Brocade Communications Systems FastIron X Series Technical manual

53-1003632-02
27 April 2015
FastIron Ethernet Switch
Software Upgrade Guide
Supporting FastIron Software Release 08.0.30

© 2015, Brocade Communications Systems, Inc. All Rights Reserved.
ADX, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, HyperEdge, ICX, MLX, MyBrocade, OpenScript, The Effortless
Network, VCS, VDX, Vplane, and Vyatta are registered trademarks, and Fabric Vision and vADX are trademarks of Brocade
Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names mentioned may be
trademarks of others.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any
equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document
at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be
currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in
this document may require an export license from the United States government.
The authors and Brocade Communications Systems, Inc. assume no liability or responsibility to any person or entity with respect to the
accuracy of this document or any loss, cost, liability, or damages arising from the information contained herein or the computer programs that
accompany it.
The product described by this document may contain open source software covered by the GNU General Public License or other open
source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to
the open source software, and obtain a copy of the programming source code, please visit http://www.brocade.com/support/oscd.

Contents
Preface.....................................................................................................................................5
Document conventions......................................................................................5
Text formatting conventions.................................................................. 5
Command syntax conventions.............................................................. 5
Notes, cautions, and warnings.............................................................. 6
Brocade resources............................................................................................ 7
Contacting Brocade Technical Support.............................................................7
Document feedback.......................................................................................... 8
About this Document.................................................................................................................9
What’s new in this document............................................................................ 9
Supported hardware........................................................................................10
Upgrade and Downgrade Considerations.................................................................................11
Upgrading to or downgrading from FastIron 08.0.30...................................... 11
General considerations....................................................................... 14
Considerations for devices with LAGs............................................................ 15
Considerations for devices in stack configurations......................................... 15
Upgrade considerations for devices with flexible authentication.....................16
Software Upgrade and Downgrade.......................................................................................... 21
Software upgrade overview.............................................................................21
Initial steps...................................................................................................... 21
Determining the software versions (sample output)............................22
Upgrade process.............................................................................................23
Software upgrade on ICX 6430, ICX 6450, ICX 6610, ICX 6650,
ICX 7450, ICX 7750, and FCX devices......................................... 24
Software upgrade on FSX devices......................................................24
Software upgrade from FastIron 07.5.xx to 08.0.01............................25
Upgrade using a manifest file..............................................................25
Downgrade process........................................................................................ 28
Software downgrade on ICX 6430, ICX 6450, ICX 6610, ICX
6650, and other FCX devices........................................................ 28
Software downgrade on FSX devices................................................. 29
Software downgrade from FastIron 08.0.01 to FastIron 07.5.xx......... 29
Loading images on the device........................................................................ 30
Software upgrade and downgrade file transfers................................. 30
Loading the boot code.........................................................................30
Loading the flash code........................................................................ 31
Software recovery........................................................................................... 33
Software recovery on FCX and ICX 6610 devices..............................34
Software recovery on ICX 6430, ICX 6450, ICX 6650, ICX 7450,
ICX 7750, and FSX devices.......................................................... 35
Appendix A: Changes Between Releases..................................................................................37
Changes between FastIron 07.4.00 or 07.5.00 and FastIron 08.0.xx............. 37
FastIron Ethernet Switch Software Upgrade Guide 3
53-1003632-02

New or modified parameter values................................................... 37
Command changes...........................................................................39
Appendix B: Differences in Show Command Output............................................................... 51
Show command output differences between FastIron 07.4.00 and
08.0.xx.....................................................................................................51
4 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

Preface
● Document conventions......................................................................................................5
● Brocade resources............................................................................................................ 7
● Contacting Brocade Technical Support.............................................................................7
● Document feedback.......................................................................................................... 8
Document conventions
The document conventions describe text formatting conventions, command syntax conventions, and
important notice formats used in Brocade technical documentation.
Text formatting conventions
Text formatting conventions such as boldface, italic, or Courier font may be used in the flow of the text
to highlight specific words or phrases.
Format Description
bold text Identifies command names
Identifies keywords and operands
Identifies the names of user-manipulated GUI elements
Identifies text to enter at the GUI
italic text Identifies emphasis
Identifies variables
Identifies document titles
Courier font Identifies CLI output
Identifies command syntax examples
Command syntax conventions
Bold and italic text identify command syntax components. Delimiters and operators define groupings of
parameters and their logical relationships.
Convention Description
bold text Identifies command names, keywords, and command options.
italic text Identifies a variable.
value In Fibre Channel products, a fixed value provided as input to a command
option is printed in plain text, for example, --show WWN.
FastIron Ethernet Switch Software Upgrade Guide 5
53-1003632-02

