Catalyst IOS XE 製品の SMU の管理について

yixxing · ‎2021-10-06

はじめに
注意事項
詳細手順
SMU ファイルを該当機器にコピー
SMU ファイルをインストール
SMU ファイルをアンインストール

はじめに

SMU (Software Maintenance Upgrade) はパッチ付きの修正を提供します。通常、SMU は特定の不具合向けにリリースされるものです。本ドキュメントでは、SMU の管理(インストール及びアンインストール)の手法を紹介します。

注意事項

* 不具合があれば、SMU はリリースされるわけではなく、SMU の作成は Cisco 側で要検討のものです。

SMU はインストールモードのみサポート
複数の SMU が同時に存在可能
SMU はバージョンベースにてリリースされる故、利用のバージョンに SMU が存在するかどうか事前確認が必要。
SMU はトラフィックに影響なしに(再起動もなし)インストールが可能で、再起動、スイッチオーバーが必須な場合もある。
ISSU は非サポート

詳細手順

SMU ファイルを該当機器にコピー
SMU ファイルをインストール
SMU ファイルをアンインストール

SMU ファイルを該当機器にコピー

SMU ファイルを該当機器にコピー可能な手法ですが、以下のURLを確認。

Catalyst 製品に IOS ファイルのアップロード方法について

SMU ファイルをインストール

ステップ1: SMU ファイルを下記のコマンドでインストール

Device# install add file flash:cat9k_iosxe.2017-01-10_13.15.1.CSCxxxxxxx.SSA.dmp.bin active commit

Standalone 出力例

Standalone#install add file flash:/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin activate commit
install_add_activate_commit: START
install_add_activate_commit: Adding SMU

--- Starting initial file syncing ---
Info: Finished copying flash:/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin to the selected switch(es)
Finished initial file syncing

Executing pre scripts....
Executing pre sripts done.
--- Starting SMU Add operation ---
Performing SMU_ADD on all members
  [1] SMU_ADD package(s) on switch 1
  [1] Finished SMU_ADD on switch 1
Checking status of SMU_ADD on [1]
SMU_ADD: Passed on [1]
Finished SMU Add operation

install_add_activate_commit: Activating SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Activate operation ---
Performing SMU_ACTIVATE on all members
  [1] SMU_ACTIVATE package(s) on switch 1
  [1] Finished SMU_ACTIVATE on switch 1
Checking status of SMU_ACTIVATE on [1]
SMU_ACTIVATE: Passed on [1]
Finished SMU Activate operation

SUCCESS: install_add_activate_commit /flash/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin

Stackwise 出力例

Stackwise # install add file flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin activate commit

install_add_activate_commit: START
install_add_activate_commit: Adding SMU
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---

%INSTALL-5-INSTALL_START_INFO: Switch 3 R0/0: install_engine: Started install one-shot flash:cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
[1]: Copying flash:cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin from switch 1 to switch 2
[1]: Finished copying to switch 2  
Info: Finished copying flash:cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin to the selected switch(es)
Finished initial file syncing

--- Starting SMU Add operation ---
Performing SMU_ADD on all members
  [3] SMU_ADD package(s) on switch 1
  [3] Finished SMU_ADD on switch 1
  [4] SMU_ADD package(s) on switch 2
  [4] Finished SMU_ADD on switch 2
Checking status of SMU_ADD on [1 2]
SMU_ADD: Passed on [3 4]
Finished SMU Add operation

install_add_activate_commit: Activating SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Activate operation ---
Performing SMU_ACTIVATE on all members
/usr/sbin/kgv_update: kgv_update [ /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin, NOT slot local is ics ] continuing ....
/usr/sbin/kgv_update: Signature validated for /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
/usr/sbin/kgv_update: TAM hash len:32 val:CCFEBE333151A9B63F46F2271C9DE29E6829341B815877A9D2E62992AB03D1EE
/usr/sbin/kgv_update: PCR8 before extend ctr:12 E6FDA13FC839EA2B23DEC87E46F420218722A7ACE2D67C006FF46514CC2E80FC
/usr/sbin/kgv_update: PCR8 after extend ctr:13 8836BD5DEE2DE795C0F0635E9E0A0487248E1CDBB3E0EADE2635405601C23BAB
/usr/sbin/kgv_update: PCR extend successful
/usr/sbin/kgv_update: Chasfs updated for name:cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin hash:8F7F501EF44624562EAD6C1B8A6BB4ECA5E1918D7E9D7DDBC5CC15FDE63463791DAD376C33D790014D74674E52CDFB115231D37622E337D77110DBDAD2B07B20 
/usr/sbin/kgv_update: Update successful for cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin

