执行MDS 9000系列交换机无中断NX-OS升级
简介
本文档介绍在Cisco MDS 9000系列多层导向器交换机(MDS)上无中断升级NX-OS软件的说明。此过程适用于开放系统和FICON MDS交换机。
背景信息
无中断升级概述
所有MDS交换机均支持无中断升级和降级，这受Cisco MDS 9000 NX-OS和SAN-OS软件安装和升级指南中列出的限制限制。所有MDS文档（包括发行说明）都可在以下位置找到：Cisco MDS 9000 - 9.x版文档套件。
目标版本是在安装全部步骤中将MDS升级或降级到的NX-OS版本。最终目标版本是所需的最终版本的NX-OS版本。可能需要安装两个或多个这些中间目标版本，才能达到最终目标版本。可在以下位置找到开放系统和FICON的无中断升级矩阵：Cisco MDS 9000 NX-OS软件和固件升级和降级指南，版本9.x。这些已修改为要求所有从9.4(1a)之前的NX-OS版本升级至9.4(1a)之后的最终目标NX-OS版本，首先升级至NX-OS 9.4(1a)。 必须参阅Cisco MDS 9000 NX-OS软件和固件升级和降级指南了解详细信息。
在具有双管理引擎的97xx系列MDS上，在NX-OS安装期间，新映像将加载到备用Supervisor上。然后进行切换，以使运行新代码的备用Supervisor处于活动状态。然后，代码加载到以前的主用Supervisor上，并成为新的备用Supervisor。数据平面继续通过光纤通道流量。然后，这些模块以无中断方式从编号最小的模块开始升级过程，并继续执行最高过程。
MDS 91xx、92xx或93xx系列交换矩阵交换机只有一个Supervisor。升级完成后，将以无中断方式重新加载管理引擎（控制平面）。数据平面继续在不中断的情况下传输光纤通道流量。
如果您打算通过Telnet、安全外壳(SSH)或简单网络管理协议(SNMP)（交换矩阵管理器/设备管理器）进行升级，请确保您已与两个管理引擎建立以太网连接。当Supervisor以无中断方式重新启动时，您的终端会话将丢失。 您必须重新连接到交换机。您现在连接到上一个备用Supervisor。
同一交换矩阵内的多个交换机可以同时升级。一旦交换矩阵中的所有交换机都已升级，则应在大约7天的时间内评估所有设备的功能。如果未发现任何问题，则可能会更新冗余交换矩阵中的交换机。
更新的MDS升级说明 — 适用于所有MDS平台
升级MDS 9000系列交换机的最佳实践已经更新，以确保使用ISSU时体验流畅。在发出install all kickstart命令之前…… 系统……命令，请严格遵循此步骤。
注意：目标版本是在安装全部步骤中将MDS升级或降级到的NX-OS版本。最终目标版本是所需的最终版本的NX-OS版本。可能需要安装两个或多个这些中间目标版本才能达到最终目标版本。应针对每个中间目标版本和最终目标版本重复此过程。
注意：验证支持到最终目标版本的无中断升级或降级路径。可以在Cisco MDS 9000 NX-OS软件和固件升级和降级指南9.x版本中的支持的Cisco MDS NX-OS软件无中断降级路径一章中找到该路径：
1.将Show Tech-Support Detail的副本另存为gzipped文件。
其中包含当前交换机配置、日志文件和所有接口的状态。如果在升级期间或升级后出现问题，在升级前了解交换机的状态有助于排除故障，并减少诊断问题的时间。在NX-OS版本8.4(2b)及更高版本中，可以使用tac-pac命令。在之前的版本中，应使用show tech-support details命令。
mds9124V# tac-pac
Collecting show tech-support details...
Show tech details will take 4-8 minutes to complete. Please Wait ...
Collecting show logging onboard...
tacpac file volatile:mds9124V_tacpac_2025-08-22.gz created.
