Cisco IOS XE Denali 16.2 Migration Guide for Access and Edge Routers

Introduction 2

Feature Parity Between Cisco IOS XE 3.17 and Cisco IOS XE Denali 16.2 3

Important Information About Migrating to Cisco IOS XE Denali 16.2 3

Quick Reference for a Successful Migration to Cisco IOS XE Denali 16.2 4

Cisco ASR 1000 Series Aggregation Services Routers 4

Cisco CSR 1000V Series Cloud Services Router 12

Cisco ISR 4000 Series Integrated Services Routers 12

Revised: July 20, 2016,

Introduction

This migration guide contains key information and steps that will help ensure a successful migration fromextant Cisco IOSXE 3S releases to the Cisco IOSXE 16.2 release. It is critical that you read this informationbefore you begin migration to ensure that you have completed all the prerequisites and that you understandthe migration process.

Note

Developed for wide deployment in the world’s most demanding enterprise, access, and service provider networks, the Cisco IOSsoftware delivers seamless integration of technology innovation with business applications.

Cisco IOS XE 16 (evolved from Cisco IOS XE) introduces Cisco’s next generation of Network Operating System that tightlyintegrates a broad range of routing and switching portfolio hardware. Feature integration with the earlier releases for each of theplatforms, Cisco IOS XE 16 helps you prepare your network to take advantage of new technologies such as, Software DefinedNetwork (SDN) and Network Function Virtualization (NFV), coupled with service integration for hosted applications. Thiscross-platform integrated model reduces total cost of ownership, helping the organization qualify, deploy, and maintain a singlecombined cross-product software.

Cisco IOS XE 16 supports the Enterprise Networking products through the following releases:

1 Cisco IOS XE Denali 16.1 software release addresses the Catalyst switch products.

2 Cisco IOS XE Denali 16.2 software release addresses the access and edge routing products.

Additional details on products that are supported and the migration strategies are provided in the following table:

Migrated to ReleaseLast Supported ReleaseMigrated from ReleaseSupported PlatformsDevices

IOS XE Denali 16.1.1IOS XE 3.7.0EIOS XE 3ECatalyst 3650

Catalyst 3850

For details, see theCisco IOS XE Denali16.1.1 Release Notes.

Catalyst Switches

IOS XE Denali 16.2IOS XE 3.17SIOS XE 3SASR 1000 Series

For details, seeSupported andUnsupported CiscoASR 1000 Hardware,on page 5.

Routers

IOS XE Denali 16.2IOS XE 3.17SIOS XE 3SISR 4000 Series

For details, seeSupported andUnsupported Cisco ISR4000 Platforms, NIMs,and SMs, on page 13.

2

Feature Parity Between Cisco IOS XE 3.17 and Cisco IOS XE Denali 16.2Cisco IOS XE Denali 16.2 has feature parity with Cisco IOS XE 3.17 release except for the following features:

Links and InformationUnsupported Features

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/config-ieee-802x-pba.htmlPort AuthenticationUsing 802.1x forMACSec

http://www.cisco.com/c/en/us/td/docs/routers/asr1000/configuration/guide/chassis/Storm_Control_ASR1K.htmlPer-Port Storm Control

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/config-ieee-802x-pba.htmlPer-Port 802.1x;Multi-Host, Single Hostand Port-Based

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/config-ieee-802x-pba.html802.1u (Guest VLAN)

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_aaa/configuration/15-2mt/sec-config-mab.htmlMAC AuthenticationBypass (MAB)

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/sec-ieee-802x-fa.htmlMulti-DomainAuthentication (802.1x)

See the "What is Secure and Dynamic Secure Port?" FAQ athttp://www.cisco.com/c/en/us/products/collateral/interfaces-modules/qa_c67-612908.html

Secure Port Filtering(Dynamic Secure Port)

—Auth-Proxy

http://www.cisco.com/c/en/us/td/docs/routers/access/4400/feature/guide/isr_4000_ntlm-authen.htmlCWS Active Identity(NTLM)

—CTS Name TableDownload

Important Information About Migrating to Cisco IOS XE Denali 16.2This section provides key information that you must keep in mind before migrating to Cisco IOS XE Denali 16.2.

• Cisco IOS XE Denali 16.2 requires minimum ROMMON version 16.2(1r).

• Cisco ASR1000 modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013) require Universalimages and licenses.

• No additional changes are required for Cisco IOS XE configuration.

• Show commands and debug commands are the same as in the Cisco IOS XE 3.17 release.

