vdx-6740 firmware/nos update via ftp, scp, sftp does work.

[Pawel_Eljasz]

hi everyone,

I have a switch from which I can ssh into ftp server, that is on a vlan. Other nodes on that vlan can ftp into that server okey.
The same switch I can ssh into its management interface cannot ping back that node from which I ssh. (that's is weird right?)

Now, when I try "firmware download" (on the vlan, obviously) via ftp, sftp, scp it all fails, example:

sw0# firmware download ftp host 10.5.4.97 directory nos7.2.0a1 user anonymous
Password: *********
Performing system sanity check...
The server is inaccessible or firmware path is invalid. Please make sure the server name or IP address, the user/password and the
firmware path are valid.

I can see that the switch does not even get to the ftp server, again, I can ssh from the switch to that IP address. SPC does not work neither.

sw0# firmware download scp host 10.5.4.97 directory /home.sysops/appmgr/nos7.2.0a1 user appmgr
Password: ************
Performing system sanity check...
The server is inaccessible or firmware path is invalid. Please make sure the server name or IP address, the user/password and the
firmware path are valid and the server supports SSH password authentication.

Because it's just my first foray into Brocade I hope, expect, I'm missing something and it's not some bad fault, malfunction on switch's part.

What is it that I am missing, doing wrong?

many thanks, L.

[Pawel_Eljasz]

here:
sw0# sh ip route vrf mgmt-vrf Total number of IP routes: 3 Type Codes - B:BGP D:Connected O:OSPF S:Static +:Leaked route; Cost - Dist/Metric BGP Codes - i:iBGP e:eBGP OSPF Codes - i:Inter Area 1:External Type 1 2:External Type 2 s:Sham Link Destination Gateway Port Cost Type Uptime 0.0.0.0/0 10.214.234.1 mgmt 1 1/1 S 6d23h 10.214.234.0/24 DIRECT mgmt 1 0/0 D 6d23h 10.214.234.95/32 DIRECT mgmt 1 0/0 D 6d23h
from rs232 terminal session, ping to switch's own mgmt iface:

sw0# ping 10.214.234.95 Type Control-c to abort PING 10.214.234.95 (10.214.234.95): 56 data bytes ping: sendto: Network is unreachable but can ping from outside, can ssh to it from outside, and...

sw0# show interface Management interface Management 1/0 ip address "static 10.214.234.95/24" ip gateway-address 10.214.234.1 ipv6 ipv6-address [ ] ipv6 ipv6-gateways [ ] line-speed actual "1000baseT, Duplex: Full" line-speed configured Auto oper-status up

[Yulia_Abitbul]

please try:
sh ip route vrf mgmt-vrf

[Pawel_Eljasz]

okey,
Switch's config is pretty vanilla default, I think after a config clearing.

sw0# show ip route Total number of IP routes: 2 Type Codes - B:BGP D:Connected O:OSPF S:Static +:Leaked route; Cost - Dist/Metric BGP Codes - i:iBGP e:eBGP OSPF Codes - i:Inter Area 1:External Type 1 2:External Type 2 s:Sham Link Destination Gateway Port Cost Type Uptime 10.5.4.0/24 DIRECT Ve 4 0/0 D 5d4h 10.5.4.253/32 DIRECT Ve 4 0/0 D 5d4h So, nodes on that vlan, the switch can ping okey.

But mgmt iface I did nothing about in terms of config. If I can ssh to switch via mgmt iface then assume it should work the other way back, no?
No extra configuration, like routing, should be needed to do manually, if at all, no?
And again, to stress, the connection between the node from I ssh to switch's mgmt inface and switch is direct, meaning no other devices in between.

And, how to put an interface into mgmt-vrf ?

[Yulia_Abitbul]

You can use Inband (any port) or Out Of Band (mgmt interface) connectivity for the upgrade, but this interface MUST be in mgmt-vrf (on NOS6.x)
Hard to tell why you can not ping your mgmt interface (different subnet may be), could be any network issue (wrong default gateway or routing problem)

[Pawel_Eljasz]

Any chance this could be clarified ultimately?

You see, mgmt iface does not want to get anywhere, no ping no ssh via mgmt iface - would you have suggestions as to why?

And vlan iface does ssh out but "firmware update" via ftp, sfp, sftp on vlan fails with errors as above.

If your "should" means "must" then at least I know I should stop trying with updates via vlan iface - which would probably be worst as, again, mgmt iface does not want to ping anything and I have no! idea why that is.