%INSTALL-5-INSTALL_COMPLETED_INFO: Switch 3 R0/0: install_engine: Completed install one-shot SMU flash:cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin  [3] SMU_ACTIVATE package(s) on switch 1
  [1] Finished SMU_ACTIVATE on switch 1
  [2] SMU_ACTIVATE package(s) on switch 2
    /usr/sbin/kgv_update: kgv_update [ /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin, NOT slot local is ics ] continuing ....
    /usr/sbin/kgv_update: Signature validated for /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
    /usr/sbin/kgv_update: TAM hash len:32 val:CCFEBE333151A9B63F46F2271C9DE29E6829341B815877A9D2E62992AB03D1EE
    /usr/sbin/kgv_update: PCR8 before extend ctr:12 E6FDA13FC839EA2B23DEC87E46F420218722A7ACE2D67C006FF46514CC2E80FC
    /usr/sbin/kgv_update: PCR8 after extend ctr:13 8836BD5DEE2DE795C0F0635E9E0A0487248E1CDBB3E0EADE2635405601C23BAB
    /usr/sbin/kgv_update: PCR extend successful
    /usr/sbin/kgv_update: Chasfs updated for name:cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin hash:8F7F501EF44624562EAD6C1B8A6BB4ECA5E1918D7E9D7DDBC5CC15FDE63463791DAD376C33D790014D74674E52CDFB115231D37622E337D77110DBDAD2B07B20 
    /usr/sbin/kgv_update: Update successful for cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
  [2] Finished SMU_ACTIVATE on switch 2
Checking status of SMU_ACTIVATE on [1 2]
SMU_ACTIVATE: Passed on [1 2]
Finished SMU Activate operation

SUCCESS: install_add_activate_commit /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin

Stackwise-virtual 出力例

Stackwise-virtual # install add file flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin activate commit
install_add_activate_commit: START
install_add_activate_commit: Adding SMU
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---
[1]: Copying flash:cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin from switch 1 to switch 2

%INSTALL-5-INSTALL_START_INFO: Switch 1 R0/0: install_engine: Started install one-shot flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin[2]: Finished copying to switch 2  
Info: Finished copying flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin to the selected switch(es)
Finished initial file syncing

--- Starting SMU Add operation ---
Performing SMU_ADD on all members
  [1] SMU_ADD package(s) on switch 1
  [1] Finished SMU_ADD on switch 1
  [2] SMU_ADD package(s) on switch 2
  [2] Finished SMU_ADD on switch 2
Checking status of SMU_ADD on [1 2]
SMU_ADD: Passed on [1 2]
Finished SMU Add operation