3

Quick Reference for a Successful Migration to Cisco IOS XE Denali 16.2This section provides you the actions that you must take for each platform to ensure a successful migration to Cisco IOS XE Denali16.2.

ReferenceActionPlatforms

—No ActionASR1002-HX

Upgrading the ROMMON Version on the Cisco ASR 1000Series Routers, on page 6.

Upgrade ROMMON to 16.2(1r)

Load IOS XE Denali 16.2

ASR1001-X

ASR1002-X

Upgrading the ROMMON Version on the Cisco ASR 1000Series Routers, on page 6.

Cisco ASR 1000Modular Platforms Require Universal Imagesand Licenses, on page 7.

Upgrading the Cisco ASR 1000Modular Platforms fromCiscoIOS XE 3.x to Cisco IOS XE Denali 16.2, on page 8.

Upgrade ROMMON to 16.2(1r)

Upgrade the ASR 1000-RP2 UniversalImage

Install the ASR 1000-RP2 License

Load IOS XE Denali 16.2

ASR1004

ASR1006

ASR1006-X

ASR1009-X

ASR1013

Upgrading the ROMMON Version on the Cisco ISR 4000Series, on page 13.

Upgrade ROMMON to 16.2(1r)

Load IOS XE Denali 16.2

Cisco ISR4321

Cisco ISR4331

Cisco ISR4351

Cisco ISR4431

Cisco ISR4451-X

Cisco ASR 1000 Series Aggregation Services RoutersThis section provides information about the changes that are introduced in Cisco IOS XE Denali 16.2.

For details about upgrading the Cisco IOS XE software, see the Cisco ASR 1000 Series Aggregation Services Routers SoftwareConfiguration Guide.

4

Supported and Unsupported Cisco ASR 1000 Hardware

UnsupportedSupported

ASR1001

ASR1002

ASR1001-X

ASR1002-X

ASR1002-HX

ASR1004

ASR1006

ASR1006-X

ASR1009-X

ASR1013

Platforms

ASR1000-RP1ASR1000-RP2Route Processors (RP)

ASR1000-ESP5

ASR1000-ESP10

ASR1000-ESP20

ASR1000-ESP40

ASR1000-ESP100

ASR1000-ESP200

Forwarding Processors (ESP)

ASR1000-SIP10ASR1000-SIP40

ASR1000-2T+20X1GE

ASR1000-6TGE

ASR1000-MIP100

Line cards

—EPA-1X100GE (Not supported onASR1002-HX)

EPA-10X10GE (Not supported onASR1002-HX)

EPA-18X1GE (Supported onASR1002-HX only)

Ethernet Port Adapters (EPA)

5

Supported Shared Port Adapters

Circuit Emulation OverPacket SPA (CEOP)

Packet Over Sonet SPA(POS)

Ethernet SPASerial and ChannelizedSPA

Shared SPA and ATMSPA

SPA-1CHOC3-CE-ATM

SPA-24CHT1-CE-ATM

SPA-2CHT3-CE-ATM

SPA-2XOC3-POS

SPA-4XOC3-POS

SPA-2XOC3-POS-V2

SPA-4XOC3-POS-V2

SPA-8XOC3-POS

SPA-1XOC12-POS

SPA-2XOC12-POS

SPA-4XOC12-POS

SPA-8XOC12-POS

SPA-1XOC48-POS/RPR

SPA-2XOC48POS/RPR

SPA-4XOC48POS/RPR

SPA-OC192POS-XFP

SPA-4X1FE-TX-V2

SPA-8X1FE-TX-V2

SPA-2X1GE-V2

SPA-5X1GE-V2

SPA-8X1GE-V2

SPA-10X1GE-V2

SPA-1X10GE-L-V2

SPA-1X10GE-WL-V2

SPA-8XCHT1/E1-V2

SPA-4XCT3/DS0-V2

SPA-2XCT3/DS0-V2

SPA-1CHSTM1/OC3V2

SPA-2XT3/E3-V2

SPA-4XT3/E3-V2

SPA-8XT3/E3

SPA-4XT-Serial

SPA-1XCHOC12/DS0

SPA-DSP

SPA-1XOC3-ATM-V2

SPA-3XOC3-ATM-V2

SPA-1XOC12-ATM-V2

For a list of Cisco ASR 1000 hardware that will End-of-Sale and End-of-Life, seehttp://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/eos-eol-notice-c51-734572.html.

