Cisco Nexus 9000 Series FPGA/EPLD Upgrade Release Notes, Release 7.0(3)I7(9)
The following table lists the changes to this document.
Deciding When to Upgrade EPLDs
EPLD Upgrades Available for NX-OS Mode Releases 7.0(3)I7(7) through 7.0(3)I7(10)
Cisco Secure Boot Hardware Tampering Vulnerability - Remediation Steps
Determining Whether to Upgrade EPLD Images
Displaying the Status of EPLD Upgrades
Obtaining Documentation and Submitting a Service Request
The Cisco Nexus 9000 Series NX-OS mode switches contain several programmable logical devices (PLDs) that provide hardware functionalities in all modules. Cisco provides electronic programmable logic device (EPLD) image upgrades to enhance hardware functionality or to resolve known issues. PLDs include electronic programmable logic devices (EPLDs), field programmable gate arrays (FPGAs), and complex programmable logic devices (CPLDs), but they do not include ASICs. In this document, the term EPLD is used for FPGA and CPLDs.
When Cisco makes an EPLD image upgrade available, these release notes announce their availability, and you can download the EPLD images from https://software.cisco.com/download/navigator.html.
NOTE: Do not perform an EPLD upgrade during an ISSU system upgrade.
NOTE: EPLD version is backward compatible.
The Cisco Nexus 9000 Series switch must be running the Cisco NX-OS operating system and include the following hardware:
■ Supervisor modules (2)—each with at least 800 MB of available bootflash memory (Cisco Nexus 9504, 9508, and 9516 switches)
■ System controller modules (2) (Cisco Nexus 9504, 9508, and 9516 switches)
■ Line cards (Cisco Nexus 9504, 9508, and 9516 switches)
— Cisco Nexus 9504 switch (1 to 4 line cards)
— Cisco Nexus 9508 switch (1 to 8 line cards)
— Cisco Nexus 9516 switch (1 to 16 line cards)
■ Fabric modules (Cisco Nexus 9504, 9508, and 9516 switches)
— Fabric modules for 40-Gigabit line cards on a Cisco Nexus 9504, 9508, or 9516 switch (3-6 modules)
— Fabric modules for 100-Gigabit –S line cards on a Cisco Nexus 9504 or 9508 switch (4 modules)
— Cisco Nexus 92304QC, 9272Q, and 93120TX switches (2 modules)
— Cisco Nexus 9336C-FX2, 9364C, 9396PX, 9396TX, and 93128TX switches (3 modules)
— Cisco Nexus 9236C, 92160YC-X, 92300YC, 9332PQ, 9372PX, 9372PX-E, 9372TX, 9372TX-E, 93108TC-EX, 93180LC-EX, and 92300YC switches (4 modules)
— Cisco Nexus 93240YC-FX2 switch (5 modules)
— Cisco Nexus 9504, 9508, and 9516 switches (3 fan trays)
— 500-W AC, 930-W DC, or 1200-W HVAC/HVDC power supplies (2 for the Cisco Nexus 93180LC-EX switches)
— 650-W AC or 1200-W HVAC/HVDC power supplies (2 for Cisco Nexus 92300YC switches)
— 11000W AC power supplies (2) for the Cisco Nexus 9336C and 93240YC switches
— 11000W DC power supplies (2) for the Cisco Nexus 9336C and 93240YC switches
— 11000W HVAC/HVDC power supplies (2) for the Cisco Nexus 9336C and 93240YC switches
— 1200-W AC power supplies (2) or 930-W DC power supplies (2) for the Cisco Nexus 9272Q, 93120TX, 93128TX, and 9364C switches
— 3000-W AC power supplies or 3000-W Universal AC/DC or 3000-W DC power supplies for Cisco Nexus 9500 switches
- Cisco Nexus 9504 switch (up to 4)
- Cisco Nexus 9508 switch (up to 8)
- Cisco Nexus 9516 switch (up to 10)
■ Uplink module (Cisco Nexus 93128TX, 9396PX, and 9396TX switches only)
You must have administrator privileges to work with the Cisco Nexus 9000 Series switch.
Each EPLD image that you can download from https://software.cisco.com/download/navigator.html is a bundle of EPLD upgrades. To see the recent updated EPLD versions for the Cisco Nexus 9200, 9300, 9300-EX, and 9300-FX platform switches, and the Cisco Nexus 9500 platform switches, see the following tables.
