Applies To:

Show Versions Show Versions

Manual Chapter: Upgrading BIG-IQ Systems
Manual Chapter
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

About the upgrade process for BIG-IQ systems configured in a high availability (HA) configuration

When a new version of the BIG-IQ software is available, you can upgrade. The upgrade process involves installing the new version of the software, booting into that new version, and making any other changes that might be required.

Note: BIG-IQ® Security version 4.6.0 supports upgrades only from version 4.4.0 and higher. This restriction does not apply for other BIG-IQ functionality.

When the BIG-IQ system is in a high availability (HA), you must also perform the following procedures:

  1. Delete peer BIG-IQ systems in a HA configuration.
  2. Upgrade each BIG-IQ system.
  3. Re-establish the HA configuration.

Separating an HA configuration running version 4.4 software

The upgrade process disconnects the HA redundant system configuration during upgrade and reinstates the configuration again as the upgrade is completed. This procedure separates an HA configuration running version 4.4 software.
  1. Separate the HA configuration by removing the standby device from the management group.
    1. Log in to the active BIG-IQ device, and from the BIG-IQ option list at upper left, select System.
    2. In the BIG-IQ Systems panel, expand Management Group.
    3. Select the standby device.
    4. Hover over the gear icon, click it and select Properties.
      The Localhost screen opens.
    5. In the expanded screen, click Remove.
    The status indicator at the top-left of the screen now reports Standalone on both BIG-IQ devices.
  2. Use a secure copy method to copy the image (ISO) to the /shared/images directory on both devices formerly in the HA configuration.
    You can use SCP, FTP, SFTP or any other means of securely transferring ISOs between hosts.
    scp <big-iq-iso-name> root@<big-iq-standby-node-url>:/shared/images/.
Both devices are now standalone and have the same ISO file on them.

Separating an HA configuration running version 4.5 software

The upgrade process disconnects the HA redundant system configuration during upgrade and reinstates the configuration again as the upgrade is completed. This procedure separates an HA configuration running version 4.5 software.
  1. Separate the HA configuration by removing the standby device from the management group.
    1. Log in to the active BIG-IQ device, and from the BIG-IQ option list at upper left, select System and click Configuration.
    2. In the BIG-IQ Systems panel, expand HA Peer Group.
    3. For the standby device, hover over the gear icon, click it, and select Properties.
      The Properties screen for that device opens.
    4. Near the top right of the Properties screen, click Remove.
      A dialog box opens prompting you to confirm that you want to remove the device from this group.
    5. Click Delete in the dialog box to confirm the removal.
    The status indicator at the top-left of the screen now reports Standalone on both BIG-IQ devices.
  2. Use a secure copy method to copy the image (ISO) to the /shared/images directory on both devices formerly in the HA configuration.
    You can use SCP, FTP, SFTP or any other means of securely transferring ISOs between hosts.
    scp <big-iq-iso-name> root@<big-iq-standby-node-url>:/shared/images/.
Both devices are now standalone and have the same ISO file on them.

Upgrading BIG-IQ system (system interface)

