Tags
Cisco has released IOS-XE 16.1.1 code in early December. If you are familiar with previous IOS-XE releases you know 3.7.x was the latest code. You may wonder why numbering jump from 3.7.x to 16.x.
As far as I know Cisco is working toward a unified code for all their access switch platforms (Cat 2k, 3k). Since current IOS version is 15.x, it makes sense to start numbering from 16.x for combine IOS-XE & IOS releases to come.
Still this IOS-XE 16.1.1 code is only for 3650/3850 switch platforms with following added features.
Here are the highlights of this latest release, you can read the full release note from this link. Main highlights are you can upgrade WCM independent to switch IOS & revamp GUI improvements.
1. Embedded Packet Capture (EPC) and Enhanced EPC with Wireshark
2. Radioactive Tracing and Conditional Debugging
3. New SISF-based Device Tracking CLI
Support for new Switch Integrated Security Features (SISF)-based device-tracking CLI commands to replace IP Device Tracking (IPDT) and IPv6 Snooping CLI commands.
4. AVC Protocol Pack and Engine Updates for Wireless Networks
5. Independent Wireless Control Module Upgrade (reboot required)
The Wireless Control Module (WCM) sub-package is a bundle of the WCM module and AP images. Independent WCM Upgrade allows the WCM bundle to be upgraded without the need for a full image upgrade. Independent WCM Upgrade can deliver newer AP images and bug fixes if they are localized to the WCM sub-package.
6. Wireless Security Module
7. X.509v3 SSH Authentication
8. Dynamic Bandwidth Selection (DBS)
The Dynamic Bandwidth Selection (DBS) algorithm addresses smart switching between channel bandwidths in current and future 802.11ac radios and new coexistence scenarios. DBS will be a differentiating factor for enterprise WLAN networks that have 11ac APs along with legacy APs
9. Event Driven RRM (ED-RRM)
ED-RRM allows an AP in distress to bypass normal RRM intervals and immediately change channels. A CleanAir AP is always monitoring AQ, and reports on this in 15 second intervals. AirQuality is a better metric than relying on normal Wi-Fi chip noise measurements because AirQuality only reports on Classified Interference devices. This makes AirQuality a reliable metric because it is known what is reported is not because of Wi-Fi energy (and hence not a transient normal spike).
10. FlexDFS
FlexDFS simulation CLI is used for the simulation of radar detection on the current service channel. Radar detection is simulated in sub-channels of 20 MHz. For more information about using the FlexDFS simulation CLI, consult TAC.
11. Wi-Fi Interference Awareness
12. Receiver Start of Packet Detection Threshold (RX-SOP)
13. Smart Roaming
14. Transmit Power Control (TPC) Algorithm
15. CMX Facebook Connect
16. Interop with Prime 3.0 Release
17. Web User Interface
Support for an embedded GUI based device-management tool that provides the ability to bootstrap and provision the switch and to simplify device deployment and manageability, and enhance the user experience.
18. Support for AP1850 / AP1830
Here is the upgrade procedure and note that command syntax is slightly changed. Make sure your TFTP block size has increased to its max for quick file transfer via TFTP.
3850-1#sh run | in tftp ip tftp blocksize 8192 ! 3850-1#copy tftp://192.168.140.52/cat3k_caa-universalk9.16.01.01.SPA.bin flash: Destination filename [cat3k_caa-universalk9.16.01.01.SPA.bin]? Accessing tftp://192.168.140.52/cat3k_caa-universalk9.16.01.01.SPA.bin... Loading cat3k_caa-universalk9.16.01.01.SPA.bin from 192.168.140.52 (via Vlan140): !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! [OK - 469677062 bytes] 469677062 bytes copied in 216.470 secs (2169710 bytes/sec) 3850-1#software install file flash:cat3k_caa-universalk9.16.01.01.SPA.bin Preparing install operation ... [1]: Starting install operation [1]: Expanding bundle flash:cat3k_caa-universalk9.16.01.01.SPA.bin [1]: Copying package files [1]: Package files copied [1]: Finished expanding bundle flash:cat3k_caa-universalk9.16.01.01.SPA.bin [1]: Verifying and copying expanded package files to flash: [1]: Verified and copied expanded package files to flash: [1]: Starting compatibility checks [1]: % Candidate package compatibility checks failed because the following package dependencies were not satisfied. Operation aborted.
