Upgrading or Downgrading the Cisco Nexus 9000 Series NX-OS Software

This chapter describes how to upgrade or downgrade the Cisco NX-OS software. It contains the following sections:

About the Software Image

Each device is shipped with the Cisco NX-OS software. The Cisco NX-OS software consists of one NXOS software image (for example, n9000-dk9.7.0.3.I1.1.bin). Only this image is required to load the Cisco NX-OS operating system. This image runs on all Cisco Nexus 9000 Series switches and the Cisco Nexus 3164Q switch starting with Cisco NX-OS Release 6.1(2)I2(2a).


Note


Another type of binary file is the software maintenance upgrade (SMU) package file. SMUs contain fixes for specific defects. They are created to respond to immediate issues and do not include new features. SMU package files are available for download from Cisco.com and generally include the ID number of the resolved defect in the filename (for example, n9000-dk9.7.0.3.I1.1.CSCab00001.gbin). For more information on SMUs, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide.



Note


Cisco also provides electronic programmable logic device (EPLD) image upgrades to enhance hardware functionality or to resolve known hardware issues. The EPLD image upgrades are independent from the Cisco NX-OS software upgrades. For more information on EPLD images and the upgrade process, see the Cisco Nexus 9000 Series FPGA/EPLD Upgrade Release Notes.


Prerequisites for Upgrading the Cisco NX-OS Software

Upgrading the Cisco NX-OS software has the following prerequisites:

  • Ensure that everyone who has access to the device or the network is not configuring the device or the network during this time. You cannot configure a device during an upgrade. Use the show configuration session summary command to verify that you have no active configuration sessions.

  • Save, commit, or discard any active configuration sessions before upgrading or downgrading the Cisco NX-OS software image on your device. On a device with dual supervisors, the active supervisor module cannot switch over to the standby supervisor module during the Cisco NX-OS software upgrade if you have an active configuration session.

  • Ensure that the device has a route to the remote server. The device and the remote server must be in the same subnetwork if you do not have a router to route traffic between subnets. To verify connectivity to the remote server, use the ping command.
    switch# ping 172.18.217.1 vrf management
    PING 172.18.217.1 (172.18.217.1): 56 data bytes
    64 bytes from 172.18.217.1: icmp_seq=0 ttl=239 time=106.647 ms
    64 bytes from 172.18.217.1: icmp_seq=1 ttl=239 time=76.807 ms
    64 bytes from 172.18.217.1: icmp_seq=2 ttl=239 time=76.593 ms
    64 bytes from 172.18.217.1: icmp_seq=3 ttl=239 time=81.679 ms
    64 bytes from 172.18.217.1: icmp_seq=4 ttl=239 time=76.5 ms
    
    --- 172.18.217.1 ping statistics ---
    5 packets transmitted, 5 packets received, 0.00% packet loss
    round-trip min/avg/max = 76.5/83.645/106.647 ms
    
    

For more information on configuration sessions, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide.

Prerequisites for Downgrading the Cisco NX-OS Software

Downgrading the Cisco NX-OS software has the following prerequisites:

  • Before you downgrade from a Cisco NX-OS release that supports the Control Plane Policing (CoPP) feature to an earlier Cisco NX-OS release that does not support the CoPP feature, you should verify compatibility using the show incompatibility nxos bootflash:filename command. If an incompatibility exists, disable any features that are incompatible with the downgrade image before downgrading the software.

Cisco NX-OS Software Upgrade Guidelines


Note


The Cisco Nexus 9000 Series NX-OS Release Notes contain specific upgrade guidelines for each release. See the Release Notes for the target upgrade release before starting the upgrade.


Before attempting to upgrade to any software image, follow these guidelines:

  • Schedule the upgrade when your network is stable and steady.

  • Avoid any power interruption, which could corrupt the software image, during the installation procedure.

  • On devices with dual supervisor modules, both supervisor modules must have connections on the console ports to maintain connectivity when switchovers occur during a software upgrade. See the Hardware Installation Guide for your specific chassis.

  • Perform the installation on the active supervisor module, not the standby supervisor module.

  • If you upgrade from a Cisco NX-OS release that supports the CoPP feature to a Cisco NX-OS release that supports the CoPP feature with additional classes for new protocols, you must either run the setup utility using the setup command or use the copp profile command for the new CoPP classes to be available. For more information on these commands, see the "Configuring Control Plane Policing" chapter in the Cisco Nexus 9000 Series NX-OS Security Configuration Guide.