Convention Description
[ ] Syntax components displayed within square brackets are optional.
Default responses to system prompts are enclosed in square brackets.
{ x | y | z } A choice of required parameters is enclosed in curly brackets separated by
vertical bars. You must select one of the options.
In Fibre Channel products, square brackets may be used instead for this
purpose.
x | yA vertical bar separates mutually exclusive elements.
< > Nonprinting characters, for example, passwords, are enclosed in angle
brackets.
... Repeat the previous element, for example, member[member...].
\Indicates a “soft” line break in command examples. If a backslash separates
two lines of a command input, enter the entire command at the prompt without
the backslash.
Notes, cautions, and warnings
Notes, cautions, and warning statements may be used in this document. They are listed in the order of
increasing severity of potential hazards.
NOTE
A Note provides a tip, guidance, or advice, emphasizes important information, or provides a reference
to related information.
ATTENTION
An Attention statement indicates a stronger note, for example, to alert you when traffic might be
interrupted or the device might reboot.
CAUTION
A Caution statement alerts you to situations that can be potentially hazardous to you or cause
damage to hardware, firmware, software, or data.
DANGER
A Danger statement indicates conditions or situations that can be potentially lethal or
extremely hazardous to you. Safety labels are also attached directly to products to warn of
these conditions or situations.
Notes, cautions, and warnings
6 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

Brocade resources
Visit the Brocade website to locate related documentation for your product and additional Brocade
resources.
You can download additional publications supporting your product at www.brocade.com. Select the
Brocade Products tab to locate your product, then click the Brocade product name or image to open the
individual product page. The user manuals are available in the resources module at the bottom of the
page under the Documentation category.
To get up-to-the-minute information on Brocade products and resources, go to MyBrocade. You can
register at no cost to obtain a user ID and password.
Release notes are available on MyBrocade under Product Downloads.
White papers, online demonstrations, and data sheets are available through the Brocade website.
Contacting Brocade Technical Support
As a Brocade customer, you can contact Brocade Technical Support 24x7 online, by telephone, or by e-
mail. Brocade OEM customers contact their OEM/Solutions provider.
Brocade customers
For product support information and the latest information on contacting the Technical Assistance
Center, go to http://www.brocade.com/services-support/index.html.
If you have purchased Brocade product support directly from Brocade, use one of the following methods
to contact the Brocade Technical Assistance Center 24x7.
Online Telephone E-mail
Preferred method of contact for non-
urgent issues:
•My Cases through MyBrocade
•Software downloads and licensing
tools
•Knowledge Base
Required for Sev 1-Critical and Sev
2-High issues:
• Continental US: 1-800-752-8061
• Europe, Middle East, Africa, and
Asia Pacific: +800-AT FIBREE
([phone])
• For areas unable to access toll
free number: [phone]
•Toll-free numbers are available in
many countries.
[email protected]
Please include:
• Problem summary
• Serial number
• Installation details
• Environment description
Brocade OEM customers
If you have purchased Brocade product support from a Brocade OEM/Solution Provider, contact your
OEM/Solution Provider for all of your product support needs.
• OEM/Solution Providers are trained and certified by Brocade to support Brocade® products.
• Brocade provides backline support for issues that cannot be resolved by the OEM/Solution Provider.
Brocade resources
FastIron Ethernet Switch Software Upgrade Guide 7
53-1003632-02

• Brocade Supplemental Support augments your existing OEM support contract, providing direct
access to Brocade expertise. For more information, contact Brocade or your OEM.
• For questions regarding service levels and response times, contact your OEM/Solution Provider.
Document feedback
To send feedback and report errors in the documentation you can use the feedback form posted with
the document or you can e-mail the documentation team.
Quality is our first concern at Brocade and we have made every effort to ensure the accuracy and
completeness of this document. However, if you find an error or an omission, or you think that a topic
needs further development, we want to hear from you. You can provide feedback in two ways:
• Through the online feedback form in the HTML documents posted on www.brocade.com.
• By sending your feedback to [email protected].
Provide the publication title, part number, and as much detail as possible, including the topic heading
and page number if applicable, as well as your suggestions for improvement.
Document feedback
8 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