mds9124V#
2.将tac-pac/techsupport文件保存到交换机外部。
将您刚才保存的tac-pac/techsupport复制到您的TFTP服务器，将其重命名为include 'before_install'。 这样可以实现以下三点：它会验证您是否有可操作的TFTP服务器，验证您是否可以通过IP网络访问该服务器，并将配置的副本放置在交换机的外部位置，以便在交换机出现故障时进行备份。
MDS9124V# move volatile:F241-16-10-9124V-3_tacpac_2025-08-22.gz volatile:F241-16-10-9124V-3_tacpac_2025-08-22_before_install.gz
MDS9124V# copy volatile: tftp:
<prompts for file name> mds9124V_tacpac_2025-08-22_before_install.gz
<prompts for tftp server name or ip address> 192.168.1.1
注意：在上述示例中，使用tftp。MDS还支持ftp、scp和sftp。
3.（可选）保存交换机外部正在使用的当前映像。
验证您在TFTP服务器上有当前映像的副本，以便在必须返回原始版本的情况下进行备份。如果不这样做，请在此时将其从交换机复制到TFTP服务器。要确定当前映像，请发出show version命令。例如：
MDS9124V# copy bootflash: tftp:
<prompts for file name> m9124v-s8ek9-kickstart-mz.9.3.2a.bin
<prompt for tftp server name or ip address> 192.168.1.1
MDS9148V# copy bootflash: tftp:
<prompts for file name> m9124v-s8ek9-mz.9.3.2a.bin
<prompt for tftp server name or ip address> 192.168.1.1
注意：对于条prompts for file name目，请使用当前实际版本。
注意：在上述示例中，使用tftp。MDS还支持ftp、scp和sftp。
4.下载目标系统并启动映像。
从思科下载软件页面下载新的NX-OS映像。您需要启动和系统映像。将它们放在TFTP服务器的默认TFTP目录中。
思科提供两种类型的NX-OS软件。Payload Non-Crypto，也称为Non-Payload Encryption(NPE)，版本适用于美国商务部已列为non-export list of software（包含加密的非出口软件列表）的国家或政府。NPE版本中不包括某些高级故障排除功能。NPE版本还会限制思科提供变通方法或热修复的能力。只有符合出口限制的客户才能运行NPE版本。
下表可用于选择您的交换机系列和交换机软件映像：
| Cisco MDS系列交换机类型 | IBM MDS系列交换机类型 |
命名约定 |
|
SAN24C-7 |
文件名以m9124v-s8ek9开头 |
|
|
SAN32C-6 |
文件名以m9100-s6ek9开头 |
|
|
无 |
文件名以m9100-s5ek9开头 |
|
|
SAN48C-6 |
文件名以m9148-s6ek9开头 |
|
|
SAN48C-7 |
文件名以m9148v-s8ek9开头 |
|
|
SAN16C-R |
文件名以m9220-s7ek9开头 |
|
|
SAN50C-R |
文件名以m9250-s5ek9开头 |
|
|
无 |
文件名以m9300-s1ek9开头 |
|
|
SAN96C-6 |
文件名以m9300-s2ek9开头 |
|
|
SAN96C-7 |
文件名以m9396v-s3ek9开头 |
|
|
01FT600 SF1和01FT601 SF1E |
文件名以m9700-sf3ek9开头 |
|
|
02JD753 SF4 |
文件名以m9700-sf4ek9开头 |
注意：在思科下载页面上，将鼠标悬停文件名以获得消息摘要5(MD5)
5.验证bootflash上是否有足够的可用空间，以便添加新映像。
如果Bootflash上的空间不足，无法容纳目标系统和启动映像，则必须至少擦除系统映像文件。保留kickstart映像，以便在出现故障时使交换机到达可以加载(TFTP)新映像的点。升级后，您可以删除旧版本。注意：无法删除当前映像。
输入dir命令以检查bootflash可用空间：
MDS9124V# dir bootflash:
此外，如果运行双Supervisor MDS 9700交换机，请输入以下命令以检查备用Supervisor上是否有足够的可用空间：
MDS9700# dir bootflash://sup-standby/
6.将新映像从TFTP服务器下载到交换机上的bootflash。
MDS9124V# copy tftp: bootflash:
<prompts for file name> m9124v-s8ek9-kickstart-mz.9.4.3a.bin
<prompt for tftp server name or ip address> 192.168.1.1
MDS9124V# copy tftp: bootflash:
<prompts for file name> m9124v-s8ek9-mz.9.4.3a.bin
<prompt for tftp server name or ip address> 192.168.1.1
注意：在上述示例中，使用tftp。MDS还支持ftp、scp和sftp。
验证校验和，并验证MD5校验和：
有效的MD5校验和示例：
MDS9124V# show version image m9124v-s8ek9-mz.9.4.3a.bin
MD5 Verification Passed
image name: m9124v-s8ek9-mz.9.4.3a.bin
bios: v1.11.0(11/27/2024)
system: version 9.4(3a)
compiled: 3/1/2025 12:00:00 [03/25/2025 00:13:28]
MDS9124V#
无效的MD5校验和示例，需要重新下载。
MDS9124V# show version image m9124v-s8ek9-mz.9.4.3a.bin
MD5 Verification Failed
Image integrity check failed
7.保存SAN分析配置并暂时禁用SAN分析功能。
如果满足以下所有条件，则必须执行此步骤：
- 已启用SAN分析。
- 该交换机型号为MDS 9700交换机，包含一个或多个32 Gbps模块“4/8/16/32 Gbps高级FC模块DS-X9648-1536K9”
对于IBM品牌9700交换机，“4/8/16/32 Gbps高级FC模块”的IBM型号是01FT644。
- 交换机型号为MDS 9132T、MDS 9148T或MDS 9396T。
当无中断升级路径包括到最终目标版本的多个升级时，此步骤只应在第一个NX-OS升级时完成。
这样做是因为启用分析并完成NX-OS升级时，可能会导致TCAM损坏的问题。升级完成后，第15步将重新启用分析。如果show feature命令显示分析处于禁用状态，则可跳过此步骤和步骤14。此问题记录在思科漏洞ID CSCwo03706中 — FC接口不会启动/切换到软分区。
以下命令显示32 Gbps模块位于MDS 9718的插槽12中：
MDS9718# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ------------------ ----------
1 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
4 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
9 0 Supervisor Module-4 DS-X97-SF4-K9 ha-standby
10 0 Supervisor Module-4 DS-X97-SF4-K9 active *
11 34 1/10/40G IPS,2/4/8/10/16G FC Module DS-X9334-K9 ok
12 48 4/8/16/32 Gbps Advanced FC Module DS-X9648-1536K9 ok
13 48 8/16/32/64 Gbps Advanced FC Module DS-X9748-3072K9 ok以下命令显示32 Gbps模块位于IBM品牌SAN192C(9706)的插槽12中：
SAN192C# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ------------------ ----------
1 48 4/8/16/32 Gbps Advanced FC Module 01FT644 48x32 FC ok
2 48 8/16/32/64 Gbps Advanced FC Module 03FR076 48x64 FC ok
3 0 Supervisor Module-4 02JD753 SF4 active *
4 0 Supervisor Module-4 02JD753 SF4 ha-standby
5 34 1/10/40G IPS,2/4/8/10/16G FC Module 01FT645 24/10 EX ok
6 48 8/16/32/64 Gbps Advanced FC Module 03FR076 48x64 FC ok以下命令显示交换机类型为9148T:
MDS9148T# show version
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Documents: http://www.cisco.com/en/US/products/ps9372/tsd_products_support_serie
s_home.html
Copyright (c) 2002-2025, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained herein are owned by
other third parties and are used and distributed under license.