NOTE: The 7.0(3)I7(9) release of EPLD, addresses the Secure Boot Hardware Tampering vulnerability for the Nexus 3K and Nexus 9000 Series switches. Please refer to Security Advisory at https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot.
Table 1. Vulnerable Products addressed in Security Advisory (cisco-sa-20190513-secureboot)
Nexus 9000 Series Switches
PID |
Fixed IO FPGA Version |
N9K-C93180YC-EX |
0x15 |
N9K-C93108TC-EX |
0x15 |
N9K-C93180LC-EX1 |
0x20 |
N9K-C93180YC-FX |
0x20 |
N9K-C93108TC-FX |
0x20 |
N9K-C9348GC-FXP |
0x10 |
N9K-C92300YC |
0x20 |
N9K-C93240YC-FX2 |
0x10 |
N9K-C9336C-FX2 |
0x10 |
N9K-C9364C |
0x6 |
N9K-C9332C |
0x10 |
N9K-C92160YC-X |
0x19 |
N9K-C9272Q |
0x17 |
N9K-C92304QC |
0x12 |
N9K-C9236C |
0x17 |
N9K-C9232C |
0x8 |
N9K-SUP-A+ |
0x14 |
N9K-SUP-B+ |
0x14 |
N9K-C93120TX |
0x13 |
N9K-SUP-B |
0x30 |
N9K-SUP-A |
0x30 |
|
|
Nexus 3000 Series Switches |
|
N3K-C36180YC-R |
0x8 |
N3K-C3636C-R |
0x8 |
N3K-3232C |
0x12 |
N3K-C3264Q-S |
0x12 |
N3K-C31108PC-V |
0x6 |
N3K-C3164Q-40GE |
0x13 |
N3K-C31108TC-V |
0x6 |
N3K-C3132C-Z |
0x20 |
N3K-C3264C-E |
0x6 |
NOTE: N3K-C36180YC-R and N3K-C3636C-R, CPU FPGA will have the fix, so look for CPU FPGA instead of IO. Please follow this link for N9K-C93180LC-EX
The following section details updating your EPLD version for affected switches listed in: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot
Nexus 9000 Modular chassis with dual supervisor:
IMPORTANT NOTE:
It is required to update both Golden and Primary regions of FPGA to address this particular vulnerability. It is by design, that we don't allow updating both primary and golden at the same time (to avoid programming errors, that may cause switch to not boot, hence only one region is allowed to be programmed per reload).
Please do not attempt to upgrade Golden region of FPGA once it is on a fixed version.
1. Copy the EPLD image to bootflash (e.g. used n9000-epld.7.0.3.I7.9.img).
2. If you have dual supervisor, determine which is the standby Supervisor by doing 'show module' and start upgrading it first. On the N9K, Only supervisors need upgrade for this vulnerability. LC/FM/SC cards are not affected.
3. Assuming standby supervisor is slot 28. Update the Primary FPGA region of standby supervisor.
install epld bootflash:n9000-epld.7.0.3.I7.9.img module 28
Expected result: Switch will update primary EPLD of standby supervisor and will reload the standby supervisor module automatically. Please don't interrupt, power cycle or reload when EPLD update is happening. Once standby is booted, it will again come up as standby supervisor. A 'show version module 28 epld' will continue to show old version.
switch# show mod | grep SUP
27 0 Supervisor Module N9K-SUP-A active *
28 0 Supervisor Module N9K-SUP-A ha-standby
switch# show version module 28 epld
EPLD Device Version
---------------------------------------
IO FPGA 0x27
%CARDCLIENT-5-MOD_BOOT_GOLDEN: Module 28 IOFPGA booted from Golden
4. Update the Golden (also called backup) FPGA region of the standby supervisor.
install epld bootflash:n9000-epld. 7.0.3.I7.9.img module 28 golden
Module 28 : IO FPGA [Programming ] : 100.00% ( 64 of 64 total sectors)
Module 28 EPLD upgrade is successful.
