Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

AP SSO FUS upgrade ???

Hi all,

I'm preparing to enable HA SSO on a pair of 5508's; one with an HA SKU and one with a 50 AP license.  I noticed that the bootloader's and FRIV's are different, even though the firmware versions are the same.

Should I apply the AIR-CT5500-K9-1-7-0-0-FUS.aes to the HA WLC before enabling AP SSO, or will the peering process take care of this for me?  Thanks!

      

APSSO) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.5.102.0
Bootloader Version............................... 1.0.1
Field Recovery Image Version..................... 6.0.182.0
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS

System Name...................................... Cisco_5f:a3:44
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... 10.192.252.21
Last Reset....................................... Software reset
System Up Time................................... 0 days 0 hrs 18 mins 42 secs
System Timezone Location......................... (GMT -7:00) Mountain Time (US and Canada)
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... US  - United States
Operating Environment............................ Commercial (0 to 40 C)

WLC1) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.5.102.0
Bootloader Version............................... 1.0.16
Field Recovery Image Version..................... 7.0.112.21
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS

System Name...................................... MHP-5508-WLC1
System Location.................................. SMDC G-13
System Contact................................... 0117
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... 10.192.252.11
Last Reset....................................... Software reset
System Up Time................................... 38 days 13 hrs 14 mins 0 secs
System Timezone Location......................... (GMT -7:00) Mountain Time (US and Canada)
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... US  - United States

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

Yes you should make sure the FUS is upgraded and identical prior to enabling AP SSO.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
26 REPLIES
Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

Yes you should make sure the FUS is upgraded and identical prior to enabling AP SSO.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Re: AP SSO FUS upgrade ???

Thanks.  I was a bit nervous about reburning the firmware.

Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

You should be fine, the important thing is to disable AP SSO.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

AP SSO FUS upgrade ???

Scott F.  You mention disabling AP SSO first.  Maybe this is restating what you just said but I have a scenario where I have two 5500s running FUS 1.7 with AP SSO enabled. I want to upgrade to FUS 1.9.  I had heard that you could run the FUS upgrade just like the image upgrade, in other words allow the primary to send the code over to the standby using redundancy links. 

Can anyone confirm if the FUS upgrade works the same way and the code upgrade?  Or do I have to disable AP _SSO and then do each controller indovudually? 

TIA

Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

Don't think that will work since this is a boot image upgrade. You can open a TAC case and confirm, but you can try and see if the HA gets the image. If it doesn't, then you know that you have to install it separately.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

AP SSO FUS upgrade ???

Ok thanks.  Just opened a case.  I'll reply to the thread with their answer.

New Member

AP SSO FUS upgrade ???

Received this from TAC.  Looks like you have to break SSO --->  upgrade FUS code ---> then enable SSO again.  -Enjoy

Regarding your questions the answers are above:

-The upgrade of the FUS image behaves the same way as a normal controller code upgrade.

There is no different procedure than upgrading the controller but as it is FUS image which is independent on each controller you will have to break SSO and install the image on each controller and then bundle the controllers again after the upgrade.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html

Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

Yeah... Didn't think that would push. Well enjoy the fun:)

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Re: AP SSO FUS upgrade ???

What about forcing the standby controller into maintenace mode? Maybe it lets me initiate SW download then. Since the new FUS only updates bootloader and CF stuff it should be fine... at least I hope so.

1) Disable Uplink of standby, standby moves to maint

2) Reenable Uplink, push SW and reboot

3) Install FUS and reboot into standby mode again

4) Do switchover

5) Repeat steps 1 to 4

But I'm out of office now until april possibly. I will report back then. Maybe someone has some input on this?

Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

I would stick to the instructions and break ap SSO. Your safer that way.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

AP SSO FUS upgrade ???

I was told by TAC that the FUS upgade could be done with AP SSO enabled. 

Do you know if that stance has changed recently?  I was told that it would be treated just like a typical code upgrade and that the image would be pushed over to the standby controller....

Hall of Fame Super Silver

AP SSO FUS upgrade ???

Well... if TAC told you that, then I would try it and see.... heck.. you have it in writing, so you can blame them if it doesn't work.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

-Scott
*** Please rate helpful posts ***
Hall of Fame Super Silver

AP SSO FUS upgrade ???

