Cisco Nexus9508交换机硬盘bug补丁SMU安装步骤

1 背景

客户1台Nexus9508交换机，当前软件版本存在SSD硬盘BUG，需要打补丁
bug相关链接
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvx21260

Conditions: This cli can be used for any NXOS version

switch# conf t 
switch(config)# feature bash 
switch(config)# run bash sudo su 
bash-4.2# smartctl -a /dev/sda | egrep 'Model|Firmware|Hours' 
Device Model: Micron_M500IT_MTFDDAT064SBD Firmware Version: MU01.00 9 Power_On_Hours 0x0032 100 100 000 Old_age Always - 4872 bash-4.2# Affected Switch will have both of the following conditions True from the above output 1) Model starts with Micron_M500IT 2) FW Version is either MU01.00 or MC02.00

2 如何安装补丁

可通过firmware或smu安装
Firmware是一个.gz文件，smu是一个RPM文件，安装方式不同

• Firmware是1个脚本文件，解压后直接执行即可。
• RPM需要通过install add bootflash:/xxx.rpm安装并安装

install add bootflash
install activate bootflash
install commit bootflash

2.1 smu安装命令参考

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_smu.html

2.2 本次采用SMU安装方式

操作步骤如下

2.2.1 操作前信息采集

以下的命令也可用于日常巡检的命令采集

ter leng 0
ter pager 0
ter wid 500
show run
show clock
show version 
show module 
show module switch all 
show inventory
show fex
show cdp neighbor
show cdp neighbor detail
show lldp neighbor
show interface description
show interface brief
show interface counter brief
show vlan brief
show vpc brief
show port-channel summary
show etherc summary
show ip interface bri
show interface  ip bri
show interface bri
show interface status
sh interface | in line|t rate
sh interface transcei detail
sh spanning-tree 
sh mlag 
sh standby brief
sh hsrp brief
sh vrrp brief
sh vpc
sh vpc brief
show interface | in put rate|Ethernet|protocol is|err|CRC
show interface transceiver detail 
show ip route
show ip route summary
show ip ospf neighbor
show ip eigrp neighbor
show ip bgp summary
show ip arp summary
show ip arp 
show mac address-table counter
show mac address-table
show env
show env all
show processes cpu
show processes cpu history
show processes memory

2.2.2 拷贝SMU文件到bootflash

可以通过FTP或TFTP拷贝到bootflash，本次是通过FTP方式

switch#Copy ftp://cisco:333333@10.189.39.113/nxos.CSCvx21260-n9k_ALL-1.0.0-7.0.3.I7.9.lib32_n9000.rpm bootflash:

2.2.3 检查smu拷贝完成

switch# dir bootflash: | in 21260624892    Jan 04 22:16:37 2022  nxos.CSCvx21260-n9k_ALL-1.0.0-7.0.3.I7.9.
lib32_n9000.rpm

2.2.4 拨出备用引擎

拨出备引擎这一步的操作目的： 为了防止主引擎主打补丁后意外导致系统无法正常启动，所以将备引擎拨掉，如果主引擎打补丁后无法启动，就拨出主引擎，插入备引擎。

？主引擎打完补丁后，备引擎还需要单独再打一次补丁吗?
不需要，备引擎插入机框后会自动同步。

2.2.5 安装SMU

Switch# install add bootflash:nxos.CSCvx21260-n9k_ALL-1.0.0-7.0.3.I7.9.lib32_n9000.rpm activate  

会弹出以下log

Adding the patch (/nxos.CSCvx21260-n9k_ALL-1.0.0-7.0.3.I7.9.lib32_n9000.rpm)
[####################] 100%
%PATCH-INSTALLER-3-PATCH_INSTALLER_GENERIC_LOG_MSG: Install operation 1 completed successfully
at Tue Jan  4 22:28:28 2022 
[################### ]  90%2022 Jan  4 22:28:33 cn_tao_pk_bd04_pld01 %AUTHPRIV-5-SYSTEM_MSG:     root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/nohup bash /var/sysmgr/tmp/patches/CSCvx21260-n9k_ALL/isan/bin/upgrade_m500_firmware.sh -s - sudo
2022 Jan  4 22:28:33 cn_tao_pk_bd04_pld01 %USER-2-SYSTEM_MSG: SSD firmware needs update and will be upgraded - SSD_FIRMWARE_UPDATE
2022 Jan  4 22:28:33 cn_tao_pk_bd04_pld01 %USER-2-SYSTEM_MSG: Updating SSD firmware ... - SSD_FIRMWARE_UPDATE
2022 Jan  4 22:28:40 cn_tao_pk_bd04_pld01 %USER-2-SYSTEM_MSG: SSD Firmware has been updated successfully - SSD_FIRMWARE_UPDATE
[####################] 100%
Install operation 2 completed successfully at Tue Jan  4 22:28:43 2022

2.2.6 检查firmware版本已经升级完成

Firmware Version:显示为MU05.00

Switch#conf t
Switch(config)#feature bash
Switch(config)#run bash sudo su
bash-4.2# smartctl -a /dev/sda | egrep 'Model|Firmware|Hours'
Device Model:     Micron_M500IT_MTFDDAT064SBD
Firmware Version: MU05.009 Power_On_Hours          0x0032   100   100   000    Old_age   Always       -       27223

升级前显示为MU01.00

Switch#conf t
Switch(config)#feature bash
Switch(config)#run bash sudo su
bash-4.2# smartctl -a /dev/sda | egrep 'Model|Firmware|Hours'
Device Model:     Micron_M500IT_MTFDDAT064SBD
Firmware Version: MU01.00

2.2.7 注意事项:

升级完成后SSD的固件版本会显示为MU05.00或MC03.00
Show version可以看到安装的补丁

Switch# show version
pluginCore Plugin, Ethernet PluginActive Package(s):nxos.CSCvx21260-n9k_ALL-1.0.0-7.0.3.I7.9.lib32_n9000

对于双引擎的Nexus系列，如9504， 9508，9516，需要2块引擎都进行确认。

Switch#
Switch#run bash sudo su
bash-4.2#rlogin sup27   !Primary supervisorsmartctl -a /dev/sda | egrep 'Model|Firmware|Hours'Switch#run bash sudo su
bash-4.2#rlogin sup28   !Secondary supervisorsmartctl -a /dev/sda | egrep 'Model|Firmware|Hours'

2.2.8 信息采集，与升级前对比

ter leng 0
ter pager 0
ter wid 500
show run
show clock
show version 
show module 
show module switch all 
show inventory
show fex
show cdp neighbor
show cdp neighbor detail
show lldp neighbor
show interface description
show interface brief
show interface counter brief
show vlan brief
show vpc brief
show port-channel summary
show etherc summary
show ip interface bri
show interface  ip bri
show interface bri
show interface status
sh interface | in line|t rate
sh interface transcei detail
sh spanning-tree 
sh mlag 
sh standby brief
sh hsrp brief
sh vrrp brief
sh vpc
sh vpc brief
show interface | in put rate|Ethernet|protocol is|err|CRC
show interface transceiver detail 
show ip route
show ip route summary
show ip ospf neighbor
show ip eigrp neighbor
show ip bgp summary
show ip arp summary
show ip arp 
show mac address-table counter
show mac address-table
show env
show env all
show processes cpu
show processes cpu history
show processes memory