Cisco Customer Success - Video

Catalyst Center: Ugrade to 2.3.7.10 release with peace of mind

Playback confirmation!

Do you want to resume playing from last left location?

Chapter 1 Thumbnail
00:10
Welcome, speakers, agenda, and session logistics
Chapter 2 Thumbnail
02:18
Why upgrade to 2.3.7.x: security, reliability, features, and support
Chapter 3 Thumbnail
05:49
2.3.7 AIOps, NetOps, SecOps, and DevOps enhancements
Chapter 4 Thumbnail
08:08
What’s new in 2.3.7.9 and the case for 2.3.7.10
Chapter 5 Thumbnail
14:06
Upgrade prerequisites, planning, and best practices
Chapter 6 Thumbnail
18:09
Backups and pre-upgrade validation (ORA/validation tool)
Chapter 7 Thumbnail
22:27
Upgrade execution: online and offline methods
Chapter 8 Thumbnail
26:23
CLI demo: Maglev access, catalog checks, and ORA run
Chapter 9 Thumbnail
35:24
GUI demo: backup, validation tool, and performing the upgrade
Chapter 10 Thumbnail
45:30
Post-upgrade checks, key takeaways, Q&A, and wrap-up

Transcript

Thank you everyone for joining today's EIS session on Catalyst Center upgrade 223710 with peace of mind.00:10Next slide. So today we have two present two presenters, Hardik and I will be the presenters, Hardik will be the presenter and I'll be doing the demo. So let me just give a quick intro about ourselves. So Hardik has been in.00:19The industry for more than 18 years now and he is working as a customer success specialist in Cisco and he works in enterprise domain, and I'm also a customer success specialist and I have been in the corporate for more than three years now and I am a CCNA and why.00:38Certified. So that is a brief introduction about ourselves. Yeah. So today before we actually start our presentation, let me quickly give you some logistical items for a smooth session. So during today's session, you'll have the opportunity to ask any questions you might have about.01:00Catalyst center. Just type your questions into the Q and A panel which you can find in the three.menu on the right side bottom of your screen. You can also use the hand icon to raise your hand and one of our panelists will respond and we request you to please lower your hand once your question has been answered. And for any answered questions, please.01:18Not worry, there will be a Q and A with our experts following today's presentation. And if you are having any kind of audio issues, please use the chat panel again that you will be finding in the right side bottom of your screen and one of our panelists will be able to assist you. And with that, I hand it over Tok over to you.01:38Great, thank you Russia. Thanks for the wonderful introduction, right? So hello everyone. Good morning. This is Hardik from customer success team as customer success team. So today we are going to cover how you can able to upgrade the catalyst center 2372223.01:5807:10, right? With with as much as.02:18Easy way you can, right? And we will be sharing the best practices around it, ok? So what we are going to cover today is the upgrade, why to upgrade to 23710, what is the upgrade readiness or what is the Aura tool or as validation test and.02:22And how to perform the upgrade steps.02:42So, today, very, very 1st part that we will be covering is the up upgrade benefits, right? So what is, what is there in 23710 or 2379, right? And, and an entire, 237237 release.02:46Okay, that is 1 s thing that we will be covering the capabilities around the 23710, what are the best practices to upgrade and ok and the execution, how, how you can able to do the upgrade in a stepwise manner, ok?03:03Now, why to upgrade? So there are, there are basically a four pillar that you, you basically consider why to upgrade to the another versions or a newer versions kind of thing. So very 1st part is the enhanced security, ok? So.03:23There are, every software will have some vulnerabilities associated with it, ok? And that vulnerabilities will be patched during the, during the lifetime of that particular iOS image or as, as a software as a whole. Now, you, you all might be heard a very popular.03:41The term in a trend which is a glass wing.04:01Now Glasswing is another, I would say a project which mandate us to upgrade the software, ok, as fast as possible, ok? You might have heard that Glasswing has, you can say unearth the vulnerabilities, which is around 20 years.04:04In the system, right? In the Linux system or PSD system, ok? So, yeah, so upgrade is very much necessary. It will help you to you can say, you can say patch your patch the vulnerabilities in your existing software versions.04:25Second thing is, of course, the reliability. Once your version is patched, your software is more reliable than the previous one, ok? 3rd thing is the new features, ok? So you will come across the new features, right? Which will enhance your.04:41NetOps and aiops, feature set, ok? It also improve your the dev OPs if you're using much of the APIs, API part and the security which is the segmentation thing, ok? So these kind of new features will be introduced in the newer versions, right? That's why you should upgrade it.04:58And the other part is the continuous supports, right? So if you are using the, the end of life software, then it's very, very difficult.05:18For any of the OEMs, right, to support you. So that's, that's the, that's the four pillar that why you need to check for the upgrade, ok? Now, come across the this this slide is basically on the 237, the entire enhancement, right? So on the AI ops.05:29Perspective we have introduced the event analytics which is basically having the all logs syslogs which is coming from the onboarded devices, how you can able to categorize it and what information that you can take it out using the AI, ok? That is what.05:49The AI