Patching a 5548 Switch

[mramirez-t]

I need to patch a pair of Nexus 5548 switches per this vulnerability that came out today:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-netstack?emailclick=CNSemail

The two switches are running in a stack, so I'm not sure if there's anything special I need to do to patch it.  Can I patch the first one, reboot and then patch the second one, reboot, without any consequence?

Any help's appreciated.  Thanks.

[Reza Sharifi]

When you say "unning in a stack" you mean VPC?

If they are configured as VPC and your end devices/switches/FEXs are connected to 2 different parent switches and have configured HSRP or VRRP for your vlans, then you can upgrade one at a time without any downtime.

HTH

[mramirez-t]

The vulnerability only mentions the kick start file.  This is my first time upgrading anything on the Nexus switches, so when looking at this article, it's mentioning doing a kick start file AND a system image.  Do I have to do both or can I do just the kick start file?

Thanks.

https://www.cisco.com/c/en/us/support/docs/switches/nexus-5000-series-switches/112158-nexus5000config-00.html