Comware Based
1748132 Members
3378 Online
108758 Solutions
New Discussion ī„‚

Re: Will there be a downtime by installing a feature pack?

 
SOLVED
Go to solution
RollingIRF
Occasional Advisor

Will there be a downtime by installing a feature pack?

Hi,

our 5130 IRF stack is randomly not responsive to it`s management ip address.

It is connected via 4 x 1 Gbit Bridge Aggregation LACP link to our firewall.

If we disable one link some clients can not connect anymore to the management ip address of the switch.

It is not sticky to specific port, so if we disable port 1 client 1 can not connect, than we bring it up again and disable port 3 client 1 can not connect again also..

It`s some kind of random.

We already tried to change the link-aggregation load-sharing algorithm to src-mac dest-mac (before by type of package).

So maybe someone got an specific idea for our problem.

Anyway for further debugging we wan`t to do some package captures on the switch.

For this we need to install the package-capture feature.

Will there any interruption on the switch or downtime by installing the feature pack?

Thanks,

Thomas

9 REPLIES 9
parnassus
Honored Contributor
Solution

Re: Will there be a downtime by installing a feature pack?

Directly from Fundamental Configuration Guide of HPE 5130 EI:

"Patches repair software defects without a reboot. Patches do not add new features to the system. Patch installation or removal does not disrupt services.

Features add new features to the system. Features installed by using the install activate feature command take effect without a reboot. Features installed by using the boot-loader file command require a reboot to take effect."

Packet-Capture feature should install by using install activate feature CLI Command applied to the feature image bin file if I'm not mistaken (and its installation can be verified using the display install active CLI Command)...so it will take effect without a reboot (eventually you should exit and enter again into the CLI session) and it shouldn't disrupt any running service on your IRF/Standalone Switch.


I'm not an HPE Employee
Kudos and Accepted Solution banner
parnassus
Honored Contributor

Re: Will there be a downtime by installing a feature pack?


@RollingIRF wrote: Hi, our 5130 IRF stack is randomly not responsive to it`s management ip address.
It is connected via 4 x 1 Gbit Bridge Aggregation LACP link to our firewall.
If we disable one link some clients can not connect anymore to the management ip address of the switch.
It is not sticky to specific port, so if we disable port 1 client 1 can not connect, than we bring it up again and disable port 3 client 1 can not connect again also..
It`s some kind of random.We
already tried to change the link-aggregation load-sharing algorithm to src-mac dest-mac (before by type of package).

That's pretty strange.

What firmware version is your IRF running on? then...is the LACP Link Aggregation Group made of four (member) links distributed in all IRF Members or it uses interfaces on a specific IRF Member Switch?

Both sides of the aggregation group (Firewall, IRF) should be configured with LACP IEEE 802.3ad...is this accomplished yet?


I'm not an HPE Employee
Kudos and Accepted Solution banner
RollingIRF
Occasional Advisor

Re: Will there be a downtime by installing a feature pack?

Hey Parnassus.

thanks for your reply.

This is the currently running version:

Boot image: flash:/5130hi-cmw710-boot-r1120p07.bin
Boot image version: 7.1.045, Release 1120P07
Compiled May 05 2016 16:00:00
System image: flash:/5130hi-cmw710-system-r1120p07.bin
System image version: 7.1.045, Release 1120P07
Compiled May 05 2016 16:00:00

We have configured 2 x 1 Gbit for the IRF member1 switch and 2 x 1 Gbit for the member2 switch, because of redundancy.

This is the relevant bridge aggregation config:

link-aggregation mode dynamic
link-aggregation load-sharing mode destination-mac source-mac

On the firewall we have configured passive LACP IEEE 802.3ad.

But this should not be a problem cause just one side needs to be active.

 

parnassus
Honored Contributor

Re: Will there be a downtime by installing a feature pack?

For the sake of curiosity, can you issue a display link-aggregation verbose and a display lldp neighbor-information list to see exactly how the LAG is working with your Firewall?


I'm not an HPE Employee
Kudos and Accepted Solution banner
RollingIRF
Occasional Advisor

Re: Will there be a downtime by installing a feature pack?

display link-aggregation verbose 

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Flags:  A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
        D -- Synchronization, E -- Collecting, F -- Distributing,
        G -- Defaulted, H -- Expired

Aggregate Interface: Bridge-Aggregation3
Aggregation Mode: Dynamic
Loadsharing Type: Shar
System ID: 0x8000, e8f7-xxxx-xxxx
Local:
  Port             Status  Priority Oper-Key  Flag
--------------------------------------------------------------------------------
  GE1/0/44         S       32768    4         {ACDEF}
  GE1/0/46         S       32768    4         {ACDEF}
  GE2/0/44         S       32768    4         {ACDEF}
  GE2/0/46         S       32768    4         {ACDEF}
Remote:
  Actor            Partner Priority Oper-Key  SystemID               Flag
--------------------------------------------------------------------------------
  GE1/0/44         5       32768    2         0x8000, 0062-xxxx-xxxx {CDEF}
  GE1/0/46         3       32768    2         0x8000, 0062-xxxx-xxxx {CDEF}
  GE2/0/44         6       32768    2         0x8000, 0062-xxxx-xxxx {CDEF}
  GE2/0/46         4       32768    2         0x8000, 0062-xxxx-xxxx {CDEF}

display lldp neighbor-information list => no relevant output cause the firewall does not support lldp.

RollingIRF
Occasional Advisor

Re: Will there be a downtime by installing a feature pack?

Tried to activate the feature pack but the following error occurs:

<sw-s18>install activate feature flash:/5130hi-cmw710-packet-capture-r1120p07.bin
                                                                                  ^
 % Incomplete command found at '^' position.

The pack was successfully uploaded

<sw-s18>dir
Directory of flash:
   0 -rw-    10281984 Aug 08 2008 22:00:00   5130hi-cmw710-boot-r1111p01.bin
   1 -rw-    10647552 Jan 01 2013 02:10:41   5130hi-cmw710-boot-r1120p07.bin
   2 -rw-    11852800 Sep 12 2018 14:41:17   5130hi-cmw710-packet-capture-r1120p07.bin
RollingIRF
Occasional Advisor

Re: Will there be a downtime by installing a feature pack?

So it seems that on an IRF cluster we need to specifiy the slot:

<sw-s18>install activate feature flash:/5130hi-cmw710-packet-capture-r1120p07.bin slot 1
Verifying the file flash:/5130hi-cmw710-packet-capture-r1120p07.bin on slot 1...Done.
Upgrade summary according to following table:

flash:/5130hi-cmw710-packet-capture-r1120p07.bin
  Running Version             New Version
  None                        Release 1120P07

  Slot                        Upgrade Way
  1                           Service Upgrade
Upgrading software images to compatible versions. Continue? [Y/N]:N

So there should be no interruption of services also?

RollingIRF
Occasional Advisor

Re: Will there be a downtime by installing a feature pack?

We just installed the package-capture feature on the IRF fabric and can confirm that there are no downtime on services.

parnassus
Honored Contributor

Re: Will there be a downtime by installing a feature pack?

Hello Thomas, glad it have worked as documentation suggested. Good job.

P.S.

Keep your IRF updated (latest version R1122P02 supports ISSU if the update starts from version R1120...).


I'm not an HPE Employee
Kudos and Accepted Solution banner