event analytics. Then the preview dashboards and the 3rd party device supports. So Cisco catalyst centers is now is supporting the 3rd party device basic monitoring, right? Now, if you come to the netops part, right, it is about the enhanced how you can enhance the efficiency.06:09So it, it comes to the 3rd party device because we are not only focusing only on a Cisco devices, but we are also now you can able to onboard the 3rd party devices into the catalyst centers and get the basic visibility out of it. And that visibility is based on the.06:29Two part, ok? Second, second is more, more onto the visibility and control.06:503rd one is your 9800 controller. Now you can able to do the PNP, ok, which is a day zero onboarding with the template. And the, the 5th one is you can also.06:57Push your AVC and QoS configurations directly when you onboard the device. Now on the secops part, it's a land automation enhancement means you can, you can now have on the SDA perspective, you can do five LAN automation jobs at the same time.07:12Okay, there are enhancement in the UI and the SD access compatibility check which is built in now in the catalyst center. On the devops side it's a more number of APIs that is available, ok, to use.07:31Now, specific to the 2379, ok, because this is this is the very I would say a major versions in in the in the catalyst center software you can say spawn, ok? It supports many of the advanced features.07:50Like e.g., if I take on the improved performance, it is a Wi Fi seven.08:08Health dashboard which also displays the MLO clients, which is a multi link operation client. AI NNS RRM, which is very very beneficial to all the customers, ok? Now, the reason is the radio resource management management which will individually done by the WLC.08:13Now it has been taken care by the AI and the catalyst center part, so it will give you a much more visibility and it will, you can say stabilize your or stabilize your Wi-Fi environment. Okay, then there are there are some date.08:33Issues in the earlier reports which is which was corrected, ok? From the wireless automations part now when you onboard the APs, you can directly do the license provisioning or is there if there is any issue with the licenses, it will be highlighted.08:53On the 9800 controller earlier it was we we were using the learn device config part, ok? Now you can onboard the brownfield WLC and you can enable the pre per device configurations to manage your WLC, ok? So you don't need to go with the learn.09:10Device workflow.09:293rd one is the license manager. It enhances, the, the, you can say, Cisco network subscription licenses, tracking part, and there are the new reports available in the, in the catalyst center reports.09:31Another thing with respect to the manageability part, the ISSU support is available for 9400 and the 98 hundreds virtual appliances, API enhancement and the new event notifications with respect to the certificate.09:51Exp with respect to the expanded deployment or maybe the secops part, right? It's a fabric site and the fabric events which which has been updated and with respect to the learn device configurations.10:09Can say that is deprecated and the device config migrations or the per device configurations thing is introduced. Okay, with respect, now we come to the part which is 237 which is a recommended release for now for now, right? And.10:27And in that what is what is improved? So AFC support which is an automatic automatic calc fabric.10:45Frequency calc port coordinations, right? Which is which is introduced and it, it will be showing into your AP three 60 page. Then Wi Fi seven enhancement, we are catalyst center now supports the new APs like 9172H and 91721.10:55Optimize, efficiency optimizations, we have synchronizations of wireless controller configuration and we are having the F AFC integrations with standard power model, license manager enhancement and support of.11:15For OS essentials and OS advantage perpetual licenses, ok? Earlier this was the this licenses is called the network Essentials and network advantage. Now it is called OS Essentials and OS advantage. Okay and from the manage manageability perspective.11:30View it is a announcement to API and the license compliance tracking.11:50On the expanded deployment perspective, it is the the plug and play. Now it is supported with network essentials and network advantage stack, exp and the 99610 and 935 zeros.11:56Switches are now being supported by catalyst center and the new AP model with the release of seventeen.seventeen.one iOS. Now very very very let's summarize this.12:12This entire thing, right? If you are into 2377.12:32You are entirely missing on Wi Fi seven support, right? That is 1st you are missing on advanced licensing framework, critical automation optimizations, introduced over several releases. So if you are on two night.12:362377 it is a time for you to upgrade to 2379 or 23710, ok? If you are onto 2379, your upgrade, if you upgrade to 23710, right? You will have the certain operational.12:53Efficiencies introduced, ok. So 23710 is basically the stability release, ok? So whatever the, the caveats or bugs on the earlier versions which is patched in 23710.13:10Okay, so 23710 is a go to release for everyone now. Okay, the bottom line is that if you are upgrading from 237 to 23710, you will have the stability modernizations and future proofing. If you are on 2379 and you are going to 23710, then.13:26Of course you will, you will get efficiency.13:46Regulatory compliance and expanded flexibility. So now with respect to the upgrade best practices, what you need for upgrade? So very 1st part you need to have.13:49A Cisco account ok then you need to have your smart net contract to be active. 