{"id":2003,"date":"2017-07-06T10:50:37","date_gmt":"2017-07-06T09:50:37","guid":{"rendered":"http:\/\/blogs-new.it.ox.ac.uk\/networks\/?p=2003"},"modified":"2017-07-18T10:03:27","modified_gmt":"2017-07-18T09:03:27","slug":"odin-frodo-software-upgrade","status":"publish","type":"post","link":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/2017\/07\/06\/odin-frodo-software-upgrade\/","title":{"rendered":"ODIN FroDo Software Upgrade"},"content":{"rendered":"

FroDo Comware Upgrade<\/strong><\/p>\n

We would like to announce a staged upgrade of the version of Comware running on our HPE 5510 FroDos. This blog entry aims to answer the majority of questions that this work will raise. Please, however, \u00a0feel free to contact the Networks team with any further questions at networks@it.ox.ac.uk<\/a><\/p>\n

Why?<\/strong><\/p>\n

As part of ongoing maintenance it is essential that we keep our FroDo software\u00a0up to date. The new version of software being deployed addresses a number of vulnerabilities and bugs, as well as introducing some useful new features.<\/p>\n

In Service Software Upgrade (ISSU)<\/strong><\/p>\n

This feature aims to reduce the downtime required for software\u00a0upgrades. For Option 2 customers who have a pair of FroDos this means that, for future software upgrades, \u00a0service will usually remain up while each member of the pair is upgraded and reloaded.<\/p>\n

The ISSU feature also supports so-called hot patches which can be implemented without rebooting a device. This is of benefit to both Option 1 and Option 2 customers. There may be a small service interruption for these patches but it will be significantly less than a full reboot.<\/p>\n

Bug Fixes <\/strong><\/p>\n

Symptom: On an MPLS L2VPN or VPLS network, PIM packets and IGMP packets cannot be<\/p>\n

transparently forwarded between PEs.<\/p>\n

Condition: This symptom might occur if IP multicast routing is configured on the MPLS L2VPN<\/p>\n

or VPLS network.<\/p>\n

Symptom: When a large number of MAC address entries are deleted from member ports of an<\/p>\n

aggregation group, memory leak occurs at both the local end and the remote end of the<\/p>\n

aggregate link.<\/p>\n

Condition: This symptom might occur if a large number of MAC address entries are deleted<\/p>\n

from member ports of an aggregation group.<\/p>\n

Addressed Vulnerabilities <\/strong><\/p>\n

This release addresses the following CVE<\/p>\n

CVE2016-[5195,7431,7428,7427]<\/p>\n

CVE2017-[3731,3732]<\/p>\n

Information about the detail of these vulnerabilities can be found at https:\/\/cve.mitre.org\/cve\/cve.html<\/a><\/p>\n

Impact<\/strong><\/p>\n

The expected impact is ~5-10 minutes during which time the FroDo will reload and external services will not be available.<\/p>\n

We will be carrying out the upgrades between 07:30 and 09:00 to minimise impact.<\/p>\n

I am an Option 2 customer \u2013 will I be affected?<\/strong><\/p>\n

For this upgrade yes you will. This is the first software release\u00a0we have been happy with that also offers In Service Software Upgrades (ISSU). The good news is that future upgrades will\u00a0be able to leverage ISSU so that your service is not likely\u00a0not be affected by compatible firmware upgrades moving forward.<\/p>\n

Timescale<\/strong><\/p>\n

We plan to upgrade approximately 30 Frodo\u2019s every Tuesday, Wednesday and Thursday over the firs three weeks of August until all of the HPE 5510 devices in service are up to date.<\/p>\n

Schedule<\/strong><\/p>\n

We have attempted where possible to group devices around main sites and annexes so that those sites will only see one period of disruption. Detailed schedules listing devices and dates\u00a0can be found at\u00a0https:\/\/docs.ntg.ox.ac.uk\/pub\/reference\/odin-frodo-software-upgrade-august-2017<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

FroDo Comware Upgrade We would like to announce a staged upgrade of the version of Comware running on our HPE 5510 FroDos. This blog entry aims to answer the majority of questions that this work will raise. Please, however, \u00a0feel … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":388,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,37756],"tags":[],"class_list":["post-2003","post","type-post","status-publish","format-standard","hentry","category-general-maintenance","category-odin"],"_links":{"self":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts\/2003","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/users\/388"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/comments?post=2003"}],"version-history":[{"count":14,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts\/2003\/revisions"}],"predecessor-version":[{"id":2084,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/posts\/2003\/revisions\/2084"}],"wp:attachment":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/media?parent=2003"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/categories?post=2003"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/networks\/wp-json\/wp\/v2\/tags?post=2003"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}