Before upgrading the system, make sure the following requirements are met:

• The firmware versions are not lower than the ones listed in Firmware versions table. Otherwise upgrade the firmware versions, see Upgrading the Cisco cBR-8 Router Firmware.

• Make sure Line Card CPLD version is 00000025. If the value is lower than 00000025, follow this procedure to upgrade the Line Card CPLD to version 00000025 first:

  http://www.cisco.com/c/en/us/td/docs/cable/cbr/upgrade/guide/b_cbr_upgrade-3-18s/b_cbr_upgrade_hardware.html#task_E0B78DCCC88A41749DA2783736CE37A6

• Download two files from the following Cisco.com Software Center URL:

  https://software.cisco.com/download/type.html?mdfid=286283913&flowid=73842

  • IOS XE Software Version 16.7.1: cbrsup-universalk9.16.07.01.SPA.bin

  • IOS XE Hardware Programmable Devices Version 16.7.1: cbrsup-programmable_firmware.16.07.01.SPA.pkg

• Console access for both SUPs are required.

• Ability to power cycle the chassis. Power cycle chassis is required to upgrade Supervisor CPLD.

Note	Do not power cycle the cBR-8 router during the firmware upgrade process. Power cycling the chassis may corrupt the ROMMON/Uboot image.

Before upgrading the firmware, make sure the following requirements are met:

1. Prepare Ansible Server, operating system can be Linux/Windows/Mac, with docker service pre-installed.

   For docker installation guide, please check following link:

   https://docs.docker.com/engine/installation/

2. Check if the chassis supports AAA or local authentication with username & password. If not configured, use following CLI to enable local authentication, for example:

   Cbr8#configure terminal 
   Enter configuration commands, one per line.  End with CNTL/Z.
   cBR8(config)#username cisco privilege 15 password 0 cisco
   cBR8(config)#enable secret cisco
   cBR8(config)#line vty 0 15
   cBR8(config)#login local
   cBR8(config)#exec-timeout 0 0
   cBR8(config)#session-timeout 0
   cBR8(config)#exit
   

3. If SSH is not enabled, use following CLI to enable SSH on cBR8, skip the domain name configuration if already configured.

   cBR8(config)# ip domain-name domain.com
   cBR8(config)#crypto key generate rsa 
   The name for the keys will be: cbr8.domain.com
   Choose the size of the key modulus in the range of 360 to 4096 for your
   General Purpose Keys. Choosing a key modulus greater than 512 may take
   a few minutes.
   
   How many bits in the modulus [512]: 1024
   % Generating 1024 bit RSA keys, keys will be non-exportable...
   [OK] (elapsed time was 0 seconds)
   
   cBR8(config)#end
   cBR8#copy running-config startup-config
   cBR8#show ip ssh
   SSH Enabled - version 1.99
   

4. Check if there is enough bootflash disk space on both SUP (>1.8GB).

5. Verify if the Ansible server can access cBR-8 using SSH.

   [ansible@server ~]$ ssh cisco@100.0.0.1
   The authenticity of host '100.0.0.1 (100.0.0.1)' can't be established.
   RSA key fingerprint is c3:be:8f:cf:76:f4:31:4b:80:d8:2e:f0:76:6d:ff:bf.
   Are you sure you want to continue connecting (yes/no)? yes
   Warning: Permanently added '100.0.0.1' (RSA) to the list of known hosts.
   Password: 
   cBR8#
   

6. Download three files from the following Cisco.com Software Center URL:

   https://software.cisco.com/download/type.html?mdfid=286283913&flowid=73842

   • IOS XE Software Version 16.7.1: cbrsup-universalk9.16.07.01.SPA.bin

   • IOS XE Hardware Programmable Devices Version 16.7.1: cbrsup-programmable_firmware.16.07.01_compat_with_3.18SP.SSA.pkg

   • Ansible upgrade script: cbr-8_upgrade_ansible_16.7.1a.tar

7. Copy IOS XE Software package and IOS XE Hardware Programmable Devices package to TFTP/FTP/SCP server or usb disk. Upload Ansible upgrade script to Ansible server.