3rd one, you need to have your super admin role to for your upgrade, ok? Another part that your cluster link.14:06Or the enterprise network link should be in the upstate and your you can say your whatever your resources, it is a back for resources in terms of the backup.14:24Right, should be should be should have the connectivity. Another technical requirement is with respect to the, you can say your root partition should be at least two GB free. Okay, data partition to be 35 GB.14:40And your/data partitions should not be more than 70 % full, ok? If you are, if you are on to three, three nodes, then all nodes in the cluster should be, it's upgraded simultaneously, right? So there is NO way that you can upgrade the one.14:57Node and then.15:16You another node another node, right? So all three nodes will be updated simultaneously. So you need to plan the maintenance window in in that way, ok? Now, another continuing the the previous slide.15:18Yeah, very 1st part that you need to review the release note, ok? A release note will have the the I would say more informations about what are the bugs which is fixed by this release, what are the open bugs?15:37Okay, so those things you need to, go carefully before the upgrade, then, ok, you need to have you can say software, Cisco is having a software compatibly metrics.15:56That you should go through for all your onboarding devices, ok? So that you will not have, you can say a downtime for any of your productions devices, ok? Then your ice you need to check within the software compatibility, the ICE versions competing.16:14Ability, ok? You need to perform the database backup or or the catalyst center backup. You need to execute the validation test set and you need to raise the proactive case, right?16:34Now, when I say a proactive case, tech will only guide you, it will not support you during the downtime or a maintenance window, ok? When I say not support you means in the activity of upgrade. If you are stuck in the upgrade for some.16:50Some region.17:10Tech will definitely help you out, ok? Allocate the main and you need to allocate the maintenance window, you need to do the, the post upgrade task as well. I when I says post upgrade task in the sense, you need to check.17:11How whether all devices you can see is in a managed state and you are not cross check on the center part whether you can able to push the configurations or, and the other thing, right? So those are the post upgrade check that you need to do it.17:32Now with respect to the backup servers, right? You need to take the two kind of, the backup. The very 1st part that you need to ensure is that the server path over here and server path over here.17:52Should not be the same, ok? It will not, you can it will not be, I would say, problem if you are into 237 release, ok? But when you are moving to the next release in the three.trail.18:09You need to have this two parts should be different, ok? So when I say two parts should be different, it should be a different directory and not the same directory and now with respect to the if you are into 2377 or earlier release.18:27Okay, there is a Aura tool. Now this Aura tool is basically a pre upgrade checklist.18:47Okay, you need to this you need to run this tool, ok, get the report and submit that to the tech for the verifications. And once the verification comes from the tech.18:55To go ahead for the upgrade, then you should go ahead for the upgrade, right? So that is the steps that you need to follow before any upgrade, ok? If you are into 2379, there is a a validation tool.19:11Tool, which which gives the similar output as a Ora tool, ok? But if you are into 237 or earlier release, you need to go with the tool which is a little bit of the CLI hands on, ok? So very 1st part that how you do it is you need to.19:26And say download the file and go to the DNA Center and execute it. Using the pre installed libraries, it will check all the checklist of the catalyst center.19:46Is what only input required is your Cisco DNA center, you can say admin password, ok? It will generate the PDF, ok, in the in the zip format. So you need to extract that PDF using the S using the SS SCP.20:00Or other method, ok? It is a known intrusive and it it supports these releases, ok? Well the note notable thing that if you are into the non SD environment it will it will take less than 15 min but if you are into SDA environment.20:20Based on the number of devices in SDA, right? It will, it will take that much minutes. So if you are having a 30 devices, it will approximately take 30 min. Now, what Ora tool.20:40Contains, right? So it will it is having a scale test infra test assurance health health assurance services health check, CLI some of the SDA CLI captures, control security audit and the rest of.20:58The things, right? So this tool is is basically a mandatory for each before each upgrade, ok? And you need to get the go ahead from the tech, ok, before going for upgrade.21:17Okay, now this is with respect to the validation tools snapshot, right? So you need to go to, system health, so system system three 60 in which you are having a system health and that you are having this validation tool.21:34This validation tool you need to give the name and the descriptions and the other set, you can say you need to select all the check boxes and run. That is the easiest way that you can do it. Earlier you need to go onto the CLI and.21:51And execute the Ora tool. Now it is very friendly. Okay, now how you do the upgrade, right? What, what are the steps? So very 1st part that when you go to system software management.22:10You will see what are the image that you want to upgrade, ok? You download the image and once once it is