Wireless Access

Reply
Frequent Contributor II
Posts: 125
Registered: ‎11-06-2007

how to upgrade a cpsec network

Hello,

I'm planning an upgrade from 5.0.3.0 to 5.0.4.12 as a previous step before upgrading to 6.x, my network consists of 1 master and 3 local controllers with cpsec enabled, I'm not sure the steps I should follow to avoid a network outage in the upgrade, I mean:

 

Upgrading to 5.0.4.12 with cpsec will recreate new certificates for AP and local controllers from master ???, if yes, does it conduct to a network outage until all AP get their new certificate and establish a new GRE encrypted tunnel ???

 

If I upgrade only a local controller to 5.0.4.12 leaving the master to 5.0.3.0, the master-local could be established ???.

 

Could I upgrade only the master controller to 5.0.4.12 leaving the local controllers with 5.0.3.0 with cpsec enabled, then pass all AP GRE to master ??

Guru Elite
Posts: 20,821
Registered: ‎03-29-2007

Re: how to upgrade a cpsec network

[ Edited ]

1.  You will have to upgrade all the controllers at the same time

2.  Upgrading will NOT create new certificates; they should all stay the same

3.  You SHOULD NOT upgrade the master only, because that will create issues between major versions of code.  This is not supported, has not been tested, and will cause you grief, so do not do it.

4.  Please have support check your network and review release notes of what you are upgrading to before your upgrade to make sure there are not gotchas you need to be aware of...

 

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 125
Registered: ‎11-06-2007

Re: how to upgrade a cpsec network

Thank you cjoseph,

 

I have upgraded to 5.0.4.12, now we are planning upgrading to 6.2.1.3, I suppose upgrading from 5.0.4.12 to 6.2.1.3 wont create new certificates, ins't it ??

 

It's only to be sure there will not be any outage due to CPSEC.

 

Thank you

Guru Elite
Posts: 20,821
Registered: ‎03-29-2007

Re: how to upgrade a cpsec network

What controller models are these?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 125
Registered: ‎11-06-2007

Re: how to upgrade a cpsec network

We have 2 6000 controllers with M3 processor (one of them is the master) and two new 7210 controllers intended to replace two 6000 controllers.

So we are running now with 5.0.4.12 and our intention is upgrading to 6.2.1.3, we run  CPSec.

 

Thank you

Guru Elite
Posts: 20,821
Registered: ‎03-29-2007

Re: how to upgrade a cpsec network

You should upgrade the 2 M3s first, and then introduce the 7200 series controllers after it is successful.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 125
Registered: ‎11-06-2007

Re: how to upgrade a cpsec network

Upgrading M3 controllers first from from 5.0.4.12 to 6.2.1.3 with CPSec enabled can cause some problem with M3 certificates ??

Will the M3 controllers keep the same certificates ??

Guru Elite
Posts: 20,821
Registered: ‎03-29-2007

Re: how to upgrade a cpsec network

Please see the section on upgrading in the release notes here:  http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=10930

 

You can upgrade from 5.0.4.x directly to ArubaOS 6.2.1.3.  Make sure you execute a "backup flash" on each controller just in case you have to go back for any reason.

 

upgrading.png



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: