upgrade IOS 3560

[athan1234]

Hi there

I need to upgrade ninety-six switches in person  My colleague downloaded the latest iOS. The plan is to complete it over the weekend. I think the iOS is
compressed.

currently the switches has 16.09.04.SPA.

Directory of flash:/

7762 -rw- 19858044 Nov 28 2019 22:35:48 +00:00 cat3k_caa-guestshell.16.09.04.SPA.pkg
7763 -rw- 30894576 Nov 28 2019 22:35:46 +00:00 cat3k_caa-rpbase.16.09.04.SPA.pkg
7764 -rw- 373381748 Nov 28 2019 22:35:48 +00:00 cat3k_caa-rpcore.16.09.04.SPA.pkg
7765 -rw- 3107452 Nov 28 2019 22:35:46 +00:00 cat3k_caa-srdriver.16.09.04.SPA.pkg
7766 -rw- 22784632 Nov 28 2019 22:35:46 +00:00 cat3k_caa-webui.16.09.04.SPA.pkg
7767 -rw- 4774 Nov 28 2019 22:36:08 +00:00 packages.conf
31041 drwx 4096 Jan 25 2024 11:01:23 +00:00 .installer
7768 -rw- 962 Jan 25 2024 11:01:25 +00:00 bootloader_evt_handle.log
38802 drwx 4096 Nov 28 2019 22:41:56 +00:00 core
46561 drwx 4096 Nov 28 2019 22:47:06 +00:00 .prst_sync
62081 drwx 4096 Nov 28 2019 22:38:49 +00:00 .rollback_timer
69841 drwx 4096 Nov 28 2019 22:38:52 +00:00 gs_script
77601 drwx 4096 Nov 28 2019 22:38:52 +00:00 tech_support
77620 drwx 4096 Jan 25 2024 11:01:36 +00:00 dc_profile_dir
7769 -rw- 123888 Jan 25 2024 11:02:00 +00:00 memleak.tcl
85361 drwx 4096 Apr 6 2020 10:26:58 +00:00 .dbpersist
38804 drwx 4096 Nov 28 2019 22:40:41 +00:00 onep
7770 -rw- 2097152 Mar 5 2024 04:02:50 +00:00 nvram_config
7771 -rw- 2097152 Mar 5 2024 04:02:51 +00:00 nvram_config_bkup
7772 -rw- 34 Apr 6 2020 10:07:01 +00:00 pnp-tech-time
7773 -rw- 96530 Apr 6 2020 10:07:05 +00:00 pnp-tech-discovery-summary
7774 -rw- 0 Jan 25 2024 11:03:32 +00:00 rdope_out.txt
7775 -rw- 90 Jan 25 2024 11:03:45 +00:00 rdope.log
7776 -rw- 12508 Jan 25 2024 11:03:41 +00:00 vlan.dat
7777 -rw- 482716242 Jan 10 2024 09:15:38 +00:00 cat3k_caa-universalk9.16.12.10a.SPA.bin

1624104960 bytes total (596914176 bytes free)

I have a query. I will be visiting the customer on Saturday  and sunday to perform the upgrade if there are any issues, .
As weel i have remote acces via ssh

Is it feasible to use the command  to advance the works ?

Request the installation of the platform software package and switch all the flash: new auto copy of cat3k_caa-universalk9.16.12.10a.SPA.bin new auto-copy

It would be transparent to the client or have a cut.

then on Saturday and sunday , I just will have to perform WR and reload and the switches will have the new ios .
is It correct ?

[marce1000]

         >...Is it feasible to use the command "remote access" to advance the works ?
                                 - Exactly which command are you referring too ?

 M.

[athan1234]

hi @marce1000 

This command

Request the installation of the platform software package and switch all the flash: new auto copy of cat3k_caa-universalk9.16.12.10a.SPA.bin new auto-copy

[liviu.gheorghe]

Hello @athan1234 ,

upgrade can be done remotely via ssh. 

First, ensure there is enough space in the flash to copy the image to which you are upgrading. Issue the dir command to verify.

Second, you will have to copy the new image to flash.