After you have disconnected the HA redundant system configuration, you need to upgrade BIG-IQ® through the system user interface.
  1. This step applies to BIG-IQ devices running version 4.3 software; skip this step if your devices are running version 4.4 or 4.5 software, or if you use are using BIG-IQ Security which does not support upgrading from version 4.3. For version 4.3, repeat these substeps on both devices to upgrade the image on each.
    Note: BIG-IQ Security only supports upgrading from version 4.4 or 4.5 to version 4.6. Upgrading BIG-IQ Security from version 4.3 is not supported.
    1. Log in to the active BIG-IQ device and at the top-right corner of the screen, select System and Overview.
      The Localhost screen opens.
    2. Select Software Update from the options on the left.
      Information about the current software displays in the viewing area.
    3. From the Software Image list, select the image to use for the update. This is the image you downloaded.
    4. From the Install Location list, select the location to use for the update.
    5. For the Option setting, select both options.
    6. Click the Apply button in the lower-right corner of the panel.
      A pop-up screen prompts you to confirm that you want to reboot the device.
    7. Click the OK button in the pop-up screen.
      The BIG-IQ system loads the new software and reboots.
  2. This step applies to devices running version 4.4 software; skip this step if your devices are running version 4.3 or 4.5 software. For version 4.4, repeat these substeps on both devices to upgrade the image on each.
    1. On the BIG-IQ Systems panel, expand Management Group.
    2. Hover over the gear icon, then click it and select Properties.
    3. Click Software Update.
    4. Click Update.
    5. From the Software Image list, select the image to use for the update. This is the image you downloaded.
    6. From the Install Location list, select the location to use for the update.
    7. For the Options setting, click Reboot After Live Install.
  3. This step applies to devices running version 4.5 software; skip this step if your devices are running version 4.3 or 4.4 software. For version 4.5, repeat these substeps on both devices to upgrade the image on each.
    1. Log in to the active BIG-IQ System as administrator, and click Configuration.
    2. On the BIG-IQ Systems panel, expand HA Peer Group.
    3. Hover over the localhost device, click the gear icon, and select Properties.
    4. Click Software Update.
    5. Click Update.
    6. From the Software Image list, select the image to use for the update. This is the image you downloaded.
    7. From the Install Location list, select the location to use for the update.
    8. For the Options setting, click Reboot After Live Install.
  4. For both devices, verify that the image is booted on the correct volume using the command tmsh show sys software.
  5. On the BIG-IQ System user interface, re-establish the HA redundant system configuration.
    When re-establishing the HA configuration, the source device copies its common configuration data to the target device. The source device is the device where you start the process of re-instating the HA configuration. Select a source device whose configuration data is the most up-to-date.
    1. On the device you have selected to be the Primary/Active device, navigate to the BIG-IQ Systems panel, and hover over the gear icon for the HA Peer Group.
    2. Click Add Device.
      The New Device screen opens.
    3. Enter the HA Communication Address of the peer device, and administrator credentials for the secondary BIG-IQ device.
    4. For Network Security configurations, select Active-Standby as the High Availability Mode.
    5. Click the Add button.
    6. Affirm the confirmation to start the re-instatement process.
  6. On the BIG-IQ Systems panel, expand the HA Peer Group and monitor the status changes for the newly-added device.
    1. Monitor the status updates in the new device entry under the management group.
    2. Monitor the device/cluster status indicator at the top left of the screen.
      When the indicator changes to Active (Primary) the reinstatement of the redundant system configuration has completed successfully.
  7. Visually examine the configuration of both devices to verify that they are synchronized.
Each device has been upgraded and reinstated into a redundant system configuration. The upgrade is complete.
After the upgrade, to prevent potential BIG-IQ system user interface issues, clear the cache in the web browser you use to access the BIG-IQ system.

Upgrading BIG-IQ Security (CLI)

Use this procedure to upgrade BIG-IQ through a combination of the user (GUI) interface and the command-line interface (tmsh)
  1. Perform these steps on both devices.
    1. Upgrade the image (ISO) using the command:
      tmsh install sys software image big-iq-iso-image-name volume volume-name
      If installing a hotfix, in the previous example replace the keyword image with the keyword hotfix Also, when installing a hotfix, both the hotfix and the base version must be in the same directory.
    2. Monitor the progress of the upgrade using the command tmsh show sys software.
    3. Change the boot partition/volume using the switchboot command.
      It is critical that you include the switch -b in the following command.
      switchboot -b volume-name
    4. Reboot using the command reboot.
  2. On the BIG-IQ System user interface, re-establish the HA redundant system configuration.
    When re-establishing the HA configuration, the source device copies its common configuration data to the target device. The source device is the device where you start the process of re-instating the HA configuration. Select a source device whose configuration data is the most up-to-date.
    1. On the device you have selected to be the Primary/Active device, navigate to the BIG-IQ Systems panel, and hover over the gear icon for the HA Peer Group.
    2. Click Add Device.
      The New Device screen opens.
    3. Enter the HA Communication Address of the peer device, and administrator credentials for the secondary BIG-IQ device.
    4. For Network Security configurations, select Active-Standby as the High Availability Mode.
    5. Click the Add button.
    6. Affirm the confirmation to start the re-instatement process.
  3. On the BIG-IQ Systems panel, expand the HA Peer Group and monitor the status changes for the newly-added device.
    1. Monitor the status updates in the new device entry under the management group.
    2. Monitor the device/cluster status indicator at the top left of the screen.
      When the indicator changes to Active (Primary) the reinstatement of the redundant system configuration has completed successfully.
  4. Visually examine the configuration of both devices to verify that they are synchronized.
Each device has been upgraded and reinstated into a redundant system configuration. The upgrade is complete.
After the upgrade, to prevent potential BIG-IQ system user interface issues, clear the cache in the web browser you use to access the BIG-IQ system.
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)