download it is you can able to see it installed now part. In case if you don't want to install, say, 2353, and you want to install some other.22:27Versions, then you can go for available installation and select that image. Once you start install now, when you, when it completes, you will see some of the.22:46Services, or catalyst center services which you need to install. So you need to install all the services, which is there in, in your system software management page. And once you install, you will, you will see this kind of.23:03This kind of status on dually center, ok? Now, this all the the previous one is for the customers who are, who are connected to the internet from the catalyst center or can able to connect internet via the catalyst center.23:20Okay, but this one is for the offline upgrade. So in case if you you are restricted to use the internet on catalyst center, then you can use this method, right? To do the offline upgrade, ok? It's, it's little bit complex, but it's not too much complex.23:41So, very 1st part that you need to have the iOS image, ok? And this iOS image you can request a Cisco tech to to give it in your you can say in your software.cisco.com login, once you once you have it, you download it.24:01You check you check the checks, checksum of it and you do the once you upload it into a catalyst center, you do the integrity check via the checksum, you need to see that.24:20The checksum which is available on Cisco site and the checksum which is which is there on the catalyst center should be the same, ok, before you go for up start the upgrade, ok? Another part that when you place your, the.24:35IOS image that if you are into the three node cluster, you need to validate your catalog where your catalog server service is running and the server in which your catalog service is running, you need to put it into the data/temp folder.24:51Right, this is and once you put it into data/folder, you need to change the permission of that file, ok? 7777 is basically you can able to execute that file from the catalyst center, right? And.25:12Once this, particular part is successful, ok, you will see this particular image onto the soft, onto the system, system and software management page, and from there you can start installing it.25:28Okay, another thing that you need to do if you are into the air gap or a offline upgrade, then you need to download the knowledge pack. You need to download the KGB file, and you need to update all the application services.25:46Right, and that's it from my side on the presentation part. I'm handing over to Lassia for a demo. Thank you, Hadik. I'm stopping my screen.26:07Yeah, just give me 1 s I hope my screen is visible and I'm clearly audible. Yes, last year.26:23Maybe if you can it's little bit haze, your screen is it for me or for all? Can somebody else confirm can?26:40Because it is not clear, maybe you can increase the font size here a little bit but this is a recording. Maybe maybe maybe we can go go ahead. Sure.26:55So team, I'm sure you might already have gone this seen this particular screen. This, this is the CLI of DNAC catalyst center. So as you can see, we have already logged into it. So I just want to make one thing clear team I'm not, so when you log into centres.27:12Right that is maglev. You need to log in through the port 2222I just want to put it there. So once that is done, you can see here that Maglev restricted shell is active, and then that means what is happening is from.27:31I mean from 2337, we have restricted the access for all the command execution for everybody. That is only and only when you have root access, you will be able to execute all the commands, Whereas if you are in the restricted shell, then you'll only be able to run few show commands. So now.27:48Now for that I mean, to go into root access.28:08You need to run this command if you are on about 2337, then you need to run_shell and it will generate a challenge key and that challenge key has to be given to tack and they will be giving you a challenge response. Whereas if you are on below 2337 or.28:1412337, then you will just need to give the password of your maglet, that's it.28:33So since this demo has been taken for the org for the version which is below 2337, we need to just give the password, but that will come in the later of the demo. As of now, what we are going to do is we are going to check few of the prerequisites are met or not. Now, as you can see, we are checking if the.28:39Cluster is up. So in the demo, in the presentation we mentioned that cluster state should be up and then only the upgrade will be success. So for that we are checking that. So you see here the cluster interface is up. So that prerequisite is already met. So the next thing that we will be checking is the parent catalog.28:59Work server repository. Now you might ask what is that? That is nothing but it directs the catalyst center to point to the repository where the upgrade packages, I mean where the next version packages will be residing. That is if you are going to upgrade to 23372377, then.29:19Your parent catalog server repository will be cisco DNAC. So now you see for that I have run this command Maglev catalog Maglev catalog settings display and if you can see parent catalog server repository, Cisco DNAC, that is I'll be upgrading to I mean again if you are going to upgrade to 2332355 or two.29:39377. Both the repository is same.29:59And also one more thing that we need to check here is that the parent catalog server is this one, that is cisco connect dna.com. So these two should be correct. And if you are going to upgrade, if your center is an air gapped environment, then though offline mode should be true.30:03So these are some of the