-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Here is my draft ... I need help with the impact statement as I am unsure what is actually running out of 221 these days. I want to get this out ASAP today, so please comment at your earliest convenience. - ---------------- In response to the JC3-CIRC Tech Bulletin U-107, we will be performing a software upgrade on our core cisco nexus 5020 switch. There is currently an exploit in the wild which can cause the device to be rebooted remotely. There is currently no way to defend against this attack other than to upgrade. We will be migrating from version 4.2.1.N2.1 to 5.1.3.N1.1a. This is a major upgrade which may result in an extended upgrade period. For this reason, I am reserving a 30 minute timeslot for the work. I expect the upgrade to take no more than 10 minutes, but I cannot be sure. We have upgraded other units in the same way and have seen the times in the 10 minute range, but the vendor has stated that there can be complications causing it to take up to 30 minutes. If, by chance, we are exploited and the 5020 reboots, I have pre-staged the images such that when it comes back up it will be patched and no longer vulnerable. During the upgrade window access to many internal MCS systems will be impacted. This includes, but is not limited to, login nodes, compute nodes, file services, etc. Services that will NOT be impacted are cryptocard, core web services and email. I will provide an all-clear message when the work is done. Based on the impact to file services, it may be necessary to reboot desktop systems to clear problems. Please reboot your system if you are experiencing problems on Friday morning. If the problem persists, please contact the helpdesk. If you have any questions or concerns, please contact me at your earliest convenience. - -- Corby Schmitz Network Communication Operations and Support Manager Computer and Information Systems Division - - Network Engineer MREN/Starlight - -- Argonne National Laboratory 9700 S. Cass Ave. Argonne, IL 60439 Desk: 630-252-7664 Cell: 630-512-1502 E-mail: [email protected] -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) iD8DBQFPT4QNQhpwH3ALVFERAjDuAJ9XdYIN3RKp/PnRt36se2XMeqYumQCg05rZ gXITIKHZKOoEhn9lAtv1P74= =K86Z -----END PGP SIGNATURE-----