Cisco IOS XE Denali 16.2 Migration Guide for Access and Edge Routers
Introduction 2
Feature Parity Between Cisco IOS XE 3.17 and Cisco IOS XE Denali 16.2 3
Important Information About Migrating to Cisco IOS XE Denali 16.2 3
Quick Reference for a Successful Migration to Cisco IOS XE Denali 16.2 4
Cisco ASR 1000 Series Aggregation Services Routers 4
Cisco CSR 1000V Series Cloud Services Router 12
Cisco ISR 4000 Series Integrated Services Routers 12
Revised: July 20, 2016,
Introduction
Note
This migration guide contains key information and steps that will help ensure a successful migration from
extant Cisco IOS XE 3S releases to the Cisco IOS XE 16.2 release. It is critical that you read this information
before you begin migration to ensure that you have completed all the prerequisites and that you understand
the migration process.
Developed for wide deployment in the world’s most demanding enterprise, access, and service provider networks, the Cisco IOS
software delivers seamless integration of technology innovation with business applications.
Cisco IOS XE 16 (evolved from Cisco IOS XE) introduces Cisco’s next generation of Network Operating System that tightly
integrates a broad range of routing and switching portfolio hardware. Feature integration with the earlier releases for each of the
platforms, Cisco IOS XE 16 helps you prepare your network to take advantage of new technologies such as, Software Defined
Network (SDN) and Network Function Virtualization (NFV), coupled with service integration for hosted applications. This
cross-platform integrated model reduces total cost of ownership, helping the organization qualify, deploy, and maintain a single
combined cross-product software.
Cisco IOS XE 16 supports the Enterprise Networking products through the following releases:
1 Cisco IOS XE Denali 16.1 software release addresses the Catalyst switch products.
2 Cisco IOS XE Denali 16.2 software release addresses the access and edge routing products.
Additional details on products that are supported and the migration strategies are provided in the following table:
Devices
Supported Platforms
Migrated from Release Last Supported Release Migrated to Release
Catalyst Switches
Catalyst 3650
IOS XE 3E
IOS XE 3.7.0E
IOS XE Denali 16.1.1
IOS XE 3S
IOS XE 3.17S
IOS XE Denali 16.2
IOS XE 3S
IOS XE 3.17S
IOS XE Denali 16.2
Catalyst 3850
For details, see the
Cisco IOS XE Denali
16.1.1 Release Notes.
Routers
ASR 1000 Series
For details, see
Supported and
Unsupported Cisco
ASR 1000 Hardware,
on page 5.
ISR 4000 Series
For details, see
Supported and
Unsupported Cisco ISR
4000 Platforms, NIMs,
and SMs, on page 13.
2
Feature Parity Between Cisco IOS XE 3.17 and Cisco IOS XE Denali 16.2
Cisco IOS XE Denali 16.2 has feature parity with Cisco IOS XE 3.17 release except for the following features:
Unsupported Features
Links and Information
Port Authentication
Using 802.1x for
MACSec
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/config-ieee-802x-pba.html
Per-Port Storm Control http://www.cisco.com/c/en/us/td/docs/routers/asr1000/configuration/guide/chassis/Storm_Control_ASR1K.html
Per-Port 802.1x;
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/config-ieee-802x-pba.html
Multi-Host, Single Host
and Port-Based
802.1u (Guest VLAN)
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/config-ieee-802x-pba.html
MAC Authentication
Bypass (MAB)
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_aaa/configuration/15-2mt/sec-config-mab.html
Multi-Domain
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/sec-ieee-802x-fa.html
Authentication (802.1x)
Secure Port Filtering
See the "What is Secure and Dynamic Secure Port?" FAQ at
(Dynamic Secure Port) http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/qa_c67-612908.html
Auth-Proxy
—
CWS Active Identity
(NTLM)
http://www.cisco.com/c/en/us/td/docs/routers/access/4400/feature/guide/isr_4000_ntlm-authen.html
CTS Name Table
Download
—
Important Information About Migrating to Cisco IOS XE Denali 16.2
This section provides key information that you must keep in mind before migrating to Cisco IOS XE Denali 16.2.
• Cisco IOS XE Denali 16.2 requires minimum ROMMON version 16.2(1r).
• Cisco ASR1000 modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013) require Universal
images and licenses.
• No additional changes are required for Cisco IOS XE configuration.
• Show commands and debug commands are the same as in the Cisco IOS XE 3.17 release.
