Upgrade Guide for Cisco SD-WAN Manager Cluster

Introduction

This document describes a clear and practical reference for upgrading Cisco SD-WAN vManage clusters across different software versions.

Background Information

This document covers all major upgrade scenarios, including direct and multi-step paths, in order to help engineers plan and execute upgrades safely. The document also outlines recommended sequences, key pre-checks, cluster considerations, and post-upgrade validations in order to ensure minimal disruption and consistent system stability.

SD-WAN Manager Cluster Upgrade Procedure: Version 20.9.x to 20.12.x

Prerequisites

Note: Base version must be 20.9.5.2 or later release in 20.9.x train in order to upgrade to 20.12.x or later release. If current version is lower than 20.9.5.2, upgrade to 20.9.5.2 or a later 20.9.x version.

1. Controller Snapshots
Create complete snapshots of all SD-WAN controllers prior to beginning the upgrade process.

2. Configuration Database Backup
Execute a backup of the configuration database and store it in a location external to the sd-wan manager server using the request nms configuration-db backup path <path_and_filename> command.

3. AURA Health Check on sd-wan manager Nodes
Perform the AURA health check on all sd-wan manager nodes as documented in https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/220514-execute-the-aura-script-on-vmanage.html.

4. Image Distribution to sd-wan manager Servers
Manually copy the 20.12.5 upgrade image 'vmanage-20.12.5-x86_64.tar.gz' to the /home/admin directory on each Cisco sd-wan manager server in the cluster.

5. Image Verification
Verify that the upgrade image has been successfully copied to the /home/admin location on all sd-wan manager servers.

6. Six-Node Cluster Persona Verification
For six-node sd-wan manager cluster upgrades, verify that the sd-wan manager persona distribution consists of three COMPUTE_DATA nodes and three DATA nodes. This information can be confirmed on the sd-wan manager cluster management page.

7. Software Inventory Management

• Execute the show software command on each sd-wan manager node in order to verify the installed software versions.
• Ensure that no more than two software images are installed on each sd-wan manager node.
• If additional images are present, remove the obsolete installed images using the request software remove <version> command.

Example output:

vmanage3-2093# show software
VERSION ACTIVE DEFAULT PREVIOUS CONFIRMED TIMESTAMP
--------------------------------------------------------------------------
20.12.5 false false - - 2025-11-24T05:09:38-00:00
20.9.7 true true - - 2025-11-24T05:09:30-00:00

Pre-Upgrade Validation Checks

8. Control Connection Stability Verification

• Verify the stability of control connections between all SD-WAN controllers.
• Capture a screenshot of the sd-wan manager dashboard for documentation purposes.

9. Site-Level Verification
Choose representative sites and capture these logs and outputs:

a. Control Connection Verification
show sd-wan control connections

b. BFD Session Verification
show sd-wan bfd sessions

c. Routing Table Verification
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

d. Application Service Testing
Customer to perform application service testing from a minimum of five branch locations.

10. vSmart Controller Verification
a. Control Connections
Execute show control connections in order to verify that each vSmart maintains control connections with all controllers.

b. OMP Peer Status
Execute show omp peers in order to verify the number of peers on each vSmart controller.

c. OMP Summary
Execute show omp summary in order to verify overall OMP status.

Upgrade Procedure

These high-level steps outline the upgrade process:

1. Software Installation
Install the upgrade image on each Cisco sd-wan manager server using the request software install <path> command. Do not activate the image at this stage.

2. Software Activation
Activate the upgrade image on each Cisco sd-wan manager server using the request software activate <version> command. Note that all sd-wan manager nodes will reboot simultaneously.

3. Upgrade Confirmation
Confirm the upgrade within 15 minutes of activation using the request software upgrade-confirm command.

Note: Following the upgrade, a manual configuration database upgrade is required. Allow 20-25 minutes after the reboot for services to initialize. During this period, you will observe that the App-server and configuration database services do not start automatically, as they require a manual upgrade procedure.

4. Service Status Verification

• Execute 'request nms all status' on all nodes in order to verify the status of services.
• Verify that all services except App-server and configuration database are operational.

Expected observation: App-server will be in a down state, and the configuration database will continuously restart.

5. Configuration Database Upgrade

• Perform the configuration database upgrade only on one node that is running the configuration database service.
• Upon successful completion, the App-server and Config-DB services will restart on all nodes.