Some parts of this software are covered under the GNU Public
License. A copy of the license is available at
http://www.gnu.org/licenses/gpl.html.
Software
BIOS: version 1.11.0
loader: version N/A
kickstart: version 9.4(3b)
system: version 9.4(3b)
BIOS compile time: 11/27/2024
kickstart image file is: bootflash:///m9148-s6ek9-kickstart-mz.9.4.3b.bin
kickstart compile time: 5/24/2025 12:00:00 [05/28/2025 12:25:54]
system image file is: bootflash:///m9148-s6ek9-mz.9.4.3b.bin
system compile time: 5/24/2025 12:00:00 [05/28/2025 13:58:43]
Hardware
cisco MDS 9148T 48X32G FC (1 RU) Chassis ("4/8/16/32 Gbps FC/Sup-4")
Intel(R) Xeon(R) CPU D-1530 @ 2.40GHz with 5735444 kB of memory.
Processor Board ID JAE22500MUN
Device name: F241-14-08-9148T-2
bootflash: 3735552 kB
Kernel uptime is 8 day(s), 1 hour(s), 27 minute(s), 47 second(s)
Last reset at 462831 usecs after Thu Aug 14 19:44:56 2025
Reason: Reset due to upgrade
System version: 8.4(2d)
Service:
plugin
Core Plugin
MDS9148T#以下命令显示已启用功能分析：
MDS9718# show feature | i analytics
analytics 1 enabled 如果已启用SAN Analytics，请将SAN Analytics配置副本保存到两个管理引擎。
MDS9718# echo "configure terminal" > before_issu_analytics.cfg
MDS9718# show running-config analytics >> before_issu_analytics.cfg如果和MDS 9700或IBM品牌9700将分析配置复制到备用Supervisor:
MDS9718# copy before_issu_analytics.cfg bootflash://sup-standby/暂时禁用功能SAN Analytics。
MDS9718# configure terminal
MDS9718(config)# no feature analytics
MDS9718(config)# end
MDS9718# copy running-config startup-config8.执行系统切换（仅限MDS 9700）
如果交换机型号是MDS 9700交换机，则必须执行此步骤。
从活动Supervisor发出system switchover命令。系统切换完成后，重新连接到新激活的Supervisor，并等待备用Supervisor达到“ha-standby”状态。
以下是从活动Supervisor上的控制台连接发出的system switchover命令的示例：
MDS9710# system switchover
MDS9710#
User Access Verification
MDS9710 login: [703536.990233] writing reset reason 7,
ME Firmware Status #1: 0x000F0345
ME Firmware Status #2: 0x38000000
ME Current State: Operational
ME Error Code: No Error
ME Operational Firmware Version: 06:3.0.3.214
CPU Signature - 0x00050663: Version - 0x00050660
CPU - 1 : Cores - 8 : HTEn - 1 : HT - 2 : Features - 0xBFEBFBFF
MicroCode Version : 0x0700001E
...etc...重新连接到新激活的Supervisor并发出show module命令。一旦管理引擎进入“ha-standby”状态，此步骤即完成：
MDS9710# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ------------------ ----------
1 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
4 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
5 0 Supervisor Module-4 powered-up
6 0 Supervisor Module-4 DS-X97-SF4-K9 active *
8 34 1/10/40G IPS,2/4/8/10/16G FC Module DS-X9334-K9 ok
9 48 4/8/16/32 Gbps Advanced FC Module DS-X9648-1536K9 ok
10 48 8/16/32/64 Gbps Advanced FC Module DS-X9748-3072K9 ok
...
MDS9710# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ------------------ ----------
1 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
4 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
5 0 Supervisor Module-4 DS-X97-SF4-K9 ha-standby
6 0 Supervisor Module-4 DS-X97-SF4-K9 active *
8 34 1/10/40G IPS,2/4/8/10/16G FC Module DS-X9334-K9 ok
9 48 4/8/16/32 Gbps Advanced FC Module DS-X9648-1536K9 ok
10 48 8/16/32/64 Gbps Advanced FC Module DS-X9748-3072K9 ok
...
9.检查NX-OS版本之间的不兼容。
发出show incompatibility system <target system image name>命令，检查NX-OS版本之间的不兼容性以及可能阻止升级的任何交换机事件。这也将确保/var/volatile/tmp文件系统有足够的空间继续运行。例如：
MDS9124V# show incompatibility system m9124v-s8ek9-mz.9.4.3a.bin
Checking incompatible configuration(s):
No incompatible configurations
Checking dynamic incompatibilities:
No incompatible configurations
MDS9124V#10.确定对安装的任何影响。
这将检查映像，并确保它们与交换机兼容。此操作通过show install all impact命令完成：
MDS9124V# show install all impact system m9124v-s8ek9-mz.9.4.3a.bin kickstart m9124v-s8ek9-kickstart-mz.9.4.3a.bin
Installer will perform impact only check. Please wait.
