#Upgrading cluster switches

1 messages · Page 1 of 1 (latest)

merry owl
#

I'm looking into upgrading our cluster switches and we got Cisco 3132/3232/9336 switches.
some of them are running 9.3(14) and thats the max supported version according to netapp compability sheet.

But cisco has released all the way up to 9.3(16).
Is 9.3(16) really unsupported?

grand jackal
#

In general it takes some time until a new NXOS version is support because of validation checks/run time etc.

void cloud
#

You can also send a request into NetApp to see about getting the support matrix updated. If there are no new features being used, no reason to upgrade. The only real reason to upgrade is to possibly correct known CVEs

#

There may be a "fix" in the newer code that breaks the cluster.

#

(unlikely, but possible if it is not tested/qualified)

#

On the 9336, I use 10.4(4)
DO NOT FORGET to install the epld update!!!

install all nxos bootflash:nxos.bin epld bootflash:epld.bin

void cloud
#

Oh, by the way that’s on newer 10.1+ train. I’m pretty sure on the 9 train you need to install nxos and EPLD in two separate reboots

#

Obviously if it’s not available on the command line, it won’t work in a single step

void cloud
craggy furnace
#

Beginning with 10.5(3)F EPLD is bundled with the NX-OS image.
So the following will be enough in the future (once NetApp finally approves newer versions):
install all nxos <image-name>

https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/105x/epld/nxos-n9k-epld-1053.html#EPLDUpgradeDuringInstallAll

Cisco
Cisco Nexus 9000 Series FPGA/EPLD Upgrade Release Notes, Release 10...

This document lists the current and past versions of EPLD images and describes how to update them for use with the Cisco Nexus 9000 Series switches.

#

The latest NetApp validated version 10.4(4) by the way has several known vulnerabilities: https://sec.cloudapps.cisco.com/security/center/softwarechecker.x?productSelected=nx_os&selectedMethod=A&captchaPage=true&platformCode=265096&versionNamesSelected=10.4(4)&allAdvisoriesSelectedByTree=N&advisoryType=0&iosBundleId=cisco-sa-20250326-bundle&isFewCheckBoxChecked1=false&isNoneCheckBoxsChecked1=true#~onStep3

I don't understand why NetApp always take so much time to validate new versions (10.4(4) is one year old.)
It's not like they're using any advanced features of NX-OS, it's actually really basic (if you compare it to what NX-OS is capable of).

fleet citrus
#

Can you upgrade the 3232c with 9000 series firmware? It's the same tin but need to have that confirmed by cisco

mystic crypt
#

pretty sure that's not possible and they only look the same and are not the same hardware inside

void cloud
#

Best thing to do
Go to Cisco.com
Go to the support
Type in 3232c
Find the release
Look at the filename and record the checksum
Look at the same file for the 9339c-fx2
If the checksum is the same then it’s the same file and should be OK

void cloud
#

I just looked.
Filename: nxos.9.3.16.bin
Checksum @ 9336 : cb5bc7a1a6d5153f33a6585eafb1fcc8
Checksum @ 3232C: cb5bc7a1a6d5153f33a6585eafb1fcc8

So, same file.

merry owl
#

Thanks for all the advises, the EPLD I got under control 😁

Can you go to 10.4.(5) from 9.3(14) like a normal NXOS upgrade?
Would be nice to align all the cluster switches tbh.
At least the switches that support 10.4.(5) that is...

Today its like 50/50 if they run 9.3 or 10.4.

merry owl
craggy furnace
merry owl
void cloud
#

That 10.4(5)M was added in the past week!

craggy furnace
#

oh ok, HWU still shows 10.4(4)

grafik.png
mystic crypt
#

"when in doubt, HWU is correct" so I would go with whatever the HWU shows as that is definitely checked and validated

void cloud
#

Also, in the "supported" columns, you will find 10.5(3)(F)!!

fleet citrus
#

@void cloud strange they did that thanks for checking. Is it the same for version 10? I'll probably check their support before doing so just in case for support contract reasons.

void cloud
#

10 isn’t supported on the 3232

merry owl
#

This is exciting 😁