VSS | mycertstudies-local

Upgrade ROMMON on 4500X for VSS

Ok, so i received my shiney new switches, went to configure VSS and no commands were accepted! a bit of research showed i needed an IOS XE and ROMMON upgrade to run VSS!

Version 3.3.0 does not support VSS, an upgrade to 3.4.0 is required

In this guide we are upgrading from 3.4.0 to 3.5.0E (this is an amendment of the original article)

Overview

COPY NEW IMAGES TO SWITCHES

Download the IOS XE and ROMMON from Cisco.com
Copy them from PC to a Cisco approved USB stick
Insert USB in switch;
Confirm that images are on the media:

Switch#dir usb0:
1 123162032 May 01 2013 13:07:06 +00:00 cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
2 2460468 May 01 2013 13:30:22 +00:00 cat4500-e-ios-promupgrade-150-1r-SG10

Then copy them to the bootflash: of the active switch and the slavebootflash; of the standby switch.

MAXHQ-SW-DST-01#copy usb0: bootflash:
Source filename []? cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
Destination filename [cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
171818988 bytes copied in 30.164 secs (5696161 bytes/sec)

MAXHQ-SW-DST-01#copy usb0: bootflash:
Source filename [cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin]? cat4500-e-ios-promupgrade-150-1r-SG10
Destination filename [cat4500-e-ios-promupgrade-150-1r-SG10]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
2567460 bytes copied in 0.704 secs (3646960 bytes/sec)

MAXHQ-SW-DST-01#copy bootflash: slavebootflash:
Source filename []? cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
Destination filename [cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
171818988 bytes copied in 713.236 secs (240901 bytes/sec)
MAXHQ-SW-DST-01#

MAXHQ-SW-DST-01#copy bootflash: slavebootflash:
Source filename []? cat4500-e-ios-promupgrade-150-1r-SG10
Destination filename [cat4500-e-ios-promupgrade-150-1r-SG10]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
2567460 bytes copied in 11.968 secs (214527 bytes/sec)

Confirm they copied to bootflash
MAXHQ-SW-DST-01#dir bootflash:
Directory of bootflash:/
129299 -rw- 171818988 Sep 2 2015 16:58:37 +00:00 cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
129300 -rw- 2567460 Sep 2 2015 17:03:07 +00:00 cat4500-e-ios-promupgrade-150-1r-SG10
1692037120 bytes total (1277440000 bytes free)
MAXHQ-SW-DST-01#

Confirm they exist in slavebootflash
MAXHQ-SW-DST-01#dir slavebootflash:
Directory of slavebootflash:/
64660 -rw- 171818988 Sep 2 2015 17:16:28 +00:00 cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
161603 -rw- 2567460 Sep 2 2015 17:20:26 +00:00 cat4500-e-ios-promupgrade-150-1r-SG10
1692037120 bytes total (1277366272 bytes free)
MAXHQ-SW-DST-01#

UPGRADE ROMMON

Reload the router,
Break with CTRL-C 5 seconds into boot
Run "dir bootflash:" from ROMMON and select new ROMMON to boot with

boot bootflash:cat4500-e-ios-promupgrade-150-1r-SG10
This will take some time (around 5-7 mins)

***** The system will autoboot in 5 seconds *****

Type control-C to prevent autobooting.

Autoboot cancelled......... please wait!!!

rommon 1 >dir bootflash:

Date Time Attribute Size Name
========== ===== ========== ========== ================
2015/09/02 16:58 -rw-rw-rw- 171818988 cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
2015/09/02 17:03 -rw-rw-rw- 2567460 cat4500-e-ios-promupgrade-150-1r-SG10

rommon 2 >boot bootflash:cat4500-e-ios-promupgrade-150-1r-SG10

It will now go through a upgrade process that erases the old ROMMON and writes the new ROMMON

The switch will then reboot and come up as the standby switch because a failover has occured (the previously active switch rebooted), change your console over to the new active switch and confirm that this switch is on the old ROMMON version

MAXHQ-SW-DST-01#sh ver | inc ROM
ROM: 15.0(1r)SG6
System returned to ROM by SSO Switchover
MAXHQ-SW-DST-01#

Now upgrade this switch as per above

You should observe the following output to indicate success;
*Sep 2 18:04:53.520: %C4K_REDUNDANCY-6-MODE: ACTIVE supervisor initializing for sso mode
*Sep 2 18:04:53.588: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been established
*Sep 2 18:05:03.907: %C4K_REDUNDANCY-5-CONFIGSYNC: The bootvar has been successfully synchronized to the standby supervisor
*Sep 2 18:05:03.908: %C4K_REDUNDANCY-5-CONFIGSYNC: The config-reg has been successfully synchronized to the standby supervisor
*Sep 2 18:05:03.909: %C4K_REDUNDANCY-5-CALENDAR: The calendar has been successfully synchronized to the standby supervisor for the first time
*Sep 2 18:05:03.909: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor
*Sep 2 18:05:04.338: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor
*Sep 2 18:05:05.243: %C4K_REDUNDANCY-5-CONFIGSY_RATELIMIT: The vlan database has been successfully synchronized to the standby supervisor
*Sep 2 18:05:33.710: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED: Bulk Sync succeeded
*Sep 2 18:05:33.800: %RF-5-RF_TERMINAL_STATE: Terminal state reached for (SSO)
*Sep 2 18:05:34.045: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 18:05:34.069: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 18:05:34.125: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 18:05:34.173: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64

When rebooted, confirm ROMMON version is correct;

sh version
Switch#sh ver | inc ROM
ROM: 15.0(1r)SG10
System returned to ROM by power-on
Switch#

Upgrade RMON

Upgrade IOS XE on 4500X for VSS

Now there are two way of doing this, the long and careful way, and the quick way. Cisco recommends that the long manual way be performed for the first time of a particular upgrade path, to prove that it goes smoothly without a hitch, after it has been proven to work, the quick way can be used.

