No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR500, AR510, and AR530 V200R007 Commands Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
USB-based Deployment Configuration Commands

USB-based Deployment Configuration Commands

autoupdate enable

Function

The autoupdate enable command enables the USB-based deployment function.

The undo autoupdate enable command disables the USB-based deployment function.

By default, the USB-based deployment function is disabled.

Format

autoupdate enable

undo autoupdate enable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

Use Scenario

  • If a device has the current configuration file (not an unconfigured device), you must run the autoupdate enable command to enable the USB-based deployment function before you can use a USB flash drive to upgrade the device.

  • If a device has no current configuration file (unconfigured), the device can be upgraded using a flash drive regardless of whether the USB-based deployment function is enabled.

Prerequisites

This command can take effect only after an authentication password for USB-based deployment is configured by the set usb autoupdate password command.

Precautions

If the USB-based deployment is enabled, the clear usb autoupdate password command disables the USB-based deployment function while deleting the authentication password for USB-based deployment.

Example

# Enable the USB-based deployment function.

<Huawei> system-view
[Huawei] set usb autoupdate password huawei123
[Huawei] autoupdate enable
Info: Enable Autoupdate successfully.   

clear usb autoupdate password

Function

The clear usb autoupdate password command deletes the authentication password for USB-based deployment.

Format

clear usb autoupdate password

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

To disable password authentication for USB-based deployment, run this command to delete the authentication password configured by the set usb autoupdate password command.

If the USB-based deployment and hash-based message authentication code (HMAC) check for USB-based deployment is enabled, the clear usb autoupdate password command also disables the USB-based deployment and the HMAC check. In this case, the device displays the following message "Info: Clear usb autoupdate password successfully, the hmac check and autoupdate are disabled."

If HMAC check is not enabled for USB-based deployment, the device displays the following information when you run the clear usb autoupdate password command "Info: Clear usb autoupdate password successfully."

Example

# Delete the authentication password for USB-based deployment.

<Huawei> system-view
[Huawei] clear usb autoupdate password

display autoupdate enable

Function

The display autoupdate enable command displays whether the USB-based deployment function is enabled.

Format

display autoupdate enable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

None

Example

# Check whether the USB-based deployment function is enabled.

<Huawei> system-view
[Huawei] display autoupdate enable
Autoupdate state: enabled.
Table 2-7  Description of the display autoupdate enable command output
Item Description

Autoupdate state

  • enabled: The USB-based deployment function is enabled.

  • disabled: The USB-based deployment function is not enabled.

display hmac enable

Function

The display hmac enable command displays whether the HMAC check function is enabled for USB-based deployment.

Format

display hmac enable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

None

Example

# Check whether the HMAC check function is enabled for USB-based deployment.

<Huawei> system-view
[Huawei] display hmac enable
Autoupdate hmac check state: enabled.
Table 2-8  Description of the display hmac enable command output
Item Description

Autoupdate hmac check state

  • enabled: The HMAC check function is enabled for USB-based deployment.

  • disabled: The HMAC check function is not enabled for USB-based deployment.

display usb autoupdate state

Function

The display usb autoupdate state command displays the USB-based deployment status.

Format

display usb usb-id autoupdate state

Parameters

Parameter Description Value
usb-id Specifies the USB interface ID. The value is an integer ranging from 0 to 1.

Views

User view

Default Level

3: Management level

Usage Guidelines

None

Example

# Display the USB-based deployment status.

<Huawei> display usb 1 autoupdate state
Info: Deployment using the USB flash drive is completed successfully.
Table 2-9  Description of the display usb autoupdate state command output

Item

Description

Info: Deployment using the USB flash drive is completed successfully.

USB-based deployment is successful.

Info: Deployment using a USB flash drive is not performed.

USB-based deployment has not started.

Info: Deployment using a USB flash drive is in progress, please wait....

USB-based deployment is in progress.

Info: Deployment using the USB flash drive failed!

USB-based deployment fails.

hmac enable

Function

The hmac enable command enables the hash-based message authentication code (HMAC) check function for USB-based deployment.

The undo hmac enable command disables the HMAC check function for USB-based deployment.

By default, the HMAC check function is disabled.

Format

hmac enable

undo hmac enable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

Use Scenario

To improve security of USB-based deployment, you can run the hmac enable command to enable the HMAC check function for USB-based deployment.

After HMAC check is configured for USB-based deployment, the device uses the password configured by the set usb autoupdate password command as the key to calculate an HMAC based on the HMAC-SHA256 algorithm for a specific file. Then the device compares the calculated HMAC with the value of the HMAC field in the index file. If the two HMAC values are the same, the device considers the file to be downloaded valid.

Prerequisites

An authentication password has been configured using the set usb autoupdate password command.

Precautions

If HMAC check is enabled for USB-based deployment, the clear usb autoupdate password command disables the HMAC function while deleting the authentication password for USB-based deployment.

Example

# Enable the HMAC check function for USB-based deployment.

<Huawei> system-view
[Huawei] set usb autoupdate password huawei123
[Huawei] hmac enable
Info: Enable Autoupdate hmac check successfully.   

set usb autoupdate password

Function

The set usb autoupdate password command configures an authentication password for USB-based deployment.

Format

set usb autoupdate password password

Parameters

Parameter Description Value
password Sets the authentication password used in USB-based deployment. The value is a string of 8 to 64 characters in plain text without spaces, or a string of 8 to 108 characters in cipher text without spaces. The string must contain at least two types of the following: uppercase letters (A to Z), lowercase letters (a to z), digits, and special characters.

Views

System view

Default Level

3: Management level

Usage Guidelines

The authentication password configured by this command is used in the following scenarios:
  • When hash-based message authentication code (HMAC) check is enabled, the device uses this password as the key to calculate the HMAC.

    NOTE:

    Currently, the HMAC can only be calculated using the HMAC-SHA256 algorithm.

  • When downloading an encrypted configuration file from the USB flash drive, the device uses this password to decrypt the configuration file.

    NOTE:
    Currently, configuration files can be encrypted only when they are being compressed into .zip format. The following encryption methods can be used:
    • Simple text encryption: For example, when you compress a .cfg configuration file into a .zip file, you can enter a password in the compression software to encrypt the configuration file.

    • AES256 encryption algorithm: For example, when you compress a .cfg configuration file into a .zip file, you can select the AES256 mode and enter a password in the compression software to encrypt the configuration file. This encryption method is recommended because it is more secure.

    The password used to encrypt the configuration file must be the same as the password configured by the set usb autoupdate password command.

Example

# Set the authentication password used in USB-based deployment to huawei123.

<Huawei> system-view
[Huawei] set usb autoupdate password huawei123
Translation
Download
Updated: 2019-05-29

Document ID: EDOC1000097293

Views: 48079

Downloads: 102

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next