Restrictions relevant for installing and upgrading software on devices in a Cisco Catalyst SD-WAN environment.
Describes restrictions relevant for installing and upgrading software on devices in a Cisco Catalyst SD-WAN environment.
Dual-IOSd
Dual-IOSd is supported only in autonomous mode.
Requirement of universalk9 images
Software images without payload encryption and NO-LI (universalk9_npe, universalk9_noli, universalk9_npe_noli) images are not supported in Controller mode. Only universalk9 images are supported.
Changing mode clears configuration
After onboarding and determining the mode of operation, changing from Controller mode to Autonomous mode or vice-versa, results in the loss of configuration.
Reset button
Reset button functionality is not supported in Controller mode on Cisco ISR 1000 series Integrated Service Routers. The reset button does not function to restore a golden image or configuration in Controller mode.
Auto-install (Python and TCL scripts) and ZTP
Autoinstall and ZTP are not supported in Controller mode. If DHCP discovers an attempt to install using either of these processes, a mode change to Autonomous mode is triggered.
WebUI
In Controller mode, the WebUI is not supported, and an error message is displayed if used.
Keep existing image
When upgrading, do not delete the existing image. This provides a software rollback option.
If upgrade fails
If an upgrade fails, do not attempt to reactivate the new software image. Instead, remove the new software image, identify and correct any configuration settings that might have caused the failure, and try the upgrade procedure again. If the issue persists, contact Cisco for assistance.
Upgrading a device to to Cisco IOS XE Catalyst SD-WAN Release 17.4.1a
When upgrading to Cisco IOS XE Catalyst SD-WAN Release 17.4.1a from Cisco IOS XE Releases 17.3.1a or earlier, do not make any changes to the device configuration using CLI commands while a feature template is detached. Starting Cisco IOS XE Catalyst SD-WAN Release 17.4.1a, we use Cisco Catalyst SD-WAN assisted upgrades. In this upgrade procedure, Cisco Catalyst SD-WAN saves the device configuration before the upgrade. If the configuration on the device, that is modified using CLI is not same as on Cisco Catalyst SD-WAN, then the device has inconsistent configuration after the upgrade.
For example, if you configure the BGP AS number of a device to a different value using CLI commands, the device can have inconsistent configuration and the upgrade fails. If you perform the upgrade when the device is in CLI mode, then you must revert the BGP AS number to the original value and then upgrade the device. Therefore, upgrade the device using Cisco Catalyst SD-WAN.
Firmware upgrade: primary and backup tunnel interfaces
From Cisco IOS XE Catalyst SD-WAN Release 17.5.1a, if you are upgrading the firmware for a device on which the primary tunnel interface is a cellular interface and the backup tunnel interface is a Gigabit interface, use the Gigabit interface as the primary interface for the firmware upgrade.
For information about configuring the priority of a tunnel interface, refer to the vmanage-connection-preference command in the ​Cisco Catalyst SD-WAN Command Reference Guide. Configuring an interface with a higher preference value gives the interface a higher priority.
Downgrading devices to releases earlier than 17.1.x
Downgrading directly from Controller mode to Cisco IOS XE Amsterdam Release 17.1.x or earlier universalk9 or other non Cisco Catalyst SD-WAN images is not supported. To downgrade from Controller mode to earlier IOS XE images, switch to Autonomous mode and follow the downgrade process.