Cisco NX-OS Software Downgrade Guidelines

Before attempting to downgrade to an earlier software release, follow these guidelines:

  • On devices with dual supervisor modules, both supervisor modules must have connections on the console ports to maintain connectivity when switchovers occur during a software downgrade. See the Hardware Installation Guide for your specific chassis.

Upgrading the Cisco NX-OS Software


Note


If an error message appears during the upgrade, the upgrade will fail because of the reason indicated. See the Cisco Nexus 9000 Series NX-OS Troubleshooting Guide for a list of possible causes and solutions.
SUMMARY STEPS

    1.    Read the release notes for the software image file for any exceptions to this upgrade procedure. See the Cisco Nexus 9000 Series NX-OS Release Notes.

    2.    Log in to the device on the console port connection.

    3.    Ensure that the required space is available for the image file to be copied.

    4.    If you need more space on the active supervisor module, delete unnecessary files to make space available.

    5.    Verify that there is space available on the standby supervisor module.

    6.    If you need more space on the standby supervisor module, delete any unnecessary files to make space available.

    7.    Log in to Cisco.com, choose the software image file for your device from the following URL, and download it to a file server: http:/​/​software.cisco.com/​download/​navigator.html.

    8.    Copy the software image to the active supervisor module using a transfer protocol. You can use FTP, TFTP, SCP, or SFTP.

    9.    Check the impact of upgrading the software before actually performing the upgrade.

    10.    Save the running configuration to the startup configuration.

    11.    Upgrade the Cisco NX-OS software.

    12.    (Optional) Display the entire upgrade process.

    13.    (Optional) Log in and verify that the device is running the required software version.

    14.    (Optional) If necessary, install any licenses to ensure that the required features are available on the device. See the Cisco NX-OS Licensing Guide.


DETAILED STEPS
    Step 1   Read the release notes for the software image file for any exceptions to this upgrade procedure. See the Cisco Nexus 9000 Series NX-OS Release Notes.
    Step 2   Log in to the device on the console port connection.
    Step 3   Ensure that the required space is available for the image file to be copied.
    switch# dir bootflash:
    49152    Dec 10 14:43:39 2014 lost+found/
    80850712 Dec 10 15:57:44 2014 n9000-dk9.6.1.2.I3.3.bin
    ...
    
    Usage for bootflash://sup-local
     4825743360 bytes used
    16312102912 bytes free
    21137846272 bytes total
    
    
    Note   

    We recommend that you have the image file for at least one previous release of the Cisco NX-OS software on the device to use if the new image file does not load successfully.

    Step 4   If you need more space on the active supervisor module, delete unnecessary files to make space available.
    switch# delete bootflash:n9000-dk9.6.1.2.I3.3.bin
    
    
    Step 5   Verify that there is space available on the standby supervisor module.
    switch# dir bootflash://sup-standby/
    49152    Dec 10 14:43:39 2014 lost+found/
    80850712 Dec 10 15:57:44 2014 n9000-dk9.6.1.2.I3.3.bin
    ...
    
    Usage for bootflash://sup-standby
     4825743360 bytes used
    16312102912 bytes free
    21137846272 bytes total
    
    
    Step 6   If you need more space on the standby supervisor module, delete any unnecessary files to make space available.
    switch# delete bootflash://sup-standby/n9000-dk9.6.1.2.I3.3.bin
    
    
    Step 7   Log in to Cisco.com, choose the software image file for your device from the following URL, and download it to a file server: http:/​/​software.cisco.com/​download/​navigator.html.
    Step 8   Copy the software image to the active supervisor module using a transfer protocol. You can use FTP, TFTP, SCP, or SFTP.
    switch# copy scp://user@scpserver.cisco.com//download/n9000-dk9.7.0.3.I1.1.bin bootflash:n9000-dk9.7.0.3.I1.1.bin
    
    
    Step 9   Check the impact of upgrading the software before actually performing the upgrade.
    switch# show install all impact nxos bootflash:n9000-dk9.7.0.3.I1.1.bin
    Installer will perform impact only check. Please wait. 
    uri is: /n9000-dk9.7.0.3.I1.1.bin 
    
    Verifying image bootflash:/n9000-dk9.7.0.3.I1.1.bin for boot variable "nxos".
    [####################] 100% -- SUCCESS
    
    Verifying image type.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "bios" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "nxos" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Preparing "lcn9k" version info using image bootflash:/n9000-dk9.7.0.3.I1.1.bin.
    [####################] 100% -- SUCCESS
    
    Performing module support checks.
    [####################] 100% -- SUCCESS
    
    Notifying services about system upgrade.
    [####################] 100% -- SUCCESS
    