outputs that we need to check before we start the upgrade. And now we are again validating just to validate now. Now, as you can see, maybe after scheduling the validate, you can just wait for 10 s and then run this command maglev catalog setting status, and as you can see.30:22The certificate that is catalyst center will be having its I mean parent catalog will be having a certificate that has to be validated and the connectivity to this particular server should be success, which we are, we are having and then the disk status is success. So as you can see, it is mentioned successfully validated catalog settings. Now.30:42Those are some of the prerequisites. The next thing is we will be checking the disk space. If we, if the catalyst center is having enough space, as you as mentioned, the/partition should be having two GB. And as you can see, we have 3538 GB, which is.31:02More than what we need and/war and/data also should have more than 50 % of their 50 % availability. And as you can see, we have good amount and then so these are the prerequisites. The next thing is.31:21We will be trying to execute the order now. For that there is a repository, where is the where the order script is present. Now we 1st need to clone that or pull that repository. So for that I have tried command running this command git. But you, if you observe, we got this message.31:39Unknown command git. That is because there that is because of this restricted shell access. Now, if you are in restricted shell access, then you'll not be able to run git commands. So for that, what I do is I run_shell and it is asking me for the password, which is maglev's password, and once I give, then it.31:58I'll be able to run these git commands. But if the same command that is get command is executed on 2337 or above, then though it will generate a.32:17Key challenge key and that has to be given to tack. They will give a response and you need to enter it again. So that it so we have upgraded that part. Now, then we will just pull the repository.32:28And execute the order now. So my script is present in this specific DNAC aura. I'm just pulling it and it's mentioned already up to date. Now I'll just execute it. So this again will take based on the number of devices.32:45And also it mostly it will take at least 10 min. Ten to 20 min, within ten to 20 min it will execute the whole script and it will also generate a PDF and further more logs as well. But the only thing that we need to check is PDF. So in the PDF we will be able to see what is the status of your catalyst center in detail like.33:05Not only just upgrade, but it will check the whole status of catalyst center. So as you can see here, it is mentioned Cisco DNA Center infra health results, and then device assurance results, upgrade readiness, SD access health. So one best practice that we would suggest is, you know, if your catalyst center is having a.33:25Any issues or if it's slow or something, you can just try executing this.33:45Before reaching out to tech and see if there are any errors here because this script is to understand the status of the catalyst center. So as you can see, it will show you the number of executed checks and how many errors have been found and how many warnings have been found. And as you scroll down, it will give you the.33:51Errors information. I mean what is the error?34:11And if you go scroll more down, it will also give you a little more detail. What is the command that it has executed and what was the error that it has received. Now you can see what we have done is we just directly went to upgrade readiness checks. So team, you, as mentioned, you can generate the tag and I mean.34:14You can generate the order and share this with that and they will check it and they'll let you know what are the errors that needs to be worked on before we upgrade and what can be.34:34Ignored for now. As you can see, we just are checking the catalog settings, the one that we have already done, and then we will be checking the ports so that the port should NO one running part should be zero, and sometimes the.34:45We have to clear all the queues also that is if there are any queues that are running, so those also have to be cleared. So there will be many things and then you see parent we are also checking parent repository settings. So in this way we will be checking many things in this upgrade readiness part. So once this is executed and.35:00You get the report, you can share it with TAC and they'll let you know the.35:20Diagnosis I mean diagnosis if any errors needs to be resolved. Now this is how it works. Yeah. Let me show you the GUI part that we have mentioned like we have validation tool from 2337, so in on 2337 only upgrade readiness check.35:24Tests can be done, Whereas from 2355, all the tests can be done. So as you can see the version that we are currently running is 2379 and 1st we will be doing a backup, so for that system backup and restore.35:45If you go to this configure, 1st we need to configure this, give the IP address of the backup server and create a directory and team we that we will share the backup and restore guide. So there it is mentioned properly like properly mentioned like.36:01What is the, what are the privileges that this particular folder should have? So we need to ensure that we meet all those requirements and then give the username and password and this encryption passphrase is the one that so you have to give this.36:19For, you have to enter this and you can you you will be using this when you want to restore this specific backup. So that is what and then Cisco catalyst center, I mean NFS is for assurance. Now once you configure both the things, you can go and create.36:38The backup. So you can