Not able to downgrade WLC-CL-9800

[Calin Cristea]

Hello, I have WLC-CL_9800 in private cloud, OS version 17.6.4. I need to downgrade the OS to 17.3.6 because i need to join some 1700 and 2700 Access Points.

I have tried to downgrade the WLC via CLI and via Web, but after reboot, it keeps it`s original OS

Any help will be apreciated

WHAT I DID VIA CLI:

! I HAVE COPIED THE FILE

WLC#copy tftp: flash
Address or name of remote host [X.X.X.X]?
Source filename [C9800-CL-universalk9.17.03.06.SPA.bin]?
Destination filename [C9800-CL-universalk9.17.03.06.SPA.bin]?
Accessing tftp://X.X.X.X/C9800-CL-universalk9.17.03.06.SPA.bin...
Loading C9800-CL-universalk9.17.03.06.SPA.bin from X.X.X.X (via GigabitEthernet1): !!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 1141591006 bytes]

WLC_IOS#dir
Directory of bootflash:/

131076 drwx 53248 Feb 6 2023 17:05:48 +00:00 tracelogs
131073 drwx 4096 Feb 6 2023 16:49:52 +00:00 .installer
12 -rw- 1141591006 Feb 6 2023 16:49:32 +00:00 C9800-CL-universalk9.17.03.06.SPA.bin
524289 drwx 4096 Feb 6 2023 14:19:36 +00:00 certs
393224 drwx 4096 Feb 6 2023 14:19:27 +00:00 license_evlog
18 -rw- 1937 Feb 6 2023 14:19:25 +00:00 cvac.log
21 -rw- 157 Feb 6 2023 14:19:24 +00:00 csrlxc-cfg.log
524290 drwx 4096 Feb 6 2023 14:19:14 +00:00 .prst_sync
17 -rw- 30 Feb 6 2023 14:19:08 +00:00 throughput_monitor_params
16 -rw- 134899 Feb 6 2023 14:18:32 +00:00 memleak.tcl
524291 drwx 4096 Feb 6 2023 14:18:20 +00:00 dc_profile_dir
262145 drwx 4096 Feb 6 2023 14:17:27 +00:00 .rollback_timer
262150 drwx 4096 Feb 6 2023 14:12:54 +00:00 .dbpersist
19 -rw- 1 Feb 6 2023 12:06:05 +00:00 .cvac_version
20 -rw- 16 Feb 6 2023 12:06:05 +00:00 ovf-env.xml.md5
131114 drwx 4096 Feb 6 2023 12:06:01 +00:00 onep
524297 drwx 4096 Feb 6 2023 12:06:00 +00:00 pnp-info
393223 drwx 4096 Feb 6 2023 12:05:59 +00:00 .geo
524296 drwx 4096 Feb 6 2023 12:05:09 +00:00 virtual-instance
393217 drwx 4096 Feb 6 2023 12:05:04 +00:00 core
393218 drwx 4096 Feb 6 2023 12:05:00 +00:00 bootlog_history
262146 drwx 4096 Feb 6 2023 12:04:57 +00:00 iox
11 drwx 16384 Feb 6 2023 12:03:16 +00:00 lost+found

! I HAVE INSTALLED THE FILE , ACTIVATE AND COMMIT

WLC#install add file bootflash:bootflash:C9800-CL-universalk9.17.03.06.SPA.bin activate commit
install_add_activate_commit: START Mon Feb 6 17:07:22 Eastern 2023
<5>%INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install one-shot bootflash:bootflash:C9800-CL-universalk9.17.03.06.SPA.bin
install_add_activate_commit: Adding PACKAGE
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---
Info: Finished copying bootflash:bootflash:C9800-CL-universalk9.17.03.06.SPA.bin to the selected chassis
Finished initial file syncing

--- Starting Add ---
Performing Add on all members
[1] Add package(s) on chassis 1/R0
[1] Finished Add on chassis 1/R0
Checking status of Add on [1/R0]
Add: Passed on [1/R0]
Finished Add

Image added. Version: 17.03.06.0.7954
install_add_activate_commit: Activating PACKAGE
Following packages shall be activated:
/bootflash/C9800-CL-rpboot.17.03.06.SPA.pkg
/bootflash/C9800-CL-mono-universalk9.17.03.06.SPA.pkg

This operation may require a reload of the system. Do you want to proceed? [y/n]y
--- Starting Activate ---
Performing Activate on all members
[1] Activate package(s) on chassis 1/R0
[1] Finished Activate on chassis 1/R0
Checking status of Activate on [1/R0]
Activate: Passed on [1/R0]
Finished Activate

--- Starting Commit ---
Performing Commit on all members
[1] Commit package(s) on chassis 1/R0
[1] Finished Commit on chassis 1/R0
Checking status of Commit on [1/R0]
Commit: Passed on [1/R0]
Finished Commit

Send model notification for install_add_activate_commit before reload
Install will reload the system now!
SUCCESS: install_add_activate_commit Mon Feb 6 17:13:24 Eastern 2023
<5>%INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install one-shot PACKAGE bootflash:bootflash:C9800-CL-universalk9.17.03.06.SPA.bin

WLC#install commit
install_commit: START Mon Feb 6 17:17:13 Eastern 2023
<5>%INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install commit
install_commit: Committing SMU
install_commit: No SMU is currently installed.
Commit operation requires a currently active installation.
SUCCESS: install_commit Mon Feb 6 17:17:14 Eastern 2023
<5>%INSTALL-5-INSTALL_COMPLETED_INFO: R0/0: install_engine: Completed install commit SMU
WLC_IOS#sh boot
BOOT variable = bootflash:packages.conf,12;
CONFIG_FILE variable does not exist
BOOTLDR variable does not exist
Configuration register is 0x2102