3
Quick Reference for a Successful Migration to Cisco IOS XE Denali 16.2
This section provides you the actions that you must take for each platform to ensure a successful migration to Cisco IOS XE Denali
16.2.
Platforms
Action
Reference
ASR1002-HX
No Action
—
ASR1001-X
Upgrade ROMMON to 16.2(1r)
ASR1002-X
Load IOS XE Denali 16.2
Upgrading the ROMMON Version on the Cisco ASR 1000
Series Routers, on page 6.
ASR1004
Upgrade ROMMON to 16.2(1r)
ASR1006
ASR1006-X
Upgrade the ASR 1000-RP2 Universal
Image
ASR1009-X
Install the ASR 1000-RP2 License
ASR1013
Load IOS XE Denali 16.2
Upgrading the Cisco ASR 1000 Modular Platforms from Cisco
IOS XE 3.x to Cisco IOS XE Denali 16.2, on page 8.
Cisco ISR4321
Upgrade ROMMON to 16.2(1r)
Cisco ISR4331
Load IOS XE Denali 16.2
Upgrading the ROMMON Version on the Cisco ISR 4000
Series, on page 13.
Upgrading the ROMMON Version on the Cisco ASR 1000
Series Routers, on page 6.
Cisco ASR 1000 Modular Platforms Require Universal Images
and Licenses, on page 7.
Cisco ISR4351
Cisco ISR4431
Cisco ISR4451-X
Cisco ASR 1000 Series Aggregation Services Routers
This section provides information about the changes that are introduced in Cisco IOS XE Denali 16.2.
For details about upgrading the Cisco IOS XE software, see the Cisco ASR 1000 Series Aggregation Services Routers Software
Configuration Guide.
4
Supported and Unsupported Cisco ASR 1000 Hardware
Platforms
Supported
Unsupported
ASR1001-X
ASR1001
ASR1002-X
ASR1002
ASR1002-HX
ASR1004
ASR1006
ASR1006-X
ASR1009-X
ASR1013
Route Processors (RP)
ASR1000-RP2
ASR1000-RP1
Forwarding Processors (ESP)
ASR1000-ESP20
ASR1000-ESP5
ASR1000-ESP40
ASR1000-ESP10
ASR1000-ESP100
ASR1000-ESP200
Line cards
ASR1000-SIP40
ASR1000-SIP10
ASR1000-2T+20X1GE
ASR1000-6TGE
ASR1000-MIP100
Ethernet Port Adapters (EPA)
EPA-1X100GE (Not supported on
ASR1002-HX)
—
EPA-10X10GE (Not supported on
ASR1002-HX)
EPA-18X1GE (Supported on
ASR1002-HX only)
5
Supported Shared Port Adapters
Shared SPA and ATM
SPA
Serial and Channelized Ethernet SPA
SPA
Packet Over Sonet SPA Circuit Emulation Over
(POS)
Packet SPA (CEOP)
SPA-DSP
SPA-8XCHT1/E1-V2
SPA-4X1FE-TX-V2
SPA-2XOC3-POS
SPA-1CHOC3-CE-ATM
SPA-1XOC3-ATM-V2 SPA-4XCT3/DS0-V2
SPA-8X1FE-TX-V2
SPA-4XOC3-POS
SPA-24CHT1-CE-ATM
SPA-3XOC3-ATM-V2 SPA-2XCT3/DS0-V2
SPA-2X1GE-V2
SPA-2XOC3-POS-V2
SPA-2CHT3-CE-ATM
SPA-1XOC12-ATM-V2 SPA-1CHSTM1/OC3V2 SPA-5X1GE-V2
SPA-4XOC3-POS-V2
SPA-2XT3/E3-V2
SPA-8X1GE-V2
SPA-8XOC3-POS
SPA-4XT3/E3-V2
SPA-10X1GE-V2
SPA-1XOC12-POS
SPA-8XT3/E3
SPA-1X10GE-L-V2
SPA-2XOC12-POS
SPA-4XT-Serial
SPA-1X10GE-WL-V2
SPA-4XOC12-POS
SPA-1XCHOC12/DS0
SPA-8XOC12-POS
SPA-1XOC48-POS/RPR
SPA-2XOC48POS/RPR
SPA-4XOC48POS/RPR
SPA-OC192POS-XFP
For a list of Cisco ASR 1000 hardware that will End-of-Sale and End-of-Life, see
http://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/eos-eol-notice-c51-734572.html.
