Summary

  Subject:

Cisco Nexus NXOS Upgrade Process

   Updated:

2024-05-05

   Author:

Tim Hammond ([email protected])

Leland Petitjean ([email protected])

   Operating Systems:

n6000-uk9.7.3.11.N1.1

n6000-uk9.7.3.13.n1.1

   Background:

The purpose of this walk through is to demonstrate how to upgrade a Cisco Nexus's OS operating systems firmware to a new version.

In this example, we are upgrading (2) Cisco Nexus N5K-C56128P switches.

Nexus switches are normally used in environments that require high availability and as such, they have two switches that are paired together using a Virtual Port Channel (vPC). In this guide, we assume you are upgrading two switches that are paired together. If however, you only have one Nexus switch, you can proceed as documented and disregard anything talking about a vPC.

  

Table of Contents

Prework

It is assumed that you have a active Cisco Support contract in place to cover your equipment.

To get the latest NXOS version, go to: https://software.cisco.com/download/home. Login and then browse to your specific switch model. Then download the latest or your desired NXOS version.

Move the *.bin file to your TFTP server. Check out our Windows - Setup a TFTP Server article.

Update Process

vPC Health Check

Verify that everything is healthy on the vPC before proceeding.

show vpc

Create backup config

Before we get to ahead of ourselves, it is a good idea to create a backup of the startup config for both switches before we make any changes. To do this, use a console cable or SSH into the switch, then run the following command:

copy start tftp://192.168.1.50/switchName01.cfg

Repeat the backup process on the second switch.

copy start tftp://192.168.1.50/switchName02.cfg

Take note of the current version using this command.

show ver

Firmware Copy process

Engineers or Sys Admins like to leave an old copy of a NXOS firmware or config files on the switches storage. Nexus switches usually have a ton of storage, so to play it safe, don't worry about cleaning this until you have completed the upgrade. You can use the following command to see the contents of the storage if you are curious though.

dir

Alright, let's copy the bits over to the switch. The format for the command is: copy source destination flash:. Type this from the console or SSH session on the switch.

copy tftp://10.159.101.148/nx56128/n6000-uk9-kickstart.7.3.13.n1.1.bin bootflash:// copy tftp://10.159.101.148/nx56128/n6000-uk9.7.3.13.n1.1.bin bootflash://

Copy the new *.bin files to the second switch.

Both switches should be running the same version when you are done.

Checksum Validation

In our other articles, we provide steps to verify the checksums after a TFTP file copy. This step is not necessary for the Nexus as the files are validated during the install.

Test run the Firmware Upgrade Process

A cool feature of the Nexus switches is that you can do a dry run of the firmware upgrade before actually doing the upgrade. This will give you a heads up if anything fails or other prerequisites are required. This command will not make any changes.

show install all impact kickstart bootflash:///n6000-uk9-kickstart.7.3.13.n1.1.bin system bootflash:///n6000-uk9.7.3.13.n1.1.bin

Upgrade the Firmware

After the installer completes, you will be prompted to reboot. Only upgrade and reboot one switch at a time to avoid interruptions of service.

If you are feeling lazy (or smart), you can hit the up arrow on your keyboard to repeat the previous command. Simply delete the "show" and "impact" words then hit enter on the keyboard.

install all kickstart bootflash:///n6000-uk9-kickstart.7.3.13.n1.1.bin system bootflash:///n6000-uk9.7.3.13.n1.1.bin

After the install has finished, you will prompted to reboot. When you hit y on your keyboard, the system will reboot. It can take a few seconds for the screen to actually update though.

After the first switch you updated is fully online, verify everything is healthy BEFORE proceeding to the second switch. You can run this command on either or both switches if you like.

show vpc

Repeat the install steps above on the second switch.

After the second switch you updated is fully online, as before, verify everything is healthy. You can run this command on either or both switches if you like.

show vpc

Cleanup

To validate our work, use the show version and show boot commands to verify you are now using the new NXOS version and that the path to the file is correct.

show ver

As previously stated, often times there are old firmware versions or backup configs on the switches. Now is the time you can clean them up. This is by no means required, but at your discretion. Generally speaking, we opt to leave the old NXOS version on the switch for a few weeks then we remove it (if we remember).

Remember, you will need to repeat these steps on each of the switches.

dir del bootflash:///n6000-uk9-kickstart.7.3.11.N1.1.bin del bootflash:///n6000-uk9.7.3.11.N1.1.bin

References