IRF problems when upgrading firmware on HPE 5510

[Craig Kramer]

I have two HPE 5510 switches joined by IRF. Switches were running firmware 5510_HI_7.10.R1120 without any issues. Today I tried to upgrade the switches to firmware 5510_HI_7.10.R1121P03 following the instructions in the attached release notes. But after the upgrade the slave switch would constantly attempt to merge with the master and then immediately reboot, caught in an endless loop. At that point both switches were running the new firmware.  The only fix was to revert to 5510_HI_7.10.R1120 and then then slave would merge with the master.  So after reverting I tried firmware 5510_HI_7.10.R1121P02-US, again, the exact same problem.  After reverting to 5510_HI_7.10.R1120 once again I tried upgrading using 5510_HI_7.10.R1120P10-US and had no problems with that version. I had enough for one day and didn't try any other versions of 5510_HI_7.10.R1121 other than the latest two specified earlier.  Has anyone else run into this issue? Thanks.

[HP-Browniee]

Hi

I don't know how you did the upgrade, but make sure you install the software in both members (slot1 and slot2)

Kind regards

[Craig Kramer]

I followed the same procedure for both the upgrade failures and ultimately the version that was successful.

system-view
irf auto-update enable
quit
save
boot-loader file flash:/5510HI-Version#.ipe slot 1 main
boot-loader file flash:/5510HI-Version#.ipe slot 2 main
reboot

[KSHKND]

Hi,

Please attach the config file.

[Craig Kramer]