Upgrading the ROMMON Version on the Cisco ASR 1000 Series Routers
The minimum ROMMON version needed to load the Cisco IOS Denali 16.2 image on a Cisco ASR 1000 is release 16.2(1r).
You can upgrade from any ROMMON version to release 16.2(1r). There is no minimum ROMMON version required in order to
upgrade to release 16.2(1r).
For ROMMON upgrade instructions, see the Cisco ASR 1000 Series Routers ROMmon Upgrade Guide at:
http://www.cisco.com/c/en/us/td/docs/routers/asr1000/rommon/rommon.html.
Cisco IOS XE 3S Versions That Can be Used to Upgrade the ROMMON
The following Cisco IOS XE 3S versions can be used to upgrade the ROMMON to 16.2(1r):
• Cisco IOS XE 3.10 or previous Cisco IOS XE versions
• Cisco IOS XE 3.13.2 and later versions of Cisco IOS XE 3.13
• Cisco IOS XE 3.14.1 and later versions of Cisco IOS XE 3.14
• Cisco IOS XE 3.15 and later versions
6
Note
Do not use the following Cisco IOS XE 3S versions to upgrade the ROMMON to 16.2(1r):
• Cisco IOS XE 3.11.x (all Cisco IOS XE 3.11 versions)
• Cisco IOS XE 3.12.x (all Cisco IOS XE 3.12 versions)
• Cisco IOS XE 3.13.0 and Cisco IOS XE 3.13.1
• Cisco IOS XE 3.14.0
Cisco ASR 1000 Modular Platforms Require Universal Images and Licenses
Universal Images for the Cisco ASR 1000 Modular Platforms
Similar to Cisco ASR 1000 consolidated platforms (ASR 1001-X and ASR 1002-X), the Cisco ASR 1000 modular platforms (ASR
1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013) support the following Universal images:
• Cisco ASR 1000-RP IOS XE UNIVERSAL—NO PAYLOAD ENCRYPTION
• Cisco ASR 1000-RP IOS XE UNIVERSAL
• Cisco ASR 1000-RP IOS XE UNIVERSAL W/O Lawful Intercept
• Cisco ASR 1000-RP IOS XE UNIVERSAL—NO PAYLOAD ENCRYPTION W/O Lawful Intercept
License Package Options for the Cisco ASR 1000 Modular Platforms
The Cisco ASR 1000 modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013) support the following
license options:
• Cisco ASR 1000 IP Base License (default option)
• Cisco ASR 1000 Advanced IP Services License (AIS)
• Cisco ASR 1000 Advanced Enterprise Services License (AES)
Cisco ASR 1000 Modular Platforms Image Mapping from Cisco IOS XE 3.x to Cisco IOS XE Denali
16.2
The Cisco ASR 1000-RP2 is the route processor supported on the Cisco ASR 1000 modular platforms. The following table shows
how the Cisco ASR 1000-RP2 image for modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013)
maps from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2. To enable the required features on the Cisco ASR 1000 modular platforms,
you must install the correct Universal image and the required licence package.
7
Description in Product ID in Cisco IOS XE 3.x
Cisco IOS XE
3.x
Maps to...
Product ID in Cisco IOS XE 16.2 Description in Licence in
Cisco IOS XE Cisco IOS
16.2
XE 16.2
Cisco ASR
SASR1R2-AISK9-316S
1000 Series
RP2
ADVANCED
IP SERVICES
————» SASR1KRPUK9-162
Cisco ASR
1000 Series
RPX86
UNIVERSAL
AIS
Cisco ASR
SASR1R2AIS9NLI316S
1000 Series
RP2
ADVANCED
IP SERVICES
W/O LI
————» SASR1KRPUNLIK9-162
Cisco ASR
1000 Series
RPX86
UNIVERSAL
W/O LI
AIS
Cisco ASR
1000 Series
RP2 ADV
ENT
SERVICES
SASR1R2-AESK9-316S
————» SASR1KRPUK9-162
Cisco ASR
1000 Series
RPX86
UNIVERSAL
AES
Cisco ASR
1000 Series
RP2 ADV
ENT
SERVICES
W/O LI
SASR1R2AES9NLI316S
————» SASR1KRPUNLIK9-162
Cisco ASR
1000 Series
RPX86
UNIVERSAL
W/O LI
AES
Cisco ASR
1000 Series
RP2 IP BASE
SASR1R2-IPBK9-316S
————» SASR1KRPUK9-162
Cisco ASR
1000 Series
RPX86
UNIVERSAL
None
Upgrading the Cisco ASR 1000 Modular Platforms from Cisco IOS XE 3.x to Cisco IOS XE Denali
16.2
This section provides the basic steps to upgrade the Cisco ASR 1000 modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR
1009-X, and ASR 1013) from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2. For a successful migration, we highly recommend
that you view the following VODs:
• IOS XE 3.x to 16.2 Migration on ASR 1000 Part 1 - Overview
• IOS XE 3.x to 16.2 Migration on ASR 1000 Part 2 - Upgrade Procedure on RP2
• IOS XE 3.x to 16.2 Migration on ASR 1000 Part 3 - Upgrade Procedure on ASR1001-X & ASR1002-X
8
Note
The full upgrade procedure requires you to reload the system up to four times. Use the show version
command after each reload to verify the image version and license level.
