Upgrading both switches at the same time from 10.00 to 10.02

Prerequisites

Ensure that you have a scheduled maintenance window. There will be a disruption of service until the upgrade is complete and VSX is configured on the switches. It is advisable to have a support engineer from HPE available during this procedure.
If you have enabled loop protect, enter the show loop-protect command for verifying that the action on loop detection has a value of TX disable on the MCLAG interface. If the setting has a different value, reset the value to TX disable by entering the loop-protect action tx-disable command:
```
switch# configure terminal
switch(config)# interface lag 2 multi-chassis
switch(config-if)# loop-protect action tx-disable
```
Back up the current software to the secondary image bank. Run the show version command. If the Active Image is primary, copy the primary image to the secondary image bank:
```
switch# copy primary secondary
```
If the current image bank is secondary, the current image, such as for 10.00, is already in the secondary bank.

Save a copy of the running configuration on both switches:

switch# copy running-config sftp://<username>@<IP>/filename vrf mgmt

Examine the files for your current configuration. Determine the appropriate VSX commands that will need to be run after the software on the device is upgraded. Many MCLAG commands have changed in this release. See MCLAG to VSX command equivalency for finding the equivalent VSX commands.
Check the status of the show mclag brief command and validate the ISL is in-sync and the keepalive is established.
Check the output of the show lacp interfaces command and note which LACP interfaces are in a forwarding state of up.

Procedure

Ensure that you are in a maintenance window as both switches will no longer be forwarding network traffic.
Copy the software from this release onto both switches by using TFTP, SFTP, or USB:
```
switch# copy sftp://<username>@<ip>/XL_10_02_0001.swi primary vrf mgmt
```
Boot each switch to the 10.02 software release:
```
switch# boot system primary
```
After each switch has booted, the MCLAG and active gateway configurations are removed.

With the information you learned about your configuration in step 5 in prerequisites, configure VSX on each of the switches. Configure one switch with the primary role and its peer switch with the secondary role.

On the primary switch, enter:

switch(config)# vsx 
switch(config-vsx)# role primary
switch(config-vsx)# inter-switch-link 1/1/1 
switch(config-vsx)# keepalive peer 10.0.0.1 source 10.0.0.2 
switch(config-vsx)# exit
switch(config)# interface vlan 10
switch(config-if-vlan)# active-gateway ip 10.1.1.1 mac 00:00:5E:00:53:FF

On the secondary switch, enter:

switch(config)# vsx 
switch(config-vsx)# role secondary
switch(config-vsx)# inter-switch-link 1/1/1 
switch(config-vsx)# keepalive peer 10.0.0.2 source 10.0.0.1 
switch(config-vsx)# exit
switch(config)# interface vlan 10
switch(config-if-vlan)# active-gateway ip 10.1.1.1 mac 00:00:5E:00:53:FF

The MCLAG conversion to VSX is complete. Validate on both switches that the ISL is In-Sync by running the show vsx brief command on both switches. Verify in the output of the command that the keepalive state is Keepalive-Established.
Validate on both switches that the downstream LACP links are all forwarding correctly by entering the show lacp interfaces command.
Configure VSX-related features as needed. Consult this guide for additional information about VSX features, such as VSX configuration synchronization and active forwarding.
Save the running configuration to the startup configuration:
```
switch# write memory
Success
```