Did you see the post above:

Received this from TAC.  Looks like you have to break SSO --->  upgrade FUS code ---> then enable SSO again.  -Enjoy

Regarding your questions the answers are above:

-The upgrade of the FUS image behaves the same way as a normal controller code upgrade.

There  is no different procedure than upgrading the controller but as  it is  FUS image which is independent on each controller you will have  to break  SSO and install the image on each controller and then bundle  the  controllers again after the upgrade.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

-Scott
*** Please rate helpful posts ***
New Member

AP SSO FUS upgrade ???

I did see that post, but it seemed to contradict what I was told by TAC.

New Member

AP SSO FUS upgrade ???

I was told the same thing.  But honestly it did not work for me.   I actually escalated it to a Lead and then the Manager to get the answer that I posted in here.  I think when dealing with TAC depending on who you get first level, your mileage will vary.

Hall of Fame Super Silver

AP SSO FUS upgrade ???

I can't argue with that  There are a lot of TAC engineers that are great that's out there... not saying that there are bad one's, but some have more experience than others, which makes them great.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

-Scott
*** Please rate helpful posts ***
Hall of Fame Super Gold

AP SSO FUS upgrade ???

Last week, I upgraded four WiSM-2 AP SSO pairs from FUS 1.7.0 to 1.9.0 using GUI.

The same method to upgrade the firmware is the same "reaction" you'll get, i.  e.  you GUI into the active use and use TFTP (didn't try FTP) to transfer the FUS code across.  The active unit will push the FUS down to the hot standby unit.  It sort of give you an indication where the process is and at the end, it gives you the link to reboot (or save and reboot) the WLC.


It will take about 25 minutes (I timed it) to boot up both pairs. 

Re: AP SSO FUS upgrade ???

Did you boot them one at a time (so that the APs remain operational) or both at once?

Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

Leo mentioned to me that he rebooted one at a time.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Re: AP SSO FUS upgrade ???

Since Leo’s post - I just tried upgrading two 5508s in HA AP-SSO configuration. In a nutshell it did work from the GUI with them left in HA pair.

The steps and results are below.

---------------------------------------------------------

***Left them in HA –AP-SSO pair, running code version 7.4.121.0

***On the primary (active controller) I logged into the CLI to see the versions status

***Using this graph from Cisco I verified that I was running an older version

Table 1   Cisco WLC Platforms and Upgraded Components

Cisco WLC Platform

Upgraded Components

Cisco   5500 Series Wireless LAN Controllers

•Field   Recovery Image is upgraded from 7.0.112.21 to 7.6.101.1

•Bootloader   is upgraded to 1.0.20

•Offline   Field Diagnostics is upgraded from 0.9.28 to 0.9.35

•FPGA   Revision version is upgraded to 1.7

•Environment   Controller (MCU) Image version is upgraded to 1.8

•USB   Console Revision version is upgraded to 2.2

(Cisco Controller) >show sysinfo

Product Version.................................. 7.4.121.0

Bootloader Version............................... 1.0.1

Field Recovery Image Version..................... 6.0.182.0

Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2

System ObjectID.................................. 1.3.6.1.4.1.9.1.1069

Redundancy Mode.................................. AP SSO

Truncated....

***Then I logged into the standby to see the versions on that controller.

(Cisco Controller-Standby) >show sysinfo

Product Version.................................. 7.4.121.0

Bootloader Version............................... 1.0.1

Field Recovery Image Version..................... 6.0.182.0

Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2

System ObjectID.................................. 1.3.6.1.4.1.9.1.1069

Redundancy Mode.................................. AP SSO

Truncated....

***As you can see both are running the same older version of FUS code, in this case it was version 1.7.

*** I began the FUS upgrade process by using the GUI.

*** 1. Using the “download file to controller” I TFTPd the file AIR-CT5500-K9-1-9-0-0-FUS.aes to the ACTIVE controller.

*** 2. The upgrade went just like a code upgrade in that it unpacked and verified the file contents on the active and then to transfer the file to standby.

fus-using ha.png

*** 3. The code was installed probably in less than 5 minutes and then the download page redirected me to the reboot page.