Before You Begin
• Download the ROMMON release 16.2(1r) from cisco.com to the router.
• Download the Cisco IOS XE Denali 16.2 Universal image from cisco.com to the router.
Procedure
Step 1
Backup the running configuration.
Router# copy running-config bootflash:demo.cfg
Destination filename [demo.cfg]?
1834 bytes copied in 0.112 secs (16375 bytes/sec)
Step 2
Upgrade the ROMmon to 16.2(1r) and reload the route processors.
Router# upgrade rom-monitor filename bootflash:asr1000-rommon.162-1r.pkg all
Upgrade rom-monitor on Router-Processor 0
Target copying rom-monitor image file
. . .
ROMMON upgrade complete
To make the new ROMMON permanent, you must restart the linecard
Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundant
route processor first
Router# reload <-- Reload the active router processor and boot the IOS XE3 image
. . .
Router# show platform
. . .
Slot
--------0
1
R0
R1
F0
F1
Step 3
CPLD Version
------------------00200800
00200800
10021901
10021901
1003190E
1003190E
Firmware Version
--------------------------------------16.2(1r)
16.2(1r)
16.2(1r)
16.2(1r)
16.2(1r)
16.2(1r)
Install the IOS XE 16.2 Universal image, save the configuration, and reload the route processors.
Router# config terminal
Router(config)# no boot system bootflash:previous_image.bin <-- Removes the previous boot statement
Router(config)# boot system bootflash:16.2-universal-image.bin <-- Adds the new boot statement
Router(config)# end
Router# write
9
Building configuration….
[OK]
Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundant
route processor first
Router# reload <-- Reload the active router processor and boot the IOS XE 16.2 Universal image
If you were running the RP2 IP BASE image, this completes the upgrade . If you were running the RP2 Advanced
IP Services image or RP2 Advanced Enterprise image, continue to the next step to set the license level.
Configure the required license boot level, save the configuration, and reload the route processors.
Note
Step 4
Router> enable
Router# config terminal
Router(config)# licence bootlevel [adventerprise | advipservices]
% use ‘write’ command to make license boot config take effect on next boot
Router(config)# licence accept end user agreement
…
ACCEPT: (yes/[no]) yes
Router(config)# end
Router# write
Warning . . .
Overwrite the previous NVRAM configuration? [confirm?]
Building configuration….
[OK]
Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundant
route processor first
Router# reload
Step 5
Restore the backup configuration to the running configuration.
Router> enable
Router# copy bootflash:demo.cfg running-config
Destination filename [running-config]?
Router# config terminal
Router(config)# no boot system bootflash:previous_image.bin <-- Removes the previous boot statement
Step 6
Configure the required license boot level again, save the configuration, and reload the route processors.
Router(config)# licence bootlevel [adventerprise | advipservices]
% use ‘write’ command to make license boot config take effect on next boot
Router(config)# end
Router# write
Warning….
Overwrite the previous NVRAM configuration? [confirm?]
Building configuration….
[OK]
Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundant
route processor first
10
Router# reload
Information About Software Licensing
Cisco IOS XE Denali 16.2 has the same type of licensing options and procedures as Cisco IOS XE 3.17, except for the Cisco ASR
1000 modular platforms, which support IP base, AIS, and AES license options.
There are three types of software licenses: Evaluation, Right-To-Use (RTU), and Permanent.