    Compatibility check is done:
    Module  bootable          Impact  Install-type  Reason
    ------  --------  --------------  ------------  ------
         2       yes  non-disruptive          none
         4       yes  non-disruptive          none
         6       yes  non-disruptive          none
        22       yes  non-disruptive          none
        24       yes  non-disruptive          none
        26       yes  non-disruptive          none
        27       yes  non-disruptive          none
        28       yes  non-disruptive          none
        29       yes  non-disruptive          none
        30       yes  non-disruptive          none
    
    Images will be upgraded according to following table:
    Module    Image    Running-Version(pri:alt)           New-Version  Upg-Required
    ------  -------  --------------------------  --------------------  ------------
         2    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
         2     bios                   v01.35(00   v01.35(00:v01.27(00            no
         4    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
         4     bios                   v01.35(00   v01.35(00:v01.23(00            no
         6    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
         6     bios                   v01.35(00   v01.35(00:v01.24(00            no
        22    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
        22     bios                   v01.35(00   v01.35(00:v01.24(00            no
        24    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
        24     bios                   v01.35(00   v01.35(00:v01.24(00            no
        26    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
        26     bios                   v01.35(00   v01.35(00:v01.24(00            no
        27     nxos                 6.1(2)I3(3)           7.0(3)I1(1)            no
        27     bios                   v01.35(00   v01.35(00:v01.24(00            no
        28     nxos                 6.1(2)I3(3)           7.0(3)I1(1)            no
        28     bios                   v01.35(00   v01.35(00:v01.24(00            no
        29    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
        29     bios                   v01.35(00   v01.35(00:v01.24(00            no
        30    lcn9k                 6.1(2)I3(3)           7.0(3)I1(1)            no
        30     bios                   v01.35(00   v01.35(00:v01.24(00            no
    
    
    Step 10   Save the running configuration to the startup configuration.
    switch# copy running-config startup-config
    
    
    Step 11   Upgrade the Cisco NX-OS software.
    switch# install all nxos bootflash:n9000-dk9.7.0.3.I1.1.bin
    
    

    You can save time by upgrading up to three line cards concurrently. To do so, add the parallel option to the install all command (for example, install all parallel nxos bootflash:n9000-dk9.7.0.3.I1.1.bin).

    Note    If you enter the install all command without specifying a filename, the command performs a compatibility check, notifies you of the modules that will be upgraded, and confirms that you want to continue with the installation. If you choose to proceed, it installs the NXOS software image that is currently running on the switch and upgrades the BIOS of various modules from the running image if required.
    Step 12   (Optional)Display the entire upgrade process.
    switch# show install all status
    
    
    Step 13   (Optional)Log in and verify that the device is running the required software version.
    switch# show version
    
    
    Step 14   (Optional) If necessary, install any licenses to ensure that the required features are available on the device. See the Cisco NX-OS Licensing Guide.

    Downgrading to an Earlier Software Release


    Note


    If an error message appears during the downgrade, the downgrade will fail because of the reason indicated. See the Cisco Nexus 9000 Series NX-OS Troubleshooting Guide for a list of possible causes and solutions.
    SUMMARY STEPS

      1.    Read the release notes for the software image file for any exceptions to this downgrade procedure. See the Cisco Nexus 9000 Series NX-OS Release Notes.

      2.    Log in to the device on the console port connection.

      3.    Verify that the image file for the downgrade is present on the active supervisor module bootflash:.

      4.    If the software image file is not present, log in to Cisco.com, choose the software image file for your device from the following URL, and download it to a file server: http:/​/​software.cisco.com/​download/​navigator.html.

      5.    Copy the software image to the active supervisor module using a transfer protocol. You can use FTP, TFTP, SCP, or SFTP.

      6.    Check for any software incompatibilities.

      7.    Disable any features that are incompatible with the downgrade image.

      8.    Check for any hardware incompatibilities.

      9.    Power off any unsupported modules.

      10.    Save the running configuration to the startup configuration.

      11.    Downgrade the Cisco NX-OS software.

      12.    (Optional) Display the entire downgrade process.

      13.    (Optional) Log in and verify that the device is running the required software version.


    DETAILED STEPS
      Step 1   Read the release notes for the software image file for any exceptions to this downgrade procedure. See the Cisco Nexus 9000 Series NX-OS Release Notes.
      Step 2   Log in to the device on the console port connection.
      Step 3   Verify that the image file for the downgrade is present on the active supervisor module bootflash:.
      switch# dir bootflash:
      49152 Feb 01 14:43:39 2015 lost+found/
      80850712 Feb 01 15:57:44 2015 n9000-dk9.7.0.3.I1.1.bin
      ...
      