*** 4. I rebooted and the reboot command was issued to both active and standby controllers.

*** In about 25 minutes both controllers were back up and the FUS was upgraded. Here’s a mobility message from my controller showing I started at 10:56 and then it was back and in the mobility group by 11:21.

Tue Mar 4 11:21:02 2014

Control path to mobility member   10.244.2.237 is up.

Tue Mar 4 11:20:52 2014

Data path to mobility member   10.244.2.237 is up.





Tue Mar 4 10:57:12 2014

Control path to mobility member   10.244.2.237 is down.

Tue Mar 4 10:56:02 2014

Data path to mobility member   10.244.2.237 is down.

*** Here’s the after version numbers on my controllers using the show sysinfo command

(Cisco Controller) >show sysinfo

Product Version.................................. 7.4.121.0

Bootloader Version............................... 1.0.20

Field Recovery Image Version..................... 7.6.101.1

Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2

System ObjectID.................................. 1.3.6.1.4.1.9.1.1069

Redundancy Mode.................................. AP SSO

(Cisco Controller-Standby) >show sysinfo

Product Version.................................. 7.4.121.0

Bootloader Version............................... 1.0.20

Field Recovery Image Version..................... 7.6.101.1

Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2

System ObjectID.................................. 1.3.6.1.4.1.9.1.1069

Redundancy Mode.................................. AP SSO

I noticed that I saw subtle changes in the versions because I was upgrading from FUS1.7 to FUS1.9. I suppose if you have FUS1.3 the changes in the show sysinfo command would be more in line with the chart from Cisco.

All in all thanks to everyone for contributing to this thread and I hope this might help somebody in the future when upgrading in a AP-SSO pair.

Regards

Hall of Fame Super Silver

Re: AP SSO FUS upgrade ???

Thanks for posting your findings

+5

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

My wlc 5508 active and standy

My wlc 5508 active and standy wlc have identical bootloaders, only field recovery images are differ, but they works in HA SSO

Hall of Fame Super Silver

Kamran,The code will allow

Kamran,

The code will allow SSO to happen, but the issue is when there is a failover.  During that time, the controller that has the older FUS, might experience odd things and that is why its important to be on the latest FUS 1.9.0.0.  I have seen very odd issues when the FUS has not been updated that caused client experience issues, so just keep that in mind.  What you can do is failover to the other controller and let that run for a while and see if users have any complaints.

-Scott

-Scott
*** Please rate helpful posts ***
New Member

I made a failover test, at

I made a failover test, at this moment no compliance from users, we are monitoring at this moment

I had the time to try out the

I had the time to try out the FUS upgrade with SSO config and it did not work out so non-disruptive.

  • Upload image via GUI, this loads it into the standby as well (verified with show boot)
  • Issue "reset peer-system", the standby reloads, runs the FUS upgrade and becomes standby-hot again (no issue so far)
  • Do switchover -> this cause both units to reload in tandem

(vapwlc02) >redundancy force-switchover

This will reload the active unit and force a switch of activity. Are you sure? (y/N) y


System will now restart!
Image download/Lag config/Clear config/HA disable/database/virtual/web-auth/secureweb config was done previously, reloading standby WLC.

Image download was done
Restarting system.

This is the moment where you have an outage of course. Small bonus is that one of the boxes already did the FUS upgrade and reloads into the regular image again, so the downtime is smaller. Unfortunatly I lost some config changes I did last week, even though I saved the config before starting the process.

I think pushing the FUS and reloading the cluster should work - I don't see a reason to disable SSO, but it does not seem possible to do the update without disruption.

New Member

We were running 7.4.100.0 on

We were running 7.4.100.0 on our 5508's in HA. Upgraded to 7.4.121.0. We were also running FUS 1.7.0.0 and upgraded to 1.9.0.0. The software upgrade went fine, didn't predownload images to the AP's as we have a mixed AP environment and was afraid that our 1142's didn't have enough memory. Downtime was planned so no issue there. We upgraded the FUS with SSO enabled, it went fine. Both controllers were down ca 30 minutes after reboot. Really appreciate people sharing their experiences so I'm sharing mine. 

1745
Views
10
Helpful
26
Replies
CreatePlease to create content