Module Type Upgrade-Result
------ ------------------ --------------
28 SUP Success
Once this is done, when you check 'show version module 28 epld' you will see FPGA version that is >= to the fixed version for the standby supervisor. Your switch has the fixed version for standby supervisor.
switch# show version module 28 epld
---------------------------------------
IO FPGA 0x30
Repeat Step 3 and 4, for the active supervisor. At the end of Step 3, supervisor in slot 27 will reload and hence now will become standby supervisor. The active supervisor will be Supervisor in slot 28.
(considering SUP 27 is active to begin with, for the above activity, such as steps 3 and 4, commands would have 27 in place of 28.)
Log below shows what happens when epld upgrade happens for active supervisor.
Module 27 : IO FPGA [Programming] : 100.00% ( 64 of 64 sectors)
Module 27 EPLD upgrade is successful.
Module Type Upgrade-Result
------ ------------------ --------------
27 SUP Success
EPLDs upgraded. Performing switchover.
Once the supervisor in Slot 27 becomes ha-standby complete step 4 for Slot 27, and it will again boot and become ha-standby. Both the supervisors now have the vulnerability fixed version of FPGA.
At the end of the upgrades, switch should boot with primary for both SUPs, logs below
switch# show logging log | grep -i fpga | grep -i 27
2019 Jul 10 07:55:04 switch %CARDCLIENT-5-MOD_BOOT_PRIMARY: Module 27 IOFPGA booted from Primary
switch# show logging log | grep -i fpga | grep -i 28
2019 Jul 10 07:58:01 switch %CARDCLIENT-5-MOD_BOOT_PRIMARY: Module 28 IOFPGA booted from Primary
Nexus 9000 Modular chassis with single supervisor:
IMPORTANT NOTE:
It is required to update both Golden and Primary regions of FPGA to address this particular vulnerability. It is by design, that we don't allow updating both primary and golden at the same time (to avoid programming errors, that may cause switch to not boot, hence only one region is allowed to be programmed per reload).
Please do not attempt to upgrade Golden region of FPGA once it is on a fixed version.
1.Copy the EPLD image to bootflash (e.g. used n9000-epld.7.0.3.I7.9.img).
2.Assuming the supervisor is in Slot27. Update the Primary FPGA region.
install epld bootflash:n9000-epld.7.0.3.I7.9.img module 27
Switch#show version module 27 epld
-------------------------------------------------------------------
Name InstanceNum Version Date
-------------------------------------------------------------------
IO FPGA 0 0x27 20160111
BIOS version v08.35(08/31/2018)
Alternate BIOS version v08.32(10/18/2016)
This is expected, as the switch would have booted from Golden FPGA which is still not updated. You can verify this from syslog which would say:
%CARDCLIENT-5-MOD_BOOT_GOLDEN: Module 27 IOFPGA booted from Golden
install epld bootflash:n9000-epld.7.0.3.I7.9.img module 27 golden
Module 27 : IO FPGA [Programming ] : 100.00% ( 64 of 64 total sectors)
Module 27 EPLD upgrade is successful.
Module Type Upgrade-Result
------ ------------------ --------------
Expected result: Switch will update the golden EPLD of the supervisor and will reload the switch automatically. Please don't interrupt, power cycle or reload when EPLD update is happening.
Once this is done, when you check ‘show version module 27 epld' you will see FPGA version that is >= to the fixed version for the supervisor. Your supervisor has the vulnerability fixed version of FPGA.
SWITCH# show version module 27 epld
-------------------------------------------------------------------
-------------------------------------------------------------------
IO FPGA 0 0x30 20190625
BIOS version v08.35(08/31/2018)
Alternate BIOS version v08.32(10/18/2016)
At the end of the upgrades, switch should boot with primary for the SUP, log below
switch# show logging log | grep -i fpga | grep -i 27
2019 Jul 10 07:55:04 switch %CARDCLIENT-5-MOD_BOOT_PRIMARY: Module 27 IOFPGA booted from Primary
Nexus 9000 and Nexus 3000 TOR:
IMPORTANT NOTE:
It is required to update both Golden and Primary regions of FPGA to address this particular vulnerability. It is by design, that we don't allow updating both primary and golden at the same time (to avoid programming errors, that may cause switch to not boot, hence only one region is allowed to be programmed per reload). Please follow this link for N9K-C93180LC-EX
Please do not attempt to upgrade Golden region of FPGA once it is on a fixed version.