First we will look at the long and careful way;

THE LONG AND CAREFUL WAY

This upgrade is performed step by step with manual intervention, this gives the user the abilitiy to test an upgrade before commiting to it, the abortversion command can be used to rollback at any stage up until the third step.

ISSU commands
loadversion load new IOS version on Standby
runversion run new IOS version on Standby and make it Active
acceptversion accept new IOS version, new Active
commitversion commit IOS version on Standby
abortversion abort ISSU process (must be used before committing accept version)

ISSU LOADVERSION

issu loadversion bootflash:bootflash:cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
% issu loadversion executed successfully, Standby is being reloaded

*Sep 2 18:11:51.925: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/16 left the port-channel Port-channel63
*Sep 2 18:11:51.938: %VSLP-3-VSLP_LMP_FAIL_REASON: Te1/1/16: Link down
*Sep 2 18:11:51.938: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/16 left the port-channel Port-channel64
*Sep 2 18:11:51.948: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/15 left the port-channel Port-channel63
*Sep 2 18:11:51.961: %VSLP-3-VSLP_LMP_FAIL_REASON: Te1/1/15: Link down
*Sep 2 18:11:51.961: %VSLP-2-VSL_DOWN: All VSL links went down while switch is in ACTIVE role
*Sep 2 18:11:51.962: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/15 left the port-channel Port-channel64
*Sep 2 18:11:52.609: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been lost
*Sep 2 18:11:52.644: %C4K_REDUNDANCY-3-SIMPLEX_MODE: The peer Supervisor has been lost

Then you should see this output after a few minutes;

MAXHQ-SW-DST-01#
*Sep 2 18:16:22.144: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 1 port 16.
*Sep 2 18:16:22.156: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 1 port 15.
*Sep 2 18:16:38.154: %VSLP-5-VSL_UP: Ready for control traffic
Initializing as Virtual Switch ACTIVE processor

*Sep 2 18:16:42.155: %VSLP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP
*Sep 2 18:16:42.155: %EC-5-BUNDLE: Interface TenGigabitEthernet1/1/15 joined port-channel Port-channel63
*Sep 2 18:16:42.163: %EC-5-BUNDLE: Interface TenGigabitEthernet1/1/16 joined port-channel Port-channel63
*Sep 2 18:16:42.611: %C4K_REDUNDANCY-6-DUPLEX_MODE: The peer Supervisor has been detected
*Sep 2 18:17:18.555: %C4K_REDUNDANCY-6-MODE: ACTIVE supervisor initializing for sso mode
*Sep 2 18:17:18.620: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been established
*Sep 2 18:17:28.761: %C4K_REDUNDANCY-5-CONFIGSYNC: The config-reg has been successfully synchronized to the standby supervisor
*Sep 2 18:17:28.763: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor
*Sep 2 18:17:29.220: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor
*Sep 2 18:17:30.138: %C4K_REDUNDANCY-5-CONFIGSYNC_RATELIMIT: The vlan database has been successfully synchronized to the standby supervisor
*Sep 2 18:17:34.854: %SNMP-3-SYNCFAIL: SNMP MIB Sync Failure: Failure on standby
*Sep 2 18:18:13.359: %ISSU-4-FSM_INCOMP: Version of local ISSU client ISSU auth mgr client(2072) in session 131084 is incompatible with remote side.
*Sep 2 18:18:21.768: %CTS_HA_ISSU-6-INCOMPAT: CTS HA ISSU client negotiation results incompatible
*Sep 2 18:19:50.021: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 18:19:50.041: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 18:19:52.530: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED: Bulk Sync succeeded
*Sep 2 18:19:52.530: %RF-5-RF_TERMINAL_STATE: Terminal state reached for (SSO)
*Sep 2 18:19:52.944: %C4K_IOSMODPORTMAN-6-MODULEONLINE: STANDBY:Module 1 (WS-C4500X-16 S/N: JAE16470FWX Hw: 1.0) is online
*Sep 2 18:19:52.944: %C4K_IOSMODPORTMAN-6-MODULEONLINE: STANDBY:Module 11 (WS-C4500X-16 S/N: JAE164800GV Hw: 1.0) is online
*Sep 2 18:19:57.703: %INSTALLER-7-ISSU_OP_SUCC: Peer state is [STANDBY SSO]; Please issue the runversion command

ISSU RUNVERSION
MAXHQ-SW-DST-01#issu runversion

System configuration has been modified. Save? [yes/no]: yes
Building configuration...
Compressed configuration from 6093 bytes to 3001 bytes[OK]
*Sep 2 18:24:05.819: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor
*Sep 2 18:24:06.195: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor
This command will reload the Active unit. Proceed ? [confirm]

Change your console to the other switch and wait for switch 1 to come up again

You should see the following;
*Sep 2 18:29:29.985: %VSLP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP
*Sep 2 18:29:29.985: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 18:29:29.992: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 18:29:30.370: %C4K_REDUNDANCY-6-DUPLEX_MODE: The peer Supervisor has been detected
*Sep 2 18:30:08.473: %C4K_REDUNDANCY-6-MODE: ACTIVE supervisor initializing for sso mode
*Sep 2 18:30:09.421: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been established