About this Document
● What’s new in this document............................................................................................ 9
● Supported hardware........................................................................................................10
What’s new in this document
This document is updated for FastIron software release 08.0.30. The following tables include
information on new upgrade considerations introduced with the release. For a full description of new
features, refer to the FastIron 08.0.30 release notes.
Summary of Enhancements in FastIron Release 08.0.30TABLE 1
Feature Description Location
BGP4+ Multi-VRF Added in this release. Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Equal Cost Multi-Path Equal Cost Multi-Path (ECMP)
increases the maximum number of
paths to 32 on ICX 7750 devices.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Flash timeout configuration This release allows the user to
change flash timeout.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
ICX 6610 license merge Premium and advanced licensing
features are merged under the
premium license.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11. For
more information on licenses, refer
to the FastIron Ethernet Switch
Licensing Guide, Release 08.0.30.
ICX 7450 10 Gbps stacking 10 Gbps stacking is available on
4x10G modules inserted in slot 2. Upgrading to or downgrading from
FastIron 08.0.30 on page 11
ICX 7750 breakout ports This release introduces physical
breakout of 40-Gbps ports on the
ICX 7750 into four configurable 10-
Gbps sub-ports.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
ICX 7750 cut-through mode This release introduces cut-through
mode on the ICX 7750.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
LAG enhancements This release introduces several LAG
enhancements, including the ability
to rename the LAG dynamically,
increased port capacity, and the
addition of the show interface lag
command.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Layer 3 multicast routing over MCT This feature is introduced on the ICX
7750.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
FastIron Ethernet Switch Software Upgrade Guide 9
53-1003632-02

Summary of Enhancements in FastIron Release 08.0.30 (Continued)TABLE 1
Feature Description Location
Layer 3 unicast routing over MCT This feature is introduced on the ICX
7750.
sflow CLI changes Several sflow source commands
are introduced. Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Stacking CLI changes Stacking CLI changes are introduced
to support removable modules on
the ICX 7450.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Stacking flash file changes The stacking.boot file changes
format in this release.
Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Unicast Reverse Path Forwarding
(uRPF) check
This feature is introduced. Upgrading to or downgrading from
FastIron 08.0.30 on page 11
Supported hardware
This guide supports the following product families from Brocade:
• FastIron X Series devices (chassis models):
‐FastIron SX 800
‐FastIron SX 1600
• Brocade FCX Series (FCX) Switch
• Brocade ICX™ 6610 (ICX 6610) Switch
• Brocade ICX 6430 Series (ICX 6430)
• Brocade ICX 6450 Series (ICX 6450)
• Brocade ICX 6650 series (ICX 6650)
• Brocade ICX 7250 series (ICX 7250)
• Brocade ICX 7450 series (ICX 7450)
• Brocade ICX 7750 series (ICX 7750)
For information about the specific models and modules supported in a product family, refer to the
hardware installation guide for that product family.
NOTE
The Brocade ICX 6430-C switch supports the same feature set as the Brocade ICX 6430 switch
unless otherwise noted.
NOTE
The Brocade ICX 6450-C switch supports the same feature set as the Brocade ICX 6450 switch
unless otherwise noted.
Supported hardware
10 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

Upgrade and Downgrade Considerations
● Upgrading to or downgrading from FastIron 08.0.30...................................................... 11
● Considerations for devices with LAGs............................................................................ 15
● Considerations for devices in stack configurations......................................................... 15
● Upgrade considerations for devices with flexible authentication.....................................16
Upgrading to or downgrading from FastIron 08.0.30
NOTE
You must upgrade to the boot code that supports this release. Refer to "Software image files for
Release 08.0.xx" in the release notes for detailed information.
The following sections cover the details that should be considered before upgrading to FastIron 08.0.30
or downgrading to previous releases from FastIron 08.0.30.
BGP4+ Multi-VRF
Downgrade from FastIron 08.0.30 will cause all BGP VRF6 configuration and previously learned routes
to be deleted.
Equal Cost Multi-Path
ECMP is set to 8 by default in FastIron 8.0.30 but may be configured to larger values. Downgrading
from FastIron 08.0.30 restores the ECMP default, and previously learned paths are lost. The ranges for
ip load-sharing are also reduced. Before downgrading to an earlier release, the customer is advised to
reduce the ECMP parameter to 8.
Flash timeout configuration
The default flash timeout will remain at 12 minutes. Users can change it to any value between 12 and
60 minutes using the flash-timeout command. The configured timeout is synced across a stack, and is
applied after configuration to the next and all subsequent flash operations. On downgrade from FastIron
08.0.30, the flash timeout returns to the default of 12 minutes.
ICX 6610 license merge
In FI 8.0.30, the advanced features for ICX6610 are available with a premium license. If an advanced
license has been previously installed on the system, the system will function as if it has been upgraded
to FI 8.0.30. However, if the FI 08.0.30 premium license is installed on the system and the system is
downgraded to an earlier release, the advanced features will be lost. Refer to the FastIron Ethernet
Switch Licensing Guide for more information on licensing changes.
FastIron Ethernet Switch Software Upgrade Guide 11
53-1003632-02