install_add_activate_commit: Activating SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Activate operation ---
Performing SMU_ACTIVATE on all members
/usr/sbin/kgv_update: kgv_update [ /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin, NOT slot local is ics ] continuing ....
/usr/sbin/kgv_update: Signature validated for /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin
/usr/sbin/kgv_update: TAM hash len:32 val:CCFEBE333151A9B63F46F2271C9DE29E6829341B815877A9D2E62992AB03D1EE
/usr/sbin/kgv_update: PCR8 before extend ctr:48 018433360B782BF2C35BB67BD94DD3F76E6FCF1FCB99A1C02EDA40BC2D156269
/usr/sbin/kgv_update: PCR8 after extend ctr:49 F84777D2D21EFF236D25EF62B034F2B423AF9DA385FFE77140890A5D4261A514
/usr/sbin/kgv_update: PCR extend successful
/usr/sbin/kgv_update: Chasfs updated for name:cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin hash:8F7F501EF44624562EAD6C1B8A6BB4ECA5E1918D7E9D7DDBC5CC15FDE63463791DAD376C33D790014D74674E52CDFB115231D37622E337D77110DBDAD2B07B20 
/usr/sbin/kgv_update: Update successful for cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin
  [1] SMU_ACTIVATE package(s) on switch 1
  [1] Finished SMU_ACTIVATE on switch 1
  [2] SMU_ACTIVATE package(s) on switch 2
    /usr/sbin/kgv_update: kgv_update [ /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin, NOT slot local is ics ] continuing ....
    /usr/sbin/kgv_update: Signature validated for /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin
    /usr/sbin/kgv_update: TAM hash len:32 val:CCFEBE333151A9B63F46F2271C9DE29E6829341B815877A9D2E62992AB03D1EE
    /usr/sbin/kgv_update: PCR8 before extend ctr:30 CFBE778A31A58485C7F4D62545ABC4CD5C7D4554A19F9DC8017AC5A299070B17
    /usr/sbin/kgv_update: PCR8 after extend ctr:31 2271223A9A0C1A3DA9AD1EC71890B11F1BAE2EA4587E4B01090ECEFBDBF59A9F
    /usr/sbin/kgv_update: PCR extend successful
    /usr/sbin/kgv_update: Chasfs updated for name:cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin hash:8F7F501EF44624562EAD6C1B8A6BB4ECA5E1918D7E9D7DDBC5CC15FDE63463791DAD376C33D790014D74674E52CDFB115231D37622E337D77110DBDAD2B07B20 
    /usr/sbin/kgv_update: Update successful for cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin
  [2] Finished SMU_ACTIVATE on switch 2
Checking status of SMU_ACTIVATE on [1 2]
SMU_ACTIVATE: Passed on [1 2]
Finished SMU Activate operation

SUCCESS: install_add_activate_commit /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin

ステップ2:下記コマンドでインストール状況を確認

Device# show install summary

Standalone 出力例

Standalone #show install summary
[ Switch 1 ] Installed Package(s) Information:
State (St): I - Inactive, U - Activated & Uncommitted,
            C - Activated & Committed, D - Deactivated & Uncommitted
--------------------------------------------------------------------------------
Type  St   Filename/Version
--------------------------------------------------------------------------------
SMU   C    flash:cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin
IMG   C    16.0X.0X.0.4304

--------------------------------------------------------------------------------
Auto abort timer: inactive
--------------------------------------------------------------------------------

Stackwise 出力例

Stackwise #show install summary
[ Switch 3 4 ] Installed Package(s) Information:
State (St): I - Inactive, U - Activated & Uncommitted,
            C - Activated & Committed, D - Deactivated & Uncommitted
--------------------------------------------------------------------------------
Type  St   Filename/Version
--------------------------------------------------------------------------------
IMG   C    17.0X.0X.0.5557
SMU   C    flash:cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin

--------------------------------------------------------------------------------
Auto abort timer: inactive
--------------------------------------------------------------------------------

Stackwise-virtual 出力例

Stackwise-virtual # show install summary

[ Switch 1 2 ] Installed Package(s) Information:
State (St): I - Inactive, U - Activated & Uncommitted,
            C - Activated & Committed, D - Deactivated & Uncommitted
--------------------------------------------------------------------------------
Type  St   Filename/Version
--------------------------------------------------------------------------------
IMG   C    17.0X.0X.0.5557
SMU   C    flash:cat9k_iosxe.17.0X.0X.CSCvz04725.SPA.smu.bin

--------------------------------------------------------------------------------
Auto abort timer: inactive
--------------------------------------------------------------------------------

SMU ファイルをアンインストール

ステップ1: 下記のコマンドでSMUを無効化

Device# install deactivate file flash:cat9k_iosxe.2017-01-10_13.15.1.CSCxxxxxxx.SSA.dmp.bin

Standalone 出力例

Standalone # install deactivate file flash:/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin
install_deactivate: START
install_deactivate: Deactivating SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Deactivate operation ---
Performing SMU_DEACTIVATE on all members
  [1] SMU_DEACTIVATE package(s) on switch 1
  [1] Finished SMU_DEACTIVATE on switch 1
Checking status of SMU_DEACTIVATE on [1]
SMU_DEACTIVATE: Passed on [1]
Finished SMU Deactivate operation