Confirm the current state

MAXHQ-SW-DST-01#sh sw virtual
Executing the command on VSS member switch role = VSS Active, id = 2
Switch mode : Virtual Switch
Virtual switch domain number : 1
Local switch number : 2
Local switch operational role: Virtual Switch Active
Peer switch number : 1
Peer switch operational role : Virtual Switch Standby

Executing the command on VSS member switch role = VSS Standby, id = 1
Switch mode : Virtual Switch
Virtual switch domain number : 1
Local switch number : 1
Local switch operational role: Virtual Switch Standby
Peer switch number : 2
Peer switch operational role : Virtual Switch Active
MAXHQ-SW-DST-01#

ISSU ACCEPTVERSION

Prior to this you can run the follwoing to check the rollback timer;

MAXHQ-SW-DST-01#sh issu rollback-timer
Rollback Process State = In progress
Configured Rollback Time = 00:45:00
Automatic Rollback Time = 00:36:25

MAXHQ-SW-DST-01#issu acceptversion
% Rollback timer stopped. Please issue the commitversion command.

ISSU COMMITVERSION

Building configuration...
Compressed configuration from 6151 bytes to 3065 bytes[OK]
*Sep 2 18:46:42.817: %C4K_REDUNDANCY-5-CONFIGSYNC: The bootvar has been successfully synchronized to the standby supervisor
*Sep 2 18:46:42.966: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor
*Sep 2 18:46:43.391: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor% issu commitversion executed successfully

MAXHQ-SW-DST-01#
*Sep 2 18:46:45.667: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/16 left the port-channel Port-channel64
*Sep 2 18:46:45.679: %VSLP-3-VSLP_LMP_FAIL_REASON: Te2/1/16: Link down
*Sep 2 18:46:45.679: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/16 left the port-channel Port-channel63
*Sep 2 18:46:45.687: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/15 left the port-channel Port-channel64
*Sep 2 18:46:45.699: %VSLP-3-VSLP_LMP_FAIL_REASON: Te2/1/15: Link down
*Sep 2 18:46:45.699: %VSLP-2-VSL_DOWN: All VSL links went down while switch is in ACTIVE role

*Sep 2 18:46:45.700: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/15 left the port-channel Port-channel63
*Sep 2 18:46:46.474: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been lost
*Sep 2 18:46:46.528: %C4K_REDUNDANCY-3-SIMPLEX_MODE: The peer Supervisor has been lost

Then in a few minutes...

MAXHQ-SW-DST-01#
*Sep 2 18:51:21.078: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 11 port 15.
*Sep 2 18:51:21.104: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 11 port 16.
*Sep 2 18:51:37.105: %VSLP-5-VSL_UP: Ready for control traffic
Initializing as Virtual Switch ACTIVE processor
*Sep 2 18:51:40.109: %VSLP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP
*Sep 2 18:51:40.109: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 18:51:40.117: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 18:51:40.526: %C4K_REDUNDANCY-6-DUPLEX_MODE: The peer Supervisor has been detected
*Sep 2 18:52:17.624: %C4K_REDUNDANCY-6-MODE: ACTIVE supervisor initializing for sso mode
*Sep 2 18:52:18.623: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been established
*Sep 2 18:52:29.018: %C4K_REDUNDANCY-5-CONFIGSYNC: The bootvar has been successfully synchronized to the standby supervisor
*Sep 2 18:52:29.019: %C4K_REDUNDANCY-5-CONFIGSYNC: The config-reg has been successfully synchronized to the standby supervisor
*Sep 2 18:52:29.020: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor
*Sep 2 18:52:29.567: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor
*Sep 2 18:52:30.514: %C4K_REDUNDANCY-5-CONFIGSYNC_RATELIMIT: The vlan database has been successfully synchronized to the standby supervisor
*Sep 2 18:52:58.919: %EC-5-BUNDLE: Interface TenGigabitEthernet1/1/15 joined port-channel Port-channel63
*Sep 2 18:52:58.939: %EC-5-BUNDLE: Interface TenGigabitEthernet1/1/16 joined port-channel Port-channel63
*Sep 2 18:53:01.401: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED: Bulk Sync succeeded
*Sep 2 18:53:01.415: %RF-5-RF_TERMINAL_STATE: 11 ha_mgr: Terminal state reached for (SSO)
*Sep 2 18:53:02.064: %C4K_IOSMODPORTMAN-6-MODULEONLINE: STANDBY:Module 1 (WS-C4500X-16 S/N: JAE16470FWX Hw: 1.0) is online
*Sep 2 18:53:02.064: %C4K_IOSMODPORTMAN-6-MODULEONLINE: STANDBY:Module 11 (WS-C4500X-16 S/N: JAE164800GV Hw: 1.0) is online
MAXHQ-SW-DST-01#

Confirm the software version;

MAXHQ-SW-DST-01#sh redundancy | inc Image Version
Image Version = Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.05.00.E RELEASE SOFTWARE (fc3)
Image Version = Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.05.00.E RELEASE SOFTWARE (fc3)
MAXHQ-SW-DST-01#

You have now completed the long and careful way!

THE QUICK WAY

Keep in mind that you will end up failing over to the other supervisor, so if you are consoled in, change your console to the new active supervisor!

MAXHQ-SW-DST-01#issu loadversion bootflash:bootflash:cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin quick
%% 'issu changeversion' is now executing 'issu loadversion'
% issu loadversion executed successfully, Standby is being reloaded
Sending request on port [20601]: Reload [self] User [installer] Reason [issu]
%% changeversion finished executing loadversion, waiting for standby to reload and reach SSO ...

