Upgrading to 16.x.x.x version?

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Good day all! We're looking to upgrade several of our X430 and X440 Summits from 15.3.1.4 to one of the lastest 16.x.x.x versions. Any gotchas that anyone has experienced making that big of a jump? Any suggestions on a stable 16.x.x.x version? None are stacked but uplinked to stacked core  Extreme switches.

Thanks much all!

Garry
Photo of Network Engineering Team

Posted 3 years ago

  • 0
  • 1
Photo of Patrick Voss

Patrick Voss, Employee

  • 11,474 Points 10k badge 2x thumb
You should not have an issue going from that version to 16.1. The partitions are separate and should not have anything to do with each other. As of now there is only one version available for 16.1 because of how new it is.
(Edited)
Photo of Drew C.

Drew C., Community Manager

  • 37,350 Points 20k badge 2x thumb
Hi Garry,
Welcome to The Hub!

EXOS 16.x was recently released.  v16.1.1.4 is the only version available.  Is there a particular feature you're interested in that is driving you to 16.1?
If you haven't seen it yet, take a look at this post:  EXOS 16.1 Releases with New Hardware and Role-based Policy Support!
I would also recommend you review the Release Notes (on the support site) and the "proactively published" articles mentioned in that thread.

As Patrick mentioned above, you shouldn't have any trouble moving from 15.3 to 16.1.  Remember that the X430 uses the "summitlite" image, whereas the X440 uses the normal summitX image.
Let us know if you have any other questions!

-Drew
Thanks Drew and Patrick!

Drew, we're just looking to get the latest/greatest for reasons of being up-to-date but also because we have a PCI compliance requirement and I'm thinking (guessing) that somewhere from the version we're running to the last there might have been a security hole in a version somewhere in between that a PCI can might ding us on.  

Looks like I have to load a new SSH Mod too if I go from 15.x to 16.x. too? And thanks for the reminder that 430S use the lite version, that one almost slipped by me :)

Also, thanks for the suggestion. I'll take a look at the release document and release notes. 
Photo of Ryan Mathews

Ryan Mathews, Alum

  • 8,988 Points 5k badge 2x thumb
Garry, 

The Extreme Dev team puts out a recommended Version, per HW platform that can be accessed here.

http://documentation.extremenetworks.com/hw_sw_compatibility/HardwareSoftwareCompatibility/r_recomme...

They're in the process of updating to cover the entire Extreme portfolio.  This developed as an EXOS best practice, so we asked them to expand it.

Since you were asking about EXOS, thought I'd add in addition to Drew and Patrick's comments.
Photo of Ryan Mathews

Ryan Mathews, Alum

  • 8,988 Points 5k badge 2x thumb
This one got a lot of likes, so thought I'd link to GTAC Knowledge as well:

https://gtacknowledge.extremenetworks.com/articles/Q_A/What-Is-The-Recommended-Release-of-EXOS-For-M...
Thanks Ryan!! That's exactly what we were looking for. Thanks a bunch and have a great holiday weekend all!
Last silly question after reading the User Guide.  I want to simply stage/store the new EXOS and SSH MOD images for later in the non active partition. I see when I use the "download image" command but choose N to installing now, is it this command that will have me boot from the new image when I'm ready down the road?

install image fname {partition} {msm slotid} {reboot}

I'm also wondering if I simply chose Y to install now when using the "dowload image" command but simply wait to reboot will effectively do the same thing as the above "install image" command.

Thanks!
Photo of Patrick Voss

Patrick Voss, Employee

  • 11,474 Points 10k badge 2x thumb
You can use the download image while the switch is running and it will not cause any issues. The reboot has to be done manually and can be scheduled a later time. It will automatically tell the switch to use the opposite partition upon reboot. If you are going to install the SSH XMOD make sure you specify which partition you want it to install to. Installing an EXOS image will automatically choose the opposite partition if one is not specified.
Thanks for all the help Patrick, Ryan and Drew. Last question, one of the switches I'm upgrading is a 2 switch x460 Summit Stack running 12.5.1.6 and I want to upgrade to 15.5.4.2. Do you know if that's too big of a jump? Do you have a document that would assist with any step upgrades I might need to do in this case?

Thanks again all!
Photo of Patrick Voss

Patrick Voss, Employee

  • 11,474 Points 10k badge 2x thumb
Going from 12.5 to 15.5 should not present any issues. I would proceed with the a normal upgrade process. Here is an article on how to upgrade a stack:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-upgrade-EXOS-on-a-Summit-Stack

Let us know if you run into any issues.
(Edited)
Photo of Weda

Weda

  • 994 Points 500 badge 2x thumb
 I have installed EXOS ver 16.1.3.6-patch1-9 in the free partition of device which has current firmware 12.5.4.5. I haven't rebooted yet.
My questions is, 
1) Is there any possibility to crash the config file when rebooting ?
Photo of Drew C.

Drew C., Community Manager

  • 37,336 Points 20k badge 2x thumb
Forking to a new thread for better visibility

Please reference the new conversation here: Risks When Upgrading from EXOS v12.5 to v16.1?
Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
As mentioned by Drew please refer the Risks when upgrading from EXOS 12.5 to 16.1 conversation thread. Very recently just 30 minutes before i have added one article link documenting this requirement and explaining the need of this.
Photo of HarrySo

HarrySo

  • 482 Points 250 badge 2x thumb

Hi Garry!

I would recomend to you, that you should test new Firmware in a Test Environment/Lab with your actual configs always before you roll it out to all your devices.

We had an issue with radius authentication from 15.x.x.x to 16.x.x.x. We couldnt log in from remote, the only way was the failsafe account.

So we had to do some reconfigurations on our Radius Servers cause we have a multivendor Network

GWG H

Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
Mostly I can see there will be no issues. But in case if  they have any aaa configuration or radius configuration then we need to reconfigure the shared secrets alone after the upgrade else it is very much fine. Moreover it seems the radius code has been changed from 16.1 onwards which uses different algorithm for encryption though. So that should be taken care always without modifying further in case if there is any change noticed during the upgrade for any sort of aaa or radius configuration which they  use.

Anyway i agree with Harry it is always better to apply the changes on testbed switches before implementing them live. But at the same  time i am very much sure from 16.1 onwards now the radius code has been already changed using different algorithm for encryption. Because this has been already verified by engineering. Hence chances of any issues is at negligence.

Hope all  these information help you for moving forward.....