ONTAP upgrade aborted on task "Upgrade firewall services for deprecation"
Applies to
- ONTAP 9
- Automated nondisruptive upgrade (ANDU)
Issue
- All nodes boot on target ONTAP version but ANDU is paused-on-error
- Output of
cluster image show-update-progress
shows:
Estimated Elapsed
Update Phase Status Duration Duration
-------------------- ----------------- --------------- ---------------
Pre-update checks completed 00:10:00 00:00:54
ONTAP updates paused-on-error 02:34:00 102 days 01:58
Details:
Node name Status Status Description
-------------------- ----------------- --------------------------------------
cluster-01 completed
cluster-02 completed
cluster-03 failed Error: Node "cluster-03" is not in
"connected" state after giveback.
Action: Use the "storage failover
show" command to verify that node
"cluster-03" is in the "connected"
state, and then use the "cluster
image resume-update" command to
resume the update.
cluster-04 completed
- Output of advanced command
system node upgrade-revert show
indicates error:
Node: cluster-03 Status: aborted
Status Message: The upgrade aborted in the "post-apps" phase on task "Upgrade firewall services for deprecation". Contact support personnel for the upgrade repair procedure.
- VIFMGR logs report inability to find a port for LIF:
[LifServices::assignSkFirewallPolicies] unexpected error: Internal error. Failed to apply changes to LIF "cluster_lif_3": Failed to locate a port with numeric id "4294967295".
- During upgrade, network interface card (NIC), which includes home port of the affected LIF, failed (not present in SYSCONFIG-A output) and was replaced