Update 3850 from 16.06.07 to 16.12.8

[Andy Emerine]

I'd like to update my ws-c3850-12xs from version 16.06.07 to 16.12.8. Do I need to follow an update path of different versions  or can I simply upgrade to 16.12.8?

[salomidhogela]

No you do not need to follow the upgrade path, you can do direct upgrade to the latest release Gibraltar- 16.12.7

Use the below upgrade link

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-12/release_notes/ol-16-12-3850.html

tx,

Salom

[Leo Laohoo · Accepted solution]

Direct upgrade to 16.12.8 can be done, however, I strongly recommend upgrading to the latest 16.6.X and avoid 16.9.X and 16.12.X altogether.

Cisco 3850: IOS-XE/Firmware Upgrade

[Andy Emerine]

Thanks for the tip. I will install the latest 16.6.X. I looked at install commands on the switch. The command software install is not recognized. I am able to enter the command software auto-upgrade source url flash:cat3k_caa-universalk9.16.06.09.SPA.bin but doesn't seem to do any thing nor does it return any errors. 

[Leo Laohoo]

---

@Andy Emerine wrote:

software auto-upgrade source url flash:cat3k_caa-universalk9.16.06.09.SPA.bin

---

The command is wrong.  Please read the link I've provided.  

[Andy Emerine]

Fantastic write up. Thank you. I'm now on version 16.6.9. Now I'll wait and see if my network issues have been resolved. 

The following commands before rebooting the switch stack did not display any output.

more flash-1:packages.conf | begin for NOVA

more flash-2:packages.conf | begin for NOVA

[Leo Laohoo]

more flash-1:packages.conf
more flash-2:packages.conf

Then use the following commands.  For consistency purposes, the developers have changed the behaviour of each release.

[Andy Emerine]

I need to ask why avoid 16.9.X and 16.12.X altogether? It looks like several version sof 16.6.X fixed DHCP related issues, what I'm having trouble with. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-6/release_notes/ol-16-6-3850.html#pgfId-1511816

[Leo Laohoo]

---

@Andy Emerine wrote:
I need to ask why avoid 16.9.X and 16.12.X altogether?

---

16.9.X and 16.12.X introduces a feature called Cisco Smart License.  A number of the background process for CSL are known (present tense) to cause CPU hogs and memory leaks. 

Particularly 16.12.X there are numerous bugs found in 16.12.3 that the developers are unable to fix.  

Also, read this:  FN - 72323 - Cisco IOS XE Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, and Other Functionality and do Workaround 2.

[Andy Emerine]

Thank you

[albertofdez]

Hi Leo,

Do you know if the latest version 16.12.11 has the same problems you point out in this post?

I have 2 3850 stacks with version 16.6.5 in bundle mode and the Nessus vulnerability scanner has reported a few that are fixed in version 16.12.11.

Thanks.

[Leo Laohoo]

The latest version is 16.12.12 but I have not tested this exact version. 

Switches on 16.12.11 are doing fine but I would still recommend rebooting every 6 months.

[albertofdez]

Thank you very much for the information.

I meant that 16.12.11 is the latest version recommended by Cisco, sorry for the misunderstanding.

One more question, if in the end I upgrade the stack to version 16.12.11 I will also have to take into account that the licensing mode changes to Smart License.

These 3850 switches are many years old and I do not keep the license file, nor the PAK and I do not see the devices in the old licensing portal.

- Do I have any way to convert the licenses having the serial number of the 3850 switches?
- Will the licenses be migrated from the old version to the new 16.12.11?
- If I don't have the Smart License after upgrading to 16.12.11 will the devices work fine?

Thanks for your help.

[Leo Laohoo]

---

@albertofdez wrote:
I meant that 16.12.11 is the latest version recommended by Cisco, sorry for the misunderstanding.

---

(No misunderstanding.)

16.12.12 will become gold star soon.  That is but a guarantee.  

---

@albertofdez wrote:
If I don't have the Smart License after upgrading to 16.12.11 will the devices work fine?

---

The logs will get spammed with Smart Licensing error messages which can be muted using logging discriminator.

logging discriminator CSL_FO facility drops SMART_LIC
logging buffered discriminator CSL_FO 40960
logging console discriminator CSL_FO
logging monitor discriminator CSL_FO

[albertofdez]

Hi Leo,

I understand then from what you say that the stack will work perfectly without Smart License and that the only thing that will happen is that many logs will appear, but they can be muted with the commands you indicate.

Is this correct?

Thanks again for your help.