Developer

 View Only
last person joined: 2 hours ago 

Expand all | Collapse all

is it possible to allow unsafe updates via API or Ansible?

This thread has been viewed 21 times
  • 1.  is it possible to allow unsafe updates via API or Ansible?

    Posted Jan 30, 2024 03:59 AM

    After a rather unfortunate upgrade last week, we discovered this command: "allow-unsafe-updates". Vital functions on the switch stopped working because some module was not upgraded. Some switches even crashed and we had to remove the power cable to get them up and running again.

    The fix was easy, however it was very manual. We had to log in to each switch, and run the "allow-unsafe-updates" command and restart the switches.

    Is it possible to do this through Ansible or API?

    And is it a way to check if this is necessary to apply beforehand (through Ansible or API)?



  • 2.  RE: is it possible to allow unsafe updates via API or Ansible?

    MVP GURU
    Posted Jan 30, 2024 11:06 AM

    not sure with API => https://community.arubanetworks.com/discussion/aos-cx-allow-unsafe-updates-via-rest-api

    do you have search on swagger ?

    for Ansible, you can use aruba_cx_config modules (using SSH)



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 3.  RE: is it possible to allow unsafe updates via API or Ansible?

    EMPLOYEE
    Posted Jan 30, 2024 01:38 PM

    Unfortunately, it doesn't look like there is an API call for this specific CLI command.  As @alagoutte mentioned, this may be able to be done through Ansible using the SSH CLI module in the AOS-CX Ansible Collection to run an aoscx_command.  You can find some details about it here.




  • 4.  RE: is it possible to allow unsafe updates via API or Ansible?

    Posted Feb 16, 2024 05:31 AM

    Okay, thank you both.

    Would it be a problem to run this command before every switch upgrade?