Verifying image bootflash:/m9124v-s8ek9-kickstart-mz.9.4.3a.bin for boot variable "kickstart".
[####################] 100% -- SUCCESS
Verifying image bootflash:/m9124v-s8ek9-mz.9.4.3a.bin for boot variable "system".
[####################] 100% -- SUCCESS
Performing module support checks. [####################] 100% -- SUCCESS
Verifying image type.
[####################] 100% -- SUCCESS
Extracting "system" version from image bootflash:/m9124v-s8ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "kickstart" version from image bootflash:/m9124v-s8ek9-kickstart-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "bios" version from image bootflash:/m9124v-s8ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Performing Compact Flash and TCAM sanity test.
[####################] 100% -- SUCCESS
Notifying services about system upgrade. [####################] 100% -- SUCCESS
Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
1 yes non-disruptive reset
Images will be upgraded according to following table:
Module Image Running-Version(pri:alt) New-Version Upg-Required
------ ---------- ---------------------------------------- -------------------- ------------
1 system 9.3(2a) 9.4(3a) yes
1 kickstart 9.3(2a) 9.4(3a) yes
1 bios v1.11.0(11/27/2024):v1.11.0(11/27/2024) v1.11.0(11/27/2024) no
MDS9124V#
注意：此命令必须作为单行输入，而不是作为两行输入。此命令不用于安装，但可用于验证安装过程并提供显示源版本和源版本的报告。 执行升级时，此升级还会显示是中断升级还是非中断。
注意：在开始升级/降级过程之前，必须关闭到交换机的所有文件传输会话（如SFTP/SCP）。任何打开的文件传输会话都可能导致交换机在ISSU/D时中断地重新加载。有关详细信息，请参阅Cisco Bug ID CSCvo2269和Cisco Bug ID CSCvu52058。 客户端抱怨MobaXterm在打开SSH会话时打开SFTP会话，并且可能会阻止升级的发生。
11.验证tmp文件目录的使用率是否不超过9%。
某些MDS交换机使用/var/volatile/tmp目录，而其它交换机使用/var/tmp目录。使用show system internal flash | inc "/var/tmp|/var/volatile/tmp"命令，检查以下两个命令上的可用空间：
MDS9124V# show system internal flash | inc "/var/tmp|/var/volatile/tmp"
Mount-on 1K-blocks Used Available Use% Filesystem
/var/volatile/tmp 614400 104 614296 1 none
MDS9124V#
注意：以上示例显示文件系统只使用了1% ，因此可以安全地继续下一步。如果/var/volatile/tmp目录或/var/tmp目录的使用率超过9%，请不要继续安装，并与Cisco TAC联系。
12.从新系统映像升级BIOS。
每种特定类型的硬件都有自己的BIOS版本。具体硬件类型（如管理引擎、交换模块等）不同，编号也大不相同。
NX-OS 9.4(2)中引入了一个新的管理引擎BIOS，用于CVE-2024-20397。
当当前交换机NX-OS版本介于8.4(2)和9.3(2a)之间，而目标NX-OS版本为9.4(2)或更高时，此程序是相关的。在继续这些步骤之前，请确保已将NX-OS映像复制到Supervisor。使用隐藏命令在每个管理引擎上手动安装最新的Supervisor BIOS。在具有双管理引擎的MDS 9700上，必须在每个管理引擎上执行此操作。在本示例中，安装的是来自9.4(2a)的BIOS:
MDS9124V# install module 1 bios system m9124v-s8ek9-mz.9.4.3a.bin forced
Warning: Installing Bios forcefully...!
Warning: Please do not remove or power off the module at this time
Upgrading primary bios
Started bios programming .... please wait
[############################100%############################]
BIOS install succeeded for module 1
Upgrading alternate bios
Started bios programming .... please wait
[############################100%############################]
BIOS install succeeded for module 1
MDS9124V#
在本示例中，MDS 9718的BIOS正在升级，插槽9和10中具有管理引擎：
MDS9718# show module | include Supervisor
9 0 Supervisor Module-4 DS-X97-SF4-K9 active *
10 0 Supervisor Module-4 DS-X97-SF4-K9 ha-standby
MDS9718#
MDS9718# install module 9 bios system m9700-sf4ek9-mz.9.4.2a.bin forced
Warning: Installing Bios forcefully...!
Warning: Please do not remove or power off the module at this time
Upgrading primary bios
Started bios programming .... please wait
[############################100%############################]
BIOS install succeeded for module 9
Upgrading alternate bios
Started bios programming .... please wait
[############################100%############################]
BIOS install succeeded for module 9
MDS9718#
MDS9718# install module 10 bios system m9700-sf4ek9-mz.9.4.2a.bin forced
Warning: Installing Bios forcefully...!