ICX 7750 breakout port configuration
FastIron 08.0.30 adds breakout port capability on the ICX 7750, which allows a breakout cable to be
applied on a 40-Gbps port and for four 10-Gbps sub-ports to be configured. If you have configured
breakout ports and then downgrade to an earlier release, parsing errors are returned during bootup for
any port that still has breakout configuration. The configuration for the 10-Gbps ports will be lost after
reload, and the port will be returned to 40-Gbps mode.
NOTE
Cut-through mode is not supported globally if any 40 Gbps port is configured for breakout. The user is
prompted to switch to “store-and-forward” mode before breakout CLI can be used.
ICX 7750 cut-through mode
In FastIron 08.0.30, cut-through mode disables port flow control by default. Previous code enabled
incoming port flow control ("honor flow control") by default. Cut-through mode is enabled by default on
the ICX 7750, and the disable port flow option is disabled by default. To switch modes, store-and-
forward must be configured in global configuration mode.
LAG enhancements
After a downgrade from FastIron 08.0.30 to an earlier release, the configuration is removed from all
LAG ports, and the LAG is returned to an undeployed state. Maximum configurable ports per LAG is
reduced to eight on downgrade. Brocade recommends that you avoid downgrading from FastIron
08.0.30 to an earlier release if you have configured LAGs. Otherwise, reduce the number of ports per
LAG to eight, save the configuration, and then downgrade.
Layer 3 multicast over MCT
If you have configured Layer 3 multicast routing over MCT and you downgrade from FastIron 08.0.30
to an earlier release, the PIM configurations on MCT member VLAN VEs will be lost.
Layer 3 unicast routing over MCT
If you have configured Layer 3 unicast routing over MCT and you downgrade from FastIron 08.0.30 to
an earlier release, the OSPF configuration on the MCT member VEs will be rejected.
sflow CLI changes
Several sflow source commands are added in FastIron 08.0.30. Their use is documented in the
FastIron Ethernet Switch Administration Guide. If you configure these commands and then downgrade
to an earlier release, the system assumes the default behavior; that is, the IP address of the outgoing
interface is used as the source IP address of the sFlow datagram.
Stacking CLI changes and ICX 7450 10 Gbps stacking
FastIron 08.0.30 introduces 10-Gbps stacking on the ICX 7450. When you downgrade an ICX 7450
from FastIron 08.0.30 to an earlier release and the unit contains 4x10-Gbps stacking configuration,
stack-ports are reset to x/3/1 and x/3/4. In addition, these commands may be rejected and return
errors: default-port and stack-port.
Upgrade and Downgrade Considerations
12 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