Execute this command on one configuration database node:

vmanage-2# request nms configuration-db upgrade
== Upgrading configuration-db to 4.4.15 version..
== The configuration-db upgrade logs are available at /var/log/nms/neo4j-upgrade.log file
== Previous software version on this vmanage: 20.9.7

== Copying dump files remotely
== Loading configuration-db on remote nodes
== Starting configuration-db in all nodes
== Checking for remote nodes
== Starting application server.
== Configuration-db upgrade completed!
== Waiting for instances to synchronize...
== Successfully upgraded configuration-db to 4.4.15 version.

6. Final Service Status Verification

• Wait approximately 5 minutes after the configuration database upgrade completes.
• Execute 'request nms all status' on all nodes in order to verify that all services are operational.

Post-Upgrade Validation Checks

1. Software Version Verification
Verify that all controllers are running the correct software version.

2. sd-wan manager Service Status Verification
Confirm that all services on the sd-wan manager servers are operational.

3. Inter-Controller Connection Verification
Verify control connections between all controllers.

4. Policy Activation Verification
Confirm that policies are properly activated on the sd-wan manager servers.

5. Control Connection Distribution Verification

• Verify that control connections are properly distributed across all sd-wan manager nodes.
• Navigate to Monitor > Network and verify the control connection column.

6. Site-Level Post-Upgrade Validation
Perform these validation tests on all sites where pre-upgrade checks were conducted:

a. Control Connection and BFD Session Verification
show sd-wan control connections
show sd-wan bfd sessions

b. Routing Verification
show ip route
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

c. Data Center Service Reachability
Verify reachability to all data center services.

d. Template Synchronization Verification
Verify that device templates are properly attached and synchronized post the upgrade.

e. Policy Verification from vSmart
Execute 'show sd-wan policy from-vsmart' in order to verify policy distribution.

f. User Acceptance Testing
Conduct user acceptance testing on all validated sites to ensure application functionality.

SD-WAN Manager Cluster Upgrade Procedure: Version 20.9.5.2/20.9.7 to 20.15.x

Prerequisites

1. Controller Snapshots
Create complete snapshots of all SD-WAN controllers prior to beginning the upgrade process.

2. Configuration Database Backup
Execute a backup of the configuration database and store it in a location external to the sd-wan manager server using the request nms configuration-db backup path <path_and_filename> command.

3. AURA Health Check on sd-wan manager Nodes
Perform the AURA health check on all sd-wan manager nodes as documented in https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/220514-execute-the-aura-script-on-vmanage.html.

4. Image Distribution to sd-wan manager Servers
Manually copy the 20.15.2 upgrade image 'vmanage-20.15.2-x86_64.tar.gz' to the /home/admin directory on each Cisco sd-wan manager server in the cluster.

5. Image Verification
Verify that the upgrade image has been successfully copied to the /home/admin location on all sd-wan manager servers.

6. Six-Node Cluster Persona Verification
For six-node sd-wan manager cluster upgrades, verify that the sd-wan manager persona distribution consists of three COMPUTE_DATA nodes and three DATA nodes. This information can be confirmed on the sd-wan manager cluster management page.

7. Software Inventory Management

• Execute the show software command on each sd-wan manager node in order to verify the installed software versions.
• Ensure that no more than two software images are installed on each sd-wan manager node.
• If additional images are present, remove the obsolete installed images using the request software remove <version> command.

Example output:

Pre-Upgrade Validation Checks

8. Control Connection Stability Verification

• Verify the stability of control connections between all SD-WAN controllers.
• Capture a screenshot of the sd-wan manager dashboard for documentation purposes.

9. Site-Level Verification
Choose representative sites and capture these logs and outputs:

a. Control Connection Verification
show sd-wan control connections

b. BFD Session Verification
show sd-wan bfd sessions

c. Routing Table Verification
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

d. Application Service Testing
Customer to perform application service testing from a minimum of five branch locations.

10. vSmart Controller Verification
a. Control Connections
Execute 'show control connections' in order to verify that each vSmart maintains control connections with all controllers.

b. OMP Peer Status
Execute 'show omp peers' in order to verify the number of peers on each vSmart controller.

c. OMP Summary
Execute 'show omp summary' in order to verify overall OMP status.

