enforce-version

Profile Config Commands

Enables checking of a device‘s firmware version before attempting adoption or clustering

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

enforce-version [adoption|cluster] [full|major|minor|none|strict]

Parameters

enforce-version [adoption|cluster] [full|major|minor|none|strict]
adoption Verifies firmware versions before adopting. This option is enabled by default.
cluster Verifies firmware versions before clustering. This option is enabled by default.
full Allows adoption or clustering when the first four octets of the firmware versions match (for example 5.9.3.0)
major Allows adoption or clustering when the first two octets of the firmware versions match (for example 5.9)
minor Allows adoption or clustering when the first three octets of the firmware versions match (for example 5.9.3)
none Allows adoption or clustering between any firmware versions
strict Allows adoption or clustering only when firmware versions exactly match (for example 5.9.3.0-010D). This is the default setting for both ‘adoption‘ and ‘cluster‘ options.

Example

nx9500-6C8809(config-profile-test-nx5500)#enforce-version cluster full
nx9500-6C8809(config-profile-test-nx5500)#enforce-version adoption major

nx9500-6C8809(config-profile-test-nx5500)#show context
profile nx5500 test-nx5500
 no autoinstall configuration
 no autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 ....................................................
interface pppoe1
 use firewall-policy default
 enforce-version adoption major
 enforce-version cluster full
 service pm sys-restart
 router ospf
 router bgp
 dot1x system-auth-control
 dot1x use aaa-policy OnBoarding
nx9500-6C8809(config-profile-test-nx5500)#

Related Commands

no Disables or reverts settings to their default