In previous IOS-XE codes we use “software installe file flash:<bin_file>” command & it will work. But with this 16.1
3850-1#software install file flash:cat3k_caa-universalk9.16.01.01.SPA.bin ? auto-rollback Auto-rollback time force Proceed with installation without performing peer package compatibility checks new Create a new package provisioning file. After installation, only packages contained in the installed bundle will be part of the committed package set on-reboot Suppress reload prompt and do not reload after installation provisioning-file Provisioning file to use for installation switch Switch(es) where install operation is performed. Default is all switches verbose Verbose output <cr> 3850-1#software install file flash:cat3k_caa-universalk9.16.01.01.SPA.bin new ? auto-rollback Auto-rollback time force Proceed with installation without performing peer package compatibility checks on-reboot Suppress reload prompt and do not reload after installation provisioning-file Provisioning file to use for installation switch Switch(es) where install operation is performed. Default is all switches verbose Verbose output <cr> 3850-1#software install file flash:cat3k_caa-universalk9.16.01.01.SPA.bin new force Preparing install operation ... [1]: Starting install operation [1]: Expanding bundle flash:cat3k_caa-universalk9.16.01.01.SPA.bin [1]: Copying package files [1]: Package files copied [1]: Finished expanding bundle flash:cat3k_caa-universalk9.16.01.01.SPA.bin [1]: Verifying and copying expanded package files to flash: [1]: Verified and copied expanded package files to flash: [1]: Starting compatibility checks [1]: Bypassing peer package compatibility checks due to 'force' command option [1]: Finished compatibility checks [1]: Starting application pre-installation processing [1]: Finished application pre-installation processing [1]: Old files list: Removed cat3k_caa-base.SPA.03.07.00E.pkg Removed cat3k_caa-drivers.SPA.03.07.00E.pkg Removed cat3k_caa-infra.SPA.03.07.00E.pkg Removed cat3k_caa-iosd-universalk9.SPA.152-3.E.pkg Removed cat3k_caa-platform.SPA.03.07.00E.pkg Removed cat3k_caa-wcm.SPA.10.3.100.0.pkg [1]: New files list: Added cat3k_caa-rpbase.16.01.01E.SPA.pkg Added cat3k_caa-srdriver.16.01.01E.SPA.pkg Added cat3k_caa-wcm.16.01.01E.SPA.pkg Added cat3k_caa-webui.16.01.01E.SPA.pkg [1]: Creating pending provisioning file [1]: Finished installing software. New software will load on reboot. [1]: Committing provisioning file [1]: Do you want to proceed with reload? [yes/no]: YES
Once you reload the switch it will complete the upgrade process
System configuration has been modified. Save? [yes/no]: yes Building configuration... Compressed configuration from 16344 bytes to 7679 bytes[OK] [1]: Reloading 3850-1# *Dec 11 07:18:47 AEDT: %STACKMGR-1-RELOAD_REQUEST: 1 stack-mgr: Received reload request for all switches, reason User requested reload *Dec 11 07:18:47 AEDT: %STACKMGR-1-RELOAD: 1 stack-mgr: Reloading due to reason User requested reload *Dec 11 07:18:48 AEDT: %IOSXE-3-PLATFORM: 1 process sysmgr: Reset/Reload requested by [stack-manager]. *Dec 11 07:18:48 AEDT: %PLATFORM_PM-6-MODULE_REMOVED: SFP module with interface name Gi1/1/1 removed *Dec 11 07:18:48 AEDT: %PLATFORM_PM-6-MODULE_REMOVED: SFP module with interface name Gi1/1/2 removed *Dec 11 07:18:48 AEDT: %PLATFORM_PM-6-MODULE_REMOVED: SFP module with interface name Te1/1/3 removed *Dec 11 07:18:49 AEDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1/1, changed state to down *Dec 11 07:18:49 AEDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1/2, changed state to down *Dec 11 07:18:50 AEDT: %LINK-3-UPDOWN: Interface GigabitEthernet1/1/1, changed state to down *Dec 11 07:18:50 AEDT: %PIM-5-NBRCHG: neighbor 192.168.128.254 DOWN on interface GigabitEthernet1/1/1 DR *Dec 11 07:18:50 AEDT: %OSPF-5-ADJCHG: Process 1, Nbr 10.10.205.10 on GigabitEthernet1/1/1 from FULL to DOWN, Neighbor Down: Interface down or detached *Dec 11 07:18:50 AEDT: %LINK-3-UPDOWN: Interface GigabitEthernet1/1/2, changed state to down *Dec 11 07:18:50 AEDT: %PLATFORM_PM-6-MODULE_ERRDISABLE: The inserted SFP module with interface name Gi1/1/1 is not supported *Dec 11 07:18:50 AEDT: %PM-4-ERR_DISABLE: gbic-invalid error detected on Gi1/1/1, putting Gi1/1/1 in err-disable state <Thu Dec 10 20:18:48 2015> Message from sysmgr: Reason Code:[3] Reset Reason:Reset/Reload requested by [stack-manager]. [User requested reload] umount: /proc/fs/nfsd: not mounted Unmounting ng3k filesystems... Unmounted /dev/sda3... Warning! - some ng3k filesystems may not have unmounted cleanly... Please stand by while rebooting the system... Restarting system. Booting...Initializing and Testing RAM +++@@@@####...