Upgrade XCO, SLX-OS, and TPVM Method 2

Use this upgrade method if the TPVM base version is older than 4.4.0.

About this task

This option is the preferred method for upgrading XCO, SLX-OS, and TPVM. For more information about supported versions, see Supported Platforms and Deployment Models for Fabric Skill.

In the following procedure, SLX1 refers to the active XCO node (TPVM1). SLX2 refers to the standby XCO node (TPVM2).

Procedure

Upgrade XCO to the latest version.
1. Back up XCO.
```
efa system backup
```
  For more information, see "Back up and Restore the XCO System" in the ExtremeCloud Orchestrator CLI Administration Guide, 3.5.0 .
2. SCP the backup file to a location outside of TPVM, such as the /efaboot partition of SLX-OS where the XCO image is kept.
3. Copy the EFA image to the /efaboot directory on SLX1.
4. Deploy XCO on SLX1.
```
efa deploy
```
5. When prompted, select Multi Node Build Upgrade.
  
  Note
  If the upgrade process returns cfg-refreshed, run a manual DRC on all devices.
Upgrade SLX-OS to the latest version.

An SLX-OS upgrade from 20.2.3x to 20.3.2x needs a full install. The procedure performs fabric-wide firmware download by staging the devices in multiple groups with no traffic disruption. Complete the following steps to download firmware on all the devices in the fabric.
1. From the XCO command line on TPVM1 (the active node), upgrade SLX2 to the latest SLX-OS version.
```
efa inventory firmware-host register --ip <fw-host-ip> 
--protocol scp --username <username> --password <password>
```
2. From the XCO command line on SLX1, upgrade SLX-OS from 20.2.3x to 20.3.2b.
```
efa inventory device firmware-download prepare add --fabric <fabric name> 
--firmware-host <fw-host-ip> --firmware-directory <fw-path>

efa inventory device firmware-download prepare list --fabric <fabric name>

efa inventory device firmware-download execute --fabric <fabric name> 

efa inventory device firmware-download show --fabric <fabric name>
```
From the XCO command line, upgrade TPVM2 (SLX2) to the latest TPVM version.

Note
Ensure that you upgrade TPVM2 first because it is the standby node of XCO. For more information, see TPVM Complete Package Upgrade.
1. Back up XCO.
```
efa system backup
```
2. Verify the trusted-peer configuration on SLX1 and SLX2.
```
device# show tpvm config trusted-peer
```
```
U37-55-172# show tpvm config trusted-peer
root@10.20.55.175
```
3. If a trusted-peer is present on at least one node, run the following command from the XCO command line on TPVM1 to upgrade TPVM2:
```
efa inventory device tpvm-upgrade execute <SLX2-IP> 
--firmware-host <fw-host-ip> --tpvm-image <path-for-tpvm.deb>
```
4. If a trusted-peer is not present on either node, run the following command from the XCO command line on TPVM1 to upgrade TPVM2:
```
efa inventory device tpvm-upgrade execute <SLX2-IP> 
--firmware-host <fw-host-ip> --tpvm-image <path-for-tpvm.deb> 
--trusted-peer-sudo-user <username> --trusted-peer-password <password>
```
5. Verify the TPVM is upgraded by running the following command at the XCO command line.
```
efa inventory device tpvm-upgrade show -–ip <SLX2-IP>
```
6. When the upgrade is complete, perform the following on both nodes from the XCO command line.
  - Run efa status to verify that both nodes are up.
  - Run sudo efactl status to verify that all pods on the active node are in Running state.
  - Run sudo efactl db-status to verify that the MariaDB is active (running)
7. (Optional) Verify the TPVM status on SLX2.
```
device# show tpvm status
```
Note
- With SLX-OS 20.3.2a and later, TPVM configuration will continue to exist in subsequent SLX-OS upgrades, so you do not need to configure TPVM in these upgrades. When an SLX device that hosts TPVM is upgraded to 20.3.2a, the existing TPVM continues to run, and all TPVM parameters that were configured with the tpvm config command are converted to TPVM config block commands.
  An exception is the "trusted-peer" configuration, which must be manually reconfigured after the upgrade, unless you provide trusted peer parameters when you run efa inventory device tpvm-upgrade execute.
  
  For information about TPVM configuration block and migration, see Extreme SLX-OS Management Configuration Guide.
- Do not run the efa inventory device tpvm-upgrade execute command if the TPVM upgrade is in progress.
Upgrade TPVM1 (SLX1) to the latest TPVM version.
1. From the SLX-OS command line on SLX1, stop and start TPVM to force a failover.
```
device# tpvm stop

device# tpvm start
```
2. When XCO synchronizes after the failover, view the output of the following commands to ensure that both nodes are in proper state.
  - Run efa status to verify that both nodes are up.
  - Run sudo efactl status to verify that all pods on the active node are in Running state.
  - Run sudo efactl db-status to verify that the MariaDB is active (running).
3. From the XCO command line on TPVM2 (the active EFA), upgrade TPVM.
```
efa inventory device tpvm-upgrade execute --ip <slx-hosting-stby-efa> 
--firmware-host <firmware-host-ip> --tpvm-image <image-path-on-host> 
```
4. From the XCO command line, verify the TPVM upgrade process.
```
efa inventory device tpvm-upgrade show -–ip <SLX1-IP>
```
5. If the upgrade process shows a failure, take the following steps.
  - Run device# show run tpvm to verify whether the trusted-peer on the SLX device is configured with the correct IP address.
  - If the IP address is incorrect, correct it manually and repeat the upgrade process starting with step 4.c in Upgrade XCO, SLX-OS, and TPVM Method 2.
6. When the upgrade is complete, perform the following (from the EFA command line) on both nodes.
  - Run efa status to verify that both nodes are up.
  - Run sudo efactl status to verify that all pods on the active node are in Running state.
  - Run sudo efactl db-status to verify that the MariaDB is active (running).
7. (Optional) Verify the TPVM status on SLX1.
```
device# show tpvm status
```