Third, you will have to install the new image: software install file flash:cat3k_caa-universalk9.16.12.10a.SPA.bin

After the install finishes, answer yes to reload the switch. After reboot, it should come up with the new image.

HTH

[athan1234]

hi @liviu.gheorghe 

The iOS was passed on the all of switches like it is now. I was reading all I have to do is use this command to descomprime 

"Request that the platform software package be installed, then turn on all of the flash: newly created auto-copy of cat3k_caa-universalk9.16.12.10a.SPA.bin"

following wr and reload

Though I'm hesitant to use this command in case the switches reload, I would prefer to perform it before the intervention I nned to advance the works . I dont nkow if you are able to undestarnd me my idea.

currently the switches has 16.09.04.SPA.

Directory of flash:/

7762 -rw- 19858044 Nov 28 2019 22:35:48 +00:00 cat3k_caa-guestshell.16.09.04.SPA.pkg
7763 -rw- 30894576 Nov 28 2019 22:35:46 +00:00 cat3k_caa-rpbase.16.09.04.SPA.pkg
7764 -rw- 373381748 Nov 28 2019 22:35:48 +00:00 cat3k_caa-rpcore.16.09.04.SPA.pkg
7765 -rw- 3107452 Nov 28 2019 22:35:46 +00:00 cat3k_caa-srdriver.16.09.04.SPA.pkg
7766 -rw- 22784632 Nov 28 2019 22:35:46 +00:00 cat3k_caa-webui.16.09.04.SPA.pkg
7767 -rw- 4774 Nov 28 2019 22:36:08 +00:00 packages.conf
31041 drwx 4096 Jan 25 2024 11:01:23 +00:00 .installer
7768 -rw- 962 Jan 25 2024 11:01:25 +00:00 bootloader_evt_handle.log
38802 drwx 4096 Nov 28 2019 22:41:56 +00:00 core
46561 drwx 4096 Nov 28 2019 22:47:06 +00:00 .prst_sync
62081 drwx 4096 Nov 28 2019 22:38:49 +00:00 .rollback_timer
69841 drwx 4096 Nov 28 2019 22:38:52 +00:00 gs_script
77601 drwx 4096 Nov 28 2019 22:38:52 +00:00 tech_support
77620 drwx 4096 Jan 25 2024 11:01:36 +00:00 dc_profile_dir
7769 -rw- 123888 Jan 25 2024 11:02:00 +00:00 memleak.tcl
85361 drwx 4096 Apr 6 2020 10:26:58 +00:00 .dbpersist
38804 drwx 4096 Nov 28 2019 22:40:41 +00:00 onep
7770 -rw- 2097152 Mar 5 2024 04:02:50 +00:00 nvram_config
7771 -rw- 2097152 Mar 5 2024 04:02:51 +00:00 nvram_config_bkup
7772 -rw- 34 Apr 6 2020 10:07:01 +00:00 pnp-tech-time
7773 -rw- 96530 Apr 6 2020 10:07:05 +00:00 pnp-tech-discovery-summary
7774 -rw- 0 Jan 25 2024 11:03:32 +00:00 rdope_out.txt
7775 -rw- 90 Jan 25 2024 11:03:45 +00:00 rdope.log
7776 -rw- 12508 Jan 25 2024 11:03:41 +00:00 vlan.dat
7777 -rw- 482716242 Jan 10 2024 09:15:38 +00:00 cat3k_caa-universalk9.16.12.10a.SPA.bin

1624104960 bytes total (596914176 bytes free)

.

[liviu.gheorghe]

You can issue the command software install file flash:cat3k_caa-universalk9.16.12.10a.SPA.bin to install the new software and schedule the reload at a later time during the maintenance window.

[Leo Laohoo]

I have been progressively updating the firmware of our 3850 and 9300/9500.  I extract the packages ahead of time and schedule the reboot at a later date.  This can be accomplished by utilizing the "on-reboot" option.  

request platform software package install switch all file flash:cat3k_caa-universalk9.16.12.10a.SPA.bin ON-REBOOT new auto-copy verbose

The "on-reboot" option is a type-o bug (CSCve94966) which, essentially, was meant to be "no-reboot".  It means "do not reboot" after the packages have been extracted.

