FortiGate/FortiAp Rolling Upgrade does not work?

[Jakob-AHHG]

Hi All,

I'm installing 250+ FortiAP's on a new site, and to test rolling-wtp-upgrade, I disabled "FortiAP auto firmware provisioning" so I could test 'rolling-upgrade'.

FG: 7.4.3

1: Rolling Upgrade never gets past first 5 AP's

Selecting many AP's (10-25 tested here), after enabling rolling-wtp-upgrade and starting a FW upgrade from the FortiGate, it always start FW upgrade on first semi-randomly-selected AP's, but after those 5 move to 'Reboting...' it never moves on. I have let it run more that 30 minutes multible times.

Anyone have this working?

2: Disabling Rolling Upgrade still uses RU..? ;)

Now, after I went to CLI and disabled rolling-wtp-upgrade, I did 2 more upgrades on 25 AP's, but FG is still only updating the first 5 AP's in the list.. 

Is this feature (hidden in CLI) just not mature, or broken, in 7.4.3??

After this, I've set up a Firmware Template in FortiManager and updated all the AP's from there. That seems to have worked, but not in a rolling-upgrade way, so ones we go into production monday, I will have to consider when we do this.

config wireless-controller setting

  set rolling-wtp-upgrade disable

end

[Anthony_E]

Hello Jakob,

I hope you are doing well :)!

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello Jakob,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[ebilcari]

This looks like a behavior caused by Hitless Rolling AP upgrade, "The APs are then upgraded in staggered process with some APs being immediately upgraded while others continue to provide Wi-Fi service to clients and are placed in a standby queue"

You can also enable automatic firmware updates and let FGT take car of the upgrade procedure.

[Jakob-AHHG]

Hi @ebilcari 
Yes, I had that enabled via CLI, but it never moves on from the first 5 AP's it starts upgrading when started. I have waited for at least an hour 2-3 times, with same results:

5 gets upgraded, the rest is left on old version.

[ebilcari]

What is the status for the other APs, are they showing the status "ISSU queued"? If yes, that means that they have connected clients that can't migrate to other APs and they will be upgraded at a later time.

[Jakob-AHHG]

Ok, I will give it another go, and test.

[Jakob-AHHG]

Hmm, re-enabled the rolling-update:

vFG-WLC-PHO (setting) # show
config wireless-controller setting
set country DK
set duplicate-ssid enable
set rolling-wtp-upgrade enable
set darrp-optimize-schedules "default-darrp-optimize"
end

Selected 23 AP's, and selected a local FW image.

Hit Update, and then it updated 16 AP's in first go, and instantly the last AP's when the first rebooted... 

Now the Progress has ended in 'Rebooting...' on all AP's, and has been like that for 15 minutes.
Opening the FG/WLC via a new browser, the AP's are back online a long time ago...