MAXHQ-SW-DST-01#
*Sep 2 19:03:55.618: %C4K_IOSSYS-6-SYSTEMMANAGERRELOADCB: STANDBY:System Manager requested reset (by "installer", reason "issu~")
*Sep 2 19:03:55.828: %SYS-5-RELOAD: STANDBY:Reload requested by installer. Reload Reason: issu~.
*Sep 2 19:03:59.236: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/16 left the port-channel Port-channel64
*Sep 2 19:03:59.248: %VSLP-3-VSLP_LMP_FAIL_REASON: Te2/1/16: Link down
*Sep 2 19:03:59.248: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/16 left the port-channel Port-channel63
*Sep 2 19:03:59.258: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/15 left the port-channel Port-channel64
*Sep 2 19:03:59.270: %VSLP-3-VSLP_LMP_FAIL_REASON: Te2/1/15: Link down
*Sep 2 19:03:59.270: %VSLP-2-VSL_DOWN: All VSL links went down while switch is in ACTIVE role

*Sep 2 19:03:59.270: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/15 left the port-channel Port-channel63
*Sep 2 19:03:59.664: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been lost
*Sep 2 19:03:59.698: %C4K_REDUNDANCY-3-SIMPLEX_MODE: The peer Supervisor has been lost
diagsk10-post version 5.1.4.0

prod: WS-C4500X-16 part: 73-13860-05 serial: JAE16470FWX

Power-on-self-test for Module 1: WS-C4500X-16

CPU Subsystem Tests ...
seeprom: Pass

Traffic: L3 Loopback ...
Test Results: Pass

Traffic: L2 Loopback ...
Test Results: Pass
post done
Exiting to ios...
Starting IOS Services
Starting EOBC bridge eobcbr
Platform Manager: acquire hwlock chassis(1)
Platform Manager: starting in VSS mode

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.04.00.SG RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Wed 05-Dec-12 04:38 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2010, 2012 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

Initializing as Virtual Switch STANDBY processor

***********************************
* STANDBY SUPERVISOR *
* REDUNDANCY mode is SSO *
* Continue bootup *
***********************************

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C4500X-16 (MPC8572) processor (revision 4) with 4194304K/20480K bytes of memory.
Processor board ID JAE16470FWX
MPC8572 CPU at 1.5GHz, Cisco Catalyst 4500X
Last reset from Unknown
32 Ten Gigabit Ethernet interfaces
511K bytes of non-volatile configuration memory.

Press RETURN to get started!

*Sep 2 19:07:47.538: %IOSD_INFRA-5-IFS_DEVICE_OIR: Device usb0 added
*Sep 2 19:07:51.286: %C4K_IOSSYS-6-IMAGELEVEL: Supervisor booting in image level 'entservices'
*Sep 2 19:07:57.655: %C4K_IOSMODPORTMAN-4-POWERSUPPLYBAD: Power supply 2 has failed or been turned off
*Sep 2 19:08:44.211: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 1 port 16.
*Sep 2 19:08:44.224: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 1 port 15.
*Sep 2 19:09:00.238: %VSLP-5-VSL_UP: Ready for control traffic