CSCvrXXXXX:SUCCESS
SUCCESS: install_deactivate /flash/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin

Stackwise 出力例

Stackwise # install deactivate file flash:/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
install_deactivate: START Tue Sep 14 04:38:36 UTC 2021
install_deactivate: Deactivating SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Deactivate operation ---
Performing SMU_DEACTIVATE on all members
%INSTALL-5-INSTALL_AUTO_ABORT_TIMER_PROGRESS: R0/0: rollback_timer: Install auto abort timer will expire in 7200 seconds

  [1] SMU_DEACTIVATE package(s) on switch 1
  [1] Finished SMU_DEACTIVATE on switch 1
  [2] SMU_DEACTIVATE package(s) on switch 2
  [2] Finished SMU_DEACTIVATE on switch 2
Checking status of SMU_DEACTIVATE on [1 2]
SMU_DEACTIVATE: Passed on [3 4]
Finished SMU Deactivate operation

CSCvzXXXXX:SUCCESS
SUCCESS: install_deactivate /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin

Stackwise-virtual 出力例

Stackwise-virtual # install deactivate flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin
install_deactivate: START
install_deactivate: Deactivating SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Deactivate operation ---
Performing SMU_DEACTIVATE on all members
  [1] SMU_DEACTIVATE package(s) on switch 1
  [1] Finished SMU_DEACTIVATE on switch 1
  [2] SMU_DEACTIVATE package(s) on switch 2
  [2] Finished SMU_DEACTIVATE on switch 2
Checking status of SMU_DEACTIVATE on [1 2]
SMU_DEACTIVATE: Passed on [1 2]
Finished SMU Deactivate operation

CSCvz0XXXX:SUCCESS
SUCCESS: install_deactivate /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin

ステップ2: 下記のコマンドで無効化をコミット

Device# install commit

Standalone 出力例

Standalone # install commit
install_commit: START
install_commit: Committing SMU
Executing pre scripts....
Executing pre sripts done.
--- Starting SMU Commit operation ---
Performing SMU_COMMIT on all members
  [1] SMU_COMMIT package(s) on switch 1
  [1] Finished SMU_COMMIT on switch 1
Checking status of SMU_COMMIT on [1]
SMU_COMMIT: Passed on [1]
Finished SMU Commit operation

Stackwise 出力例

Stackwise # install commit 
install_commit: START Tue
install_commit: Committing SMU

%INSTALL-5-INSTALL_START_INFO: Switch 1 R0/0: install_engine: Started install commitExecuting pre scripts....
Executing pre sripts done.
--- Starting SMU Commit operation ---
Performing SMU_COMMIT on all members
  [1] SMU_COMMIT package(s) on switch 1
  [1] Finished SMU_COMMIT on switch 1
  [2] SMU_COMMIT package(s) on switch 2
  [2] Finished SMU_COMMIT on switch 2
Checking status of SMU_COMMIT on [1 2]
SMU_COMMIT: Passed on [1 2]
Finished SMU Commit operation

Stackwise-virtual 出力例

Stackwise-virtual # install commit 
install_commit: START
install_commit: Committing SMU

%INSTALL-5-INSTALL_START_INFO: Switch 1 R0/0: install_engine: Started install commitExecuting pre scripts....
Executing pre sripts done.
--- Starting SMU Commit operation ---
Performing SMU_COMMIT on all members
  [1] SMU_COMMIT package(s) on switch 1
  [1] Finished SMU_COMMIT on switch 1
  [2] SMU_COMMIT package(s) on switch 2
  [2] Finished SMU_COMMIT on switch 2
Checking status of SMU_COMMIT on [1 2]
SMU_COMMIT: Passed on [1 2]
Finished SMU Commit operation

ステップ3: 下記コマンドで SMU を remove

Device # install remove file flash:cat9k_iosxe.2017-01-10_13.15.1.CSCxxxxxxx.SSA.dmp.bin

Standalone 出力例

Standalone # install remove file flash:/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin
install_remove: START
install_remove: Removing SMU
Executing pre scripts....
Executing pre sripts done.