++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@++@@done. Memory Test Pass! Base ethernet MAC Address: 58:bf:ea:b6:56:80 Interface GE 0 link down***ERROR: PHY link is down Initializing Flash... flashfs[7]: 0 files, 1 directories flashfs[7]: 0 orphaned files, 0 orphaned directories flashfs[7]: Total bytes: 6784000 flashfs[7]: Bytes used: 1024 flashfs[7]: Bytes available: 6782976 flashfs[7]: flashfs fsck took 1 seconds....done Initializing Flash. Getting rest of image Reading full image into memory....done Reading full base package into memory...: done = 281076014 Nova Bundle Image -------------------------------------- Kernel Address : 0x6042e37c Kernel Size : 0x338fbf/3379135 Initramfs Address : 0x6076733b Initramfs Size : 0xc815f3/13112819 Compression Format: mzip Bootable image at @ ram:0x6042e37c Bootable image segment 0 address range [0x81100000, 0x81b083c0] is in range [0x80180000, 0x90000000]. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 377 Loading Linux kernel with entry point 0x81669190 ... Bootloader: Done loading app on core_mask: 0xf ### Launching Linux Kernel (flags = 0x5) Error: MIO_BOOT_ERR[ADR_ERR] pci 0000:01:00.0: of_irq_parse_pci() failed with rc=-19 pci 0001:02:00.0: of_irq_parse_pci() failed with rc=-19 mtd: bad character after partition (r) octeon_wdt: WDT device closed unexpectedly. WDT will not stop! dplr_pcie: Enabled MSI returned 0 dplr_pcie: Enabled MSI returned 0 %IOSXEBOOT-PLEASE-###: (rp/0): DO NOT POWER CYCLE ### BOOT LOADER UPGRADING 4 %IOSXEBOOT-Dec-Thu: (rp/0): 10 20:22:26 Universal 2015 boot loader upgrade successful 4 Front-end Microcode IMG MGR: found 4 microcode images for 1 device. Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_0 Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_1 Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_2 Image for front-end 0: /tmp/microcode_update/front_end/fe_type_6_3 Front-end Microcode IMG MGR: Preparing to program device microcode... Front-end Microcode IMG MGR: Preparing to program device[0]...594412 bytes.... Skipped[0]. Front-end Microcode IMG MGR: Preparing to program device[0]...381758 bytes. Front-end Microcode IMG MGR: Programming device 0...rwRrrrrrrw..0%.......................................................................10%......................................................................20%......................................................................30%........................................................................40%.......................................................................50%......................................................................60%......................................................................70%.........................................................................80%......................................................................90%......................................................................100% Front-end Microcode IMG MGR: Preparing to program device[0]...25166 bytes. Front-end Microcode IMG MGR: Programming device 0...rrrrrrw..0%....10%....20%......30%...40%......50%....60%......70%...80%......90%....100%wRr! Front-end Microcode IMG MGR: Microcode programming complete for device 0. Front-end Microcode IMG MGR: Preparing to program device[0]...86370 bytes.... Skipped[3]. Front-end Microcode IMG MGR: Microcode programming complete in 237 seconds Waiting for 120 seconds for other switches to boot Both links down, not waiting for other switches Switch number is 1
Here is the new look of the 3850 with 16.1. It is completely different to what you had with IOS-XE 3.7 & earlier.
Spend time with each GUI options as it gives lot of information for you to absorb. Here is a link to quick WebUI quick tour of this platform from Viten Patel’s blog.
Update @ 28th Jan 2016
Here is a good video explaining these code convergence going to happen
Cisco Catalyst IOS XE Denali Overview – Tech Field Day 11
References
mrn-cciew 
hi Rasika
please tell me about no qos wireless-default-untrust command
and Equivalent in IOS XE 3.7.2
thanks
End-of-Sale and End-of-Life Announcement for the Cisco IOS XE 16.1.1?
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3850-series-switches/eos-eol-notice-c51-736680.html?emailclick=CNSemail
Thanks for info sharing.
Hi, do you have anuy informations regarding WLC 5760 ? Will it support Denali or AireOS in the futur ?