Upgrading the ROMMON Version on the Cisco ASR 1000 Series RoutersThe minimum ROMMON version needed to load the Cisco IOS Denali 16.2 image on a Cisco ASR 1000 is release 16.2(1r).

You can upgrade from any ROMMON version to release 16.2(1r). There is no minimum ROMMON version required in order toupgrade to release 16.2(1r).

For ROMMON upgrade instructions, see the Cisco ASR 1000 Series Routers ROMmon Upgrade Guide at:http://www.cisco.com/c/en/us/td/docs/routers/asr1000/rommon/rommon.html.

Cisco IOS XE 3S Versions That Can be Used to Upgrade the ROMMON

The following Cisco IOS XE 3S versions can be used to upgrade the ROMMON to 16.2(1r):

• Cisco IOS XE 3.10 or previous Cisco IOS XE versions

• Cisco IOS XE 3.13.2 and later versions of Cisco IOS XE 3.13

• Cisco IOS XE 3.14.1 and later versions of Cisco IOS XE 3.14

• Cisco IOS XE 3.15 and later versions

6

Do not use the following Cisco IOS XE 3S versions to upgrade the ROMMON to 16.2(1r):Note

• Cisco IOS XE 3.11.x (all Cisco IOS XE 3.11 versions)

• Cisco IOS XE 3.12.x (all Cisco IOS XE 3.12 versions)

• Cisco IOS XE 3.13.0 and Cisco IOS XE 3.13.1

• Cisco IOS XE 3.14.0

Cisco ASR 1000 Modular Platforms Require Universal Images and Licenses

Universal Images for the Cisco ASR 1000 Modular Platforms

Similar to Cisco ASR 1000 consolidated platforms (ASR 1001-X and ASR 1002-X), the Cisco ASR 1000 modular platforms (ASR1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013) support the following Universal images:

• Cisco ASR 1000-RP IOS XE UNIVERSAL—NO PAYLOAD ENCRYPTION

• Cisco ASR 1000-RP IOS XE UNIVERSAL

• Cisco ASR 1000-RP IOS XE UNIVERSAL W/O Lawful Intercept

• Cisco ASR 1000-RP IOS XE UNIVERSAL—NO PAYLOAD ENCRYPTION W/O Lawful Intercept

License Package Options for the Cisco ASR 1000 Modular Platforms

The Cisco ASR 1000 modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013) support the followinglicense options:

• Cisco ASR 1000 IP Base License (default option)

• Cisco ASR 1000 Advanced IP Services License (AIS)

• Cisco ASR 1000 Advanced Enterprise Services License (AES)

Cisco ASR 1000 Modular Platforms Image Mapping from Cisco IOS XE 3.x to Cisco IOS XE Denali16.2The Cisco ASR 1000-RP2 is the route processor supported on the Cisco ASR 1000 modular platforms. The following table showshow the Cisco ASR 1000-RP2 image for modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR 1009-X, and ASR 1013)maps fromCisco IOSXE 3.x to Cisco IOSXEDenali 16.2. To enable the required features on the Cisco ASR 1000modular platforms,you must install the correct Universal image and the required licence package.

7

Licence inCisco IOSXE 16.2

Description inCisco IOS XE16.2

Product ID in Cisco IOS XE 16.2Maps to...Product ID in Cisco IOS XE 3.xDescription inCisco IOS XE3.x

AISCisco ASR1000 SeriesRPX86UNIVERSAL

SASR1KRPUK9-162————»SASR1R2-AISK9-316SCisco ASR1000 SeriesRP2ADVANCEDIP SERVICES

AISCisco ASR1000 SeriesRPX86UNIVERSALW/O LI

SASR1KRPUNLIK9-162————»SASR1R2AIS9NLI316SCisco ASR1000 SeriesRP2ADVANCEDIP SERVICESW/O LI

AESCisco ASR1000 SeriesRPX86UNIVERSAL

SASR1KRPUK9-162————»SASR1R2-AESK9-316SCisco ASR1000 SeriesRP2 ADVENTSERVICES

AESCisco ASR1000 SeriesRPX86UNIVERSALW/O LI

SASR1KRPUNLIK9-162————»SASR1R2AES9NLI316SCisco ASR1000 SeriesRP2 ADVENTSERVICESW/O LI

NoneCisco ASR1000 SeriesRPX86UNIVERSAL

SASR1KRPUK9-162————»SASR1R2-IPBK9-316SCisco ASR1000 SeriesRP2 IP BASE

Upgrading the Cisco ASR 1000 Modular Platforms from Cisco IOS XE 3.x to Cisco IOS XE Denali16.2This section provides the basic steps to upgrade the Cisco ASR 1000 modular platforms (ASR 1004, ASR 1006, ASR 1006-X, ASR1009-X, and ASR 1013) from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2. For a successful migration, we highly recommendthat you view the following VODs:

• IOS XE 3.x to 16.2 Migration on ASR 1000 Part 1 - Overview

• IOS XE 3.x to 16.2 Migration on ASR 1000 Part 2 - Upgrade Procedure on RP2

• IOS XE 3.x to 16.2 Migration on ASR 1000 Part 3 - Upgrade Procedure on ASR1001-X & ASR1002-X

8

The full upgrade procedure requires you to reload the system up to four times. Use the show versioncommand after each reload to verify the image version and license level.

Note

Before You Begin

• Download the ROMMON release 16.2(1r) from cisco.com to the router.

• Download the Cisco IOS XE Denali 16.2 Universal image from cisco.com to the router.

Procedure

Step 1 Backup the running configuration.

Router# copy running-config bootflash:demo.cfgDestination filename [demo.cfg]?1834 bytes copied in 0.112 secs (16375 bytes/sec)

Step 2 Upgrade the ROMmon to 16.2(1r) and reload the route processors.

Router# upgrade rom-monitor filename bootflash:asr1000-rommon.162-1r.pkg all

Upgrade rom-monitor on Router-Processor 0Target copying rom-monitor image file. . .ROMMON upgrade completeTo make the new ROMMON permanent, you must restart the linecard

Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundantroute processor firstRouter# reload <-- Reload the active router processor and boot the IOS XE3 image. . .Router# show platform. . .

Slot CPLD Version Firmware Version--------- ------------------- ---------------------------------------0 00200800 16.2(1r)1 00200800 16.2(1r)R0 10021901 16.2(1r)R1 10021901 16.2(1r)F0 1003190E 16.2(1r)F1 1003190E 16.2(1r)

Step 3 Install the IOS XE 16.2 Universal image, save the configuration, and reload the route processors.

Router# config terminalRouter(config)# no boot system bootflash:previous_image.bin <-- Removes the previous boot statementRouter(config)# boot system bootflash:16.2-universal-image.bin <-- Adds the new boot statementRouter(config)# endRouter# write

9

Building configuration….[OK]

Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundantroute processor firstRouter# reload <-- Reload the active router processor and boot the IOS XE 16.2 Universal image

If you were running the RP2 IP BASE image, this completes the upgrade . If you were running the RP2 AdvancedIP Services image or RP2 Advanced Enterprise image, continue to the next step to set the license level.

Note

Step 4 Configure the required license boot level, save the configuration, and reload the route processors.

Router> enableRouter# config terminalRouter(config)# licence bootlevel [adventerprise | advipservices]% use ‘write’ command to make license boot config take effect on next bootRouter(config)# licence accept end user agreement…ACCEPT: (yes/[no]) yesRouter(config)# endRouter# writeWarning . . .

Overwrite the previous NVRAM configuration? [confirm?]Building configuration….[OK]

Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundantroute processor firstRouter# reload

Step 5 Restore the backup configuration to the running configuration.

Router> enableRouter# copy bootflash:demo.cfg running-configDestination filename [running-config]?

Router# config terminalRouter(config)# no boot system bootflash:previous_image.bin <-- Removes the previous boot statement

Step 6 Configure the required license boot level again, save the configuration, and reload the route processors.

Router(config)# licence bootlevel [adventerprise | advipservices]% use ‘write’ command to make license boot config take effect on next boot

Router(config)# endRouter# writeWarning….Overwrite the previous NVRAM configuration? [confirm?]Building configuration….[OK]

Router# hw-module slot R1 reload <-- If you have a redundant route processor, reload the redundantroute processor first

10

Router# reload

Information About Software Licensing

Cisco IOS XE Denali 16.2 has the same type of licensing options and procedures as Cisco IOS XE 3.17, except for the Cisco ASR1000 modular platforms, which support IP base, AIS, and AES license options.

There are three types of software licenses: Evaluation, Right-To-Use (RTU), and Permanent.

The steps in the Upgrading the Cisco ASR 1000 Modular Platforms from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2, on page8 show you how to enable the built-in Evaluation license. Evaluation licenses are temporary licenses that are valid for 60 days. Toenable an evaluation license, you must accept the end user license agreement (EULA). When the time allowed for an evaluationlicense expires, the license is automatically upgraded to an RTU license. Use the license boot level [ adventerprise | advipservices] command to enable the Evaluation license.