Have a read at the document:  Cisco 3850: IOS-XE/Firmware Upgrade

[athan1234]

hi @Leo Laohoo  

Tell me if I understand you correctly, then.
I currently have the image pre-loaded in all switches looking like this:

Directory of flash:/

7762 -rw- 19858044 Nov 28 2019 22:35:48 +00:00 cat3k_caa-guestshell.16.09.04.SPA.pkg
7763 -rw- 30894576 Nov 28 2019 22:35:46 +00:00 cat3k_caa-rpbase.16.09.04.SPA.pkg
7764 -rw- 373381748 Nov 28 2019 22:35:48 +00:00 cat3k_caa-rpcore.16.09.04.SPA.pkg
7765 -rw- 3107452 Nov 28 2019 22:35:46 +00:00 cat3k_caa-srdriver.16.09.04.SPA.pkg
7766 -rw- 22784632 Nov 28 2019 22:35:46 +00:00 cat3k_caa-webui.16.09.04.SPA.pkg
7767 -rw- 4774 Nov 28 2019 22:36:08 +00:00 packages.conf
31041 drwx 4096 Jan 25 2024 11:01:23 +00:00 .installer
7768 -rw- 962 Jan 25 2024 11:01:25 +00:00 bootloader_evt_handle.log
38802 drwx 4096 Nov 28 2019 22:41:56 +00:00 core
46561 drwx 4096 Nov 28 2019 22:47:06 +00:00 .prst_sync
62081 drwx 4096 Nov 28 2019 22:38:49 +00:00 .rollback_timer
69841 drwx 4096 Nov 28 2019 22:38:52 +00:00 gs_script
77601 drwx 4096 Nov 28 2019 22:38:52 +00:00 tech_support
77620 drwx 4096 Jan 25 2024 11:01:36 +00:00 dc_profile_dir
7769 -rw- 123888 Jan 25 2024 11:02:00 +00:00 memleak.tcl
85361 drwx 4096 Apr 6 2020 10:26:58 +00:00 .dbpersist
38804 drwx 4096 Nov 28 2019 22:40:41 +00:00 onep
7770 -rw- 2097152 Mar 5 2024 04:02:50 +00:00 nvram_config
7771 -rw- 2097152 Mar 5 2024 04:02:51 +00:00 nvram_config_bkup
7772 -rw- 34 Apr 6 2020 10:07:01 +00:00 pnp-tech-time
7773 -rw- 96530 Apr 6 2020 10:07:05 +00:00 pnp-tech-discovery-summary
7774 -rw- 0 Jan 25 2024 11:03:32 +00:00 rdope_out.txt
7775 -rw- 90 Jan 25 2024 11:03:45 +00:00 rdope.log
7776 -rw- 12508 Jan 25 2024 11:03:41 +00:00 vlan.dat
7777 -rw- 482716242 Jan 10 2024 09:15:38 +00:00 cat3k_caa-universalk9.16.12.10a.SPA.bin

1624104960 bytes total (596914176 bytes free)

I can use SSH to connect remotely tomorrow, and I can use this command to access the 96 switches.

request platform software package install switch all file flash:cat3k_caa-universalk9.16.12.10a.SPA.bin ON-REBOOT new auto-copy verbose

So  , during the  maintenance window  (Saturday and Sunday,) all I have to do is:

1. REBOOT the switch/stack.
2. [RECOMMENDED][OPTIONAL] Clean the flash:  install remove inactive
3. DONE.

[Leo Laohoo]

---

@athan1234 wrote:
I can use SSH to connect remotely tomorrow, and I can use this command to access the 96 switches.

request platform software package install switch all file flash:cat3k_caa-universalk9.16.12.10a.SPA.bin ON-REBOOT new auto-copy verbose

So  , during the  maintenance window  (Saturday and Sunday,) all I have to do is:

1. REBOOT the switch/stack.
2. [RECOMMENDED][OPTIONAL] Clean the flash:  install remove inactive
3. DONE.

---

Correct.  With the "on-reboot" option, the packages will get extracted, however, the stack will NOT reboot.  

After the 16.12.10a packages have been extracted, did anyone inspect the content of the "packages.conf" file?  