*Sep 2 19:09:05.227: %VSLP-5-RRP_ROLE_RESOLVED: Role resolved as STANDBY by VSLP
*Sep 2 19:09:35.231: %C4K_REDUNDANCY-6-INIT: STANDBY:Initializing as STANDBY supervisor
*Sep 2 19:09:41.600: %C4K_REDUNDANCY-6-DUPLEX_MODE: STANDBY:The peer Supervisor has been detected
*Sep 2 19:09:41.702: %C4K_REDUNDANCY-3-COMMUNICATION: STANDBY:Communication with the peer Supervisor has been established
*Sep 2 19:10:01.203: %C4K_REDUNDANCY-6-MODE: STANDBY:STANDBY supervisor initializing for sso mode
*Sep 2 19:10:01.580: %SPANTREE-5-EXTENDED_SYSID: STANDBY:Extended SysId enabled for type vlan
*Sep 2 19:10:02.738: %C4K_IOSMODPORTMAN-6-MODULEONLINE: STANDBY:Module 1 (WS-C4500X-16 S/N: JAE16470FWX Hw: 1.0) is online
*Sep 2 19:10:02.738: %C4K_IOSMODPORTMAN-6-MODULEONLINE: STANDBY:Module 11 (WS-C4500X-16 S/N: JAE164800GV Hw: 1.0) is online
*Sep 2 19:10:37.084: %ISSU-3-FSM_MISMATCH_MTU: STANDBY:ISSU nego failed for client ISSU auth mgr client(2072) entity_id 1 session 53 due to mismatch of mtu size 56 & 60.
-Traceback= 1#251bc17810f5fe5cfe9c51cc9cacd46b :178F8000+2699F4C :178F8000+269A310 :178F8000+121C02C :178F8000+5F4EAFC :178F8000+5F4EB90 :178F8000+121D068 :178F8000+121D128 :178F8000+121E1BC :178F8000+14565FC :178F8000+1459CD0 :178F8000+245CED4 :178F8000+2467B40 :178F8000+2463800
*Sep 2 19:10:37.498: %AUTH_MGR_ISSU-3-MSG_NOT_COMPATIBLE_WITH_PEER: STANDBY:'Feature Id 2000, Tag 9' is not supported by Auth Mgr ISSU client at peer
*Sep 2 19:10:37.498: %AUTH_MGR_ISSU-3-MSG_NOT_COMPATIBLE_WITH_PEER: STANDBY:'Feature Id 2004, Tag 10' is not supported by Auth Mgr ISSU client at peer
*Sep 2 19:10:37.498: %AUTH_MGR_ISSU-3-MSG_NOT_COMPATIBLE_WITH_PEER: STANDBY:'Feature Id 2004, Tag 13' is not supported by Auth Mgr ISSU client at peer
*Sep 2 19:10:37.498: %AUTH_MGR_ISSU-3-MSG_NOT_COMPATIBLE_WITH_PEER: STANDBY:'Feature Id 2005, Tag 14' is not supported by Auth Mgr ISSU client at peer
*Sep 2 19:10:37.498: %AUTH_MGR_ISSU-3-MSG_NOT_COMPATIBLE_WITH_PEER: STANDBY:'Feature Id 2005, Tag 17' is not supported by Auth Mgr ISSU client at peer
*Sep 2 19:10:37.498: %AUTH_MGR_ISSU-3-MSG_NOT_COMPATIBLE_WITH_PEER: STANDBY:'Feature Id 2005, Tag 18' is not supported by Auth Mgr ISSU client at peer
*Sep 2 19:10:37.520: %ISSU-4-FSM_INCOMP: STANDBY:Version of local ISSU client ISSU auth mgr client(2072) in session 53 is incompatible with remote side.
*Sep 2 19:10:39.378: %SYS-4-CONFIG_NEWER: STANDBY:Configuration from version 15.2 may not be correctly understood
*Sep 2 19:10:39.568: %SPANTREE-6-PORTDEL_ALL_VLANS: STANDBY:Port-channel63 deleted from all Vlans
*Sep 2 19:10:39.610: %SPANTREE-6-PORTDEL_ALL_VLANS: STANDBY:Port-channel64 deleted from all Vlans
*Sep 2 19:10:45.899: %CTS_HA_ISSU-6-INCOMPAT: STANDBY:CTS HA ISSU client negotiation results incompatible
*Sep 2 19:10:47.494: %SYS-5-RESTART: STANDBY:System restarted --
Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.04.00.SG RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Wed 05-Dec-12 04:38 by prod_rel_team
*Sep 2 19:10:48.226: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 19:10:48.237: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 19:10:50.822: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet1/1/15 joined port-channel Port-channel63
*Sep 2 19:10:50.918: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet1/1/16 joined port-channel Port-channel63
*Sep 2 19:10:58.610: %INSTALLER-7-ISSU_OP_SUCC: STANDBY:Peer state is [STANDBY SSO]; Please issue the runversion command
*Sep 2 19:13:57.339: %C4K_REDUNDANCY-6-INIT: Initializing as ACTIVE supervisor
*Sep 2 19:13:57.360: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been lost
*Sep 2 19:13:57.426: %C4K_REDUNDANCY-3-SIMPLEX_MODE: The peer Supervisor has been lost
*Sep 2 19:13:57.450: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/15 left the port-channel Port-channel64
*Sep 2 19:13:57.454: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/16 left the port-channel Port-channel64
*Sep 2 19:14:00.014: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/16 left the port-channel Port-channel63
*Sep 2 19:14:00.026: %VSLP-3-VSLP_LMP_FAIL_REASON: Te1/1/16: Link down
*Sep 2 19:14:00.031: %EC-5-UNBUNDLE: Interface TenGigabitEthernet1/1/15 left the port-channel Port-channel63
*Sep 2 19:14:00.043: %VSLP-3-VSLP_LMP_FAIL_REASON: Te1/1/15: Link down
*Sep 2 19:14:00.043: %VSLP-2-VSL_DOWN: All VSL links went down while switch is in Standby role

*Sep 2 19:18:50.407: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 1 port 16.
*Sep 2 19:18:50.432: %C4K_IOSINTF-5-LMPHWSESSIONSTATE: Lmp HW session UP on slot 1 port 15.
MAXHQ-SW-DST-01>
MAXHQ-SW-DST-01>
MAXHQ-SW-DST-01>
MAXHQ-SW-DST-01>
MAXHQ-SW-DST-01>
MAXHQ-SW-DST-01>
MAXHQ-SW-DST-01>en
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#sh sw v
MAXHQ-SW-DST-01#sh sw virtual

Executing the command on VSS member switch role = VSS Active, id = 1

Switch mode : Virtual Switch
Virtual switch domain number : 1
Local switch number : 1
Local switch operational role: Virtual Switch Active
Cannot execute command on peer supervisor because it is not in SSO Standby state
MAXHQ-SW-DST-01#
*Sep 2 19:19:07.404: %VSLP-5-VSL_UP: Ready for control traffic
Initializing as Virtual Switch ACTIVE processor

*Sep 2 19:19:11.432: %VSLP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP
*Sep 2 19:19:11.432: %EC-5-BUNDLE: Interface TenGigabitEthernet1/1/15 joined port-channel Port-channel63
*Sep 2 19:19:11.439: %EC-5-BUNDLE: Interface TenGigabitEthernet1/1/16 joined port-channel Port-channel63
*Sep 2 19:19:11.871: %C4K_REDUNDANCY-6-DUPLEX_MODE: The peer Supervisor has been detected
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#sh sw virtual

