Re: Update software 6509E Dual Supervisor Engine 2T 10GE

Chris McCann · ‎07-25-2024

Hi Folks,

Looking at updating the software on our core switch, this is a live enviroment.

We have dual supervisor in slots 5&6.

5 5 Supervisor Engine 2T 10GE w/ CTS (Hot) VS-SUP2T-10G
6 5 Supervisor Engine 2T 10GE w/ CTS (Acti VS-SUP2T-10G

Cisco IOS Software, s2t54 Software (s2t54-IPBASEK9-M), Version 15.0(1)SY1, RELEASE SOFTWARE (fc4)

As far as I can tell the process is to download the software to both cards. Change the boot to boot from the new image on the standby. Reset the standby so it boots to the new version and then failover to it (this is brief I know). Estimated time during switch over should be seconds in therory. Then reset the original Active supervisor so it then also does a boot and software update.

I have found the above on the below link.

Upgrade Software on Switches with Redundant Supervisor Engines - Cisco

However, the link discusses Hybrid and Native modes of operation.

Has anyone done the above and how do I know if I am running Native or Hybrid.

Many thanks for guidance and experience.

Chris.

Leo Laohoo · ‎07-25-2024

What version is planned, is it 15.5(1)SY4 (and later) version?

If it is, that document is useless because it does not cover a hidden "feature" that requires a manual FPGA upgrade.

First of, read the Release Notes. Somewhere in the RN, it vaguely talks about FPGA Upgrade. However, the FPGA Upgrade document is a totally separate document and opens a little secret:

Secure FPGA is available only on C6816-X-LE, C6832-X-LE, C6824-X-LE-40G, C6840-X-LE-40G, Sup6T, C6800-32P10G, C6800-16P10G, C6800-8P10G, and C6800-8P40G-XL switching modules.

If the chassis has any of these line cards, make sure to have a console cable read and conduct a manual FPGA Upgrade.

Chris McCann · ‎07-25-2024

Hi Leo.

We are currently on version 15.0SY1 and will first upgrade to 15.2 (We want to start using a 10GB line card and the earlier version doesnt seem to support this).

We may go further up the upgrade path depending upon circumstance.

In the documents you mention I have just found this, are you familar with this, its for a eFSU.

Router# issu loadversion active-slot active-image standby-slot standby-image

Line cards we have are.
1 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6848-GE-TX SAL16127WX9
2 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6848-GE-TX SAL16127WVS
3 24 CEF720 24 port 1000mb SFP WS-X6824-SFP SAL1616A71X
4 24 CEF720 24 port 1000mb SFP WS-X6824-SFP SAL16159E38
5 5 Supervisor Engine 2T 10GE w/ CTS (Hot) VS-SUP2T-10G SAL1616ADL7
6 5 Supervisor Engine 2T 10GE w/ CTS (Acti VS-SUP2T-10G SAL1616ADHM

regards,

Chris.

Leo Laohoo · ‎07-25-2024

If the preference is ISSU or FSU/eFSU/xFSU, I strongly recommend raising a proactive TAC Case. Have TAC WebEx into the console and watch the ISSU or FSU/eFSU/xFSU progress. If anything should go wrong, they are there to quickly intervene.

Personnally, I would not touch ISSU or FSU/eFSU/xFSU with a barge pole as I have fixed so many of the mishaps here.

Chris McCann · ‎07-25-2024

Hi Leo,

Ok, if you are saying not to touch ISSU then I will certainly have to consider that, have you had a few mishaps ?

Going back to part of my original question, how do I know which of the modes my 6509E is in, Hybrid and Native modes of operation?

So should I go for the FPGA path ?

thanks,

Chris.

Leo Laohoo · ‎07-25-2024

@Chris McCann wrote:
Ok, if you are saying not to touch ISSU then I will certainly have to consider that, have you had a few mishaps ?

We have several mishaps and in all cases, someone had to go to the site and, literally, yank the power cable of one of chassis in order to get back control. After each event we swore not to do it again.

Our Cisco AM/SE kept encouraging us to try ISSU but I steadfastly refused to do it. Whether it is IOS or IOS-XE, we have a better tried-n-tested method which has stood the test of time and has a lot of successes than ISSU, FSU/eFSU/xFSU.

ISSU, FSU/eFSU/xFSU is not a "one size fits all" solution. It may/work for some but we have nothing but bad luck at every attempt.

Leo Laohoo · ‎07-25-2024

@Chris McCann wrote:
So should I go for the FPGA path ?

Check the line card in the chassis and compare it with the list.

Secure FPGA is available only on C6816-X-LE, C6832-X-LE, C6824-X-LE-40G, C6840-X-LE-40G, Sup6T, C6800-32P10G, C6800-16P10G, C6800-8P10G, and C6800-8P40G-XL switching modules.

Chris McCann · ‎07-26-2024

Hi Leo,

We dont appear to have any of those line cards,

1 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6848-GE-TX SAL16127WX9
2 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6848-GE-TX SAL16127WVS
3 24 CEF720 24 port 1000mb SFP WS-X6824-SFP SAL1616A71X
4 24 CEF720 24 port 1000mb SFP WS-X6824-SFP SAL16159E38
5 5 Supervisor Engine 2T 10GE w/ CTS (Hot) VS-SUP2T-10G SAL1616ADL7
6 5 Supervisor Engine 2T 10GE w/ CTS (Acti VS-SUP2T-10G SAL1616ADHM

Chris.

Leo Laohoo · ‎07-26-2024

Make sure to have a console cable attached and watch the logs of the supervisor cards during bootup.

Chris McCann · ‎07-29-2024

Hi Leo,

Many thanks for your comments so far.

So the upgrade path I should follow is a manual method.

Upload new code to both the Supervisor cards,

Change to bootvar: to the new image. on one of the supervisor cards.

reload this supervisor card so it does the update, then failover to this newly reloaded supervisor card? so the chassis is now running on the new version.

If all looks well reload the second card so it does an update too. Maybe fail back to this one to ensure it works?

That would mean downtime limited to only the time for the failover to take effect?

regards,

Chris.

Leo Laohoo · ‎07-29-2024

Upload the firmware to the Active.
Upload the firmware to the Standby
Check and compare the MD5 hash file in the Active
Check and compare the MD5 has file in the Standby
Change the boot variable string
Make sure the config registry is 0x2102
Save and export the config
Connect the console cable
Reboot and watch the reboot.

A complete reboot should take about <7 minutes.

NOTE: A COLD REBOOT is even better.

Chris McCann · ‎07-29-2024

Hi Leo,

TY, I will let you know how I get on

Chris.

Leo Laohoo · ‎07-25-2024

@Chris McCann wrote:
how do I know which of the modes my 6509E is in, Hybrid and Native modes of operation?

It does not matter because it does not apply. The supervisor card is a Sup2T and not a Sup32/Sup720 where this question would've been relevant.

Giuseppe Larosa · ‎07-26-2024

Hello @Chris McCann ,

>> how do I know which of the modes my 6509E is in, Hybrid and Native modes of operation?

This is very old distinction that applied to Sup2 / MSFC2 or similar devices your Sup 2T should be IOS only or IOS native

Hope to help

Giuseppe