Upgrade to Cisco DNA Center 2.3.5.6


Important

  • Before you start any of the upgrade procedures, see Cisco ISE Is Required with Cisco DNA Center 2.3.5.6 and Later for a description of the Cisco ISE requirements that must be in place before you upgrade.

  • By default, restricted shell is enabled in Cisco DNA Center 2.3.5. This shell limits access to the underlying operating system and file system. Cisco DNA Center enables restricted shell with Consent Token for security. If you want to access the root shell temporarily, you must contact the Cisco TAC for assistance. For more information, refer to the “About Restricted Shell” section in the Cisco DNA Center Administrator Guide.

Cisco ISE is required with Cisco DNA Center 2.3.5.6 and later

Installation of or upgrade to Cisco DNA Center 2.3.5.6 and later checks to see if Cisco ISE is configured as an authentication and policy (AAA) server. If the correct version of Cisco ISE is already configured, you can start migration of group policy data from Cisco ISE to Cisco DNA Center.

If Cisco ISE is not configured, or if the required version of Cisco ISE is not present, Cisco DNA Center installs, but Group-Based Policy is not enabled. You must install or upgrade Cisco ISE and connect it to Cisco DNA Center. You can then start the data migration.

For more information, see these resources:

Set up NIC bonding

Cisco DNA Center 2.3.5.6 provides network interface controller (NIC) bonding support. To enable and use this functionality on your appliance:

  1. Confirm that you have one of these second-generation Cisco DNA Center appliances:

    Table 1. Cisco DNA Center appliances that support NIC bonding

    Machine profile

    Machine profile alias

    		 Cisco part number Number of cores

    medium

    medium

    • DN2-HW-APL

    • DN2-HW-APL-U (promotional)

    44

    t2_large

    large

    • DN2-HW-APL-L

    • DN2-HW-APL-L-U (promotional)

    56

    t2_2xlarge

    extra large

    • DN2-HW-APL-XL

    • DN2-HW-APL-XL-U (promotional)

    112

  2. Complete these tasks on the switch that you will connect to your appliance:

    • Ensure that it supports dynamic interface aggregation.

    • Enable Link Aggregation Control Protocol (LACP) on the switch, then specify these settings:

      • LACP mode: active: This places the switch port connected to your appliance into an active negotiating state, in which the port initiates negotiations with remote ports by sending LACP packets.

      • LACP rate: fast: This changes the rate at which the LACP control packets are sent to an LACP-supported interface. Instead of the default every 30 seconds, control packets are sent once every second.

  3. Complete the procedure for your appliance:

Enable NIC bonding on a medium or large appliance

If you are upgrading a medium or large appliance to Cisco DNA Center 2.3.5.6, you have two NIC bonding options:

  • If you have decided to enable NIC bonding on your appliance, complete the steps described in Enable NIC bonding now. This option reduces downtime.

  • If you are undecided about enabling NIC bonding, complete Step 1 in Enable NIC bonding later. To enable NIC bonding at some point in the future, complete the rest of this procedure starting with Step 2.

Enable NIC bonding now

Procedure

Step 1

Upgrade to the Cisco IMC firmware version for your Cisco DNA Center release. In the Cisco DNA Center Appliance Installation Guide, see the "Update the Cisco IMC firmware" topic.

Step 2

Enable your appliance's Intel X710-DA4 NIC.

In the Cisco DNA Center Appliance Installation Guide, see the "Enable NIC on an upgraded appliance" topic.

Step 3

Upgrade your Cisco DNA Center release to 2.3.5.6.

Step 4

Enable the interfaces that reside on your appliance's Intel X710-DA4 NIC for configuration and use.

In the Cisco DNA Center Appliance Installation Guide, see the "Reconfigure the appliance using the configuration wizard" topic.

Note these points:

  • When completing the wizard, the only information you need to enter is the maglev user's Linux password in the User Account Settings screen. Select Next to skip through the various wizard screens.

    After you complete the wizard, Cisco DNA Center bonds the primary and secondary instances of your appliance's interfaces.

  • By default, Cisco DNA Center sets your appliance's interfaces to Active-Backup mode after you enable NIC bonding. You can choose to set LACP mode for the Enterprise and Intracluster interfaces instead. Note that the Internet and Management interfaces do not support this mode.

    For a description of the Active-Backup and LACP modes, see the "NIC bonding overview" topic in the Cisco DNA Center Appliance Installation Guide.

Enable NIC bonding later

Procedure

Step 1

Upgrade your Cisco DNA Center release to 2.3.5.6.

Step 2

Upgrade to the Cisco IMC firmware version for your Cisco DNA Center release. In the Cisco DNA Center Appliance Installation Guide, see the "Update the Cisco IMC firmware" topic.

Step 3

Enable your appliance's Intel X710-DA4 NIC.

In the Cisco DNA Center Appliance Installation Guide, see the "Enable NIC on an upgraded appliance" topic.

Step 4

Complete the steps that are described in the Cisco DNA Center Appliance Installation Guide's "Power-cycle the appliance" topic.