1. Copy the EPLD image to bootflash (e.g. used n9000-epld.7.0.3.I7.9.img).
2. Update the Primary FPGA region.
install epld bootflash:n9000-epld.7.0.3.I7.9.img module 1
Expected result: Switch will update EPLD and will reload automatically. Please don't interrupt, power cycle or reload when EPLD update is happening. Switch would boot up with golden FPGA, ‘show version module 1 epld’ would show the old Fpga version for IO, due to this. This is expected.
-------------------------------------------------------------------
Name InstanceNum Version Date
-------------------------------------------------------------------
IO FPGA 0 0x06 20180920
MI FPGA 0 0x01 20170609
BIOS version v01.14(06/15/2019)
Alternate BIOS version v01.12(07/25/2018)
You can verify this from syslog which would say:
%CARDCLIENT-5-MOD_BOOT_GOLDEN: Module 1 IOFPGA booted from Golden
%CARDCLIENT-2-FPGA_BOOT_GOLDEN: IOFPGA booted from Golden
3. Update the Golden (also called backup) FPGA region.
install epld bootflash:n9000-epld.7.0.3.I7.9.img module 1 golden
Expected result: Switch will update EPLD and will reload automatically. Please don't interrupt, power cycle or reload when EPLD update is happening.
show version module 1 epld
-------------------------------------------------------------------
Name InstanceNum Version Date
-------------------------------------------------------------------
IO FPGA 0 0x07 20180920
BIOS version v01.14(06/15/2019)
Alternate BIOS version v01.12(07/25/2018)
After uprade is complete, switch should boot up with primary, shown logs below
show logging log | grep -i fpga
2019 Jul 9 19:46:11 switch %CARDCLIENT-2-FPGA_BOOT_PRIMARY: IOFPGA booted from Primary
2019 Jul 9 19:46:11 switch %CARDCLIENT-2-FPGA_BOOT_PRIMARY: MIFPGA booted from Primary
2019 Jul 9 19:46:11 switch %CARDCLIENT-5-MOD_BOOT_PRIMARY: Module 1 IOFPGA booted from Primary
2019 Jul 9 19:46:11 switch %CARDCLIENT-5-MOD_BOOT_PRIMARY: Module 1 MIFPGA booted from Primary
NOTE: For N3K-C36180YC-R and N3K-C3636C-R, CPU FPGA will have the fix, so look for CPU FPGA instead of IO.
Available EPLD Images for the Cisco Nexus 9200, 9300, 9300-EX, and 9300-FX Platform Switches
Release 7.0(3)I7(7) |
Release 7.0(3)I7(8) |
Release 7.0(3)I7(9) |
Release 7.0(3)I7(10) |
||
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
||
0x5 (0.005) |
0x5 (0.005) |
0x5 (0.005) |
0x5 (0.005) |
||
0x20(0.032) |
0x20(0.032) |
0x20(0.032) |
0x20(0.032) |
||
0x7 (0.007) |
0x7 (0.007) |
0x7 (0.007) |
0x7 (0.007) |
||
0x2 (0.002) |
0x2 (0.002) |
0x2 (0.002) |
0x2 (0.002) |
||
0x12 (0.018) |
0x12 (0.018) |
0x12 (0.018) |
0x12 (0.018) |
||
0x1 (0.001) |
0x1 (0.001) |
0x1 (0.001) |
0x1 (0.001) |
||
0x1 (0.001) |
0x1 (0.001) |
0x1 (0.001) |
0x1 (0.001) |
||
Cisco Nexus 9236C |
0x17 (0.023) |
0x17 (0.023) |
0x17 (0.023) |
0x17 (0.023) |
|
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
||
0x17 (0.023) |
0x17 (0.023) |
0x17 (0.023) |
0x17 (0.023) |
||
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
||
0x7 (0.007) |
0x7 (0.007) |
0x7 (0.007) |
0x7 (0.007) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x2 (0.002) |
0x2 (0.002) |
0x2 (0.002) |
0x2 (0.002) |
||
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
||
0x3 (0.003) |
0x3 (0.003) |
0x3 (0.003) |
0x3 (0.003) |
||
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
||
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
||
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
||
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
||
0x17 (0.023) |
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
||
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
||
0x10 (0.010) |
0x10 (0.010) |
0x10 (0.010) |
0x10 (0.010) |
||
0x10 (0.016) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
0x8 (0.008) |
0x12 (0.018) |
0x12 (0.018) |
0x12 (0.018) |
||
0x12 (0.018) |
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
||
0x12 (0.018) |
0x12 (0.018) |
0x12 (0.018) |
0x12 (0.018) |
||