Upgrade Procedure

These high-level steps outline the upgrade process:

1. Software Installation
Install the upgrade image on each Cisco sd-wan manager server using the request software install <path> command. Do not activate the image at this stage.

vmanage1#request software install /home/admin/vmanage-20.15.2-x86_64.tar.gz
Signature verification Suceeded.
Signature verification Suceeded.
[2025-09-25 09:04:19,066][INFO][upgrade-context]: Upgrade context written to destination path: /opt/data/extra-packages/20.15.2/upgrade-context.json
Signature verification Suceeded.
Successfully installed version: 20.15.2
vmanage1#


vmanage2#request software install /home/admin/vmanage-20.15.2-x86_64.tar.gz
Signature verification Suceeded.
Signature verification Suceeded.
[2025-09-25 09:04:19,066][INFO][upgrade-context]: Upgrade context written to destination path: /opt/data/extra-packages/20.15.2/upgrade-context.json
Signature verification Suceeded.
Successfully installed version: 20.15.2
vmanage2#

vmanage3#request software install /home/admin/vmanage-20.15.2-x86_64.tar.gz
Signature verification Suceeded.
Signature verification Suceeded.
[2025-09-25 09:04:19,066][INFO][upgrade-context]: Upgrade context written to destination path: /opt/data/extra-packages/20.15.2/upgrade-context.json
Signature verification Suceeded.
Successfully installed version: 20.15.2
vmanage3#

2. Software Activation
Activate the upgrade image on each Cisco sd-wan manager server using the request software activate <version> command. Note that all sd-wan manager nodes will reboot simultaneously.

vmanage1# request software activate 20.15.2
This will reboot the node with the activated version.
Are you sure you want to proceed? [yes,NO] yes

vmanage2# request software activate 20.15.2
This will reboot the node with the activated version.
Are you sure you want to proceed? [yes,NO] yes

vmanage3# request software activate 20.15.2
This will reboot the node with the activated version.
Are you sure you want to proceed? [yes,NO] yes

3. Upgrade Confirmation
Confirm the upgrade within 15 minutes of activation using the request software upgrade-confirm command:

Note: Post the upgrade, a manual configuration database upgrade is required. Allow 20-25 minutes after the reboot for services to initialize. During this period, you will observe that the App-server and configuration database services do not start automatically, as they require a manual upgrade procedure.

4. Service Status Verification

• Execute 'request nms all status' on all nodes in order to verify the status of services.
• Verify that all services except App-server and configuration database are operational.

Expected observation: App-server will be in a down state, and the configuration database will continuously restart.

5. Configuration Database Upgrade

• Perform the configuration database upgrade only on one node that is running the configuration database service.
• Upon successful completion, the App-server and Config-DB services will restart on all nodes.

Execute the request nms configuration-db upgrade command on one configuration database node:

6. Final Service Status Verification

• Wait approximately 5 minutes after the configuration database upgrade completes.
• Execute 'request nms all status' on all nodes in order to verify that all services are operational.

Post-Upgrade Validation Checks

1. Software Version Verification
Verify that all controllers are running the correct software version.

2. sd-wan manager Service Status Verification
Confirm that all services on the sd-wan manager servers are operational.

3. Inter-Controller Connection Verification
Verify control connections between all controllers.

4. Policy Activation Verification
Confirm that policies are properly activated on the sd-wan manager servers.

5. Control Connection Distribution Verification

• Verify that control connections are properly distributed across all sd-wan manager nodes.
• Navigate to Monitor > Network and verify the control connection column.

6. Site-Level Post-Upgrade Validation
Perform these validation tests on all sites where pre-upgrade checks were conducted:

a. Control Connection and BFD Session Verification
show sd-wan control connections
show sd-wan bfd sessions

b. Routing Verification
show ip route
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

c. Data Center Service Reachability
Verify reachability to all data center services.

d. Template Synchronization Verification
Verify that device templates are properly attached and synchronized post the upgrade.

e. Policy Verification from vSmart
Execute 'show sd-wan policy from-vsmart' in order to verify policy distribution.

f. User Acceptance Testing
Conduct user acceptance testing on all validated sites in order to ensure application functionality.

SD-WAN Manager Cluster Upgrade Procedure: Version 20.12.x  to 20.15.x

Prerequisites

1. Controller Snapshots
Create complete snapshots of all SD-WAN controllers prior to beginning the upgrade process.

2. Configuration Database Backup
Execute a backup of the configuration database and store it in a location external to the sd-wan manager server using the request nms configuration-db backup path <path_and_filename> command:

3. AURA Health Check on sd-wan manager Nodes
Perform the AURA health check on all sd-wan manager nodes as documented in https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/220514-execute-the-aura-script-on-vmanage.html.