You can choose to upgrade to the RTU license before the 60 days evaluation period expires. Use the license right-to-use movelicense-name command to upgrade the Evaluation license to the RTU license.

Permanent licenses are perpetual; that is, no usage period is associated with them. Once a Permanent license is installed, all thepermissions needed to access the corresponding features in the software image are provided. Use the license install license-keycommand to enable the Permanent license.

For more information about Temporary and Permanent licenses, see the Cisco IOS Software Activation Conceptual Overview chapterat http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/csa/configuration/xe-16/csa-xe-16-book/csa-concepts.html.

For more information about RTU, see the Configuring a Cisco Right-To-Use License chapter athttp://www.cisco.com/c/en/us/td/docs/ios-xml/ios/csa/configuration/xe-3s/asr1000/csa--xe-3s-asr1000-book/csa--xe-3s-asr1000-book_chapter_0101.html.

Downgrading from Cisco IOS XE Denali 16.2 to Cisco IOS XE 3S—Cisco ASR 1000 SeriesIf you choose to downgrade from Cisco IOS XE Denali 16.2 to a Cisco IOS XE 3S release, you do not need to downgrade theROMMON. The ROMMON is backward compatible. You can downgrade the IOS, but you can keep the same ROMMON.

Upgraded Cisco ASR 1000 Series Web User Interface in Cisco IOS XE Denali 16.2This section provides information about the feature changes that are provided in the upgraded ASR 1000 Web User Interface (UI)for Cisco IOS XE Denali 16.2.

DescriptionFeature Changes

In Cisco IOS XE Denali 16.2, the ASR 1000 Web UI has anew look and feel.

New Look and Feel

In Cisco IOS XE 3.17S, you could only use the Web UI tomonitor the router.

In Cisco IOS XE Denali 16.2, you can use the Web UI toconfigure and monitor the router.

Configuration and Monitoring

In Cisco IOS XE Denali 16.2, the memory ESP and QFPstatistics in the data plane layer are not provided.

Memory ESP and QFP Data Plane Layer Not Provided

11

In Cisco IOS XE Denali 16.2, the Environment status andFan status, which were located under the Chassis menu inCisco IOS XE 3.17S, are not provided.

Environment and Fan Status Not Provided

In Cisco IOS XE Denali 16.2, the Sensors and UDSparameters, which were located under Process Resource >Process List in Cisco IOS XE 3.17S, are not provided.

Sensors and UDS Not Provided

ISSU and Trace Logs

ISSU Incompatibility Between Cisco IOS XE Release 3.x and Cisco IOS XE Denali 16.2

The Cisco IOS XE 16.2 is an ISSU-break release.

The ISSU super-package software upgrade and the sub-package software upgrade from Cisco IOS XE Release 3S to Cisco IOS XEDenali 16.2 is not supported.

In addition, the ISSU downgrade from Cisco IOS XE Denali 16.2 to Release XE 3S is not supported.

Trace Logs

For information about Trace Logs, see the Tracing Commands document.

Depending on your router platform, the available processes and slot options in the IOS commands mightbe different than what is provided in the Tracing Commands document.

Note

Cisco CSR 1000V Series Cloud Services RouterThe Cisco IOS XE Denali 16.2 software is not supported on the Cisco CSR 1000V Series Cloud Services Router. To upgrade theCisco CSR 1000V Series Cloud Services Router from Cisco IOS XE 3.x to Cisco IOS XE Denali 16, you must install the Cisco IOSXE Denali 16.3 software image. For more information, see the Cisco IOS XE Denali 16.3 Migration Guide for Access and EdgeRouters.

Cisco ISR 4000 Series Integrated Services RoutersThis section provides information about the changes that are introduced in Cisco IOS XE Denali 16.2.

For details about upgrading the Cisco IOS XE software, see the Cisco 4000 Series ISRs Software Configuration Guide.

12

Supported and Unsupported Cisco ISR 4000 Platforms, NIMs, and SMs

UnsupportedSupported

–Cisco ISR4321

Cisco ISR4331

Cisco ISR4351

Cisco ISR4431

Cisco ISR4451-X

For details, see the "Overview of the Cisco 4000 Series ISR"section in the Hardware Installation Guide for the Cisco 4000Series Integrated Services Router.