schedule it daily or you can schedule it weekly. As of now, I have not configured the NFS server, so it's giving me this warning and I can only take the backup of automation. So it's giving Cisco Atlas Center without assurance data. So it will take the automation part. Now, within.36:58It will take some time based on the.37:18Devices that you have and the backup s backup data as well. So it will take at least ten to 20 min. Within ten to 20 min, your backup should be ready. At any point of time if you feel like you should do not want this particular backup to be.37:22Executed then you can just click on terminate.37:41Now that is how the backup is created. And then within a few minutes it should be done, yeah. You see it, so I have forwarded it. Now, once it is executed, once the backup is set, you will be able to see the file size and compatibility. Here you should be able to.37:45See the compatibility as green. That means it is the indication that let's say you have to reimage and you have this particular backup, then what you can.38:05You can only restore this specific backup if this compatibility is green, that is, it is just indicating that this specific backup is only available for 2379. Yeah, that is one more thing that I want to mention. So this specific backup, not only this specific, like let's say you take a backup on 2355, that backup can only be restored on a.38:16In other catalyst center, which is running on 2355. You cannot take a backup from a specific version and put it on other version. It doesn't work in that way. So it is mentioning, ok, you see this particular backup is compatible with this version. So in the similar way, by chance, if you have to reimage while upgrading.38:36Then you can take this particular backup and re image your catalyst center with against same version that you're currently running and restore it. You cannot take the up next version and restore this specific backup. That would be like from the scratch.38:56So that is what it's mentioning. Next thing is, we want to show you the validation tool. So here system health and pools in the tools go to validation tool and you can click on add and just give a name to it. As you can see, you do not need to run all the.39:11Validation sets, it's again depends on your.39:31Requirement if you want to run the whole validation set, that is fine or if you just want to get the upgrade readiness status, that is also fine. So you can see here these are all the checks that will be done assurance NSA web app health and how many devices are in inventory, how many are having good health, how many are having fair health.39:34So in this way it will give you the whole status of catalyst center within few minutes. So that again you can download it as a PDF or you can just view it on catalyst center. So this like previously we used to only have it on CLI, but now it is accessible on GUI as well.39:54Yeah so you can see the you see once it is executed, you can click on this view status and yeah, you can go to info warning critical so it will only give the info one info.40:13Checks and the ones that I mean info in the sense, like everything is ok and warning means warning critical are the ones that are actually having errors and we have to check why why there are errors for that particular check. And then you can export it.40:32You see, again, it will give you how many critical errors are there, warnings are there. So it will give you the version, the node that you are running this particular tool, and it will give you the whole information. How many checks have been done? What are those? What is the message that we have receive.40:50Received.41:08You can, you see, this is the upgrade readiness status. So it says system software update mode is online and the catalog server setting is the specific one which is correct and catalog server repository Cisco DNAC. So team, it is very important that the catalog server is reachable only and only then.41:08Then you will, your catalyst center will be able to get the packages of the next version.41:28And you see backup status is also ok and all the services are, the services restart counts are ok. All these services are operational. So in this way, whatever checks that have been run on the CLI, they will be also running on the GUI and you give you this PDF.41:34So, yeah, that is what, and also there will be some certificates team that also will be checked for the upgrade, so all the certificates should be having at least validity of more than hundred days. So in that way it will also check the certificates.41:54That is what team, and now the next thing is we will just want to show you how to do the upgrade. For that go to system and software management. So here you can see the as of now it is mentioning, I mean this is another lab team, so the installed version is 2377.42:10And if you observe, the release is 237-117-0047. That is because that is the latest version. So you when you open this particular page, you will be seeing the latest version, but you can upgrade to the previous latest versions as well. For that you can go.42:30Go to the other click looking for other releases, click here.42:50And when you click here, you see, you'll be able to see all the previous releases as well. So based on your, requirement, you can select the specific version. If you click on the Cisco catalyst 23710 release notes, it will redirect you to the release notes directly.42:55And again, you can check all the new features that are there on the specific version. Now we will select the 23710 option, yeah, click here again and select 23710.43:13So it will do some pre download readiness checks, pre checks before downloading, and those have to be met, so download and this download