4. Image Distribution to sd-wan manager Servers
Manually copy the 20.15.x upgrade image 'vmanage-20.15.3-x86_64.tar.gz' to the /home/admin directory on each Cisco sd-wan manager server in the cluster.

5. Image Verification
Verify that the upgrade image has been successfully copied to the /home/admin location on all sd-wan manager servers.

6. Software Inventory Management

• Execute the show software command on each sd-wan manager node in order to verify the installed software versions.
• Ensure that no more than two software images are installed on each sd-wan manager node.
• If additional images are present, remove the obsolete installed images using the request software remove <version> command.

Example output:

Pre-Upgrade Validation Checks

7. Control Connection Stability Verification

• Verify the stability of control connections between all SD-WAN controllers.
• Capture a screenshot of the sd-wan manager dashboard for documentation purposes.

8. Site-Level Verification
Choose representative sites and capture these logs and outputs:

a. Control Connection Verification
show sd-wan control connections

b. BFD Session Verification
show sd-wan bfd sessions

c. Routing Table Verification
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

d. Application Service Testing
Customer to perform application service testing from a minimum of five branch locations.

9. vSmart Controller Verification
a. Control Connections
Execute 'show control connections' in order to verify that each vSmart maintains control connections with all controllers.

b. OMP Peer Status
Execute 'show omp peers' in order to verify the number of peers on each vSmart controller.

c. OMP Summary
Execute 'show omp summary' in order to verify overall OMP status.

Upgrade Procedure

These high-level steps outline the upgrade process:

1. Software Installation
Install the upgrade image on each Cisco sd-wan manager server using the request software install <path> command. Do not activate the image at this stage.

2. Software Activation
Activate the upgrade image on each Cisco sd-wan manager server using the request software activate <version> command. Note that all sd-wan manager nodes will reboot simultaneously.

vmanage1# request software activate 20.15.3 
This will reboot the node with the activated version.
Are you sure you want to proceed? [no,yes] yes 
status activate 20.15.3: successful

vmanage2# request software activate 20.15.3 
This will reboot the node with the activated version.
Are you sure you want to proceed? [no,yes] yes
status activate 20.15.3: successful


vmanage3# request software activate 20.15.3 
This will reboot the node with the activated version.
Are you sure you want to proceed? [no,yes] yes
status activate 20.15.3: successful

3. Upgrade Confirmation
Confirm the upgrade within 15 minutes of activation using the request software upgrade-confirm command.

4. Service Status Verification

• Allow approximately 30 minutes after the reboot for services to initialize.
• Execute 'request nms all status' on all nodes to verify the status of services.

Expected output:

Post-Upgrade Validation Checks

1. Software Version Verification
Verify that all controllers are running the correct software version.

2. sd-wan manager Service Status Verification
Confirm that all services on the sd-wan manager servers are operational.

3. Inter-Controller Connection Verification
Verify control connections between all controllers.

4. Policy Activation Verification
Confirm that policies are properly activated on the sd-wan manager servers.

5. Control Connection Distribution Verification

• Verify that control connections are properly distributed across all sd-wan manager nodes.
• Navigate to Monitor > Network and verify the control connection column.

6. Site-Level Post-Upgrade Validation
Perform these validation tests on all sites where pre-upgrade checks were conducted:

a. Control Connection and BFD Session Verification
show sd-wan control connections
show sd-wan bfd sessions

b. Routing Verification
show ip route
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

c. Data Center Service Reachability
Verify reachability to all data center services.

d. Template Synchronization Verification
Verify that device templates are properly attached and synchronized post the upgrade.

e. Policy Verification from vSmart
Execute 'show sd-wan policy from-vsmart' in order to verify policy distribution.

f. User Acceptance Testing
Conduct user acceptance testing on all validated sites in order to ensure application functionality.

SD-WAN Manager Cluster Upgrade Procedure: Version 20.15.x  to 20.18.x

Prerequisites

Note: Base version must be 20.15.x in order to upgrade to 20.18.x or later release. If current version is lower than 20.15.x, upgrade to 20.15.x relase first.

1. Controller Snapshots
Create complete snapshots of all SD-WAN controllers prior to beginning the upgrade process.

2. Configuration Database Backup
Execute a backup of the configuration database and store it in a location external to the sd-wan manager server using the request nms configuration-db backup path <path_and_filename> command.

3. AURA Health Check on sd-wan manager Nodes
Perform the AURA health check on all sd-wan manager nodes as documented in https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/220514-execute-the-aura-script-on-vmanage.html.