0x17 (0.023) |
0x17 (0.023) |
0x17 (0.023) |
0x17 (0.023) |
||
0x10 (0.016) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
0x5 (0.005) |
0x5 (0.005) |
0x5 (0.005) |
0x5 (0.005) |
||
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
||
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
||
0x6 (0.006) |
0x6 (0.006) |
0x6 (0.006) |
0x6 (0.006) |
||
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
||
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x6 (0.006) |
0x6 (0.006) |
0x6 (0.006) |
0x6 (0.006) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x6 (0.006) |
0x6 (0.006) |
0x6 (0.006) |
0x6 (0.006) |
||
0x3 (0.003) |
0x3 (0.003) |
0x3 (0.003) |
0x3 (0.003) |
||
0x16 (0.022) |
0x16 (0.022) |
0x16 (0.022) |
0x16 (0.022) |
||
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
0x15 (0.021) |
||
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
||
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
6-port 40-Gigabit optical uplink module (N9K-M6PQ or N9K-M6PQ-E) |
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
|
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
1 Not available in this release.
Available EPLD Images for the Cisco Nexus 9500 Platform Switches
Release 7.0(3)I7(7) |
Release 7.0(3)I7(8) |
Release 7.0(3)I7(9) |
Release 7.0(3)I7(10) |
||
0x30 (0.049) |
0x30 (0.049) |
0x30 (0.049) |
0x30 (0.049) |
||
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
||
0x30 (0.049) |
0x30 (0.049) |
0x30 (0.049) |
0x30 (0.049) |
||
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
||
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
0x20 (0.032) |
||
0x5 (0.005) |
0x5 (0.005) |
0x5 (0.005) |
0x5 (0.005) |
||
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
||
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
||
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
||
0x16 (0.022) |
0x16 (0.022) |
0x16 (0.022) |
0x16 (0.022) |
||
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
|||
0x12 (0.018) |
0x12 (0.018) |
0x13 (0.019) |
0x13 (0.019) |
||
0x8 (0.008) |
0x8 (0.008) |
0x9 (0.009) |
0x9 (0.009) |
||
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
||
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
||
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
0x7 (0.007) |
0x7 (0.007) |
0x7 (0.007) |
0x7 (0.007) |
||
32-port 100-Gigabit QSFP28 line card |
IOFPGA |
0x5 (0.005) |
0x5 (0.005) |
0x7 (0.007) |
0x7 (0.007) |
MIFPGA |
0x1 (0.001) |
0x1 (0.001) |
0x2 (0.002) |
0x2 (0.002) |
|
0x12 (0.018) |
0x12 (0.018) |
0x13 (0.019) |
0x13 (0.019) |
||
0x8 (0.008) |
0x8 (0.008) |
0x9 (0.009) |
0x9 (0.009) |
||
0x6 (0.006) |
0x6 (0.006) |
0x7 (0.007) |
0x7 (0.007) |
||
0x6 (0.006) |
0x6 (0.006) |
0x7 (0.007) |
0x7 (0.007) |
||
48-port 1-/10-Gigabit SFP+ and 4-port |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
|
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
||
48-port 1/10GBASE-T and 4-port |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
|
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
||
48-port 1/10GBASE-T and 4-port |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
0x9 (0.009) |
|
0x3 (0.003) |
0x3 (0.003) |
0x3 (0.003) |
0x3 (0.003) |
||
48-port 1/10GBASE-T and 4-port |
0x10 (0.010) |
0x10 (0.010) |
0x10 (0.010) |
0x10 (0.010) |
|
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
0x8 (0.008) |
||
48-port 1-/10-Gigabit SFP+ and |
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
0x14 (0.020) |
|
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
0x10 (0.016) |
||
48-port 1-/10-/25-Gigabit SFP28 and |
0x11 (0.017) |
0x11 (0.017) |
0x12 (0.018) |
0x12 (0.018) |
|
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
0x4 (0.004) |
||
48-port 10-Gigabit SFP+ and |
0x3 (0.003) |
0x3 (0.003) |
0x4 (0.004) |
0x4 (0.004) |
|
0x5 (0.005) |
0x5 (0.005) |
0x6 (0.006) |
0x6 (0.006) |
||
Fabric module for Cisco Nexus 9504 |
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
|
