/
Upgrading MLAG Peers from PICOS 2.11.x to 3.7.0

Upgrading MLAG Peers from PICOS 2.11.x to 3.7.0

Owned by Tracy Yang (Unlicensed)
Mar 16, 2021

This document briefly describes the upgrade process for MLAG peers from PICOS 2.11.x to 3.7.0 and the special points to note during the upgrade. For details of general upgrade process for Pica8 switches, please refer to upgrade document Upgrading PICOS from Release 2.11.x Using Upgrade.

Upgrade Roadmap

Figure 1 outlines the upgrade roadmap for upgrading MLAG peers from PICOS 2.11.x to 3.7.0.

Figure 1 Upgrade roadmap for upgrading MLAG peers from PICOS 2.11.x to 3.7.0

Upgrade Procedure

Step1       Backup configuration file.

Before upgrading, save configuration file to the local PC.

Step2       Check MLAG configuration consistency and MLAG status on MLAG peers.

a) Use the command run show mlag domain {<domain-id>| summary} to show the MLAG domain information, make sure that the MLAG neighbor status is ESTABLISHED.

For example,

admin@Xorplus# run show mlag domain summary
Domain ID: 1    Domain MAC: 48:6E:73:FF:00:01    Node ID: 0
----------------------------------------------------------------------------------------------
Peer Link  Peer IP  Peer Vlan  Neighbor Status  Config Matched  MAC Synced  # of Links
---------  ---------------  ---------  ---------------    --------------      ----------  ----------
ae23       1.1.1.2    4088    ESTABLISHED      Yes       Yes         2    

b) Use command run show mlag link {<link-id>| summary} to show the MLAG link status, make sure that the Link Status is Full and Local Status is UP.

For example,

admin@XorPlus# run show mlag link summary
# of Links: 2
Link   Local LAG   Link Status   Local Status   Peer Status   Config Matched   Flood
----   ---------   -----------   ------------   -----------   --------------   -----
1      ae1         IDLE          UP            UP       No               No 
2      ae2         IDLE          UP             UP       No               No

c) Use command run show mlag consistency-parameter { link <link-id>| summary} to show the MLAG configuration consistency check result. Make sure that the following features are configured consistently on each peer switch:

  • VLANs
  • MLAG global configurations such as MLAG domain ID
  • STP configuration

Step3       Upgrade one of the peers.

a) Disable local peer link interface.

For example,

admin@XorPlus# set interface aggregate-ethernet ae48 disable true
admin@XorPlus# commit

b) Remove incompatible configurations.

PICOS 3.7.0 refines the MLAG, DHCP, NTP and port breakout features, and redefines the configuration commands. If these features are configured in the current system, you need to manually delete the configuration corresponding to these features before upgrading. Make sure to remove completely, otherwise, the command line incompatible with the new version may cause problems such as configuration loss or connection failure after upgrade.

The following table lists the changed commands in 2.11.x and 3.7.0.

If the configurations listed in 2.11.x exist in the current system, they need to be removed before upgrading.

Commands in 2.11.x

Commands in 3.7.0

Notes

set interface mlag hello-interval

set interface mlag peer peer-link

set interface mlag priority

set interface mlag reload-delay

set interface mlag source

set interface mlag system-id

set interface aggregate-ethernet aggregated-ether-options mlag disable

set interface aggregate-ethernet aggregated-ether-options mlag domain-id

set interface aggregate-ethernet aggregated-ether-options mlag hello-interval

set interface aggregate-ethernet aggregated-ether-options mlag peer peer-link

set interface aggregate-ethernet aggregated-ether-options mlag priority

set interface aggregate-ethernet aggregated-ether-options mlag system-id

show mlag configuration

show mlag internal

show mlag peer

set protocols mlag domain

set protocols mlag domain node

set protocols mlag domain interface link

set protocols mlag domain peer-ip peer-link

set protocols mlag domain peer-ip peer-vlan

run show mlag domain

run show mlag link

run show mlag consistency-parameter

Remove all MLAG-related commands before upgrading.

1.       3.7.0 removes per MLAG configurations, and all configurations are global configuration, thus simplifying the deployment.