again team, it will take some time, but I, I want to mention you mention you do not need to.43:30Keep this tab open or your laptop open. You just start the download and center will take care of it. You can close and do any other works. So I have forwarded it now, but it will at least take one to 2 h for the download to be success. Now, once that is done, here in this.43:48As you see there are earlier releases downloaded on your system. You click on available installations and you should be able to see 23710. And again, there will be some prechecks that will be executed for installation as well. So once that is done, you'll be given this option to install and install. So then team your cat.44:08Okay, so there is difference between download and install team. Download is just copying the file and install is where your catalyst center will go into maintenance mode. So it will not be in the, it will not be working. So for this, we recommend you to have a maintenance window open at least for four to 5 h.44:28Maybe if possible you can take it for to 24 h also. It is recommended because maybe during the upgrade if you guys find of.44:48Have any issues or if the upgrade is stuck, then we can reach out to TAC and they have enough amount of time to do the troubleshooting. So for that purpose, we request you to have the maintenance window, but and I want to mention another thing that is, if your catalyst centers in the main.44:59It doesn't mean your devices will be. Only catalyst center is in maintenance mode. That time catalyst center will not be able to push any configuration or get any.45:19Information from the devices, but that doesn't mean your devices also will go into maintenance mode. So yeah, that is what, so once it is upgraded, you can go, yeah. So you can go to your catalyst center back and when you go to click on this.45:30Mark and about you should be able to see the version that you have.45:50Oh, ok. Yeah, I'm sorry yeah so team once your upgrade is success, you should again be able to see the homepage. Devices everything should be intact team so that it is our responsibility to just once go back and check if all the devices.45:56Are there in inventory and are in managed state, so 1st we need to check the version about and then version should be 23710. Again, it depends on the version that you select and the member ID should be present packages, everything should be there.46:16And the next thing, which we really recommend is go to system and system three 60. Here it is required that the node that, I mean, if it's a single node cluster, you'll only be able to see one node here or if it's a three node cluster, then you'll be seeing three nodes here and three nodes should we have.46:32In this screen icon, which means that they are running.46:52So in I mean they are operational, and then this software management also should be connected to Cisco software server and here you see a release is available for insertion, that is because we are currently on 23710, but there is 23711 also and the latest version is to three.one. So.46:55That's why we are having this option. And if you want, you can just click on this and again upgrade. And then you also once upgrade is done, the backup that you take before the upgrade will not be.47:15Value will not be useful anymore, so it is recommended to take another backup. So, but the best practice is take to take a backup every week. You can schedule it. And then if you have any external connected systems before the upgrade, those also should be operational after the upgrade. You see the ICE is there we.47:27Have integrated our catalyst center with eyes and you see both are available. This is, this is how your catalyst center should be present, should be there after the upgrade also, and then application health both the automation and assurance both should be having this green icon.47:47So team, that is the demo. Let me just just one moment team, yeah.48:04So that is for demo. Let me, and that demo and presentation. I just want to give the quick, a few points to take away from this particular session. So we need to verify the compatibility that is you can go to compatibility matrix and check if your device.48:21That are currently running on a specific version are compatible with the one that with the catalyst center version that we are planning to upgrade to so that you can check from catalyst center compatibility matrix and then review the release notes and check what are the new features that are running.48:41To ensure that your catalyst center catalyst center is good for upgrade. And then always and always have a full backup so that in case in worse comes to worst, in case you need to re image the catalyst center, you will have a backup and that catalyst center will not be.48:59Little new one, you will have your fresh, I mean, your current catalyst center. So that is.49:18Another best practice team. And the other thing is execute the upgrade validation set or order report and get that verified by tag and ensure that all the issues are resolved before you actually start the upgrade because there are some scenarios where the validation set is not executed and.49:25And that has not been checked and we do the upgrade. Sometimes it works, but sometimes we run into issues. So it is always good to me ensure that everything is better and all the issues are resolved before we actually start the upgrade. And please schedule a dedicated maintenance window and.49:45Open a proactive tag case, so again if worst, if worse comes to us and we are met with issues, we can have tax support immediately.50:05So those are few points that we need to mention, we need we want you to take away team and now if you have any questions, please feel free