Executing the command on VSS member switch role = VSS Active, id = 1

Switch mode : Virtual Switch
Virtual switch domain number : 1
Local switch number : 1
Local switch operational role: Virtual Switch Active
Peer switch number : 2
Peer switch operational role : Virtual Switch Standby
Cannot execute command on peer supervisor because it is not in SSO Standby state
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#
*Sep 2 19:19:47.948: %C4K_REDUNDANCY-6-MODE: ACTIVE supervisor initializing for sso mode
*Sep 2 19:19:48.946: %C4K_REDUNDANCY-3-COMMUNICATION: Communication with the peer Supervisor has been established
*Sep 2 19:19:59.397: %C4K_REDUNDANCY-5-CONFIGSYNC: The bootvar has been successfully synchronized to the standby supervisor
*Sep 2 19:19:59.397: %C4K_REDUNDANCY-5-CONFIGSYNC: The config-reg has been successfully synchronized to the standby supervisor
*Sep 2 19:19:59.398: %C4K_REDUNDANCY-5-CALENDAR: The calendar has been successfully synchronized to the standby supervisor for the first time
*Sep 2 19:19:59.399: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor
*Sep 2 19:19:59.866: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor
*Sep 2 19:20:00.768: %C4K_REDUNDANCY-5-CONFIGSYNC_RATELIMIT: The vlan database has been successfully synchronized to the standby supervisor
*Sep 2 19:20:27.210: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 19:20:27.223: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 19:20:28.195: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/15 left the port-channel Port-channel64
*Sep 2 19:20:28.203: %EC-5-UNBUNDLE: Interface TenGigabitEthernet2/1/16 left the port-channel Port-channel64
*Sep 2 19:20:29.184: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 19:20:29.208: %EC-5-BUNDLE: Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 19:20:29.436: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED: Bulk Sync succeeded
*Sep 2 19:20:29.486: %RF-5-RF_TERMINAL_STATE: Terminal state reached for (SSO)
*Sep 2 19:20:29.005: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet2/1/15 joined port-channel Port-channel64
*Sep 2 19:20:29.107: %EC-5-BUNDLE: STANDBY:Interface TenGigabitEthernet2/1/16 joined port-channel Port-channel64
*Sep 2 19:21:13.184: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=7: Transceiver has been inserted
*Sep 2 19:21:13.185: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=8: Transceiver has been inserted
*Sep 2 19:21:13.185: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=9: Transceiver has been inserted
*Sep 2 19:21:13.185: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=10: Transceiver has been inserted
*Sep 2 19:21:13.185: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=11: Transceiver has been inserted
*Sep 2 19:21:13.185: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=12: Transceiver has been inserted
*Sep 2 19:21:13.186: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=13: Transceiver has been inserted
*Sep 2 19:21:13.186: %C4K_IOSINTF-5-TRANSCEIVERINSERTED: Slot=11 Port=14: Transceiver has been inserted

MAXHQ-SW-DST-01#
MAXHQ-SW-DST-01#sh version | inc IOS-XE Software
Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.04.00.SG RELEASE SOFTWARE (fc3)

MAXHQ-SW-DST-01#sh sw virtual
Executing the command on VSS member switch role = VSS Active, id = 1
Switch mode : Virtual Switch
Virtual switch domain number : 1
Local switch number : 1
Local switch operational role: Virtual Switch Active
Peer switch number : 2
Peer switch operational role : Virtual Switch Standby

Executing the command on VSS member switch role = VSS Standby, id = 2
Switch mode : Virtual Switch
Virtual switch domain number : 1
Local switch number : 2
Local switch operational role: Virtual Switch Standby
Peer switch number : 1
Peer switch operational role : Virtual Switch Active

set boot system commands
"boot system flash bootflash:/cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin"

remove any other boot commands in the startup config, if the new fails it will find the old one in bootflash:

change config-register
config-register 0x2102

wr mem

reload

And all should be good, confirm IOS XE with "sh ver"

Switch#sh ver | inc System image file
System image file is "bootflash:/cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin"
Switch#

-----------------------------------------------------------------------------------------------------------------------------------------------------------

See below for the whole process from the command line (some output omitted for brevity)

Switch>
Switch>en
Switch#sh usb0
-#- --length-- ---------date/time--------- path
1 123162032 May 01 2013 13:07:06 +00:00 cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin
2 2460468 May 01 2013 13:30:22 +00:00 cat4500-e-ios-promupgrade-150-1r-SG7

3877797888 bytes available (125698048 bytes used)

Switch#copy usb0: bootflash:
Source filename []? cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin
Destination filename [cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
123162032 bytes copied in 18.684 secs (6591845 bytes/sec)
Switch#copy usb0: bootflash:
Source filename [cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin]? cat4500-e-ios-promupgrade-150-1r-SG7
Destination filename [cat4500-e-ios-promupgrade-150-1r-SG7]?
Copy in progress...CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
2460468 bytes copied in 0.552 secs (4457370 bytes/sec)
Switch#
Switch#wr
Building configuration...
Compressed configuration from 1593 bytes to 805 bytes[OK]
Switch#reload
Proceed with reload? [confirm]

*May 2 19:58:59.288: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.Please stand by while rebooting the system...
Restarting system.

Rommon (G) Signature verification PASSED
Rommon (P) Signature verification PASSED
FPGA (P) Signature verification PASSED

************************************************************
* *
* Welcome to Rom Monitor for WS-C4500X-16 System. *
* Copyright (c) 2008-2012 by Cisco Systems, Inc. *
* All rights reserved. *
* *
************************************************************

Rom Monitor (P) Version 15.0(1r)SG6
CPU Rev: 2.2, Board Rev: 4, Board Type: 108
CPLD Mobat Rev: 2.0x4377.0xb277
Chassis: WS-C4500X-16

MAC Address : bc-16-65-4f-7f-3f
Ip Address : Not set.
Netmask : Not set.
Gateway : Not set.
TftpServer : Not set.

Non-Redundant system or peer not running IOS
System Uplinks & Linecards have been reset!!