4. Image copy to sd-wan manager Servers
Copy the 20.18.x upgrade image 'vmanage-20.18.1-x86_64.tar.gz' in order to sd-wan manager repository.

5. Software Inventory Management

• Execute the show software command on each sd-wan manager node in order to verify the installed software versions.
• Ensure that no more than two software images are installed on each sd-wan manager node.
• If additional images are present, remove the obsolete installed images using the request software remove <version> command.

Example output:

6. Verify container status
Verify docket container status using the command shown:

vmanage2# request nms container-manager dia
NMS container manager
Checking container-manager status
Listing all containers
------------------------
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3578e5ac3e1e sd-wan/messaging-server:0.20.0 "/entrypoint.sh" 25 minutes ago Up 25 minutes (healthy) 127.0.0.1:4222->4222/tcp, 127.0.0.1:6222->6222/tcp, 127.0.0.1:8222->8222/tcp messaging-server
e2c1e54dd48f sd-wan/olap-db:23.3.13.6 "/usr/bin/docker-ini…" 25 minutes ago Up 25 minutes (healthy) 127.0.0.1:8123->8123/tcp olap-db
e3375e1c2254 sd-wan/coordination-server:3.7.1 "/docker-entrypoint.…" 25 minutes ago Up 25 minutes (healthy) 127.0.0.1:2181->2181/tcp, 127.0.0.1:2888->2888/tcp, 127.0.0.1:3888->3888/tcp coordination-server
8ae9ce33bbc8 cloudagent-v2:91a62b952db9 "./entrypoint.sh" 25 minutes ago Up 25 minutes 127.0.0.1:9051-9052->9051-9052/tcp cloudagent-v2
b1a298cc3d4e sd-wan/ratelimit:latest "/usr/local/bin/rate…" 25 minutes ago Up 25 minutes (healthy) 6379/tcp, 127.0.0.1:8460-8462->8460-8462/tcp ratelimit
c077a9cc59b0 sd-wan/reporting:latest "/sbin/tini -g -- py…" 25 minutes ago Up 25 minutes 80/tcp, 127.0.0.1:9080->9080/tcp reporting
07dcbc92acbb sd-wan/data-collection-agent:1.0.1 "/usr/bin/docker-ini…" 25 minutes ago Up 12 minutes (healthy) data-collection-agent
ca58a770f2dc sd-wan/vault:1.0.1 "docker-entrypoint.s…" 25 minutes ago Up 25 minutes (healthy) 8200/tcp, 127.0.0.1:8201->8201/tcp vault
ca838f61299f sd-wan/service-proxy:1.27.2 "/entrypoint.sh" 25 minutes ago Up 25 minutes (healthy) service-proxy
8c0e15c9e552 sd-wan/configuration-db:4.4.19 "/usr/bin/docker-ini…" 25 minutes ago Up 25 minutes (healthy) 127.0.0.1:5000->5000/tcp, 127.0.0.1:6000->6000/tcp, 127.0.0.1:6362->6362/tcp, 127.0.0.1:6372->6372/tcp, 127.0.0.1:7000->7000/tcp, 127.0.0.1:7473-7474->7473-7474/tcp, 127.0.0.1:7687-7688->7687-7688/tcp configuration-db
671dfed47394 sd-wan/device-data-collector:1.0.0 "/bin/sh -c /vMDDC/v…" 25 minutes ago Up 12 minutes (healthy) 127.0.0.1:8129->8129/tcp device-data-collector
ceb808046e34 sd-wan/application-server:19.1.0 "/sbin/tini -g -- /e…" 25 minutes ago Up 25 minutes (healthy) application-server
dd744e0aa80f sd-wan/host-agent:1.0.1 "/entrypoint.sh pyth…" 25 minutes ago Up 25 minutes (healthy) 127.0.0.1:9099->9099/tcp host-agent
972a13290a15 sd-wan/cluster-oracle:1.0.1 "/entrypoint.sh java…" 25 minutes ago Up 25 minutes (healthy) 127.0.0.1:9090->9090/tcp cluster-oracle

Pre-Upgrade Validation Checks

7. Control Connection Stability Verification

• Verify the stability of control connections between all SD-WAN controllers.
• Capture a screenshot of the sd-wan manager dashboard for documentation purposes.

8. Site-Level Verification
Choose representative sites and capture these logs and outputs:

a. Control Connection Verification
show sd-wan control connections

b. BFD Session Verification
show sd-wan bfd sessions

c. Routing Table Verification
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

d. Application Service Testing
Customer to perform application service testing from a minimum of five branch locations.