Step 5

Enable the interfaces that reside on your appliance's Intel X710-DA4 NIC for configuration and use.

In the Cisco DNA Center Appliance Installation Guide, see the "Reconfigure the appliance using the configuration wizard" topic.

Note these points:

  • When completing the wizard, the only information you need to enter is the maglev user's Linux password in the User Account Settings screen. Select Next to skip through the various wizard screens.

    After you complete the wizard, Cisco DNA Center bonds the primary and secondary instances of your appliance's interfaces.

  • By default, Cisco DNA Center sets your appliance's interfaces to Active-Backup mode after you enable NIC bonding. You can choose to set LACP mode for the Enterprise and Intracluster interfaces instead. Note that the Internet and Management interfaces do not support this mode.

    For a description of the Active-Backup and LACP modes, see the "NIC bonding overview" topic in the Cisco DNA Center Appliance Installation Guide.

Enable NIC bonding on an extra large appliance

Procedure

Step 1

Upgrade your Cisco DNA Center release to 2.3.5.6.

Step 2

Upgrade to the Cisco IMC firmware version for your Cisco DNA Center release. In the Cisco DNA Center Appliance Installation Guide, see the "Update the Cisco IMC firmware" topic.

Step 3

Enable your appliance's Intel X710-DA4 NIC.

In the Cisco DNA Center Appliance Installation Guide, see the "Enable NIC on an upgraded appliance" topic.

Step 4

Complete the steps that are described in the Cisco DNA Center Appliance Installation Guide's "Power-cycle the appliance" topic.

Step 5

Enable the interfaces that reside on your appliance's Intel X710-DA4 NIC for configuration and use.

In the Cisco DNA Center Appliance Installation Guide, see the "Reconfigure the appliance using the configuration wizard" topic.

Note these points:

  • When completing the wizard, the only information you need to enter is the maglev user's Linux password in the User Account Settings screen. Select Next to skip through the various wizard screens.

    After you complete the wizard, Cisco DNA Center bonds the primary and secondary instances of your appliance's interfaces.

  • By default, Cisco DNA Center sets your appliance's interfaces to Active-Backup mode after you enable NIC bonding. You can choose to set LACP mode for the Enterprise and Intracluster interfaces instead. Note that the Internet and Management interfaces do not support this mode.

    For a description of the Active-Backup and LACP modes, see the "NIC bonding overview" topic in the Cisco DNA Center Appliance Installation Guide.

Upgrade from 2.3.5.x to 2.3.5.6

By completing this procedure, you can upgrade directly to Cisco DNA Center 2.3.5.6 from these versions:

  • 2.3.5.0

  • 2.3.5.3

  • 2.3.5.4

  • 2.3.5.5

After you upgrade to 2.3.5.6, you cannot switch back to an earlier release.

Procedure

Step 1

From the main menu, choose System > Software Management.

Step 2

Confirm these details:

  • The Installed Version field indicates the Cisco DNA Center version that's currently installed on your appliance.

  • The Software Management window indicates that Cisco DNA Center 2.3.5.6.70143 is available.

Step 3

Click Download now.

Step 4

When Cisco DNA Center completes its prechecks, click Download.

Step 5

(Optional) Click the More details link to open a slide-in pane that lists all of the application packages that are being downloaded and shows their progress.

Step 6

When the package download completes, click Install now.

Step 7

When Cisco DNA Center completes its prechecks, click Install.

Step 8

(Optional) Click the More details link to open a slide-in pane that lists the packages that are being installed and shows their progress.

Step 9

Click the Currently Installed Applications link and confirm that each application has been updated.

Note

 

Any new or optional packages that are available to download for the Cisco DNA Center release you upgraded to are displayed at the bottom of the Software Management page. Select the packages you want to download.

Upgrade from 2.3.3.x to 2.3.5.6

By completing this procedure, you can upgrade directly to Cisco DNA Center 2.3.5.6 from these versions:

  • 2.3.3.0

  • 2.3.3.3

  • 2.3.3.4

  • 2.3.3.5

  • 2.3.3.6

  • 2.3.3.7

After you upgrade to 2.3.5.6, you cannot switch back to an earlier release.

Procedure

Step 1

From the main menu, choose System > Software Management.

Step 2

Confirm these details:

  • The Installed Version field indicates the Cisco DNA Center version that's currently installed on your appliance.

  • The Software Management window indicates that Cisco DNA Center 2.3.5.6.70143 is available.

Step 3

Click Download now.

Step 4

When Cisco DNA Center completes its prechecks, click Download.

Step 5

(Optional) Click the More details link to open a slide-in pane that lists all of the application packages that are being downloaded and shows their progress.

Step 6

When the package download completes, click Install now.

Step 7

When Cisco DNA Center completes its prechecks, click Install.

Step 8

(Optional) Click the More details link to open a slide-in pane that lists the packages that are being installed and shows their progress.

Step 9

Click the Currently Installed Applications link and confirm that each application has been updated.

Note

 

Any new or optional packages that are available to download for the Cisco DNA Center release you upgraded to are displayed at the bottom of the Software Management page. Select the packages you want to download.