Here's the config. Thanks

#
 version 7.1.045, Release 1120
#
 sysname HP5510
#
 clock timezone Central minus 06:00:00
 clock summer-time CentralTime 02:00:00 November first Sunday 02:00:00 March second Sunday 01:00:00
 clock protocol ntp
#
 irf domain 1
 irf mac-address persistent always
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 32
 irf member 2 priority 30
 irf member 1 description Primary 5510 Switch
 irf member 2 description Secondary 5510 Switch
#
 lldp global enable
#
 fan prefer-direction slot 1 port-to-power
 fan prefer-direction slot 2 port-to-power
 password-recovery enable
#
vlan 1
#
vlan 11
 name vMotion
 description VLAN for vMotion traffic
#
vlan 12
 name iSCSI
 description VLAN for iSCSI traffic
#
vlan 38
 name DCN-IT
#
vlan 39
 name DCN-Servers
#
irf-port 1/1
 port group interface Ten-GigabitEthernet1/1/2
#
irf-port 2/2
 port group interface Ten-GigabitEthernet2/1/2
#
stp region-configuration
 region-name NED-Lincoln-Span
 revision-level 1
 instance 1 vlan 1 to 4094
 active region-configuration
#
 stp bpdu-protection
 stp global enable
#
interface Bridge-Aggregation1
 description LACP Uplink to Core Network Switches
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 38 to 39
 link-aggregation mode dynamic
#
interface NULL0
#
interface Vlan-interface38
 ip address xxx.xxx.xxx.xxx 255.255.255.192
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 description Management / vMotion
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 11 39
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 description Management / vMotion
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 11 39
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/4
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/5
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/6
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/7
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/8
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet1/0/9
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/10
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/11
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/12
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/13
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/14
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/15
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/16
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/17
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/18
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/19
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/20
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/21
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/22
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/23
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet1/0/24
 port link-mode bridge
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 12 38 to 39
#
interface GigabitEthernet2/0/1
 port link-mode bridge
 description vMotion / Management
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 11 39
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/2
 port link-mode bridge
 description vMotion / Management
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 11 39
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/3
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/4
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/5
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/6
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/7
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/8
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface GigabitEthernet2/0/9
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/10
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/11
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/12
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/13
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/14
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/15
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/16
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/17
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/18
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/19
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/20
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/21
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/22
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/23
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface GigabitEthernet2/0/24
 port link-mode bridge
 port access vlan 38
 stp edged-port
#
interface M-GigabitEthernet0/0/0
 ip address xxx.xxx.xxx.xxx 255.255.255.0
 mad bfd enable
 mad ip address 10.1.0.1 255.255.255.0 member 1
 mad ip address 10.1.0.2 255.255.255.0 member 2
#
interface Ten-GigabitEthernet1/0/25
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet1/0/26
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet1/0/27
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet1/0/28
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet1/1/1
 port link-mode bridge
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 38 to 39
 port link-aggregation group 1
#
interface Ten-GigabitEthernet2/0/25
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet2/0/26
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet2/0/27
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet2/0/28
 port link-mode bridge
 port access vlan 12
 broadcast-suppression 5
 multicast-suppression 5
 flow-control
 stp edged-port
#
interface Ten-GigabitEthernet2/1/1
 port link-mode bridge
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 38 to 39
 port link-aggregation group 1
#
interface Ten-GigabitEthernet1/1/2
#
interface Ten-GigabitEthernet2/1/2
#
 scheduler logfile size 16
#
line class aux
 idle-timeout 60 0
#
line class vty
 idle-timeout 60 0
#
line aux 0 1
#
line vty 0 63
#
 ip route-static 0.0.0.0 0 Vlan-interface38 xxx.xxx.xxx.xxx permanent
 ip route-static 0.0.0.0 0 M-GigabitEthernet0/0/0 xxx.xxx.xxx.xxx permanent
#
 info-center loghost xxx.xxx.xxx.xxx port 5149
#
 mad exclude interface GigabitEthernet1/0/1
 mad exclude interface GigabitEthernet1/0/2
 mad exclude interface GigabitEthernet1/0/3
 mad exclude interface GigabitEthernet1/0/4
 mad exclude interface GigabitEthernet1/0/5
 mad exclude interface GigabitEthernet1/0/6
 mad exclude interface GigabitEthernet1/0/7
 mad exclude interface GigabitEthernet1/0/8
 mad exclude interface GigabitEthernet2/0/1
 mad exclude interface GigabitEthernet2/0/2
 mad exclude interface GigabitEthernet2/0/3
 mad exclude interface GigabitEthernet2/0/4
 mad exclude interface GigabitEthernet2/0/5
 mad exclude interface GigabitEthernet2/0/6
 mad exclude interface GigabitEthernet2/0/7
 mad exclude interface GigabitEthernet2/0/8
 mad exclude interface Ten-GigabitEthernet1/0/25
 mad exclude interface Ten-GigabitEthernet1/0/26
 mad exclude interface Ten-GigabitEthernet1/0/27
 mad exclude interface Ten-GigabitEthernet1/0/28
 mad exclude interface Ten-GigabitEthernet2/0/25
 mad exclude interface Ten-GigabitEthernet2/0/26
 mad exclude interface Ten-GigabitEthernet2/0/27
 mad exclude interface Ten-GigabitEthernet2/0/28
#
 snmp-agent
 snmp-agent local-engineid 800063A2805C8A38F834E500000001
 snmp-agent sys-info contact craig_kramer@ned.uscourts.gov
 snmp-agent sys-info location LAN Room
 snmp-agent sys-info version v3
 snmp-agent group v3 managerpriv privacy acl 2000
 snmp-agent usm-user v3 nedrw managerpriv cipher authentication-mode sha $c$3$3K0kdRbE3+45ny16xieBuMurMysOMhmJ1TC5bEOPvZWe4mEqvps= privacy-mode aes128 $c$3$ZR1VNwQuBeE4ktqNjmsGnrfOFOQkUV9JbOPwgAEk9mYyQA== acl 2000
#
 ssh server enable
 sftp server enable
#
 ssh2 algorithm cipher aes256-ctr aes192-ctr aes128-ctr aes256-gcm
 ssh2 algorithm mac sha2-512 sha2-256 sha1
#
 ntp-service enable
 ntp-service unicast-server xxx.xxx.xxx.xxx priority
 ntp-service unicast-server xxx.xxx.xxx.xxx
#
acl number 2000
 description SNMP-Access
 rule 1 permit source xxx.xxx.xxx.xxx 0
 rule 2 permit source xxx.xxx.xxx.xxx 0
 rule 3 permit source xxx.xxx.xxx.xxx 0
 rule 4 permit source xxx.xxx.xxx.xxx 0
#
 header legal %
THIS SYSTEM IS FOR THE USE OF AUTHORIZED USERS ONLY!  Individuals using this computer without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel. In the course of monitoring individuals improperly using this system, or in the course of system maintenance, the activities of authorized users may also be monitored. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible evidence of criminal activity, system personnel may provide the evidence of such monitoring to law enforcement officials.%
#
radius scheme ned_radius
 primary authentication xxx.xxx.xxx.xxx
 primary accounting xxx.xxx.xxx.xxx
 secondary authentication xxx.xxx.xxx.xxx
 secondary accounting xxx.xxx.xxx.xxx
 key authentication cipher $c$3$LY4HKqrv7kIKBzDXMaDRI35uxGyujD+YAoxWA9MyUz1whw==
 key accounting cipher $c$3$fCVCprv5WFEfEJmSe7OyDRDMXaPwan/EE71+46nkGfN7Gg==
 user-name-format without-domain
#
domain ned
 authentication login radius-scheme ned_radius
 authorization login radius-scheme ned_radius
 accounting login radius-scheme ned_radius
#
domain system
#
 domain default enable ned
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
local-user manager class manage
 service-type terminal
 authorization-attribute user-role network-admin
#
 ssl version tls1.0 disable
#
 fips mode enable
#
return