Warning: Please do not remove or power off the module at this time
Upgrading primary bios
Started bios programming .... please wait
[############################100%############################]
BIOS install succeeded for module 10
Upgrading alternate bios
Started bios programming .... please wait
[############################100%############################]
BIOS install succeeded for module 10
MDS9718#13.升级交换机上的NX-OS。
使用“install all”命令继续升级到NX-OS的新版本：
以下是MDS 9124V升级到NX-OS 9.4(4)的示例：
MDS9124V# install all kickstart m9124v-s8ek9-kickstart-mz.9.4.4.bin system m9124v-s8ek9-mz.9.4.4.bin
Installer will perform compatibility check first. Please wait.
Verifying image bootflash:/m9124v-s8ek9-kickstart-mz.9.4.4.bin for boot variable "kickstart".
[####################] 100% -- SUCCESS
Verifying image bootflash:/m9124v-s8ek9-mz.9.4.4.bin for boot variable "system".
[####################] 100% -- SUCCESS
Performing module support checks. [####################] 100% -- SUCCESS
Verifying image type.
[####################] 100% -- SUCCESS
Extracting "system" version from image bootflash:/m9124v-s8ek9-mz.9.4.4.bin.
[####################] 100% -- SUCCESS
Extracting "kickstart" version from image bootflash:/m9124v-s8ek9-kickstart-mz.9.4.4.bin.
[####################] 100% -- SUCCESS
Extracting "bios" version from image bootflash:/m9124v-s8ek9-mz.9.4.4.bin.
[####################] 100% -- SUCCESS
Performing Compact Flash and TCAM sanity test.
[####################] 100% -- SUCCESS
Notifying services about system upgrade. [####################] 100% -- SUCCESS
Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
1 yes non-disruptive reset
Images will be upgraded according to following table:
Module Image Running-Version(pri:alt) New-Version Upg-Required
------ ---------- ---------------------------------------- -------------------- ------------
1 system 9.4(1a) 9.4(4) yes
1 kickstart 9.4(1a) 9.4(4) yes
1 bios v1.11.0(11/27/2024):v1.11.0(11/27/2024) v1.11.0(11/27/2024) no
Do you want to continue with the installation (y/n)? [n] y
Install is in progress, please wait.
Performing runtime checks. [####################] 100% -- SUCCESS
Notifying services about the upgrade. [####################] 100% -- SUCCESS
Setting boot variables.
[####################] 100% -- SUCCESS
Performing configuration copy.
[####################] 100% -- SUCCESS
Module 1: Refreshing compact flash and Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Upgrade can no longer be aborted, any failure will result in a disruptive upgrade.
Freeing memory in the file system. [####################] 100% -- SUCCESS
Loading images into memory. [####################] 100% -- SUCCESS
Saving linecard runtime state. [####################] 100% -- SUCCESS
Saving supervisor runtime state. [####################] 100% -- SUCCESS
Saving mts state. [####################] 100% -- SUCCESS
Reloading the kernel to proceed with the upgrade.
All telnet and ssh connections will now be temporarily terminated.
F241-16-11-9124V-1#
MDS BIOS: v1.11.0 Date: 11/27/2024 15:45:42
System Date: 08/27/2025 Time: 18:43:44.0
Booting bootflash:/m9124v-s8ek9-kickstart-mz.9.4.4.bin
Trying diskboot
Filesystem type is ext2fs, partition type msdos.
Image SWID valid
Image MD5Sum match
OS Image Key Type: Development KEY
Image Signature verification was Successful.
Boot Time: 8/27/2025 18:43:51
INIT: version 2.88 booting
USB device found..
boot device node /dev/sda
obfl flash device node /dev/sdb
Checking obfl filesystem. done.
Checking all filesystems.... done.
ACT2: ACT2 AUTHENTICATION TEST STATUS : SUCCESS
/etc/rc.d/rcS.d/S81mcelog-init: line 33: boot_debug: command not found
Starting mcelog daemon
Loading system software
isanimg_passed_by_sycli::
System image digital signature verification successful.
Uncompressing system image: bootflash:/m9124v-s8ek9-mz.9.4.4.bin Wed Aug 27 18:44:37 UTC 2025
blogger: nothing to do.
CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
..done Wed Aug 27 18:44:39 UTC 2025
INIT: Entering runlevel: 3
starting statd: done
2025 Aug 27 18:44:50 F241-16-11-9124V-1 %SYSLOG-2-SYSTEM_MSG : Syslogs wont be logged into logflash until logflash is online
2025 Aug 27 18:44:53 F241-16-11-9124V-1 %KERN-2-SYSTEM_MSG: [ 14.911303] igb_probe: Could not do igb_proc_init - kernel
2025 Aug 27 18:45:10 F241-16-11-9124V-1 %CARDCLIENT-2-REG: OK
2025 Aug 27 18:45:17 F241-16-11-9124V-1 %PMON-SLOT1-2-PMON_CRIT_INFO: Port Monitor Critical Information: Config download success .
2025 Aug 27 18:45:19 F241-16-11-9124V-1 %PLATFORM-2-PS_DETECT: Power supply 1 detected but shutdown (Serial number LIT24512HRP)
2025 Aug 27 18:45:19 F241-16-11-9124V-1 %PLATFORM-2-PS_OK: Power supply 2 ok(Serial number LIT24512HSG)
2025 Aug 27 18:45:19 F241-16-11-9124V-1 %PLATFORM-2-PS_FANOK: Fan in Power supply 2 ok
User Access Verification
Continuing with installation process, please wait.
The login will be disabled until the installation is completed.