NOTE
MACsec is also introduced on the ICX 7450 in FastIron 08.0.30 on the same 4x10G module. When the
module is inserted in slot 2, either MACsec or stacking can be supported on the module, but not both.
Refer to the FastIron Ethernet Switch Stacking Configuration Guide for more information.
Stacking image upgrade/downgrade
The flash file stacking.boot is present in every unit in a stack. It may also be present in a standalone unit
that has previously been a master stacking unit. Port numbers are not compatible between FastIron
08.0.30 and earlier releases because of the way they are stored in the stacking.boot file. Consequently,
if you switch between FastIron 08.0.30 or a later release and any release that pre-dates FastIron
08.0.30, the following message is displayed for an upgrade:
Upgrade stacking.boot from non-breakout to breakout. Modify stacking ports.
The following message is displayed for a downgrade:
Downgrade stacking.boot from breakout to non-breakout. Modify stacking ports.
Upgrade procedure on the ICX 7750 for uRPF check
Unicast reverse path forwarding (uRPF) check is introduced in FastIron 08.0.30. While there is no pre-
existing configuration to consider on upgrade, Brocade recommends that users follow these upgrade
guidelines. For additional information on configuring uRPF, refer to the FastIron Ethernet Switch Layer 3
Configuration Guide.
• uRPF should not be configured on an active device and should not be changed frequently.
Due to hardware limitations, system software automatically reduces system-max values by half when
uRPF is enabled. As a side-effect, some VRF configuration may be deleted.
Follow this sequence to avoid issues:
1. Enable uRPF on an inactive device.
2. Reload the device to prepare the hardware for subsequent configuration.
3. Configure system-max parameters for routes and VRF as needed. Reload.
4. Configure interfaces and any other parameters.
ICX 7750 downgrade considerations for uRPF check
Brocade recommends that you disable the uRPF feature and remove related configuration before you
downgrade to a previous release from FastIron 08.0.30 or a later release. If you downgrade without
disabling the feature, existing VRF configuration may be deleted because of changes to system default
values and system-max limitations. The following system-max values are reset to their default values
and must be reconfigured after reload:
•ip-route
•ip6-route
•ip-route-default-vrf
•ip6-route-default-vrf
•ip-route-vrf
•ip6-route-vrf
Upgrade and Downgrade Considerations
FastIron Ethernet Switch Software Upgrade Guide 13
53-1003632-02

General considerations
• MACsec in FastIron 08.0.20a and later releases is not compatible with previous versions of the
MACsec feature due to changes in CLI functionality. An upgrade is required.
• The erase startup-config command erases all startup configuration files (startup-config.txt and
also the backup files).
• FSX devices with FastIron 08.0.xx installed, as well as all ICX 6430 and ICX 6450 devices, support
only one configured system boot preference.
• In an FSX device, using an SX Series 0-Port Third Generation XL management module together
with an SX Series 2-Port 10GbE Third Generation XL management module is not supported.
• On an FSX device with the SX Series 0-Port Third Generation XL management module, a hitless
upgrade from FastIron 08.0.00a or 08.0.01 to 08.0.10 is not supported.
• For ICX 6430 devices, the system-max mac-filter-sys parameter value changed from 512 to 508
in FastIron 08.0.xx. If the current value of system-max mac-filter-sys is more than 508, you should
change this value to 508 before upgrading. Otherwise, during upgrade, its value will be set to the
default value of 64.
• To use a FastIron 07.x.xx configuration on a device upgraded to a FastIron 08.0.xx image, replacing
the running configuration with the FastIron 07.x.xx configuration is not supported. Instead, you must
copy the FastIron 07.x.xx configuration onto the startup configuration file and reload the device.
Deprecated or removed features and commands
• SNTP is no longer supported. NTPv4 replaces SNTP.
• The stack persistent-mac-timer command is deprecated in FastIron 08.0.20.
• The Port Speed Down-Shift feature is deprecated in FastIron 08.0.xx.
• The link-config gig copper autoneg-control down-shift ethernet command is deprecated.
• The show cpu-utilization command replaces the show process cpu command.
Flash memory capacity
Consider the following limitations of different devices when upgrading software:
• All FastIron devices except ICX 6430 devices can hold two Layer 2 or Layer 3 images (for example,
ICX64S08030.bin for Layer 2 and ICX64R08030.bin for Layer 3).
• ICX 6430 devices can hold only two Layer 2 images.
Security
• SSHv2 RSA host key format differs between FastIron 07.x.xx and 08.0.xx software versions.
• When you upgrade from FastIron 07.x.xx or 08.0.00 to a FastIron 08.0.xx software version, if an
RSA key is present in the FastIron 07.x.xx or 08.0.00 software version, the same size key is
regenerated in the FastIron 08.0.xx software version. The old SSHv2 host key is also retained. Old
keys can be cleared using the crypto key zeroize command.
• SSH host keys created with the DSA method are interoperable with FastIron 07.x.xx, 08.0.00, and
08.0.xx software versions.
• By default, the RADIUS server key encryption type is 2 (simple_encryption_base64) in FastIron
08.0.xx. This is in contrast to earlier releases, where the default value for simple_encryption is 1. If
you do not follow the upgrade procedure, the RADIUS server key configuration is removed during
downgrade.
General considerations
14 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