***** The system will autoboot in 5 seconds *****

Type control-C to prevent autobooting.
.
Autoboot cancelled......... please wait!!!
rommon 1 > [interrupt]

rommon 1 >dir bootflash:

Date Time Attribute Size Name
========== ===== ========== ========== ================
2013/04/18 22:04 -rwxr-xr-x 115931176 cat4500e-universalk9.SPA.03.03.02.SG.151-1.SG2.bin
2013/05/02 19:58 -rw-rw-rw- 123162032 cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin
2013/05/02 19:58 -rw-rw-rw- 2460468 cat4500-e-ios-promupgrade-150-1r-SG7

Total space = 1645217 KB
Available = 1416124 KB

rommon 2 >boot bootflash:cat4500-e-ios-promupgrade-150-1r-SG7
Loading image !

Checking digital signature....
[bootflash:/cat4500-e-ios-promupgrade-150-1r-SG7]
Digitally Signed Release Software with key version A

**********************************************************
* (****** Cisco Internal Use Only ******) *
**********************************************************

**********************************************************
* *
* Firmware Upgrade for WS-C4500X-16 System *
* (****** Cisco Internal Use Only ******) *
* *
* Copyright (c) 2008-2009, 2012 by Cisco Systems, Inc. *
* All rights reserved. *
* *
**********************************************************

**the rest omitted for brevity**

Switch#
Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#do sh run | inc boot
boot-start-marker
boot system flash bootflash:cat4500e-universalk9.SPA.03.03.02.SG.151-1.SG2.bin
boot-end-marker
Switch(config)#boot flash bootflash:/cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin
Switch(config)#no boot flash bootflash:cat4500e-universalk9.SPA.03.03.02.SG.151-1.SG2.bin
Switch(config)#do sh run | inc boot
boot-start-marker
boot system flash bootflash:/cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin
boot-end-marker
Switch(config)#config-register 0x2102
Switch(config)#end
Switch#wr
Building configuration...
Compressed configuration from 1654 bytes to 845 bytes[OK]
Switch#reload
*May 2 20:45:37.683: %SYS-5-CONFIG_I: Configured from console by console
Proceed with reload? [confirm]

*May 2 20:45:42.179: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.Please stand by while rebooting the system...
Restarting system.

Rommon (G) Signature verification PASSED
Rommon (P) Signature verification PASSED
FPGA (P) Signature verification PASSED

************************************************************
* *
* Welcome to Rom Monitor for WS-C4500X-16 System. *
* Copyright (c) 2008-2012 by Cisco Systems, Inc. *
* All rights reserved. *
* *
************************************************************

Rom Monitor (P) Version 15.0(1r)SG7
CPU Rev: 2.2, Board Rev: 4, Board Type: 108
CPLD Mobat Rev: 2.0x4377.0xb277
Chassis: WS-C4500X-16

MAC Address : bc-16-65-4f-7f-3f
Ip Address : Not set.
Netmask : Not set.
Gateway : Not set.
TftpServer : Not set.

Non-Redundant system or peer not running IOS
System Uplinks & Linecards have been reset!!

***** The system will autoboot in 5 seconds *****

Type control-C to prevent autobooting.
. . . . .

******** The system will autoboot now ********

config-register = 0x2102
Autobooting using BOOT variable specified file.....

Current BOOT file is --- bootflash:/cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin
Loading image !!!!!!!!!!!!!!!!

Upgrade IOS XE

Commission a VSS pair

ON Switch 1

!**set virtual domain identifier, must be unique on the network**
!**set the switch identifier**
!**set the switch priorities,higher sets active**

switch virtual domain 1
switch 1
switch 1 priority 200
switch 2 priority 100
exit
!

Create the port-channel and designate it as a Virtual link
interface port-channel 63
description VSL TO SWITCH2
switchport
switch virtual link 1
!

Assign VSL interfaces to the port-channel
interface range ten1/15-16
switchport
switchport mode trunk
no shutdown
channel-group 63 mode on
!

ON Switch 2

switch virtual domain 1
switch 2
switch 1 priority 200
switch 2 priority 100
exit
!

Create the port-channel and designate it as a Virtual link
interface port-channel 64
no shut
description VSL TO SWITCH1
switchport
switch virtual link 2
!

Assign VSL interfaces to the port-channel
interface range ten1/15-16
switchport
switchport mode trunk
no shutdown
channel-group 64 mode on
!

Convert to VSS
Run the following command on both switches
switch convert mode virtual

This will save the running-configuration to startup configuration and reboot the switch as a VSS

The switch is now a single entity!!

Verify
sh run
sh ip int brie
show switch virtual
show switch virtual link
show switch virtual role
sh switch virtual link port-channel

Activate SSO
redundancy
mode sso
exit

Verify
Sh redundancy

Activate NSF for IGP
Router osfp 100
Nsf
Exit

Commission a VSS

Dual Active Detection

Dual active detection is there to avoid "split brain" syndrome (two active supervisors) this will happen if the Virtual Switch Link (VSL) goes down, no traffic is passed over the Dual-Active link, just heartbeat.