      Usage for bootflash://sup-local
       4825743360 bytes used
      16312102912 bytes free
      21137846272 bytes total
      
      
      Step 4   If the software image file is not present, log in to Cisco.com, choose the software image file for your device from the following URL, and download it to a file server: http:/​/​software.cisco.com/​download/​navigator.html.
      Note   

      If you need more space on the active or standby supervisor module bootflash:, use the delete command to remove unnecessary files.

      Step 5   Copy the software image to the active supervisor module using a transfer protocol. You can use FTP, TFTP, SCP, or SFTP.
      switch# copy scp://user@scpserver.cisco.com//download/n9000-dk9.6.1.2.I3.3.bin bootflash:n9000-dk9.6.1.2.I3.3.bin
      
      
      Step 6   Check for any software incompatibilities.
      switch# show incompatibility-all nxos bootflash:n9000-dk9.6.1.2.I3.3.bin
      Checking incompatible configuration(s) 
      No incompatible configurations
      
      

      The resulting output displays any incompatibilities and remedies.

      Step 7   Disable any features that are incompatible with the downgrade image.
      Step 8   Check for any hardware incompatibilities.
      switch# show install all impact nxos bootflash:n9000-dk9.6.1.2.I3.3.bin
      Installer will perform impact only check. Please wait. 
      uri is: /n9000-dk9.6.1.2.I3.3.bin 
      
      Verifying image bootflash:/n9000-dk9.6.1.2.I3.3.bin for boot variable "nxos".
      [####################] 100% -- SUCCESS
      
      Verifying image type.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "bios" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "nxos" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Preparing "lcn9k" version info using image bootflash:/n9000-dk9.6.1.2.I3.3.bin.
      [####################] 100% -- SUCCESS
      
      Performing module support checks.
      [####################] 100% -- SUCCESS
      
      Notifying services about system upgrade.
      [####################] 100% -- SUCCESS
      
      Compatibility check is done:
      Module  bootable          Impact  Install-type  Reason
      ------  --------  --------------  ------------  ------
           2       yes  non-disruptive          none
           4       yes  non-disruptive          none
           6       yes  non-disruptive          none
          22       yes  non-disruptive          none
          24       yes  non-disruptive          none
          26       yes  non-disruptive          none
          27       yes  non-disruptive          none
          28       yes  non-disruptive          none
          29       yes  non-disruptive          none
          30       yes  non-disruptive          none
      
      Images will be upgraded according to following table:
      Module   Image              Running-Version(pri:alt)         New-Version  Upg-Required
      ------  ------  ------------------------------------  ------------------  ------------
           2   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
           2    bios                   v01.35(00:v01.27(00           v01.35(00            no
           4   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
           4    bios                   v01.35(00:v01.23(00           v01.35(00            no
           6   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
           6    bios                   v01.35(00:v01.24(00           v01.35(00            no
          22   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
          22    bios                   v01.35(00:v01.24(00           v01.35(00            no
          24   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
          24    bios                   v01.35(00:v01.24(00           v01.35(00            no
          26   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
          26    bios                   v01.35(00:v01.24(00           v01.35(00            no
          27    nxos                           7.0(3)I1(1)         6.1(2)I3(3)            no
          27    bios v06.26(02/01/2015):v06.21(01/17/2015)  v06.26(02/01/2015)            no
          28    nxos                           7.0(3)I1(1)         6.1(2)I3(3)            no
          28    bios v06.26(02/01/2015):v06.21(01/17/2015)  v06.26(02/01/2015)            no
          29   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
          29    bios                   v01.35(00:v01.24(00           v01.35(00            no
          30   lcn9k                           7.0(3)I1(1)         6.1(2)I3(3)            no
          30    bios                   v01.35(00:v01.24(00           v01.35(00            no
      
      
      Step 9   Power off any unsupported modules.
      switch# poweroff module module-number
      
      
      Step 10   Save the running configuration to the startup configuration.
      switch# copy running-config startup-config
      
      
      Step 11   Downgrade the Cisco NX-OS software.
      switch# install all nxos bootflash:n9000-dk9.6.1.2.I3.3.bin
      
      
      Note    If you enter the install all command without specifying a filename, the command performs a compatibility check, notifies you of the modules that will be upgraded, and confirms that you want to continue with the installation. If you choose to proceed, it installs the NXOS software image that is currently running on the switch and upgrades the BIOS of various modules from the running image if required.
      Step 12   (Optional)Display the entire downgrade process.

      Example:
      switch# show install all status
      
      
      Step 13   (Optional)Log in and verify that the device is running the required software version.
      switch# show version