Downgrade considerations
• Any new command in FastIron 08.0.xx is discarded during downgrade.
• The startup configuration as well as the run time changes in a FastIron 08.0.xx configuration are lost
during downgrade.
• If software-based licensing is in effect on the device, and if the software is downgraded to a version
earlier than FastIron 07.1.00, software-based licensing is not supported.
• SSHv2 RSA host key format differs among FastIron 07.x.xx, 08.0.00, and 08.0.xx software versions.
• On an FSX device with the SX Series 0-Port Third Generation XL management module, a hitless
downgrade from FastIron 08.0.10 to 08.0.00a or 08.0.01 is not supported.
• When you downgrade from FastIron 08.0.xx to 08.0.00 or 07.x.xx, consider the following scenarios:
‐When an SSHv2 RSA host key in FastIron 08.0.00a or later is retained from FastIron
07.x.xx or 08.0.00, booting up with FastIron 07.x.xx or 08.0.00 reads the old format SSHv2
RSA host keys and enables the SSHv2 RSA server on the switch.
‐When an SSHv2 RSA host key is created in FastIron 08.0.00a and later, booting up with
FastIron 07.x.xx or 08.0.00 software does not read the new format SSHv2 RSA host key,
and the SSHv2 server is not enabled on the switch.
Considerations for devices with LAGs
• If you are upgrading to FastIron 08.0.xx and have either LAGs or LACP configured, the previous
configuration is automatically updated to form a new equivalent LAG. To accomplish this, the old
trunk and link-aggregation commands are maintained during startup configuration parsing but are
disabled during normal configurations. The following are the major differences in LAG configuration
in FastIron 08.0.xx compared to earlier releases:
‐A LAG is not created until a LAG is deployed using the deploy command.
‐LACP is not started until a dynamic LAG is deployed.
‐The number range for LAG ports is 1 to 8. For FSX third generation modules, the range is 1
to 12.
‐A LAG is created even if a static or dynamic LAG has only one port.
• If link aggregation is configured on your device and you are upgrading to a FastIron 08.0.xx
configuration, the link aggregation configuration should have the key configured to identify the LAG. If
the key is not configured, when you upgrade to FastIron 08.0.xx, all the link aggregation interfaces
(without the key) are bundled as one misconfigured LAG. The configuration will fail if it exceeds the
supported maximum number of members per LAG limit.
• All LAG configurations are lost during downgrade.
• The trunk configuration commands (trunk ethernet , trunk deploy, trunk-cfg-ind , link-
aggregation active | passive , link-aggregation conf key) are deprecated. Instead, you can use
the new LAG configuration commands.
Considerations for devices in stack configurations
Upgrade considerations
• Hitless stacking is enabled by default for FastIron 08.0.20 and later releases. In previous releases,
hitless-failover enable must be configured. Upgrade behavior is as follows:
Considerations for devices with LAGs
FastIron Ethernet Switch Software Upgrade Guide 15
53-1003632-02