Status for linecard upgrade. [####################] 100% -- SUCCESS
Performing supervisor state verification. [####################] 100% -- SUCCESS
Supervisor non-disruptive upgrade successful.
Install has been successful.
以下是MDS 9710升级到NX-OS 9.4(3a)的示例：
MDS9710# install all kickstart m9700-sf4ek9-kickstart-mz.9.4.3a.bin system m9700-sf4ek9-mz.9.4.3a.bin
Installer will perform compatibility check first. Please wait.
Verifying image bootflash:/m9700-sf4ek9-kickstart-mz.9.4.3a.bin for boot variable "kickstart".
[####################] 100% -- SUCCESS
Verifying image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin for boot variable "system".
[####################] 100% -- SUCCESS
Performing module support checks. [####################] 100% -- SUCCESS
Verifying image type.
[####################] 100% -- SUCCESS
Extracting "slc4xb" version from image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "bios" version from image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "system" version from image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "kickstart" version from image bootflash:/m9700-sf4ek9-kickstart-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "lctsh" version from image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "slcf32" version from image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Extracting "slc-hindon" version from image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin.
[####################] 100% -- SUCCESS
Notifying services about system upgrade. [####################] 100% -- SUCCESS
Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
1 yes non-disruptive rolling
4 yes non-disruptive rolling
5 yes non-disruptive reset
6 yes non-disruptive reset
8 yes non-disruptive rolling
9 yes non-disruptive rolling
10 yes non-disruptive rolling
Other miscellaneous information for installation:
Module info
------ ----------------------------------
8 FC ports 1-24 are hitless, IPS 1-8 are hitful, and Intelligent Applications running are hitful
Images will be upgraded according to following table:
Module Image Running-Version(pri:alt) New-Version Upg-Required
------ ---------- ---------------------------------------- -------------------- ------------
1 slc4xb 9.4(2a) 9.4(3a) yes
1 bios v1.10.23(04/07/20):v1.10.23(04/07/20) v1.10.23(04/07/20) no
4 slc4xb 9.4(2a) 9.4(3a) yes
4 bios v1.10.23(04/07/20):v1.10.23(04/07/20) v1.10.23(04/07/20) no
5 system 9.4(2a) 9.4(3a) yes
5 kickstart 9.4(2a) 9.4(3a) yes
5 bios v2.21.0(11/27/2024):v2.21.0(11/27/2024) v2.21.0(11/27/2024) no
6 system 9.4(2a) 9.4(3a) yes
6 kickstart 9.4(2a) 9.4(3a) yes
6 bios v2.21.0(11/27/2024):v2.21.0(11/27/2024) v2.21.0(11/27/2024) no
8 lctsh 9.4(2a) 9.4(3a) yes
8 bios v4.2.19(05/16/2023):v4.2.19(05/16/2023) v4.2.19(05/16/2023) no
9 slcf32 9.4(2a) 9.4(3a) yes
9 bios v4.1.56(05/16/2023):v4.1.56(05/16/2023) v4.1.56(05/16/2023) no
10 slc-hindon 9.4(2a) 9.4(3a) yes
10 bios v1.11.0(11/27/2024):v1.11.0(11/27/2024) v1.11.0(11/27/2024) no
Do you want to continue with the installation (y/n)? [n] y
Install is in progress, please wait.
Performing runtime checks. [####################] 100% -- SUCCESS
Syncing image bootflash:/m9700-sf4ek9-kickstart-mz.9.4.3a.bin to standby.
[####################] 100% -- SUCCESS
Syncing image bootflash:/m9700-sf4ek9-mz.9.4.3a.bin to standby.
[####################] 100% -- SUCCESS
Setting boot variables.
[####################] 100% -- SUCCESS
Performing configuration copy.
[####################] 100% -- SUCCESS
Module 1: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Module 4: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Module 5: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Module 6: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Module 8: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Module 9: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
Module 10: Upgrading bios/loader/bootrom/power-seq.
Warning: please do not remove or power off the module at this time.
[####################] 100% -- SUCCESS
ME Firmware Status #1: 0x000F0345
ME Firmware Status #2: 0x3800E000
ME Current State: Operational
ME Error Code: No Error
ME Operational Firmware Version: 06:3.0.3.214
CPU Signature - 0x00050663: Version - 0x00050660
CPU - 1 : Cores - 8 : HTEn - 1 : HT - 2 : Features - 0xBFEBFBFF
MicroCode Version : 0x0700001E
Banzai FPGA Information:
BANZAI BusNum 3B Tornado VenID = 0x1137 DevId = 0x141 PCI address 0xF800000C
BANZAI FPGA BusNum 3C VenID = 0x10EE DevId = 0x7 PCI address 0xBC000000
BANZAI LPC VenID = 0x8086 DevId = 0x8C54
Revison Number = 0x14
BIOS = Primary 0x200
Primary SB_Result: 0x18C3140
SB_Address: 0xFFDE008C
SB_Error: 0x0
Secondary SB_Result: 0x0
SB_Address: 0x0
SB_Error: 0x0
Enable OS Watchdog timer. Value 0x7FC00
Punch SPI boot timer Stop. Value 0x300
IOFPGA MISC RESET REG 0x18. Default Value 0x0
IOFPGA MISC RESET REG 0x18. Value 0x400
Config S2S Command register 0x704. Value 0x4
Config S2S Config register 0x700. Value 0x800000F
IDROM MAC Address = 10:B3:D6:8E:19:04
Disable GBE ASPM
SATA Port 0: Micron_5100_MT - 240.0 GB
NEXUS OS Boot Mode = 0x0
Selected Boot Option:
NEXUS OS: GRUB Boot
CISCO SUP3DC3X BIOS: v2.21.0 Date: 11/27/2024 12:29:13
Pre OS Boot Entry:
IO-FPGA: Disabled OS Watch Dog Timer!
