NetEngine AR V300R019 配置指南-基础配置(命令行)
配置智能升级功能示例
当大量的设备需要升级至推荐的版本时,可以配置智能升级功能,实现设备的快速升级部署。
组网需求
如图15-3所示,RouterA、RouterB和RouterC处于公网环境中,且通过Internet可以与HOUP平台互通。设备的默认存储介质中已保存HOUP平台的证书(houp.huawei.com_local.cer和Actalis_CA.cer),现需配置智能升级功能,通过连接HOUP平台实现系统软件或补丁的在线升级。
V300R019C11SPC100及之后版本不支持导入本地证书houp.huawei.com_local.cer。
配置过程
RouterA、RouterB和RouterC的配置过程类似,本文以RouterA为例:
- 在RouterA上配置名称为defaultPki_houp的PKI域并导入证书。
<Huawei> system-view [Huawei] pki realm defaultPki_houp [Huawei-pki-realm-defaultPki_houp] quit [Huawei] pki import-certificate local realm defaultPki_houp pem filename houp.huawei.com_local.cer [Huawei] pki import-certificate ca realm defaultPki_houp pem filename Actalis_CA.cer
- 在RouterA上配置SSL策略并绑定到名称为defaultPki_houp的PKI域。
[Huawei] ssl policy defaultPolicy_houp type client [Huawei-ssl-policy-defaultPolicy_houp] pki-realm defaultPki_houp [Huawei-ssl-policy-defaultPolicy_houp] server-verify enable [Huawei-ssl-policy-defaultPolicy_houp] quit
- 在RouterA上配置智能升级功能。
[Huawei] smart-upgrade enable [Huawei] smart-upgrade information telephone 123456789 email test@huawei.com [Huawei] quit
- 查看当前智能升级的详细信息。
<Huawei> display smart-upgrade information Info:Loading the information.Please wait for a few minutes. Scheduled upgrade: Enable Next upgrade time: 2019-07-17 23:00:00 Check for new version: Upgrade required Recommended software version: V300R019C00SPC200 Recommended patch version: None Upgrade description: Firmware and Patch Description in English:1)description:2)description: Info update time: 2019-07-11 14:17:06 Cancellation status: Initial Upgrade status: Initial Software package size(B): 155945856 Patch package size(B): 0 Download progress(%): 0 Download speed(KB/s): 0.00 Download status: notStart Software package name: AR651-V300R019C00SPC200.cc Patch package name: None Patch type: None Last upgrade type: now Last upgrade time: 2019-06-29 15:49 Last upgrade result: None Device name: AR651 ESN: 21500102152SF5900070 SoftWare version: V300R019C00SPC100 Patch version: None Last startup software:: flash:/AR651_spc200.cc Last startup patch: None Backup configuration file: vrpcfg_auto_backup.zip Last startup voice package: None Last startup license: None
回显中显示“Check for new version: Upgrade required”,表明有新版本系统软件可升级。
- 立即执行智能升级任务。
<Huawei> system-view [Huawei] smart-upgrade right-now Info: Connecting to the smart upgrade platform...Please wait for a few minutes. Info: Starting to download file AR651-V300R019C00SPC100.cc 100% Info: Downloading file AR651-V300R019C00SPC100.cc succeeded. smart-upgrade: 155944876 byte(s) received in 433 second(s) 355.71Kbyte(s)/sec. Info: Starting to download file AR651-V300R019C00SPC100.cc.asc Info: Verifying the system software package using the signature file .................... ........ Info: Verification succeeded. Info: The device needs to be reboot to proceed with the upgrade. Continue? (Y will be selected by default 30 seconds later)(Y/N)[Y]:Y
设备重启,然后升级新版本软件。
检查升级结果
查看升级后软件版本信息。
[Huawei] display version Huawei Versatile Routing Platform Software VRP (R) software, Version 5.170 (AR651 V300R019C00SPC200) Copyright (C) 2011-2018 HUAWEI TECH CO., LTD Huawei Router uptime is 2 weeks, 6 days, 20 hours, 11 minutes MPU 0(Master) : uptime is 2 weeks, 6 days, 20 hours, 10 minutes SDRAM Memory Size : 512 M bytes Flash 0 Memory Size : 512 M bytes USB Disk0 Memory Size: 12 M bytes MPU version information : 1. PCB Version : AR651 VER.C 2. MAB Version : 0 3. Board Type : AR651 4. BootROM Version : 1