2.       3.7.0 MLAG peers function equally as Node 0 and Node 1, do not negotiate and distinguish master and slave. In most application scenarios, the two nodes have no difference.

set protocols dhcp snooping disable

set protocols dhcp snooping port trust

set protocols dhcp snooping vlan

run show dhcp snooping binding

set protocols dhcp snooping binding file

set protocols dhcp snooping binding timeout

set protocols dhcp option82 disable

set protocols dhcp relay port circuit-id

set protocols dhcp relay vlan-interface

set protocols dhcp relay vlan-interface disable


set protocols dhcp snooping vlan

set protocols dhcp snooping trust-port

set protocols dhcp snooping vlan option82-policy

set protocols dhcp snooping option82 circuit-id

set protocols dhcp snooping option82 remote-id

set protocols dhcp snooping option82 trust-all

set protocols dhcp snooping binding file

set protocols dhcp snooping binding write-delay

run show dhcp snooping binding

set protocols dhcp relay interface disable

set protocols dhcp relay interface dhcp-server-address

set protocols dhcp relay interface relay-agent-address

set protocols dhcp relay interface option82-policy

set protocols dhcp relay option82 circuit-id

set protocols dhcp relay option82 remote-id

set protocols dhcp relay option82 trust-all

The DHCP command line mainly includes the following changes:

1.       In 2.11.x, user has the option to enable DHCP snooping on all VLANs by a single CLI command. However, in 3.7.0, user has to enable it VLAN by VLAN.

2.       In 2.11.x, user has to manually input the string of Option 82. In 3.7.0, user can select the Option 82 pattern. If user wants to input a string, user can input it in the port description or hostname. Then select the related pattern.

About how to configure the DHCP, please refer to the document DHCP Configuration and Configuration Commands.


set interface qe-interface-mode < SFP | QSFP | FLEX >

set interface gigabit-ethernet <port-name> breakout <10g-4x | 25g-4x | donot>

set interface gigabit-ethernet <port-name> breakout <true | false>

In 2.11.x, port breakout supports three modes: SFP, QSFP and FLEX; In 3.7.0, these modes are removed, the system no longer distinguishes between these modes, but only needs to configure port breakout on a port by port basis for individual ports manually.

About how to configure the port breakout, please refer to the document Configuring Port Breakout and Merge.

set system ntp-server-ip

set system ntp server-ip

set system ntp source-interface

The CLI command line for configuring NTP server has changed, need to reconfigure after upgrade.

About how to configure the NTP, please refer to the document Configuring NTP and the Time Zone Parameter.

set protocols pimsm4 static-rps rp group-prefix hash-mask-len

set protocols pimsm4 static-rps rp group-prefix rp-priority

-

Delete these two PIM-SM configurations.

set system services telnet xx


-

3.7.0 no longer supports telnet services. Delete all telnet-related commands.

c) Refer to the general upgrade process in Upgrading PICOS from Release 2.11.x Using Upgrade to complete the upgrade.

d) Complete MLAG configurations of 3.7.0 after upgrade.

PICOS 3.7.0 refines the MLAG, DHCP, NTP and port breakout features, and redefines the configuration commands. So after the system is up from reboot, you need to manually configure the associated configurations to complete the upgrade.

MLAG 

MLAG feature is redesigned in 3.7.0 to make it easier to deploy. If MLAG is deployed in 2.11.x, after upgrading to 3.7, the MLAG configurations need to be modified manually. The following table lists all the MLAG commands in 2.11.x and 3.7.0.

Commands in 2.11.x

Commands in 3.7.0

Notes

set interface mlag hello-interval

set interface mlag peer peer-link

set interface mlag priority

set interface mlag reload-delay

set interface mlag source

set interface mlag system-id

set interface aggregate-ethernet aggregated-ether-options mlag disable

set interface aggregate-ethernet aggregated-ether-options mlag domain-id

set interface aggregate-ethernet aggregated-ether-options mlag hello-interval

set interface aggregate-ethernet aggregated-ether-options mlag peer peer-link

set interface aggregate-ethernet aggregated-ether-options mlag priority

set interface aggregate-ethernet aggregated-ether-options mlag system-id

run show mlag configuration

run show mlag internal

run show mlag peer

set protocols mlag domain

set protocols mlag domain node

set protocols mlag domain interface link

set protocols mlag domain peer-ip peer-link

set protocols mlag domain peer-ip peer-vlan

run show mlag domain

run show mlag link

run show mlag consistency-parameter

About how to configure the new MLAG, please refer to the document MLAG Configuration and MLAG Commands.