‐If you install a FastIron 08.0.20 or later image on a new system with no previous
configuration, hitless-failover is enabled by default.
‐If you upgrade to FastIron 08.0.20 or later from a previous version that has hitless-
failover enable configured, hitless-failover is retained as the default.
‐If you upgrade to FastIron 08.0.20 or later on a system with an earlier release that does
not have hitless-failover enabled in its configuration, the previous configuration is retained.
• The FastIron 07.2.00a or later image uses different Interprocessor Communications (IPC) versions
for FCX devices; however, units in a stack must run the same IPC version to communicate. After
upgrading from FastIron 07.2.00 or earlier to FastIron 08.0.xx, you must verify that the same image
is downloaded to every unit in the stack before reloading the entire stack. To verify the images,
enter the show flash command at any level of the CLI. A stack cannot be built and will not operate
if one or more units have different software images.
• To upgrade an ICX 6430 or ICX 6450 stack running software version 07.4.00 to version 08.0.10 or
later, first upgrade the desired primary or secondary flash image to the new code version and
reboot the stack onto the new code version before upgrading the bootrom image. Failure to reboot
onto the new code version before upgrading the bootrom image could result in mismatched bootrom
images for the stack member units, which will prevent the stack from successfully forming after the
upgrade.
• All devices in a mixed stack must run the same version of the software. A stack cannot form if the
software images are of different major versions. A stack member is not operational if it runs a
different minor version than other stack members; however, the active controller can download an
image and reset a non-operational unit that has a minor version number different from the active
controller.
• To upgrade to a mixed stack, the peripheral ports must be configured manually.
• The Layer 3 configuration on your device becomes part of the default VRF after upgrade. If no
configurations are done, all interfaces are part of the default VRF.
Downgrade considerations
• ICX 6610 devices in a mixed stack form a homogenous stack when the software is downgraded
from FastIron 08.0.xx. Other devices in the mixed stack are left out. You should manually configure
the remaining mixed stack members after downgrade from FastIron 08.0.xx.
• On downgrade from 08.0.xx to 07.x.xx, core ICX 6610 devices lose the ICX 6450 configuration, and
they lose peri-port and peri-trunk configurations.
• For FCX units, the 10G module name in FastIron 08.0.xx software releases differs from the 10G
module name in FastIron 07.0.01b and 07.0.01c. Consequently, if an FCX device is downgraded
from FastIron 08.0.xx to FastIron 07.0.01b or 07.0.01c, the stacking port configuration is lost, and
the unit is not able to join the stack.
• If FCX units in an traditional stack are downgraded from FastIron 08.0.xx to earlier releases, in
some instances, the units may not be able to form a stack. This occurs if there is a mismatch of
BGP capability within the stack (that is, some units support it and others do not). If you encounter
this problem, contact Brocade Technical Support for assistance.
Upgrade considerations for devices with flexible authentication
The following behavior associated with flexible authentication should be taken into consideration when
you upgrade to FastIron 08.0.20 or later.
•Dot1x authentication and MAC authentication configured on default VLAN
After you upgrade to FastIron 08.0.20 or later, global configuration for both dot1x authentication and
MAC authentication move under the authentication command, and the first unused VLAN becomes
Upgrade considerations for devices with flexible authentication
16 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

auth-default-vlan (the authentication default VLAN), VLAN 2 in the following example. Interface level
configuration for dot1x authentication and MAC authentication conform to any new CLI changes that are
part of the upgrade.
For example, before upgrade, with dot1x authentication enabled on port 2/1/24 and MAC authentication
enabled on 2/1/23 globally and at the interface level, the configured ports are part of the default VLAN.
After upgrade, since port 2/1/23 and 2/1/24 are part of the default VLAN, they become part of the auth-
default-vlan, VLAN 2 in this example.
vlan 1 name DEFAULT-VLAN by port >> 2/1/24 and 2/1/23 ports are part of default vlan
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9
untagged ethe 1/1/18
!
vlan 200 by port
untagged ethe 1/1/15
!
vlan 201 by port
!
dot1x-enable >> global configuration
enable ethe 2/1/24
!
mac-authentication enable >> global configuration
mac-authentication auth-passwd-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24 >> interface level
dot1x port-control auto
!
interface ethernet 2/1/23 >> interface level
mac-authentication enable
mac-authentication enable-dynamic-vlan
mac-authentication max-accepted-session 32
The following example shows the configuration after the upgrade.
vlan 1 name DEFAULT-VLAN by port
!
vlan 2 by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9
untagged ethe 1/1/18
!
vlan 200 by port
untagged ethe 1/1/15
!
vlan 201 by port
!
authentication >>> both dot1x and mac-auth global commands appears under
authentication command
auth-default-vlan 2
dot1x enable
dot1x enable ethe 2/1/24
mac-authentication enable
mac-authentication enable ethe 2/1/23
mac-authentication password-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/23
authentication max-sessions 32
!
interface ethernet 2/1/24
dot1x port-control auto
Upgrade and Downgrade Considerations
FastIron Ethernet Switch Software Upgrade Guide 17
53-1003632-02

