Which maintenance release should I upgrade 12.1E trains (MSFC IOS) to ?

[limtohsoon]

Hi Sir,

I have three Catalyst 6509 switches running the following IOS on the MSFCs:

Major Release: 12.1E

Release: 12.1(8b)E11

Platform: CAT6000-MSFC2

Feature Set: ENTERPRISE W/VIP

Filename: c6msfc2-jsv-mz.121-8b.E11.bin (128D/16F)

Major Release: 12.1E

Release: 12.1(3a)E7

Platform: CAT6000-MSFC2

Feature Set: ENTERPRISE

Filename: c6msfc2-js-mz.121-3a.E7.bin (128D/16F)

Major Release: 12.1E

Release: 12.1(11b)E

Platform: CAT6000-MSFC2

Feature Set: ENTERPRISE W/VIP

Filename: c6msfc2-jsv-mz.121-11b.E.bin (128D/16F)

I'm in the midst of standarizing all the installed 12.1E trains in my organization. In the light of the current "IOS Heap-based Overflow Vulnerability in System Timers" security advisory, I have the following upgrade options:

- 12.1(8b)E20 Date Released: 12-SEP-2005

- 12.1(13)E17 Date Released: 12-SEP-2005

- 12.1(23)E4 Date Released: 29-AUG-2005

- 12.1(26)E4 Date Released: 20-OCT-2005

I'm undecided whether to upgrade to 12.1(26)E4. No doubt, it has a lot more new features and the least bugs as far as MSFC2 is concerned. I'm okay with the new features but I value stability even more.

Anyone can advise whether I should upgrade to 12.1(26)E4 or just settle with 12.1(23)E4, etc?

Thank you.

B.Rgds,

Lim TS

[glen.grant]

Of course you have to look at your flash and memory requirements but we have been using 12.1.26E1 which is close quite awhile now with no issues . Besides if you do a have IOS issue they are always going to advise you to upgrade to the latest greatest release as the first step in troubleshooting. It's impossible to keep up with all these security issues in a larger organization when they have to be up 24 hours a day . Also 12.1.26E2 has been safe harbor tested . Interesting link here .

http://www.cisco.com/en/US/netsol/ns504/networking_solutions_program_category_home.html

[Prashanth Krishnappa]

From a maturity perspective, I would go with 12.1(13)E17. I suggest that you look through the release notes/bug tool kit to check for known issues and if they could impact your network.

[glen.grant]

My one question to prkrishn would be why doesn't Cisco ever release GD code for the 6500's ????

[Prashanth Krishnappa]

We do have GD releases for CAT OS(6.4(x) and newer 7.6(x) is GD). For IOS on MSFCs and Native IOS, we do not have GD status yet but we have safe harbor releases.

http://www.cisco.com/univercd/cc/td/doc/solution/systest/

[glen.grant]

Yup realize there is GD release for catos . To my knowledge though in its 7 or year existence there has never been a GD release for 6500 layer 3 code . They used to have them for the 5500's with a RSM .

[limtohsoon]

Hi Prashanth,

I understand that each maintenance release will introduce new features or bug fixes, or both.

Comparing the features between release 12.1(13)E17 and 12.1(26)E4 (see attached file), only a handful of new features are unique to 12.1(26)E4. These features may have bugs which probably have already been resolved in earlier releases.

Looking at Release Notes for 12.1E (http://www.cisco.com/en/US/products/hw/switches/ps708/prod_release_note09186a008007f716.html), release 12.1(26)E4 has resolved a significant number of bugs.

So, I think I'd go with 12.1(26)E4. What's your thought?

Thank you.

B.Rgds,

Lim TS