Thursday, March 2, 2023

Cisco Catalyst 9300 IOS-XE Upgrade

My family and I spent our Christmas holiday last year in Bohol, Philippines. The people there were very warm and hospitable. We visited several tourist spots such as the famous Chocolate hills and Sanduguan (Blood Compact) shrine.



This is a Tarsier, which is one of the smallest primate in the world. They're only found in the forests of Southeast Asian islands (Philippines, Indonesia and Malaysia)

We tried the Loay River Cruise and had buffet lunch in Rio Verde floating restaurant. The Loay River Cruise has a more "nature view" (and good food too!) compared to Loboc River Cruise which we've tried many years ago.

This is the new Cisco Catalyst 9300 switch (48-port). The USB slot (type A) is found in front of the chassis (beside the mini USB console port) and it's used for file transfers (for software upgrades).

The console port (RJ-45) and dedicated out-of-band (OOB) management port are found at the rear (left most).

It's has a dual power supply. Power Supply Unit (PSU) slot A is located on the left and slot B is on the right.

Below are the steps in upgrading the IOS-XE software in a Cisco Catalyst 9300 switch:

1. Ensure there's enough flash space for the new IOS-XE file. You can use the install remove inactive privilege exec command to remove old and unused files.

#install remove inactive

 

2. You can use the USB slot to quickly transfer the new software image.
 

copy usbflash0:/cat9k_iosxe.17.06.04.SPA.bin flash:

 

3. Verify the MD5 hash and compare the string output published in the Cisco download website.


verify /md5 flash:cat9k_iosxe.17.06.04.SPA.bin

 

4. Check if the boot variable is set to flash:packages.conf
 

show boot system

 

5. Set the boot variable if it's not yet configured.


boot system flash:packages.conf
 

6. Install/activate the new IOS-XE software, type "yes" to proceed.

install add file flash:cat9k_iosxe.17.06.04.SPA.bin activate commit



7. Verify the new package file and IOS-XE version.

dir flash:*.pkg


show version

 

8. Remove old files.


#install remove inactive


Switch#show version
Cisco IOS XE Software, Version 17.06.03
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.3, RELEASE SOFTWARE (fc4)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Wed 30-Mar-22 23:09 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON
BOOTLDR: System Bootstrap, Version 17.6.1r[FC2], RELEASE SOFTWARE (P)

Switch uptime is 1 hour, 5 minutes
Uptime for this control processor is 1 hour, 8 minutes
System returned to ROM by PowerOn
System image file is "flash:packages.conf"
Last reload reason: PowerOn


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.


Technology Package License Information:

------------------------------------------------------------------------------
Technology-package                                     Technology-package
Current                        Type                       Next reboot  
------------------------------------------------------------------------------
network-essentials      Smart License                    network-essentials  
dna-essentials          Subscription Smart License       dna-essentials                
AIR License Level: AIR DNA Advantage
Next reload AIR license Level: AIR DNA Advantage


Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco C9300-48T (X86) processor with 1317232K/6147K bytes of memory.
Processor board ID FOC26241234
1 Virtual Ethernet interface
52 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces
2 TwentyFive Gigabit Ethernet interfaces
2 Forty Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
1638400K bytes of Crash Files at crashinfo:.
11264000K bytes of Flash at flash:.
1974239K bytes of USB Flash at usbflash0:.

Base Ethernet MAC Address          : f8:e5:7e:a9:12:34
Motherboard Assembly Number        : 73-19915-04
Motherboard Serial Number          : FOC26215678
Model Revision Number              : H0
Motherboard Revision Number        : B0
Model Number                       : C9300-48T
System Serial Number               : FOC26241234
CLEI Code Number                   :


Switch Ports Model              SW Version        SW Image              Mode   
------ ----- -----              ----------        ----------            ----   
*    1 65    C9300-48T          17.06.03          CAT9K_IOSXE           INSTALL


A syslog will appear once the USB flash drive is inserted.

*Dec  7 05:34:59.295: %IOSD_INFRA-6-IFS_DEVICE_OIR: Device usbflash0 added. Please configure no iox followed by iox to migrate the Applications from flash
Switch>

Switch#copy usbflash0:/cat9k_iosxe.17.06.04.SPA.bin flash:
Destination filename [cat9k_iosxe.17.06.04.SPA.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCC

< OUTPUT TRUNCATED >

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
1017587860 bytes copied in 59.010 secs (17244329 bytes/sec)


Switch#verify /md5 flash:cat9k_iosxe.17.06.04.SPA.bin
.......................................................