Fabric module for Cisco Nexus 9504 |
0x14 (0.020) |
0x14 (0.020) |
0x15 (0.021) |
0x15 (0.021) |
|
Fabric module for Cisco Nexus 9504 |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
|
Fabric module for Cisco Nexus 9508 |
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
0x19 (0.025) |
|
Fabric module for Cisco Nexus 9508 |
0x13 (0.019) |
0x13 (0.019) |
0x14 (0.020) |
0x14 (0.020) |
|
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
||
Fabric module for Cisco Nexus 9516 |
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
0x13 (0.019) |
|
Fabric module for Cisco Nexus 9516 |
IOFPGA |
0x7 (0.007) |
0x7 (0.007) |
0x8 (0.008) |
0x8 (0.008) |
MIFPGA |
0x7 (0.007) |
0x7 (0.007) |
0x8(0.008) |
0x8(0.008) |
|
Fabric module for Cisco Nexus 9516 |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
0x11 (0.017) |
|
0x7(0.007) |
0x7(0.007) |
0x8(0.008) |
0x8(0.008) |
2 Not available in this release.
Before you can prepare the EPLD images for installation, you must download them to the FTP or management server.
To upgrade the EPLD images using CLI commands, follow these guidelines:
■ Before you upgrade any EPLD images, be sure that you have updated the Cisco NX-OS operating system to the level required for the images and be sure that you have an EPLD image file.
— You can upgrade a module individually.
— You can upgrade all modules sequentially.
— You can update the images for online modules only.
■ The upgrade process disrupts traffic on the targeted module.
■ Do not insert or remove any modules while an EPLD upgrade is in progress.
1. Copy the EPLD image file to bootflash.
2. To determine if you need to upgrade the BIOS for the image, use the show install all impact command and see the Upgrade Required (Upg-Required) field for the BIOS row in the command output.
3. If you do not need to upgrade the BIOS, set the boot variable using the boot nxos bootflash:nxos.7.0.3.I7.9.bin command.
4. Enter the copy running-config startup-config command to set the startup boot variables to the NX-OS image.
5. If you need to upgrade the BIOS, enter the install all nxos bootflash:nxos.7.0.3.I7.9.bin command.
6. Enter the install epld bootflash:n9000-epld.7.0.3.I7.9.img module all command. The switch automatically reboots.
7. Upon reload of the switch, enter the install epld bootflash:n9000-epld.7.0.3.I7.9.img module all golden command. The switch automatically initiates a reboot.
To verify the EPLD upgrades for a switch or its modules, use the show version module slot-number epld command as follows:
■ To verify updates for a module on a modular switch (Cisco Nexus 9500 platform switches), indicate the chassis slot number for slot-number.
switch# show version module 22 epld
■ To verify updates for a top-of-rack switch (Cisco Nexus 9200, 9300, and 9300-EX platforms), use 1 for slot-number.
switch# show version module 1 epld
To display the status of EPLD upgrades on the switch, use the show install epld status command.
When EPLDs are upgraded, the following guidelines and observations apply:
■ If a module is not online, you cannot upgrade its EPLD images.
■ If there are two supervisors that are installed in the switch (Cisco Nexus 9504, 9508, and 9516 switches only), you can either upgrade only the standby or upgrade all modules (including both supervisor modules) by using the following commands:
— install epld bootflash: image module standby-supervisor-slot-number (upgrades only the standby supervisor module)
— install epld bootflash: image module all (upgrades all of the modules)
■ If there is only one supervisor that are installed in the switch, your upgrading or downgrading of EPLD images is disruptive.
The entire Cisco NX-OS 9000 Series documentation set.
The entire Cisco NX-OS 9000 Series release notes set.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
[3] For N9K-C9348GC-FXP, EPLD should be upgraded to minimum 7.0(3)I7(5a) version. Please refer CSCvm94301 for further details.