[athan1234]

hi @Leo Laohoo  I tested the command on the tester switch yesterday, and everything worked as it should. Today, I'm working with real switches.

Please explain, I don't understand your question. did anyone inspect the content of the "packages.conf" file? I don't understand; could you perhaps clarify ?

[Leo Laohoo · Accepted solution]

Read the document:  Cisco 3850: IOS-XE/Firmware Upgrade especially Step 7. 

The Gotcha section is interesting because it is easy to trigger the bug.

[athan1234]

hi @Leo Laohoo 

I'm not sure how to understand this instruction. What do I need to look for to determine whether anything is good?

I attach you the result the switch

more flash:packages.conf | begin for NOVA
# This is for NOVA
iso rp 0 0 rp_base cat3k_caa-rpbase.16.12.10a.SPA.pkg
iso rp 0 0 rp_core cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 rp_daemons cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 rp_iosd cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 rp_webui cat3k_caa-webui.16.12.10a.SPA.pkg
iso rp 0 0 srdriver cat3k_caa-srdriver.16.12.10a.SPA.pkg
iso rp 0 0 rp_security cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 guestshell cat3k_caa-guestshell.16.12.10a.SPA.pkg

iso fp 0 0 fp cat3k_caa-rpcore.16.12.10a.SPA.pkg

#
# -start- superpackage .pkginfo
#
# pkginfo: Name: rp_super
# pkginfo: BuildTime: 2023-10-24_22.54
# pkginfo: ReleaseDate: Wed-25-Oct-23-00:22
# pkginfo: .BuildArch: mips64
# pkginfo: BootArchitecture: mips
# pkginfo: .BootArch: mips
# pkginfo: RouteProcessor: edison
# pkginfo: Platform: CAT3K_CAA
# pkginfo: User: mcpre
# pkginfo: PackageName: universalk9
# pkginfo: Build: 16.12.10a
# pkginfo: .SupportedBoards: edison
# pkginfo: .InstallModel:
# pkginfo: .PackageRole: rp_super
# pkginfo: .RestartRole: rp_super
# pkginfo: CardTypes:
# pkginfo: .CardTypes:
# pkginfo: .BuildPath: /nobackup/mcpre/release/BLD-V16_12_10A_FC3/binos/linkfarm/stage-edison/hard/rp_super_universalk9.mips64
# pkginfo: .Version: 16.12.10a.0.7996.1698213282..Gibraltar
# pkginfo: .InstallVersion: 1.0.0
# pkginfo: .InstallCapCommitSupport: yes
#
# -end- superpackage .pkginfo

[Leo Laohoo]

more flash:packages.conf | begin for NOVA
# This is for NOVA
iso rp 0 0 rp_base cat3k_caa-rpbase.16.12.10a.SPA.pkg
iso rp 0 0 rp_core cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 rp_daemons cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 rp_iosd cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 rp_webui cat3k_caa-webui.16.12.10a.SPA.pkg
iso rp 0 0 srdriver cat3k_caa-srdriver.16.12.10a.SPA.pkg
iso rp 0 0 rp_security cat3k_caa-rpcore.16.12.10a.SPA.pkg
iso rp 0 0 guestshell cat3k_caa-guestshell.16.12.10a.SPA.pkg

iso fp 0 0 fp cat3k_caa-rpcore.16.12.10a.SPA.pkg

This are the juicy bits.  Notice to the right it all talks about "16.12.10a"?  That is the intended version the switch is meant to upgrade to.  There is a known bug in IOS-XE whereby the "packages.conf" file gets locked up during the end of the package extraction process.  The process is unable to re-write the contents of the "packages.conf" file that points to the new firmware.  Instead, when the bug hits the contents will point to the existing (and old) firmware.  

By doing the checks, YOU will have full control: 

• YOU can do checks to make sure the switch will boot the new firmware
• If the contensts inside the packages.conf file is incorrect, YOU can correct them. 

The Cisco-recommended process does not give anyone these benefits.  The router, switch, WLC will boot and fair chance of booting the wrong and unintended firmware version.

That is what the Gotcha section is all about.

[athan1234]

Hi  @Leo Laohoo  I neglected to respond to you.Everything went well, I appreciate  so much your help.