 

DHCP

The DHCP feature has been refined in 3.7.0. If DHCP is deployed in 2.11.x, after upgrading to 3.7, some of the DHCP configurations need to be modified manually. The following table list all the DHCP commands in 2.11.x and 3.7.0.

Commands in 2.11.x

Commands in 3.7.0

Notes

set protocols dhcp snooping disable

set protocols dhcp snooping port trust

set protocols dhcp snooping vlan

run show dhcp snooping binding

set protocols dhcp snooping binding file

set protocols dhcp snooping binding timeout

set protocols dhcp option82 disable

set protocols dhcp relay port circuit-id

set protocols dhcp relay vlan-interface

set protocols dhcp relay vlan-interface disable


set protocols dhcp snooping vlan

set protocols dhcp snooping trust-port

set protocols dhcp snooping vlan option82-policy

set protocols dhcp snooping option82 circuit-id

set protocols dhcp snooping option82 remote-id

set protocols dhcp snooping option82 trust-all

set protocols dhcp snooping binding file

set protocols dhcp snooping binding write-delay

run show dhcp snooping binding

set protocols dhcp relay interface disable

set protocols dhcp relay interface dhcp-server-address

set protocols dhcp relay interface relay-agent-address

set protocols dhcp relay interface option82-policy

set protocols dhcp relay option82 circuit-id

set protocols dhcp relay option82 remote-id

set protocols dhcp relay option82 trust-all

The DHCP command line mainly includes the following changes:

  1. In 2.11.x, user has the option to enable DHCP snooping on all VLANs by a single CLI command. However, In 3.7.0, user has to enable it VLAN by VLAN.
  2. In 2.11.x, user has to manually input the string of Option 82. In 3.7.0, user can select the Option 82 pattern. If user wants to input a string, user can input it in the port description or hostname. Then select the related pattern.

About how to configure the DHCP, please refer to the document DHCP Configuration and Configuration Commands



NTP

NTP supports connecting to the NTP server through the inband management port, which facilitates flexible networking.

When inband management interface is used to connect with the NTP server, after the upgrade is complete, the user needs to manually configure the NTP source interface as the inband management interface.

The following table list the changed NTP commands in 2.11.x and 3.7.0.

Commands in 2.11.x

Commands in 3.7.0

Notes

set system ntp-server-ip

set system ntp server-ip

set system ntp source-interface

The CLI command line for configuring NTP server has changed, need to delete old command in 2.11.x before upgrade.

How to configure the NTP, please refer to document Configuring NTP and the Time Zone Parameter.


Port Breakout

PICOS 3.7.0 simplifies port breakout configuration to make it easier to employment. The following table list the changed commands in 2.11.x and 3.7.0.

Commands in 2.11.x

Commands in 3.7.0

Notes

set interface qe-interface-mode < SFP | QSFP | FLEX >

 set interface gigabit-ethernet <port-name> breakout <10g-4x | 25g-4x | donot>

set interface gigabit-ethernet <port-name> breakout <true | false>

In 2.11.x, port breakout supports three modes: SFP, QSFP and FLEX; In 3.7.0, these modes are removed, the system no longer distinguishes between these modes, but only needs to configure port breakout on a port by port basis manually.

About how to configure the port breakout, please refer to the document Configuring Port Breakout and Merge.

e) Enable local peer link interface.

For example,

admin@XorPlus# set interface aggregate-ethernet ae48 disable false
admin@XorPlus# commit

Note that, you cannot go to the next step until the upgrade operations in this step are all finished on one MLAG peer device.

Step4       Repeat the upgrade process of step 3 for the other peer.

NOTE：

  •  When upgrading the second device, the traffic will automatically switch to the first device that has already completed upgrade, with a short interruption when the second device is in the process of upgrading.
  • When both devices are already upgraded to PICOS 3.7.0, MLAG automatically negotiates to establish connection, and the access devices will dual-attach to the MLAG peer device.

 

Copyright © 2025 Pica8 Inc. All Rights Reserved.