to add them in the Q and A and or chat. We'll be there till eleven five. So or else you can also reach out to us through this.50:14Community.cisco.com so that we have many experts who can answer your questions.50:34Now for the next, for your next for your future for your future journey on catalyst center, you can check on the deploying catalyst center on virtual appliance or on ESXi, so these are some of our other services team we have advisory implementation.50:42And managed and some other services as well.51:01So yeah, I'll hold till, I mean till some time for any questions, our team do we have any questions? I see hand raised all can you.51:06Can you please paste your question in the chat window?51:26Meanwhile, team, let me just share some of the resources that will be helpful for you. So team, we have few more sessions coming up. Those we you can see in this upcoming year.51:33Series link that I have shared and there are many other sessions that we have delivered in the past as well, so you can view those in that particular in the past recordings link.51:50So we have a question team from Graham. I noticed version three.one is out. Do you recommend to upgrade to the latest? Graham as of now three.one, yeah, 23.one is the latest one but we recommend you to be on 23710 as it is the recommended raise as of now.52:03Our team do you have anything to add? Yeah, so the three.one is in the controlled availability, so usually when the Cisco releases a software version, right? It will be earlier we call it as a FCS 1st customer shipment, now we call it as a control availability. So it is for the beta customer.52:24You can use it for the testing purpose, the TAC will not be able to support that version.52:44So once a person has passed certain KPIs, we will move to GA, that is a general availability, ok? It will be available to all customers. After general availability, after some time we will mark the release as a recommended release, ok? So we highly recommend you to.52:52Upgrade the image to the recommended release if it's a production network. But if you want to explore new features and if you want to test some new features, you can use three.one in your lab environment to add on to what Ganesh is.53:12Date right so if you are if you are into 237 release.53:32And if you want to upgrade to three.one, ok, there is a white glove services available. You need to reach out to your Cisco AC team, ok, to enroll into the white glove. And once you once you are selected for a white glove services, Cisco will help you in migrations from 236.53:36Seven to directly three.one. However, three.one is currently not the recommended release. It's the EFC or EFT release, ok? So there are new features that are available, ok, but it's a very, very controlled availability thing, right? So.53:56If you are having multiple catalyst centers, then you can go with that three.one series in one of the catalyst center, ok? That is what we recommend, and if you want to do, if you want to migrate to three.1a white glove service will help you to migrate.54:15Like that's it. Thank you, Hardik. We have other qui we have another question. What are the major function in 23710 has? So I understand this question means.54:31You want to know the new features that are there in 237 tens. So we have mentioned that briefly in the session team. So this recording also will be available in the past recordings link. So maybe you can go back and check sort of ones.54:51Another question from just checking that upgrade will not impact any routers and catalyst center that are managed by Cisco catalyst center, even if the upgrades yes so it's just catalyst center is an upgrade team, even if it fails, it will not be affecting any of your devices as it's on the management plane.55:17Yeah, the data traffic never passes through the catalyst center, so it is basically out of band, so it's nowhere related to your data traffic, so upgrading your catalyst center will not affect our data traffic. There's another question from which.55:38What would be preferred version 23710 or 23711? Nopural currently the recommended release is 23710 and that is what it is it was preferred to upgrade to that version.55:58Just one more thing team, so for your next steps, you can keep an eye out for a survey from us. So it would be from Cisco customer experience. So it will be very quick, maybe just 2 min and we really appreciate it if you can take some time to help provide feedback to improve our future offerings and.56:14Yeah.56:34Okay team, I think we are good with the questions and thank you so much for joining and have a good day. Thank you team. See you everyone, bye bye. Thank you. Bye.56:39

About this Video

Author : Cisco Customer Success

Uploaded : May 21, 2026

NetworkingCatalyst Center
AI summary icon

AI summary

Explore how Cisco Catalyst Center upgrades to 2.3.7.10 deliver enhanced security, reliability, and stability. The recording covers upgrade readiness with the Validation Tool and the Aura Tool, safe backup and restore, and stepwise online or air-gapped installation with checksum verification. See key 2.3.7.x features: AI Event Analytics, the Wi‑Fi seven Health Dashboard with MLO clients, AI NNS RRM for stabilized wireless, third party device visibility, PnP Day Zero onboarding with templates, and direct AVC and QoS pushes. Review License Manager enhancements, OS Essentials and OS Advantage tracking, ISSU support, and post-upgrade verification in System 360.

  • Learn to validate readiness, then back up and restore safely.
  • Understand online or offline upgrade steps, prerequisites, and maintenance windows.
  • Enable AI Event Analytics, configure Wi‑Fi seven dashboards and AI NNS RRM, and onboard third party devices.