The steps in the Upgrading the Cisco ASR 1000 Modular Platforms from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2, on page
8 show you how to enable the built-in Evaluation license. Evaluation licenses are temporary licenses that are valid for 60 days. To
enable an evaluation license, you must accept the end user license agreement (EULA). When the time allowed for an evaluation
license expires, the license is automatically upgraded to an RTU license. Use the license boot level [ adventerprise | advipservices
] command to enable the Evaluation license.
You can choose to upgrade to the RTU license before the 60 days evaluation period expires. Use the license right-to-use move
license-name command to upgrade the Evaluation license to the RTU license.
Permanent licenses are perpetual; that is, no usage period is associated with them. Once a Permanent license is installed, all the
permissions needed to access the corresponding features in the software image are provided. Use the license install license-key
command to enable the Permanent license.
For more information about Temporary and Permanent licenses, see the Cisco IOS Software Activation Conceptual Overview chapter
at http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/csa/configuration/xe-16/csa-xe-16-book/csa-concepts.html.
For more information about RTU, see the Configuring a Cisco Right-To-Use License chapter at
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/csa/configuration/xe-3s/asr1000/csa--xe-3s-asr1000-book/csa--xe-3s-asr1000-book_chapter_0101.html.
Downgrading from Cisco IOS XE Denali 16.2 to Cisco IOS XE 3S—Cisco ASR 1000 Series
If you choose to downgrade from Cisco IOS XE Denali 16.2 to a Cisco IOS XE 3S release, you do not need to downgrade the
ROMMON. The ROMMON is backward compatible. You can downgrade the IOS, but you can keep the same ROMMON.
Upgraded Cisco ASR 1000 Series Web User Interface in Cisco IOS XE Denali 16.2
This section provides information about the feature changes that are provided in the upgraded ASR 1000 Web User Interface (UI)
for Cisco IOS XE Denali 16.2.
Feature Changes
Description
New Look and Feel
In Cisco IOS XE Denali 16.2, the ASR 1000 Web UI has a
new look and feel.
Configuration and Monitoring
In Cisco IOS XE 3.17S, you could only use the Web UI to
monitor the router.
In Cisco IOS XE Denali 16.2, you can use the Web UI to
configure and monitor the router.
Memory ESP and QFP Data Plane Layer Not Provided
In Cisco IOS XE Denali 16.2, the memory ESP and QFP
statistics in the data plane layer are not provided.
11
Environment and Fan Status Not Provided
In Cisco IOS XE Denali 16.2, the Environment status and
Fan status, which were located under the Chassis menu in
Cisco IOS XE 3.17S, are not provided.
Sensors and UDS Not Provided
In Cisco IOS XE Denali 16.2, the Sensors and UDS
parameters, which were located under Process Resource >
Process List in Cisco IOS XE 3.17S, are not provided.
ISSU and Trace Logs
ISSU Incompatibility Between Cisco IOS XE Release 3.x and Cisco IOS XE Denali 16.2
The Cisco IOS XE 16.2 is an ISSU-break release.
The ISSU super-package software upgrade and the sub-package software upgrade from Cisco IOS XE Release 3S to Cisco IOS XE
Denali 16.2 is not supported.
In addition, the ISSU downgrade from Cisco IOS XE Denali 16.2 to Release XE 3S is not supported.
Trace Logs
For information about Trace Logs, see the Tracing Commands document.
Note
Depending on your router platform, the available processes and slot options in the IOS commands might
be different than what is provided in the Tracing Commands document.
Cisco CSR 1000V Series Cloud Services Router
The Cisco IOS XE Denali 16.2 software is not supported on the Cisco CSR 1000V Series Cloud Services Router. To upgrade the
Cisco CSR 1000V Series Cloud Services Router from Cisco IOS XE 3.x to Cisco IOS XE Denali 16, you must install the Cisco IOS
XE Denali 16.3 software image. For more information, see the Cisco IOS XE Denali 16.3 Migration Guide for Access and Edge
Routers.
Cisco ISR 4000 Series Integrated Services Routers
This section provides information about the changes that are introduced in Cisco IOS XE Denali 16.2.
For details about upgrading the Cisco IOS XE software, see the Cisco 4000 Series ISRs Software Configuration Guide.
12
Supported and Unsupported Cisco ISR 4000 Platforms, NIMs, and SMs
Platforms
Supported
Unsupported
Cisco ISR4321
–
Cisco ISR4331
Cisco ISR4351
Cisco ISR4431
Cisco ISR4451-X
For details, see the "Overview of the Cisco 4000 Series ISR"
section in the Hardware Installation Guide for the Cisco 4000
Series Integrated Services Router.