Platforms

4G LTE NIMs

• NIM-4G-LTE-NA

• NIM-4G-LTE-GA

• NIM-4G-LTE-VZ

• NIM-4G-LTE-ST

Etherswitch NIMs

• NIM-ES2-4

• NIM-ES2-8

• NIM-ES2-8-P

See Cisco 4000 Series Integrated Services Routers Interfacesand Modules.

NIMs and SMs

Upgrading the ROMMON Version on the Cisco ISR 4000 SeriesThe minimum ROMMON version needed to load the Cisco IOS Denali 16.2 image on a Cisco ISR 4000 Series is release 16.2(1r).

You can upgrade from any ROMMON version to release 16.2(1r). There is no minimum ROMMON version required in order toupgrade to release 16.2(1r).

For information about ROMMON, see the "ROM Monitor Overview and Basic Procedures" section in the Hardware InstallationGuide for the Cisco 4000 Series Integrated Services Routers.

Upgrading the Cisco ISR-WAAS from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2This section provides basic steps for upgrading the ISR-WAAS. For details, seehttp://www.cisco.com/c/en/us/td/docs/routers/access/4400/appnav/isr/isr_appnav.html.

Before You Begin

Make sure that you uninstall any virtual-services before upgrading to Cisco IOS XE Denali 16.2.

13

If you do not uninstall the virtual-services before you upgrade, the virtual services that are enabled on therouter will fail. See CSCuy59673 for a workaround.

Caution

The HDD data is erased after the ISR-WAAS is installed.Caution

Procedure

Step 1 Use the service waas disable command to uninstall the ISR-WAAS.Step 2 Upgrade the ROMMON version to release 16.2(1r).

See Upgrading the ROMMON Version on the Cisco ISR 4000 Series, on page 13.

Step 3 Install the Cisco IOS XE Denali 16.2 image.Step 4 Download the supported ISR-WAAS ova file, ISR-WAAS-5.5.5a.9.ova, from cisco.com.Step 5 Use the service waas enable command to install the ISR-WAAS.Step 6 Use the sh virtual-service list command to verify whether the ISR-WAAS is installed and activated.

Upgrading the Snort Software from Cisco IOS XE 3.x to Cisco IOS XE Denali 16.2This section provides basic steps for upgrading the Snort software. For details, seehttp://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_utd/configuration/xe-3s/sec-data-utd-xe-3s-book/snort-ips.html.

Before You Begin

Make sure that you uninstall any virtual-services before upgrading to Cisco IOS XE Denali 16.2.

If you do not uninstall the virtual-services before you upgrade, the virtual services that are enabled on therouter will fail. See CSCuy59673 for a workaround.

Caution

Procedure

Step 1 Use the virtual-service uninstall name virtual-service-name package ova-filename command to deactivate and uninstallthe Snort software.

Step 2 Upgrade the ROMMON version to release 16.2(1r).See Upgrading the ROMMON Version on the Cisco ISR 4000 Series, on page 13.

14

Step 3 Install the Cisco IOS XE Denali 16.2 image.Step 4 Download the supported Snort ova file from cisco.com.Step 5 Use the virtual-service install name utd virtual-service-name command to install the Snort software.Step 6 Use the activate command to activate the Snort software.Step 7 Use the sh virtual-service list command to verify whether the Snort software is installed and activated.

Downgrading from Cisco IOS XE Denali 16.2 to Cisco IOS XE 3S—Cisco ISR 4000 Series

You must uninstall any virtual-service (Snort or ISR-WAAS) before starting the downgrade. After youfinish with the downgrade, you must install the virtual-services again.

Note

If you choose to downgrade from Cisco IOS XE Denali 16.2 to a Cisco IOS XE 3S release, you do not need to downgrade theROMMON. The ROMMON is backward compatible. You can downgrade the IOS, but you can keep the same ROMMON.

15

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITEDWARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITHTHE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain versionof the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDINGANYOTHERWARRANTYHEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS"WITH ALL FAULTS.CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OFMERCHANTABILITY, FITNESS FORA PARTICULAR PURPOSEANDNONINFRINGEMENTORARISING FROMACOURSEOFDEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUTLIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERSHAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, networktopology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentionaland coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnershiprelationship between Cisco and any other company. (1110R)

© 2016 Cisco Systems, Inc. All rights reserved.

Europe HeadquartersAsia Pacific HeadquartersAmericas HeadquartersCisco Systems International BVAmsterdam, The Netherlands

Cisco Systems (USA) Pte. Ltd.Singapore

Cisco Systems, Inc.San Jose, CA 95134-1706USA

Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on theCisco Website at www.cisco.com/go/offices.