PMB2_REG(0x8)=0xaa
S2S_REG(0x24)=0x1
Booting bootflash:/m9700-sf4ek9-kickstart-mz.9.4.3a.bin
Trying diskboot
Filesystem type is ext2fs, partition type 0x83
Image SWID valid
Image Signature verification was Successful.
Boot Time: 8/27/2025 12:41:37
Cisco OS Boot Entry:
IO-FPGA: Enabled the OS Watch Dog Timer!
INIT: version 2.88 booting
Checking Bootflash
Bootflash firmware upgrade not required
Checking SSD
Checking firmware version for SSD
Firmware is already at latest version
OBFL device found as /dev/sda
usb device (2-1:1.0) /dev/sdb found after 0 iterations
boot device node /dev/sdb
cat: /sys/bus/usb/devices/1-1.1/dev: No such file or directory
mknod: invalid minor device number ''
Checking obfl filesystems...[ 35.469121] OBFL Error: (line 1265):obfl_global_header_check: number of blocks 5 not valid, expected 6
Checking all filesystems..r.r.r.R.r done.
[ 59.398556] SUP booted with primary IO-FPGA
[ 59.448706] in cctrl2 module
[ 59.483190] registering callback
Starting mcelog daemon
Starting rpcbind daemon...done.
creating NFS state directory: done
starting 8 nfsd kernel threads: done
starting mountd: done
starting statd: done
Loading system software
/bootflash//m9700-sf4ek9-mz.9.4.3a.bin read done
System image digital signature verification successful.
Uncompressing system image: bootflash:/m9700-sf4ek9-mz.9.4.3a.bin Wed Aug 27 12:43:13 UTC 2025
blogger: nothing to do.
C
..done Wed Aug 27 12:43:19 UTC 2025
INIT: Entering runlevel: 3
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
System is coming up ... Please wait ...
User Access Verification
Continuing with installation, please wait
2025 Aug 27 12:45:31 MDS9710 %USBHSD-2-MOUNT: logflash: online
Module 5: Waiting for module online.
-- SUCCESS
2025 Aug 27 12:50:50 MDS9710 %KERN-2-SYSTEM_MSG: [ 523.196775] Switchover started by redundancy driver - kernel
2025 Aug 27 12:50:50 MDS9710 %SYSMGR-2-HASWITCHOVER_PRE_START: This supervisor is becoming active (pre-start phase).
2025 Aug 27 12:50:50 MDS9710 %SYSMGR-2-HASWITCHOVER_START: Supervisor 5 is becoming active.
2025 Aug 27 12:50:51 MDS9710 %SYSMGR-2-SWITCHOVER_OVER: Switchover completed.
2025 Aug 27 12:50:54 MDS9710 %PLATFORM-1-PFM_ALERT: Disabling ejector based shutdown on sup in slot 5
2025 Aug 27 12:50:55 MDS9710 %IVR-2-IVR_NAT_INFO: Only IVR NAT is supported on this platform in this NX-OS release. IVR NAT is not enabled by default - it must be explicitly enabled.
2025 Aug 27 12:55:17 MDS9710 %USBHSD-STANDBY-2-MOUNT: logflash: online
2025 Aug 27 12:55:17 MDS9710 %USBHSD-STANDBY-2-MOUNT: slot0: online
2025 Aug 27 12:58:49 MDS9710 %PLATFORM-1-PFM_ALERT: Enabling ejector based shutdown on sup in slot 6
Module 1: Non-disruptive upgrading.
[# ] 0%2025 Aug 27 12:59:45 MDS9710 %PLATFORM-1-PFM_ALERT: Enabling ejector based shutdown on sup in slot 5
2025 Aug 27 13:00:33 MDS9710 %MODULE-2-MOD_EOL_WARN: module 1 (DS-X9448-768K9) is approaching End of Life date. Refer to https://www.cisco.com/c/en/us/products/collateral/storage-networking/mds-9700-series-multilayer-directors/eos-eol-notice-c51-742195.html for EOL notice
2025 Aug 27 13:00:43 MDS9710 %PMON-SLOT1-2-PMON_CRIT_INFO: Port Monitor Critical Information: Con[####################] 100% -- SUCCESS
Module 4: Non-disruptive upgrading.
[# ] 0%2025 Aug 27 13:01:59 MDS9710 %MODULE-2-MOD_EOL_WARN: module 4 (DS-X9448-768K9) is approaching End of Life date. Refer to https://www.cisco.com/c/en/us/products/collateral/storage-networking/mds-9700-series-multilayer-directors/eos-eol-notice-c51-742195.html for EOL notice
2025 Aug 27 13:02:08 MDS9710 %PMON-SLOT4-2-PMON_CRIT_INFO: Port Monitor Critical Information: Con[####################] 100% -- SUCCESS
Module 8: Non-disruptive upgrading.
