Understanding Nonstop Software Upgrade on EX Series Switches
Nonstop software upgrade (NSSU) is a feature that enables the upgrade of all supported EX Series switches in a network with a single command.
Nonstop software upgrade (NSSU) enables you to upgrade the software running on Juniper Networks EX Series Ethernet Switches with redundant Routing Engines and all member switches in EX Series Virtual Chassis using a single command. During the upgrade there might be minimal network traffic disruption during primary-role switchover, and the extent of disruption could be dependent on the network topology, configuration, network traffic, and other environment factors .
Performing an NSSU provides these benefits:
-
No disruption to the control plane—An NSSU takes advantage of graceful Routing Engine switchover (GRES) and nonstop active routing (NSR) to ensure no disruption to the control plane. During the upgrade process, interface, kernel, and routing protocol information is preserved.
-
Minimal disruption to network traffic—An NSSU minimizes network traffic disruption by upgrading member switches one at a time in other EX Series Virtual Chassis while permitting traffic to continue to flow through the members that are not being upgraded.
To achieve minimal disruption to traffic, you must configure link aggregation groups (LAGs) such that the member links of each LAG reside on different line cards or Virtual Chassis members. When one member link of a LAG is down, the remaining links are up, and traffic continues to flow through the LAG.
Because NSSU upgrades the software on each line card or on each Virtual Chassis
member one at a time, an upgrade using NSSU can take longer than an upgrade using
the request system software add command.
Requirements for Performing an NSSU
The following requirements apply to all switches and Virtual Chassis:
NSSU can only upgrade up to three major releases ahead of the current release on a device. To upgrade to a release more than three releases ahead of the current release on a device, use the NSSU process to upgrade the switch to one or more intermediate releases until the switch is within three major releases of the target release.
-
All Virtual Chassis members and all Routing Engines must be running the same Junos OS release.
-
Graceful Routing Engine switchover (GRES) must be enabled.
-
Nonstop active routing (NSR) must be enabled.
Note:Although nonstop bridging (NSB) does not have to be enabled to perform an NSSU, we recommend enabling NSB before performing an NSSU. Enabling NSB ensures that all NSB-supported Layer 2 protocols operate seamlessly during the Routing Engine switchover that is part of the NSSU.
-
For minimal traffic disruption, you must define link aggregation groups (LAGs) such that the member links reside on different Virtual Chassis members or on different line cards.
Note:During an NSSU operation, if you try to view LAG interface status on the primary Routing Engine member using the
show interfaces ae-ae-interface-numberCLI command, you might see incorrect or zero traffic counts. To work around this problem, run the command on the backup Routing Engine member instead if that member is already loaded and running.
The following are requirements for performing NSSU on an EX Series Virtual Chassis:
-
The Virtual Chassis members must be connected in a ring topology so that no member is isolated as a result of another member being rebooted. This topology prevents the Virtual Chassis from splitting during an NSSU.
-
The Virtual Chassis primary and backup must be adjacent to each other in the ring topology. Adjacency permits the primary and backup to always be in sync, even when the switches in linecard roles are rebooting.
-
The Virtual Chassis must be preprovisioned so that the linecard role has been explicitly assigned to member switches acting in a linecard role. During an NSSU, the Virtual Chassis members must maintain their roles—the primary and backup must maintain their primary and backup roles (although primary role will change), and the remaining switches must maintain their linecard roles.
-
A two-member Virtual Chassis must have
no-split-detectionconfigured so that the Virtual Chassis does not split when an NSSU upgrades a member.
How an NSSU Works
This section describes what happens when you request an NSSU on EX Series switches and Virtual Chassis.
NSSU Limitations
You cannot use an NSSU to downgrade the software—that is, to install an earlier
version of the software than is currently running on the switch. To install an
earlier software version, use the request system software add
command.
You cannot roll back to the previous software version after you perform an upgrade using NSSU. If you need to roll back to the previous software version, you can do so by rebooting from the alternate root partition if you have not already copied the new software version into the alternate root partition.
NSSU and Junos OS Release Support
A Virtual Chassis must be running a Junos OS release that supports NSSU before you
can perform an NSSU. If a Virtual Chassis is running a software version that does
not support NSSU, use the request system software add command.
Nonstop software upgrade (NSSU) lists the EX Series switches and Virtual Chassis that support NSSU and the Junos OS release at which they began supporting it.
Overview of NSSU Configuration and Operation
You must ensure that the configuration of the switch or Virtual Chassis meets the requirements described in Requirements for Performing an NSSU. NSSU requires no additional configuration.
You perform an NSSU by executing the request system software
nonstop-upgrade command. For detailed instructions on how to perform an
NSSU, see the topics in Related Documentation.