See parent/sister tasks.
Those switches are L2 only, so it's not urgent as they're not exposed to the Internet.
As they're in VCs so it means all members have to go down at the same time (we're not trying ISSU and similar), which means a 20min hard downtime for both VC devices minimum, a 1h downtime window is to be planned for headroom.
| Device | Scheduled for | Status |
|---|---|---|
| fasw1-c-codfw | Jan 23rd 2023 | |
| fasw1-c-eqiad | Jan 25th 2023 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T253824 planned upstream deprecation of the ssh-rsa signing algorithm (RSA with SHA-1) | |||
| Resolved | ayounsi | T254013 all network devices must run OpenSSH >= 7.2p1 but != 7.4p1 | |||
| Resolved | ayounsi | T317175 Junos: resolve DNS through mgmt_junos | |||
| Resolved | ayounsi | T327862 Use mgmt_junos on all network devices | |||
| Restricted Task | |||||
| Open | None | T316539 Upgrade network devices to Junos 20+ | |||
| Resolved | Papaul | T316542 Upgrade fasw to Junos 21 |
@ayounsi We have a maintenance week for frack scheduled for Sep 26-30. Would sometime that week be good for you? We could do fasw1-c-codfw before then if you wish.
@Dwisehaupt that will be too soon for us (SRE summit + routers upgrades planned this month).
Is the following maintenance week known?
We don't have a full one scheduled for q2, so the next week would be Jan 23-27, 2023.
Some notes from T316532: Upgrade POPs asw to Junos 21
Make sure console access works.
Before the upgrade, remove this configuration stanza, otherwise the request system software add might fail
[edit system]
- internet-options {
- tcp-drop-synfin-set;
- no-tcp-reset drop-all-tcp;
- }request system software add /var/tmp/jinstallxxxxxx can be done outside of a maintenance window (to minimize the time services are depooled, if they need to be depooled).
If there is any issue with this step it might be because the disk is corrupted, in that case the next step is to reboot the stack (will perform fsck at boot time), if still no luck last option is to do a format install (needs someone on site).
That's why it better to do the request system software add before the maintenance window so we can plan accordingly.
If all good, run request system reboot and wait about 10min. If something is not up at that point, wait a bit more, then check what's up on the console. An extra reboot might be needed.