A software upgrade in a network node that includes primary and secondary control modules is provided by downloading a computer software upgrade onto the secondary control module, selecting the computer software upgrade to use on reboot of the secondary control module, rebooting the secondary control module using the computer software upgrade, and switching control of the network node from the primary control module to the secondary control module after the rebooting.