9. vSmart Controller Verification
a. Control Connections
Execute 'show control connections' in order to verify that each vSmart maintains control connections with all controllers.

b. OMP Peer Status
Execute 'show omp peers' in order to verify the number of peers on each vSmart controller.

c. OMP Summary
Execute 'show omp summary' in order to verify overall OMP status.

Upgrade Procedure

Here are the high-level steps to be followed for the upgrade:

Navigate to Maintainence > Software Upgrade > Manager > Software Image Action and choose Upgrade. Image will be installed on all three nodes.

Installation of the image is successful on all three nodes.

Once installation is complete, activate 20.18.1 image. All three nodes will be rebooted.

Service Status Verification

• Allow approximately 30 minutes after the reboot for services to initialize.
• Execute 'request nms all status' on all nodes in order to verify the status of services.

Expected output:

Verify docker container status post upgradation:

vmanage2# request nms container-manager dia
NMS container manager
Checking container-manager status
Listing all containers
------------------------
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
378d13a98478 sd-wan/messaging-server:0.20.0 "/bin/bash /entrypoi…" 9 minutes ago Up 9 minutes (healthy) 127.0.0.1:4222->4222/tcp, 127.0.0.1:6222->6222/tcp, 127.0.0.1:8222->8222/tcp messaging-server
cf4f3dae69bc sd-wan/olap-db:24.3.6.48 "/usr/bin/tini -- /e…" 10 minutes ago Up 10 minutes (healthy) 127.0.0.1:8123->8123/tcp, 127.0.0.1:9363->9363/tcp olap-db
e6af832a551d sd-wan/configuration-db:4.4.38 "/usr/bin/tini -g --…" 10 minutes ago Up 10 minutes (healthy) 127.0.0.1:2004->2004/tcp, 127.0.0.1:5000->5000/tcp, 127.0.0.1:6000->6000/tcp, 127.0.0.1:6362->6362/tcp, 127.0.0.1:6372->6372/tcp, 127.0.0.1:7000->7000/tcp, 127.0.0.1:7473-7474->7473-7474/tcp, 127.0.0.1:7687-7688->7687-7688/tcp configuration-db
3ff5a7f12bbd sd-wan/coordination-server:3.8.4 "/docker-entrypoint.…" 10 minutes ago Up 10 minutes (healthy) 127.0.0.1:2181->2181/tcp, 127.0.0.1:2888->2888/tcp, 127.0.0.1:3888->3888/tcp, 127.0.0.1:4888->4888/tcp coordination-server
e065840d7736 sd-wan/application-server:24.0.1 "/usr/bin/tini -g --…" 3 days ago Up 11 minutes (healthy) base-application-server
3bdf71f009e9 sd-wan/cluster-orchestrator:1.0.1 "/entrypoint.sh" 3 days ago Up 11 minutes (healthy) 127.0.0.1:9090->9090/tcp, 127.0.0.1:9099->9099/tcp cluster-orchestrator
4c06c0be3efe sd-wan/vault:1.0.1 "docker-entrypoint.s…" 3 days ago Up 11 minutes (healthy) 8200/tcp, 127.0.0.1:8201-8202->8201-8202/tcp vault

Post-Upgrade Validation Checks

1. Software Version Verification
Verify that all controllers are running the correct software version.

2. sd-wan manager Service Status Verification
Confirm that all services on the sd-wan manager servers are operational.

3. Inter-Controller Connection Verification
Verify control connections between all controllers.

4. Policy Activation Verification
Confirm that policies are properly activated on the sd-wan manager servers.

5. Control Connection Distribution Verification

• Verify that control connections are properly distributed across all sd-wan manager nodes.
• Navigate to Monitor > Network and verify the control connection column.

6. Site-Level Post-Upgrade Validation
Perform these validation tests on all sites where pre-upgrade checks were conducted:

a. Control Connection and BFD Session Verification
show sd-wan control connections
show sd-wan bfd sessions

b. Routing Verification
show ip route
show ip route vrf <vrf_id>
show sd-wan omp routes vpn <vpn_id>

c. Data Center Service Reachability
Verify reachability to all data center services.

d. Template Synchronization Verification
Verify that device templates are properly attached and synchronized post the upgrade.

e. Policy Verification from vSmart
Execute 'show sd-wan policy from-vsmart' in order to verify policy distribution.

f. User Acceptance Testing
Conduct user acceptance testing on all validated sites to ensure application functionality.