--- Starting SMU Remove operation ---
Performing SMU_REMOVE on all members
  [1] SMU_REMOVE package(s) on switch 1
  [1] Finished SMU_REMOVE on switch 1
Checking status of SMU_REMOVE on [1]
SMU_REMOVE: Passed on [1]
Finished SMU Remove operation

SUCCESS: install_remove /flash/cat9k_iosxe.16.0X.0X.CSCvrXXXXX.SPA.smu.bin

Stackwise 出力例

Stackwise # install remove file flash:/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
install_remove: START
install_remove: Removing SMU
Executing pre scripts....
Executing pre sripts done.

%INSTALL-5-INSTALL_START_INFO: Switch 3 R0/0: install_engine: Started install remove flash:/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin
--- Starting SMU Remove operation ---
Performing SMU_REMOVE on all members

%INSTALL-5-INSTALL_COMPLETED_INFO: Switch 3 R0/0: install_engine: Completed install remove flash:/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin  
  [1] SMU_REMOVE package(s) on switch 1
  [1] Finished SMU_REMOVE on switch 1
  [2] SMU_REMOVE package(s) on switch 2
  [2] Finished SMU_REMOVE on switch 2
Checking status of SMU_REMOVE on [1 2]
SMU_REMOVE: Passed on [1 2]
Finished SMU Remove operation

SUCCESS: install_remove /flash/cat9k_iosxe.17.0X.0X.CSCvzXXXXX.SPA.smu.bin

Stackwise-virtual 出力例

Stackwise-virtual # install remove file flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin 
install_remove: START
install_remove: Removing SMU
Executing pre scripts....
Executing pre sripts done.

%INSTALL-5-INSTALL_START_INFO: Switch 1 R0/0: install_engine: Started install remove flash:/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin
--- Starting SMU Remove operation ---
Performing SMU_REMOVE on all members
  [1] SMU_REMOVE package(s) on switch 1
  [1] Finished SMU_REMOVE on switch 1
  [2] SMU_REMOVE package(s) on switch 2
  [2] Finished SMU_REMOVE on switch 2
Checking status of SMU_REMOVE on [1 2]
SMU_REMOVE: Passed on [1 2]
Finished SMU Remove operation

SUCCESS: install_remove /flash/cat9k_iosxe.17.0X.0X.CSCvz0XXXX.SPA.smu.bin

ステップ4: 下記コマンドで SMU 有無を確認

Device# show install summary

Standalone 出力例

Standalone # show install summary
[ Switch 1 ] Installed Package(s) Information:
State (St): I - Inactive, U - Activated & Uncommitted,
            C - Activated & Committed, D - Deactivated & Uncommitted
--------------------------------------------------------------------------------
Type  St   Filename/Version
--------------------------------------------------------------------------------
IMG   C    16.0X.0X.0.4304

--------------------------------------------------------------------------------
Auto abort timer: inactive
--------------------------------------------------------------------------------

Stackwise 出力例

Stackwise # show install summary 
[ Switch 1 2 ] Installed Package(s) Information:
State (St): I - Inactive, U - Activated & Uncommitted,
            C - Activated & Committed, D - Deactivated & Uncommitted
--------------------------------------------------------------------------------
Type  St   Filename/Version
--------------------------------------------------------------------------------
IMG   C    17.0X.0X.0.5557

--------------------------------------------------------------------------------
Auto abort timer: inactive
--------------------------------------------------------------------------------

Stackwise-virtual 出力例

Stackwise-virtual # show install summary 
[ Switch 1 2 ] Installed Package(s) Information:
State (St): I - Inactive, U - Activated & Uncommitted,
            C - Activated & Committed, D - Deactivated & Uncommitted
--------------------------------------------------------------------------------
Type  St   Filename/Version
--------------------------------------------------------------------------------
IMG   C    17.0X.0X.0.5557

--------------------------------------------------------------------------------
Auto abort timer: inactive
--------------------------------------------------------------------------------