Standby not ready to show bootvar

AFTER REBOOT

WLC#sh version
Cisco IOS XE Software, Version 17.06.04
Cisco IOS Software [Bengaluru], C9800-CL Software (C9800-CL-K9_IOSXE), Version 17.6.4, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Sun 14-Aug-22 08:54 by mcpre

WHAT I DID VIA GUI:

LOGS:

install_add_activate_commit: START Mon Feb 6 17:52:06 Eastern 2023
<5>%INSTALL-5-INSTALL_START_INFO: R0/0: install_engine: Started install one-shot bootflash:C9800-CL-universalk9.17.03.06.SPA.bin
install_add_activate_commit: Adding PACKAGE
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---
Info: Finished copying bootflash:C9800-CL-universalk9.17.03.06.SPA.bin to the selected chassis
Finished initial file syncing

--- Starting Add ---
Performing Add on all members
[1] Add package(s) on chassis 1/R0
[1] Finished Add on chassis 1/R0
Checking status of Add on [1/R0]
Add: Passed on [1/R0]
Finished Add

Image added. Version: 17.03.06.0.7954
install_add_activate_commit: Activating PACKAGE
Following packages shall be activated:
/bootflash/C9800-CL-rpboot.17.03.06.SPA.pkg
/bootflash/C9800-CL-mono-universalk9.17.03.06.SPA.pkg
--- Starting Activate ---
Performing Activate on all members
[1] Activate package(s) on chassis 1/R0
[1] Finished Activate on chassis 1/R0
Checking status of Activate on [1/R0]
Activate: Passed on [1/R0]
Finished Activate

--- Starting Commit ---
Performing Commit on all members
[1] Commit package(s) on chassis 1/R0
[1] Finished Commit on chassis 1/R0
Checking status of Commit on [1/R0]
Commit: Passed on [1/R0]
Finished Commit

Then it reboots, but it has the same OS: 17.6.4

 

Any ideea what am i missing?

[Arshad Safrulla]

As per Cisco "Downgrades are not officially supported and config loss of new features can occur". So read the below document thoroughly and ready for any surprises.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/216838-upgrade-and-downgrade-of-catalyst-9800-c.html#:~:text=aaa%20as%20applicable.-,17.6.1,-From%2017.4.1%20onwards

That being said, you can check the below. 

1. Check the checksum of the new image file after uploading to the flash.

2. Post a dir after the upgrade. Check whether their is any file generated with .conf extension. If yes please set it as the boot parameter. If not configure boot system bootflash:packages.conf and then downgrade.

Enjoy.

[Calin Cristea]

Hi Arsad, thank you for the answer, i know that link, read it already. Checksum seems ok, i have tried the bundle installation, not working.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217050-convert-installation-mode-between-instal.html

I think i will open a tac, i didnt`t think that i will need it, i did tens of upgrades and downgrades on old WLC and vWLC but didn`t had this problem. If i wouldn`t activate licenses already, i will instantly added a new image with 17.3 image, but i didn`t want to go to TAC because they are very slow lately.

[Arshad Safrulla]

May I ask whats the hypervisor and the version? If its public cloud what platform?

[Calin Cristea]

HyperV. I do not have acces to virtual 

But for tests, i have i installed a vmware machine with the same image and try to downgrade. Same result. It's not about the virtual enviroment.

[Scott Fella]

Install the version you want, do not downgrade, that is not supported.  Download the iso and install it on Hyper-V.

Software Download - Cisco Systems

[Scott Fella]

Why not just spin up a new VM with the code you want and copy the config over to it and migrate the ap's to the new controller?

[Calin Cristea]

Hi Scott, because, i have add a lot of licenses to this WLC already, and i have configured one branch with 9115 AP`s to this WLC.

This is my last resort, creating a new HyperV image with a new Controller, but i need to open a TAC to move my DNA licenses...

I did`t know it is so frustrating trying to do a simple downgrade. I have also try the bundle mode, not working, md5 shows ok.

[Scott Fella]

It's not always clear, but there are dependencies on why downgrades from an image is not supported.  You don't want to be in that mess when things just are broken.  Moving license is not bad to be honest, just another step.  I have brought up 9800-CL's and moved ap's around, just for testing.  To me, spinning up a new VM is simple and very easy.  I do this with Prime, and ISE all the time.  Downgrading my 9800-CL's is not even an option for me, a new VM is what I always do.  If something gets corrupted, it is a pain in the A$$ and takes a very long time to figure it out.  

[Leo Laohoo]

Don't downgrade to 17.3.X. 

In the next few weeks, Cisco will release 17.9.3.  Read the 17.9.3 Release Notes when it comes out. 

That is all I am going to say.

[Scott Fella]

Leo is right on track, you either can wait or install the correct version you want.

[Rich R]

I think you might have screwed up the CLI process by typing install commit *after* you had already installed and committed 17.3.6?
Either use one-shot or step by step but not both.
The install script is clunky and error prone at the best of times - doing that probably confused it (doesn't take much)

[Calin Cristea · Accepted solution]

So, after i have talk with the TAC engineer, it seems that downgrade it is not officialy supported. I have installed a new controller and moved the AP`s. Thank you very much for all the support guys. Really appreciated!

Any new VM instance created with version greater than or equal to 17.6.x cannot be downgraded to any lower versions. This restriction is due to the newer disk partitions required for UEFI.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/9800-cloud/installation/b-c9800-cl-install-guide/controller_overview.html#concept_z44_fcm_cdb

It would worked if i had 17.3, then upgrading to 17.6 and then downgrade again to 17.3 ...