WARNING: In-service installation of guestshell package
WARNING: requires software reboot of target
Processing image file constraints
Creating candidate provisioning file
Finished image file verification

--- Starting candidate package set construction ---
Verifying existing software set
Processing candidate provisioning file
Constructing working set for candidate package set
Constructing working set for running package set
Checking command output
Constructing merge of running and candidate packages
Checking if resulting candidate package set would be complete
Finished candidate package set construction

--- Starting ISSU compatibility verification ---
Running version not found; not extracting binary trace metadata
FAILED: ISSU compatibility check failed
[2]: Finished install failed on switch 2
[3]: install package(s) on switch 3
--- Starting local lock acquisition on switch 3 ---
Finished local lock acquisition on switch 3

--- Starting file path checking ---
Finished file path checking

--- Starting image file verification ---
Checking image file names
Locating image files and validating name syntax
Found cat3k_caa-guestshell.16.03.07.SPA.pkg
Found cat3k_caa-rpbase.16.03.07.SPA.pkg
Found cat3k_caa-rpcore.16.03.07.SPA.pkg
Found cat3k_caa-srdriver.16.03.07.SPA.pkg
Found cat3k_caa-wcm.16.03.07.SPA.pkg
Found cat3k_caa-webui.16.03.07.SPA.pkg
Inspecting image file types
WARNING: In-service installation of RP Base package
WARNING: requires software reboot of target RP
WARNING: Automatically setting the on-reboot flag
WARNING: In-service installation of guestshell package
WARNING: requires software reboot of target
Processing image file constraints
Creating candidate provisioning file
Finished image file verification

--- Starting candidate package set construction ---
Verifying existing software set
Processing candidate provisioning file
Constructing working set for candidate package set
Constructing working set for running package set
Checking command output
Constructing merge of running and candidate packages
Checking if resulting candidate package set would be complete
Finished candidate package set construction

--- Starting ISSU compatibility verification ---
Running version not found; not extracting binary trace metadata
FAILED: ISSU compatibility check failed
[3]: Finished install failed on switch 3
[4]: install package(s) on switch 4
--- Starting local lock acquisition on switch 4 ---
Finished local lock acquisition on switch 4

--- Starting file path checking ---
Finished file path checking

--- Starting image file verification ---
Checking image file names
Locating image files and validating name syntax
Found cat3k_caa-guestshell.16.03.07.SPA.pkg
Found cat3k_caa-rpbase.16.03.07.SPA.pkg
Found cat3k_caa-rpcore.16.03.07.SPA.pkg
Found cat3k_caa-srdriver.16.03.07.SPA.pkg
Found cat3k_caa-wcm.16.03.07.SPA.pkg
Found cat3k_caa-webui.16.03.07.SPA.pkg
Inspecting image file types
WARNING: In-service installation of RP Base package
WARNING: requires software reboot of target RP
WARNING: Automatically setting the on-reboot flag
WARNING: In-service installation of guestshell package
WARNING: requires software reboot of target
Processing image file constraints
Creating candidate provisioning file
Finished image file verification

--- Starting candidate package set construction ---
Verifying existing software set
Processing candidate provisioning file
Constructing working set for candidate package set
Constructing working set for running package set
Checking command output
Constructing merge of running and candidate packages
Checking if resulting candidate package set would be complete
Finished candidate package set construction

--- Starting ISSU compatibility verification ---
Running version not found; not extracting binary trace metadata
FAILED: ISSU compatibility check failed
[4]: Finished install failed on switch 4
Checking status of install on [1 2 3 4]
[1 2 3 4]: FAILED: install failed in switch 1 2 3 4
SUCCESS: Finished install: Success on []. Failed on [1 2 3 4]
Ensuring that cached content is written to media
... cached content flushed to media
nvs-useh-137-283-02-a1#

[sw43]

What I've learned on 9300/9500 and 4451 chassis when upgrading in the Amsterdam and Bengaluru train is use:

show install summary

 to determine if the device has an uncommitted image 

Check for file artifacts and ensure enough space for new image in flash:

install remove inactive

Also consider removing the trace files with command

delete /f /r flash:tracelogs

Copy the new image to flash and verify the file's hash against the published hash value:

verify /md5 file flash:xxx.bin

Install the image with the command

install add file flash:xxx.bin activate commit