NIMs and SMs
See Cisco 4000 Series Integrated Services Routers Interfaces 4G LTE NIMs
and Modules.
• NIM-4G-LTE-NA
• NIM-4G-LTE-GA
• NIM-4G-LTE-VZ
• NIM-4G-LTE-ST
Etherswitch NIMs
• NIM-ES2-4
• NIM-ES2-8
• NIM-ES2-8-P
Upgrading the ROMMON Version on the Cisco ISR 4000 Series
The minimum ROMMON version needed to load the Cisco IOS Denali 16.2 image on a Cisco ISR 4000 Series is release 16.2(1r).
You can upgrade from any ROMMON version to release 16.2(1r). There is no minimum ROMMON version required in order to
upgrade to release 16.2(1r).
For information about ROMMON, see the "ROM Monitor Overview and Basic Procedures" section in the Hardware Installation
Guide for the Cisco 4000 Series Integrated Services Routers.
Upgrading the Cisco ISR-WAAS from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2
This section provides basic steps for upgrading the ISR-WAAS. For details, see
http://www.cisco.com/c/en/us/td/docs/routers/access/4400/appnav/isr/isr_appnav.html.
Before You Begin
Make sure that you uninstall any virtual-services before upgrading to Cisco IOS XE Denali 16.2.
13
Caution
If you do not uninstall the virtual-services before you upgrade, the virtual services that are enabled on the
router will fail. See CSCuy59673 for a workaround.
Caution
The HDD data is erased after the ISR-WAAS is installed.
Procedure
Step 1
Step 2
Use the service waas disable command to uninstall the ISR-WAAS.
Upgrade the ROMMON version to release 16.2(1r).
See Upgrading the ROMMON Version on the Cisco ISR 4000 Series, on page 13.
Step 3
Step 4
Step 5
Step 6
Install the Cisco IOS XE Denali 16.2 image.
Download the supported ISR-WAAS ova file, ISR-WAAS-5.5.5a.9.ova, from cisco.com.
Use the service waas enable command to install the ISR-WAAS.
Use the sh virtual-service list command to verify whether the ISR-WAAS is installed and activated.
Upgrading the Snort Software from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2
This section provides basic steps for upgrading the Snort software. For details, see
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_utd/configuration/xe-3s/sec-data-utd-xe-3s-book/snort-ips.html.
Before You Begin
Make sure that you uninstall any virtual-services before upgrading to Cisco IOS XE Denali 16.2.
If you do not uninstall the virtual-services before you upgrade, the virtual services that are enabled on the
router will fail. See CSCuy59673 for a workaround.
Caution
Procedure
Step 1
Step 2
14
Use the virtual-service uninstall name virtual-service-name package ova-filename command to deactivate and uninstall
the Snort software.
Upgrade the ROMMON version to release 16.2(1r).
See Upgrading the ROMMON Version on the Cisco ISR 4000 Series, on page 13.
Step 3
Step 4
Step 5
Step 6
Step 7
Install the Cisco IOS XE Denali 16.2 image.
Download the supported Snort ova file from cisco.com.
Use the virtual-service install name utd virtual-service-name command to install the Snort software.
Use the activate command to activate the Snort software.
Use the sh virtual-service list command to verify whether the Snort software is installed and activated.
Downgrading from Cisco IOS XE Denali 16.2 to Cisco IOS XE 3S—Cisco ISR 4000 Series
Note
You must uninstall any virtual-service (Snort or ISR-WAAS) before starting the downgrade. After you
finish with the downgrade, you must install the virtual-services again.
If you choose to downgrade from Cisco IOS XE Denali 16.2 to a Cisco IOS XE 3S release, you do not need to downgrade the
ROMMON. The ROMMON is backward compatible. You can downgrade the IOS, but you can keep the same ROMMON.
15
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
© 2016
Cisco Systems, Inc. All rights reserved.
Americas Headquarters
Cisco Systems, Inc.
San Jose, CA 95134-1706
USA
Asia Pacific Headquarters
Cisco Systems (USA) Pte. Ltd.
Singapore
Europe Headquarters
Cisco Systems International BV
Amsterdam, The Netherlands
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the
Cisco Website at www.cisco.com/go/offices.