!
•Dot1x authentication and MAC authentication configured on a VLAN other than the default
VLAN
After you upgrade to FastIron 08.0.20 or later, global configuration for both dot1x authentication and
MAC authentication move under the authentication command, and the first unused VLAN becomes
auth-default-vlan, VLAN 2 in the following example.
For example, before upgrade, with dot1x authentication enabled globally on port 2/1/24 and MAC
authentication enabled globally on port 2/1/23, the configured ports are part of VLANs 600 and 601.
After upgrade, VLAN 600 becomes the auth-default-vlan for prot 2/1/24, and 601 becomes the auth-
default-vlan for port 2/1/23.
vlan 1 name DEFAULT-VLAN by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9
untagged ethe 1/1/18
!
vlan 200 by port
untagged ethe 1/1/15
!
vlan 201 by port
!
vlan 600 by port
untagged ethe 2/1/24 or tagged ethe 2/1/24
!
vlan 601 by port
untagged ethe 2/1/23 or tagged ethe 2/1/23
!
dot1x-enable >> global configuration
enable ethe 2/1/24
!
mac-authentication enable >> global configuration
mac-authentication auth-passwd-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24 >> interface level
dot1x port-control auto
!
interface ethernet 2/1/23 >> interface level
mac-authentication enable
mac-authentication enable-dynamic-vlan
mac-authentication max-accepted-session 32
The following example shows the configuration after the upgrade.
vlan 1 name DEFAULT-VLAN by port
!
vlan 2 by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9
untagged ethe 1/1/18
!
vlan 200 by port
untagged ethe 1/1/15
!
vlan 201 by port
!
vlan 600 by port >> 2/1/24 should be removed
!
vlan 601 by port >> 2/1/23 should be removed
!
authentication
auth-default-vlan 2
Upgrade and Downgrade Considerations
18 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02

dot1x enable
dot1x enable ethe 2/1/24
mac-authentication enable
mac-authentication enable ethe 2/1/23
mac-authentication password-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24
authentication auth-default-vlan 600
dot1x port-control auto
!
interface ethernet 2/1/23
authentication auth-default-vlan 601
authentication max-sessions 32
!
•Dot1x authentication and MAC authentication configured on a voice VLAN
After you upgrade to FastIron 08.0.20 or later, global configuration for both dot1x authentication and
MAC authentication moves under the authentication command, and the first unused VLAN moves as
auth-default-vlan (the authentication default VLAN), VLAN 2 in the following example. Any dual-mode
commands on the interface are replaced by the auth-default-vlan at the interface level. The voice-vlan
command remains the same.
For example, before upgrade, with dot1x authentication enabled globally on port 2/1/24 and MAC
authentication enabled globally on port 2/1/23, the configured ports are part of VLANs 100 and 200
respectively as tagged. Both of these ports are also part of voice-vlan VLAN 1000 as tagged. After
upgrade, VLAN 100 becomes auth-default-vlan for port 2/1/24, and VLAN 200 becomes auth-default-
vlan for port 2/1/23. The voice-vlan 1000 command is retained.
vlan 1 name DEFAULT-VLAN by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9 ethe 2/1/24
untagged ethe 1/1/18
!
vlan 200 by port
tagged ethe 2/1/23
untagged ethe 1/1/15
!
vlan 1000 by port
tagged ethe 2/1/23 to 2/1/24
!
dot1x-enable >> global configuration
enable ethe 2/1/24
!
mac-authentication enable >> global configuration
mac-authentication auth-passwd-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24 >> interface level
dot1x port-control auto
dual-mode 100
voice-vlan 1000
!
interface ethernet 2/1/23 >> interface level
mac-authentication enable
mac-authentication enable-dynamic-vlan
mac-authentication max-accepted-session 32
dual-mode 200
voice-vlan 1000
The following example shows the configuration after the upgrade.
FCX_Stack(2U)# sh run vlan
vlan 1 name DEFAULT-VLAN by port
!
vlan 2 by port
!
vlan 3 by port
tagged ethe 1/1/5
Upgrade and Downgrade Considerations
FastIron Ethernet Switch Software Upgrade Guide 19
53-1003632-02

!
vlan 100 by port
tagged ethe 1/1/9 >> 2/1/24 should be removed
untagged ethe 1/1/18
!
vlan 200 by port >> 2/1/23 should be removed
untagged ethe 1/1/15
!
vlan 1000 by port
tagged ethe 2/1/23 to 2/1/24
!
authentication
auth-default-vlan 2
dot1x enable
dot1x enable ethe 2/1/24
mac-authentication enable
mac-authentication enable ethe 2/1/23
mac-authentication password-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24
authentication auth-default-vlan 100
dot1x port-control auto
voice-vlan 1000
!
interface ethernet 2/1/23
authentication auth-default-vlan 200
authentication max-sessions 32
voice-vlan 1000
!
Upgrade and Downgrade Considerations
20 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02