..........................................................................................................................................Done!
verify /md5 (flash:cat9k_iosxe.17.06.04.SPA.bin) = dae85d113b3438d4f00e49ccdd1ec611


Switch#show boot system
---------------------------
Switch 1
---------------------------
Current Boot Variables:
BOOT variable does not exist

Boot Variables on next reload:
BOOT variable = flash:packages.conf
Manual Boot = no
Enable Break = no
Boot Mode = DEVICE
iPXE Timeout = 0


Switch#install add file flash:cat9k_iosxe.17.06.04.SPA.bin activate commit
install_add_activate_commit: START Wed Dec  7 05:41:10 UTC 2022

System configuration has been modified.
Press Yes(y) to save the configuration and proceed.
Press No(n) for proceeding without saving the configuration.
Press Quit(q) to exit, you may save configuration and re-enter the command. [y/n/q]n

*Dec  7 05:41:32.442: %INSTALL-5-INSTALL_START_INFO: Switch 1 R0/0: install_engine: Started install one-shot flash:cat9k_iosxe.17.06.04.SPA.bininstall_add_activate_commit: Adding PACKAGE
install_add_activate_commit: Checking whether new add is allowed ....

--- Starting initial file syncing ---
Info: Finished copying flash:cat9k_iosxe.17.06.04.SPA.bin to the selected switch(es)
Finished initial file syncing

--- Starting Add ---
Performing Add on all members
  [1] Add package(s) on switch 1
  [1] Finished Add on switch 1
Checking status of Add on [1]
Add: Passed on [1]
Finished Add

Image added. Version: 17.06.04.0.4912
install_add_activate_commit: Activating PACKAGE

*Dec  7 05:44:11.611: %ISSU-3-ISSU_COMP_CHECK_FAILED: Switch 1 R0/0: install_engine: ISSU compatibility check failed for 17.06.04.0.4912Following packages shall be activated:
/flash/cat9k-wlc.17.06.04.SPA.pkg
/flash/cat9k-webui.17.06.04.SPA.pkg
/flash/cat9k-srdriver.17.06.04.SPA.pkg
/flash/cat9k-sipspa.17.06.04.SPA.pkg
/flash/cat9k-sipbase.17.06.04.SPA.pkg
/flash/cat9k-rpboot.17.06.04.SPA.pkg
/flash/cat9k-rpbase.17.06.04.SPA.pkg
/flash/cat9k-lni.17.06.04.SPA.pkg
/flash/cat9k-guestshell.17.06.04.SPA.pkg
/flash/cat9k-espbase.17.06.04.SPA.pkg
/flash/cat9k-cc_srdriver.17.06.04.SPA.pkg

This operation may require a reload of the system. Do you want to proceed? [y/n]y   // TOOK 4 MINS
--- Starting Activate ---Performing Activate on all members

*Dec  7 05:47:48.187: %INSTALL-5-INSTALL_AUTO_ABORT_TIMER_PROGRESS: Switch 1 R0/0: install_mgr: Install auto abort timer will expire in 7200 seconds  [1] Activate package(s) on switch 1
    --- Starting list of software package changes ---
    Old files list:
      Modified cat9k-cc_srdriver.17.06.03.SPA.pkg
      Modified cat9k-espbase.17.06.03.SPA.pkg
      Modified cat9k-guestshell.17.06.03.SPA.pkg
      Modified cat9k-lni.17.06.03.SPA.pkg
      Modified cat9k-rpbase.17.06.03.SPA.pkg
      Modified cat9k-rpboot.17.06.03.SPA.pkg
      Modified cat9k-sipbase.17.06.03.SPA.pkg
      Modified cat9k-sipspa.17.06.03.SPA.pkg
      Modified cat9k-srdriver.17.06.03.SPA.pkg
      Modified cat9k-webui.17.06.03.SPA.pkg
      Modified cat9k-wlc.17.06.03.SPA.pkg
    New files list:
      Added cat9k-cc_srdriver.17.06.04.SPA.pkg
      Added cat9k-espbase.17.06.04.SPA.pkg
      Added cat9k-guestshell.17.06.04.SPA.pkg
      Added cat9k-lni.17.06.04.SPA.pkg
      Added cat9k-rpbase.17.06.04.SPA.pkg
      Added cat9k-rpboot.17.06.04.SPA.pkg
      Added cat9k-sipbase.17.06.04.SPA.pkg
      Added cat9k-sipspa.17.06.04.SPA.pkg
      Added cat9k-srdriver.17.06.04.SPA.pkg
      Added cat9k-webui.17.06.04.SPA.pkg
      Added cat9k-wlc.17.06.04.SPA.pkg
    Finished list of software package changes
  [1] Finished Activate on switch 1
Checking status of Activate on [1]
Activate: Passed on [1]
Finished Activate

