Converting from Cisco NX-OS to ACI Boot Mode

This chapter describes how to convert a Cisco Nexus 9000 Series switch from Cisco NX-OS to Cisco Application Centric Infrastructure (ACI) boot mode. It contains the following sections:

Converting to ACI Boot Mode

You can convert any Cisco Nexus 9000 Series switch from Cisco NX-OS to ACI boot mode.


Note

You cannot convert a Cisco Nexus 3164Q switch to ACI boot mode.


Note

Use this procedure to convert a Cisco Nexus 9000 Series switch running Cisco NX-OS Release 6.1(2)I3(3) or later to ACI boot mode. If you are converting to ACI boot mode from an earlier Cisco NX-OS release, follow the instructions in the Nexus 9000 Standalone (NXOS) to ACI Conversion document.

Before You Begin

Verify whether your switch hardware is supported in ACI boot mode by checking the "Supported Hardware" section of the Release Notes for Cisco Nexus 9000 Series ACI-Mode Switches. For example, line cards are not compatible between Cisco NX-OS and ACI boot mode.

Remove or turn off any unsupported modules (using the poweroff module module command). Otherwise, the software uses a recovery/retry mechanism before powering down the unsupported modules, which can cause delays in the conversion process.

For dual-supervisor systems, use the show module command to make sure that the standby supervisor module is in the ha-standby state.

Verify that the Application Policy Infrastructure Controller (APIC) is running Release 1.0(2j) or a later release.

Make sure that the ACI image is 11.0(2x) or a later release.

Use the show install all impact epld epld-image-name command to verify that the switch does not require any EPLD image upgrades. If any upgrades are required, follow the instructions in the Cisco Nexus 9000 Series FPGA/EPLD Upgrade Release Notes.

Procedure
    Step 1   Verify that the switch is running Cisco NX-OS Release 6.1(2)I3(3) or a later release.

    Example: 
    switch(config)# show version
Software
BIOS: version 08.06
NXOS: version 6.1(2)I3(3)
BIOS compile time: 12/03/2014
NXOS image file name is: bootflash:///n9000-dk9.6.1.2.I3.3.bin
NXOS compile time: 12/05/2014 10:50:20 [12/05/2014 2:25]

    Cisco NX-OS filenames begin with "n9000" while ACI filenames begin with "aci-n9000."

    Step 2   Follow these steps to copy the ACI image from the APIC:
    1. Set the IP address on the mgmt0 interface of the switch to allow connectivity between this interface and the APIC.
    2. Enable SCP services on the switch.

      Example: 
      switch(config)# features scp-server
    3. From the APIC CLI, use SCP to copy the firmware image from the APIC to the active supervisor module on the switch.

      Example: 
      admin@apic1:aci> scp -r /firmware/fwrepos/fwrepo/switch-image-name admin@switch-ip-address:switch-image-name
    4. For dual-supervisor systems, copy the ACI image to the standby supervisor module.

      Example: 
      switch(config)# copy bootflash:aci-image bootflash://sup-standby/
    Step 3   Follow these steps to boot to the ACI image:
    1. Configure the switch to not boot from Cisco NX-OS.

      Example: 
      switch(config)# no boot nxos
    2. Save the configuration.

      Example: 
      switch(config)# copy running-config startup-config
      Note   

      You must run the copy running-config startup-config command prior to booting the ACI image. Do not run it after you enter the boot aci command.

    3. Boot the active and standby supervisor modules with the ACI image.

      Example: 
      switch(config)# boot aci bootflash:aci-image-name
      Caution   

      Do not enter the copy running-config startup-config command after the boot aci command. If you do, the switch will go to the loader> prompt.

    4. Verify the integrity of the file by displaying the MD5 checksum.

      Example: 
      switch(config)# show file bootflash:aci-image-name md5sum
    5. Reload the switch.

      Example: 
      switch(config)# reload
    6. Log in to the switch as an administrator.

      Example: 
      Login: admin
    Step 4   Verify whether you must install certificates for your device.

    Example: 
    admin@apic1:aci> openssl asn1parse /securedata/ssl/server.crt

    Look for PRINTABLESTRING in the command output. If "Cisco Manufacturing CA" is listed, the correct certificates are installed. If something else is listed, contact TAC to generate and install the correct certificates for your device.

    Note   

    You might need to install certificates for Cisco Nexus 9000 Series switches that were shipped prior to May 2014.

    What to Do Next

    See the ACI and APIC documentation to configure and operate your switch in ACI mode: http:/​/​www.cisco.com/​c/​en/​us/​support/​cloud-systems-management/​application-policy-infrastructure-controller-apic/​tsd-products-support-series-home.html.

    Converting a Replacement Standby Supervisor to ACI Boot Mode

    If you ever need to replace the standby supervisor module in a dual-supervisor system, you will need to copy and boot the ACI image for use with the replacement standby supervisor.

    Before You Begin

    Copy the ACI image to a USB drive.

    Procedure
      Step 1   Reload the switch.

      Example: 
      admin@apic1:aci> reload
      Step 2   Enter a break sequence during the initial boot sequence to access the loader> prompt.

      Example: 
      Ctrl-]
loader>
      Step 3   Plug the USB drive containing the ACI image into the standby supervisor USB slot.
      Step 4   Copy the ACI image from the USB drive to the switch.

      Example: 
      loader> copy usb#:aci-image-name bootflash:
      Step 5   Boot the ACI image.

      Example: 
      loader> boot aci-image-name
      Step 6   Log in to the switch as an administrator. 
      Login: admin

      Converting Back to Cisco NX-OS

      You can convert a Cisco Nexus 9000 Series switch from ACI boot mode back to Cisco NX-OS.

      Procedure
        Step 1   Reload the switch.

        Example: 
        admin@apic1:aci> reload
        Step 2   Enter a break sequence during the initial boot sequence to access the loader> prompt.

        Example: 
        Ctrl-]
loader>
        Step 3   Boot the active supervisor module with the Cisco NX-OS image.

        Example: 
        loader> boot nxos-image-name
        Step 4   Wait for the system controllers to come up, which could take approximately 15 to 20 minutes.

        File system differences between ACI and Cisco NX-OS require a one-time reformatting change during the ACI to Cisco NX-OS conversion. Subsequent reloads with the Cisco NX-OS image will be faster.

        Step 5   Verify that the active supervisor module and the system controllers are in the active state.

        Example: 
        switch# show module
Mod  Ports  Module-Type                           Model            Status
---  -----  ------------------------------------- ---------------- ----------
27   0      Supervisor Module                     N9K-SUP-A        active
28   0      Supervisor Module                     N9K-SUP-A        ha-standby
29   0      System Controller                     N9K-SC-A         active
30   0      System Controller                     N9K-SC-A         active
        Step 6   For dual-supervisor systems, boot the standby supervisor module with the Cisco NX-OS image from the loader> prompt.

        Example: 
        loader> boot nxos-image-name
        Step 7   Log in to the switch and verify that it is running Cisco NX-OS software. 
        Software
BIOS: version 08.06
NXOS: version 6.1(2)I3(3)
BIOS compile time: 12/03/2014
NXOS image file name is: bootflash:///n9000-dk9.6.1.2.I3.3.bin
NXOS compile time: 12/05/2014 10:50:20 [12/05/2014 2:25]