Regards
Not at the moment, I hope IOS-XE 16.x will support on 5760 platform in future.
AireOS is NOT supported on this platform.
HTH
Rasika
i did the upgrade and got the below error..cat3k_caa-universalk9.16.01.02.SPA.bin
mtd: bad character after partition (r)
sd 1:0:0:0: [sdb] No Caching mode page found
sd 1:0:0:0: [sdb] No Caching mode page found
sd 1:0:0:0: [sdb] No Caching mode page found
%IOSXEBOOT-5ab0fc40b7cf5e54fb69afa9124e3997-new_cksum: (rp/0): 4
%IOSXEBOOT-5ab0fc40b7cf5e54fb69afa9124e3997-saved_cksum: (rp/0): 4
>>> Boot Failed – pulling status and logs:
● tdl.service – TDL Resolve
Loaded: loaded (/lib/systemd/system/tdl.service; static)
Active: failed (Result: exit-code) since Wed 2016-05-04 07:38:44 Universal; 49ms ago
Process: 1259 ExecStart=/usr/binos/conf/tdl_boottime.sh (code=exited, status=1/FAILURE)
Main PID: 1259 (code=exited, status=1/FAILURE)
[ 37.148467] RP_0 tdl_boottime.sh[1259]: lua: /usr/binos/conf/epoch_lib.lua:513: attempt to compare two nil values
[ 37.149421] RP_0 tdl_boottime.sh[1259]: stack traceback:
[ 37.150345] RP_0 tdl_boottime.sh[1259]: /usr/binos/conf/epoch_lib.lua:513: in function ‘add_and_merge_record’
[ 37.151247] RP_0 tdl_boottime.sh[1259]: /usr/binos/conf/epoch_lib.lua:531: in function ‘generate_merged_metadata’
[ 37.152148] RP_0 tdl_boottime.sh[1259]: /usr/binos/conf/epoch_lib.lua:593: in function ‘generate_domain’
[ 37.153076] RP_0 tdl_boottime.sh[1259]: /usr/binos/conf/epoch_resolve.lua:216: in main chunk
[ 37.153973] RP_0 tdl_boottime.sh[1259]: [C]: ?
[ 37.162383] RP_0 tdl_boottime.sh[1259]: Time to check parameters: 0 seconds.
[ 37.163321] RP_0 tdl_boottime.sh[1259]: Time to build package table: 0 seconds.
[ 37.164270] RP_0 tdl_boottime.sh[1259]: Time to cache objects: 5.17 seconds.
[ 37.167490] RP_0 systemd[1]: tdl.service: main process exited, code=exited, status=1/FAILURE
[ 37.168461] RP_0 systemd[1]: Failed to start TDL Resolve.
[ 37.175910] RP_0 systemd[1]: Unit tdl.service entered failed state.
>>> Rebooting
reboot: Restarting system
Booting…
Interface GE 0 link down***ERROR: PHY link is down
Getting rest of image
Reading full image into memory…Check base package header …: done = 16384
Getting rest of image
Reading full image into memory….done
Reading full base package into memory…: done = 21901607
Bundle Image
————————————–
Kernel Address : 0x53430388
Kernel Size : 0x33942b/3380267
Initramfs Address : 0x537697b3
Initramfs Size : 0x1151174/18157940
Compression Format: mzip
Bootable image at @ ram:0x53430388
Bootable image segment 0 address range [0x81100000, 0x81b083c0] is in range [0x80180000, 0x90000000].
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@boot_system: 377
Have there been any updates on if the 5760 will be supported soon? Denali brings a lot of feature parity with AirOS that we have been waiting for, for a long time now.
Not yet, I hope it will come soon.
Installed 3650’s and have 16.3.1a code. Tried accessing the WebUI just to see what it looks like. I get the login page where I put in level 15 ID / PW. I get the next screen but the widget that reports the CPU & Memory pressure graph sits and spins. The Switch View tab is totally blank. I run Win 10 and IE 11. Tried Chrome and Firefax and no luck. TAC says “The GUI must be used on a PC running Windows 7, Windows XP SP1 (or later releases), or Windows 2000 SP4 (or later releases). The device GUI is compatible with Microsoft Internet Explorer version 10.x, Mozilla Firefox 20.x, or Google Chrome 26.x.
This is from 3SE release. Is this true? Cisco’s WebUI not supporting current browers !??
Thanks for sharing the info. I was not aware of it.
No problem Jason. Be aware of 16.x code issues and I would still not go to production with this.
Have tried 16.3.x for normal LAN switching and encounter critical issues. So revert back to 3.7.x
HTH
Rasika