topic Re: ICX7450 OS in ICX Switches

ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 19:49:25 GMT

I am running ICX7450's and some of our switches were pre-maturely upgraded to 08.0.92.

I would like to know if it is possible to migrate the OS from 08.0.92 [backward] to 08.0.90.

Has anyone tried this before? Is there a procedure for this?

Please, advise.

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 20:11:11 GMT

Hey Zachary,

Yes, you can move from 8092 to 8090 with no problem. You will just use the UFI image and do something like this:

copy tftp flash <tftp-ip-addr> <8090-filename-ufi.bin> <pri/sec>

Ex.

copy tftp flash 192.168.1.100 SPS08090mcufi.bin primary

Once the copy is done, issue a 'show flash' to confirm the image is present and then go ahead and reload into the new code.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 20:28:07 GMT

@ben_beck

Hey Ben, thank you for the feedback.

Below is the result of the push:

SPR08090kufi.bin 100% 46MB 692.7KB/s 01:08
Connection to x.x.x.x closed by remote host.

I got on the switch:

SSH@ICX7450-24P Router>show flash
Stack unit 1:
Pri Code Flash Empty
Compressed Sec Code size = 32172120, Version:08.0.92bT213 (SPR08092b.bin)
Compressed Pri Boot Code size = 786944, Version:10.1.17T215 (spz10117)
Compressed Sec Boot Code size = 786944, Version:10.1.17T215 (spz10117)
Code Flash Free Space = 1632264192
SSH@ICX7450-24P Router>

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 20:33:44 GMT

Did you see the progress on the CLI? It may still be copying, but hard to say from that output. You can check 'show flash' again after a few minutes. If not, you may need to try it again.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 20:38:15 GMT

I pushed the KUFI from our server. I can attempt via pulling to the switch.

Typically, pushing from the server works in this circumstance.

Show flash - still shows the primary and being empty.

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 20:47:09 GMT

What are you using to push the code? Generally most customers initiate the copy from the switch CLI and use TFTP or SCP.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 20:52:40 GMT

Question:

Does "primary" need to be in the following output:

SSH@ICX7450-24P Router#sh files
Type Size Name
----------------------
F 32172120 secondary
F 162204 poe-fw
F 823 startup-config.txt
F 256 secondary.sig
F 1576 $$ssh8rsahost.key
F 256 primary.sig

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 20:54:47 GMT

If there is a valid image in primary flash, yes you should see primary in that list.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 20:59:41 GMT

@ben_beck

We use SCP via CLI on the server.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 21:08:43 GMT

Appears FIPS is unhappy...

SSH@ICX7450-24P Router#copy flash flash pri
Flash Memory Write (8192 bytes per dot)
SSH@ICX7450-24P Router#.......

...

.........................
Processing the bundle image...
Flashing application image to Primary partition...
Aborting, bundle image FIPS validation failed

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 21:13:01 GMT

Do you have FIPS turned on?

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 21:23:36 GMT

@ben_beck

I inherited these switches from another administrator and apparently he enabled FIPS.

I didn't turn it on.

Via console > no fips enable

yes?

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 21:25:14 GMT

So you do not use 'copy scp flash' command? You are doing something like this?

pscp60 <filepath>\<filename.bin> <username>@<ip-addr>:flash:<pri/sec>:<filename.bin>

pscp60 SPR08090kufi.bin username@10.200.130.4:flash:pri:SPR08090kufi.bin

It has been a long time since I have pushed from CLI of the SSH/SCP server, but that was an example I had saved. Sometimes we get syntax issues especially with the second time we type the filename.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 21:27:27 GMT

@ben_beck

ICX7450-24P Router(config)#no fips enable
FIPS Error: System is not running in FIPS mode.

It says FIPS isn't running, but apparently it is somewhere.

Re: ICX7450 OS

BenBeck — Wed, 12 Jan 2022 21:31:40 GMT

Hey Zachary,

FIPS can be quite involved sometimes. This document can shed some light:

https://support.ruckuswireless.com/documents/3026-fastiron-08-0-90-ga-fips-common-criteria-guide

It may be worth opening a case (see my signature) and having a support engineer assist you.

Re: ICX7450 OS

zachary_hull — Wed, 12 Jan 2022 22:28:07 GMT

@ben_beck

I had to massage the instruction a bit, but I got it work.

ICX7450-24P Router#sh flash
Stack unit 1:
Compressed Pri Code size = 33554432, Version:08.0.90kT213 (SPR08090k.bin)
Compressed Sec Code size = 32172120, Version:08.0.92bT213 (SPR08092b.bin)
Compressed Pri Boot Code size = 786944, Version:10.1.18T215 (spz10118)
Compressed Sec Boot Code size = 786944, Version:10.1.17T215 (spz10117)
Code Flash Free Space = 1597333504

I need to sort out the boot images, but that shouldn't be difficult - I think.

Thank you for your help and pointing me in the right direction Ben!

Re: ICX7450 OS

mohammad_atmazi — Thu, 13 Jan 2022 07:43:38 GMT

It is possible you can do that