There are two ways of doing Dual-active detection on the 4500X

Fast Hello
PaGP

Fast Hello

Configure the VSS to use fast hello's for dual-active detection, then configure the interfaces to be the fast-hello interfaces....done;

configure terminal
switch virtual domain 1
dual-active detection fast-hello
exit
int tenGigabitEthernet 1/1/13
dual-active fast-hello
int tenGigabitEthernet 2/1/13
dual-active fast-hello

000053: *Sep 4 2015 01:08:36.942 AEST: %SPANTREE-6-PORTDEL_ALL_VLANS: TenGigabitEthernet1/1/13 deleted from all Vlans
000054: 000028: *Sep 4 2015 01:08:36.964 AEST: %SPANTREE-6-PORTDEL_ALL_VLANS: STANDBY:TenGigabitEthernet1/1/13 deleted from all Vlans
000055: *Sep 4 2015 01:08:39.937 AEST: %FASTHELLO-5-FH_UP: Fast-Hello interface Te1/1/13 status changed to link up
000057: *Sep 4 2015 01:08:50.570 AEST: %FASTHELLO-2-FH_DOWN: Fast-Hello interface Te1/1/13 lost dual-active detection capability
000058: *Sep 4 2015 01:08:50.574 AEST: %SPANTREE-6-PORTDEL_ALL_VLANS: TenGigabitEthernet2/1/13 deleted from all Vlans
000062: *Sep 4 2015 01:08:53.940 AEST: %FASTHELLO-5-FH_UP: Fast-Hello interface Te2/1/13 status changed to link up
000063:*Sep 4 2015 01:08:53.933 AEST: %FASTHELLO-5-FH_UP:: Fast-Hello interface Te2/1/13 status changed to link up
000033: *Sep 4 2015 01:08:53.939 AEST: %FASTHELLO-5-FH_UP: STANDBY: Fast-Hello interface Te1/1/13 status changed to link up
000065: *Sep 4 2015 01:08:55.766 AEST: %FASTHELLO-5-FH_DUAL_ACTIVE_CAP: Fast-Hello interface Te1/1/13 became dual-active detection capable
000066:*Sep 4 2015 01:08:55.673 AEST: %FASTHELLO-5-FH_DUAL_ACTIVE_CAP: : Fast-Hello interface Te2/1/13 became dual-active detection capable

Verify
show running-config interface tengigethernet 1/1/13
show switch virtual dual-active fast-hello
show switch virtual dual-active fast-hello packet
show switch virtual dual-active fast-hello counters

PAgP

OK, so i had a problem, since the 4500X did not support fast-hello dual active detection (they do now since 4.5.0) , i needed to use another method of dual-active detection, ePAgP dual active detection, but, there where problems with this.
In the access layer i had 2960S stacks, and my aim was to spread the uplinks across two or more switches and bundle the links together for availability, but here is the kicker, PAgP is not supported in cross stack etherchannel, yes, the cisco proprietary protocol is not supported across Cisco stack members! but PAgP is necessary for the ePAgP dual active detection mechanism to function!
The only protocol that supports cross stack etherchannel on the 2960S is LACP, the industry standard protocol but that doesn't help the dual active problem in the core VSS.

So my only solution was to terminate all uplinks of one access POD on a single switch so that i can use PAgP and leverage the Portchannel to dual active detect, this removes physical redundancy for the POD, but there is now way around it!

Oh well!

Here is the config steps

1. terminate all uplinks on a single switch in the stack and bundle links into an etherchannel mode desirable (PAgP)

BRN-SW01(config)#int range gi1/0/47 - 48
BRN-SW01(config-if-range)#switchport mode trunk
BRN-SW01(config-if-range)#channel-group 2 mode desirable
Creating a port-channel interface Port-channel 2
BRN-SW01(config-if)#int po2
BRN-SW01(config-if)#switchport mode trunk
BRN-SW01(config-if)#switchport trunk allowed vlan 4,74,274
BRN-SW01(config-if)#end
BRN-SW01#
BRN-SW01#sh ether

Number of channel-groups in use: 1
Number of aggregators: 1

Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
2 Po2(SU) PAgP Gi1/0/47(P) Gi1/0/48(P)

2. Bundle the downlinks on the core into an etherchannel mode desirable (PAgP)

DR-SWCR01#conf t
DR-SWCR01(config)#int ra
DR-SWCR01(config)#int range te1/1/1 - 2
DR-SWCR01(config-if-range)#switchport
DR-SWCR01(config-if-range)#switchport mode trunk
DR-SWCR01(config-if-range)#channel-group 9 mode desirable
Creating a port-channel interface Port-channel 9

DR-SWCR01(config-if-range)#int po9
DR-SWCR01(config-if)#switchport
DR-SWCR01(config-if)#switchport mode trunk
DR-SWCR01(config-if)#switchport trunk allowed vlan 4,74,274
DR-SWCR01(config-if)#end
DR-SWCR01#
DR-SWCR01#sh etherchannel 9 summary

Number of channel-groups in use: 3
Number of aggregators: 3

Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
9 Po9(SD) PAgP Te1/1/1(D) Te1/1/2(I)

3. run the following on the core to tell the core to use that PO as the dual active detection mechanism.

DR-SWCR01#conf t
DR-SWCR01(config)#int po9
DR-SWCR01(config-if)#shutdown
DR-SWCR01(config-if)#exit
DR-SWCR01(config)#switch virtual domain 2
DR-SWCR01(config-vs-domain)#dual-active detection pagp
DR-SWCR01(config-vs-domain)#dual-active detection pagp trust channel-group 9
DR-SWCR01(config-vs-domain)#int po9
DR-SWCR01(config-if)#no shut
DR-SWCR01(config-if)#end
DR-SWCR01#
DR-SWCR01#sh pagp dual-active
PAgP dual-active detection enabled: Yes
PAgP dual-active version: 1.1

Channel group 9 dual-active detect capability w/nbrs
Dual-Active trusted group: Yes
Dual-Active Partner Partner Partner
Port Detect Capable Name Port Version
Te1/1/1 Yes BRN-SW01 Gi1/0/47 1.1
Te1/1/2 Yes BRN-SW01 Gi1/0/48 1.1
DR-SWCR01#

Dual Active Detection