8. Console access for both SUPs are required.

9. Ability to power cycle the chassis. Power cycle chassis is required to upgrade Supervisor CPLD.

Before upgrading the system, make sure the following requirements are met:

• Download two files from the following Cisco.com Software Center URL:

  https://software.cisco.com/download/type.html?mdfid=286283913&flowid=73842

  • IOS XE Software Version 16.7.1: cbrsup-universalk9.16.07.01.SPA.bin

  • IOS XE Hardware Programmable Devices Version 16.7.1: cbrsup-programmable_firmware.16.07.01.SPA.pkg

• Console access for both SUPs are required.

Note	Do not power cycle the cBR-8 router during the firmware upgrade process. Power cycling the chassis may corrupt the ROMMON/Uboot image.

Before upgrading the firmware, make sure the following requirements are met:

1. Prepare Ansible Server, operating system can be Linux/Windows/Mac, with docker service pre-installed.

   For docker installation guide, please check following link:

   https://docs.docker.com/engine/installation/

2. Check if the chassis supports AAA or local authentication with username & password. If not configured, use following CLI to enable local authentication, for example:

   Cbr8#configure terminal 
   Enter configuration commands, one per line.  End with CNTL/Z.
   cBR8(config)#username cisco privilege 15 password 0 cisco
   cBR8(config)#enable secret cisco
   cBR8(config)#line vty 0 15
   cBR8(config)#login local
   cBR8(config)#exec-timeout 0 0
   cBR8(config)#session-timeout 0
   cBR8(config)#exit
   

3. If SSH is not enabled, use following CLI to enable SSH on cBR8, skip the domain name configuration if already configured.

   cBR8(config)# ip domain-name domain.com
   cBR8(config)#crypto key generate rsa 
   The name for the keys will be: cbr8.domain.com
   Choose the size of the key modulus in the range of 360 to 4096 for your
   General Purpose Keys. Choosing a key modulus greater than 512 may take
   a few minutes.
   
   How many bits in the modulus [512]: 1024
   % Generating 1024 bit RSA keys, keys will be non-exportable...
   [OK] (elapsed time was 0 seconds)
   
   cBR8(config)#end
   cBR8#copy running-config startup-config
   cBR8#show ip ssh
   SSH Enabled - version 1.99
   

4. Check if there is enough bootflash disk space on both SUP (>1.8GB).

5. Verify if the Ansible server can access cBR-8 using SSH.

   [ansible@server ~]$ ssh cisco@100.0.0.1
   The authenticity of host '100.0.0.1 (100.0.0.1)' can't be established.
   RSA key fingerprint is c3:be:8f:cf:76:f4:31:4b:80:d8:2e:f0:76:6d:ff:bf.
   Are you sure you want to continue connecting (yes/no)? yes
   Warning: Permanently added '100.0.0.1' (RSA) to the list of known hosts.
   Password: 
   cBR8#
   

6. Download three files from the following Cisco.com Software Center URL:

   https://software.cisco.com/download/type.html?mdfid=286283913&flowid=73842

   • IOS XE Software Version 16.7.1: cbrsup-universalk9.16.07.01.SPA.bin

   • IOS XE Hardware Programmable Devices Version 16.7.1: cbrsup-programmable_firmware.16.07.01.SPA.pkg

   • Ansible upgrade script: cbr-8_upgrade_ansible_16.7.1a.tar

7. Copy IOS XE Software package and IOS XE Hardware Programmable Devices package to TFTP/FTP/SCP server or usb disk. Upload Ansible upgrade script to Ansible server.

8. Console access for both SUPs are required.

9. Ability to power cycle the chassis. Power cycle chassis is required to upgrade Supervisor CPLD.