--- Starting Commit ---
Performing Commit on all members
  [1] Commit package(s) on switch 1
  [1] Finished Commit on switch 1
Checking status of Commit on [1]
Commit: Passed on [1]
Finished Commit

Send model notification for install_add_activate_commit before reload
[1]: Performing Upgrade_Service
300+0 records in
300+0 records out
307200 bytes (307 kB, 300 KiB) copied, 0.195936 s, 1.6 MB/s
/usr/sbin/boot_verify_package: /ucode0/cat9k-select_srdriver.SPA.pkg: Digital Signature Verified
/usr/sbin/boot_verify_package: updatepcr8d unavailable, KGV data not extended to PCR8 - No such file or directory.
/usr/sbin/boot_verify_package: INFO: Collected KGV data for package cat9k-select_srdriver.SPA.pkg.
  SUCCESS: Upgrade_Service finished
Install will reload the system now!
SUCCESS: install_add_activate_commit  Wed Dec  7 05:49:09 UTC 2022

Switch#
Chassis 1 reloading, reason - Reload command
Dec  7 05:49:12.506: %PMAN-5-EXITACTION: F0/0: pvp: Process manager is exiting: reload fp action requested
Dec  7 05:49:13.437: %PMAN-5-EXITACTION: R0/0: pvp:ger is exiting: rp processes exit with reload switch code


Initializing Hardware......

System Bootstrap, Version 17.6.1r[FC2], RELEASE SOFTWARE (P)
Compiled Wed 05/12/2021 15:39:34.01 by rel

Current ROMMON image : Primary
Last reset cause     : SoftwareReload
C9300-48T platform with 8388608 Kbytes of main memory

boot: attempting to boot from [flash:packages.conf]
boot: reading file packages.conf
#
####################################

< OUTPUT TRUNCATED>

 

It took around 6 minutes for the software upgrade to finish.

Switch#show version
Cisco IOS XE Software, Version 17.06.04
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.4, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Sun 14-Aug-22 08:58 by mcpre


Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.


ROM: IOS-XE ROMMON
BOOTLDR: System Bootstrap, Version 17.6.1r[FC2], RELEASE SOFTWARE (P)

Switch uptime is 2 minutes
Uptime for this control processor is 4 minutes
System returned to ROM by Reload Command ReloadReason=Image Install
System image file is "flash:packages.conf"
Last reload reason: Reload Command ReloadReason=Image Install


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.


Technology Package License Information:

------------------------------------------------------------------------------
Technology-package                                     Technology-package
Current                        Type                       Next reboot  
------------------------------------------------------------------------------
network-essentials      Smart License                    network-essentials  
dna-essentials          Subscription Smart License       dna-essentials                
AIR License Level: AIR DNA Advantage
Next reload AIR license Level: AIR DNA Advantage


Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco C9300-48T (X86) processor with 1317097K/6147K bytes of memory.
Processor board ID FOC26241234
1 Virtual Ethernet interface
52 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces
2 TwentyFive Gigabit Ethernet interfaces
2 Forty Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
1638400K bytes of Crash Files at crashinfo:.
11264000K bytes of Flash at flash:.

Base Ethernet MAC Address          : f8:e5:7e:a9:12:34
Motherboard Assembly Number        : 73-19915-04
Motherboard Serial Number          : FOC26215678
Model Revision Number              : H0
Motherboard Revision Number        : B0
Model Number                       : C9300-48T
System Serial Number               : FOC26241234
CLEI Code Number                   :


Switch Ports Model              SW Version        SW Image              Mode   
------ ----- -----              ----------        ----------            ----   
*    1 65    C9300-48T          17.06.04          CAT9K_IOSXE           INSTALL