[# ] 0%2025 Aug 27 13:05:32 MDS9710 %PMON-SLOT8-2-PMON_CRIT_INFO: Port Monitor Critical Information: Config download success .
Module 9: Non-disruptive upgrading.
[# ] 0%2025 Aug 27 13:10:19 MDS9710 %PMON-SLOT9-2-PMON_CRIT_INFO: Port Monitor Critical Information: Config download success . [####################] 100% -- SUCCESS
Module 10: Non-disruptive upgrading.
[# ] 0%2025 Aug 27 13:12:31 MDS9710 %PMON-SLOT10-2-PMON_CRIT_INFO: Port Monitor Critical Information: Config download success . [####################] 100% -- SUCCESS
Install has been successful.
14.检验安装。
发出show version命令并注意system和kickstart版本是预期版本，以验证安装是否成功并完成：
MDS9124V# show version
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Documents: http://www.cisco.com/en/US/products/ps9372/tsd_products_support_serie
s_home.html
Copyright (c) 2002-2025, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained herein are owned by
other third parties and are used and distributed under license.
Some parts of this software are covered under the GNU Public
License. A copy of the license is available at
http://www.gnu.org/licenses/gpl.html.
Software
BIOS: version 1.11.0
loader: version N/A
kickstart: version 9.4(3a)
system: version 9.4(3a)
BIOS compile time: 11/27/2024
kickstart image file is: bootflash:///m9124v-s8ek9-kickstart-mz.9.4.3a.bin
kickstart compile time: 3/1/2025 12:00:00 [03/24/2025 22:26:25]
system image file is: bootflash:///m9124v-s8ek9-mz.9.4.3a.bin
system compile time: 3/1/2025 12:00:00 [03/25/2025 00:13:28]
Hardware
cisco MDS 9124V 24X64G FC (1 RU) Chassis ("24X8/16/32/64 Gbps FC/Sup-4")
Intel(R) Xeon(R) CPU D-1633N @ 2.50GHz with 8053200 kB of memory.
Processor Board ID JAE26220SYR
Device name: F241-16-10-9124V-3
bootflash: 7364608 kB
Kernel uptime is 0 day(s), 0 hour(s), 2 minute(s), 53 second(s)
Last reset at 356414 usecs after Fri Aug 22 20:22:16 2025
Reason: Reset due to upgrade
System version: 9.3(2a)
Service:
plugin
Core Plugin
MDS9124V#
在MDS 9700上，通过show module命令检验所有模块是否处于正确的NX-OS级别：
MDS9710# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ------------------ ----------
1 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
4 48 2/4/8/10/16 Gbps Advanced FC Module DS-X9448-768K9 ok
5 0 Supervisor Module-4 DS-X97-SF4-K9 active *
6 0 Supervisor Module-4 DS-X97-SF4-K9 ha-standby
8 34 1/10/40G IPS,2/4/8/10/16G FC Module DS-X9334-K9 ok
9 48 4/8/16/32 Gbps Advanced FC Module DS-X9648-1536K9 ok
10 48 8/16/32/64 Gbps Advanced FC Module DS-X9748-3072K9 ok
Mod Power-Status Reason
--- ------------ ---------------------------
2 powered-dn Configured Power down
3 powered-dn Configured Power down
Mod Sw Hw
--- --------------- ------
1 9.4(3a) 1.1
4 9.4(3a) 1.3
5 9.4(3a) 1.0
6 9.4(3a) 1.0
8 9.4(3a) 1.0
9 9.4(3a) 1.0
10 9.4(3a) 1.0
...15.重新启用分析。
当无中断升级路径包括到最终目标版本的多个升级时，此步骤只应在上次NX-OS升级中完成。即升级到最终目标版本。完成到最终目标版本的升级后，如果在步骤7中禁用了分析功能，现在可按如下方式重新启用该功能：
MDS9718# run before_issu_analytics.cfg16.升级完成后，保存Show Tech-Support Details的副本。
mds9124V# tac-pac
Collecting show tech-support details...
Show tech details will take 4-8 minutes to complete. Please Wait ...
Collecting show logging onboard...
tacpac file volatile:mds9124V_tacpac_2025-08-22.gz created.
mds9124V#17.将刚才保存的tac-pac/techsupport复制到TFTP服务器。
如果出现关于安装的问题，可以在安装之前将tac-pac与安装之后的tac-pac进行比较。请注意重命名文件的“move”命令：
MDS9124V# move volatile:F241-16-10-9124V-3_tacpac_2025-08-22.gz volatile:F241-16-10-9124V-3_tacpac_2025-08-22_after_install.gz
MDS9124V#
MDS9124V# copy volatile:F241-16-10-9124V-3_tacpac_2025-08-22_after_install.gz tftp://192.168.1.1
Trying to connect to tftp server......
Connection to server Established. Copying Started.....
-
TFTP put operation was successful
Copy complete.
MDS9124V#
修订历史记录
| 版本 | 发布日期 | 备注 |
|---|---|---|
5.0 |
04-Sep-2025
|
添加了“系统切换”并颠倒了检查不兼容性和影响的顺序。 |
4.0 |
28-Aug-2025
|
Cisco MDS 9700系列导向器的更新特殊说明 |
2.0 |
26-Nov-2024
|
重新认证，重新写入以包含所有发货MDS硬件，更新为当前最佳实践，包括日志捕获和MD5校验和。 |
1.0 |
01-Sep-2021
|
初始版本 |
反馈