S1700, S2700, S5700, and S6700 V200R020C10 Upgrade Guide
S1700, S2700, S5700, and S6700 V200R020C10 Upgrade Guide
S1700, S2700, S5700, and S6700 V200R020C10 Upgrade Guide
Switches
V200R020C10
Upgrade Guide
Issue 01
Date 2021-05-10
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their
respective holders.
Notice
The purchased products, services and features are stipulated by the contract made between
Huawei and the customer. All or part of the products, services and features described in this
document may not be within the purchase scope or the usage scope. Unless otherwise specified in
the contract, all statements, information, and recommendations in this document are provided "AS
IS" without warranties, guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Overview
This document describes the upgrade and rollback procedure for S1700, S2700, S5700, and
S6700 Series Ethernet Switches V200R020C10 and provides solutions to common problems.
Intended Audience
This document is intended for operators that will perform an upgrade. Maintenance personnel
must have the following qualifications:
Be familiar with the existing networking and version information of network elements
(NEs).
Have device maintenance experience and master device operation and maintenance
(O&M) methods.
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol Description
Symbol Description
Contents
2 Upgrade Flowchart......................................................................................................................15
3 Preparations for Upgrade...........................................................................................................16
3.1 Preparation Checklist....................................................................................................................................................16
3.2 Obtaining Upgrade Reference Documents...................................................................................................................17
3.3 Obtaining Tools............................................................................................................................................................17
3.4 Obtaining Required Software for the Upgrade.............................................................................................................17
3.5 Preparing the Latest Patch............................................................................................................................................19
3.6 Verifying Software Integrity.........................................................................................................................................19
3.7 (Optional) Obtaining the License File for the Target Version......................................................................................20
3.7.1 Obtaining the License File in Typical Scenarios.......................................................................................................20
3.8 Preparing the Configuration File..................................................................................................................................20
3.9 Checking the Current System Software Version..........................................................................................................20
3.10 Checking the Switch Running Status.........................................................................................................................21
3.11 Setting Up an Environment for the Upgrade..............................................................................................................21
3.12 Backing Up the Key Data in the Flash Memory........................................................................................................23
3.13 Checking the Flash Memory Space............................................................................................................................24
Issue ()
Contents
Issue ()
Contents
9 Version Rollback.......................................................................................................................119
9.1 Version Rollback.........................................................................................................................................................119
9.1.1 Version Rollback Flowchart....................................................................................................................................119
Issue ()
Contents
Issue ()
S1700, S2700, S5700, and S6700 Series Ethernet
Switches
Upgrade Guide 1 Before You Start
A C version may contain multiple SPC versions. This document involves only the C versions and global
commercial SPC versions.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
V200R019C10SPC500
V200R020C00SPC200
V200R020C00SPC300
S1730S-H:
V200R019C10SPC500
V200R020C00SPC200
V200R020C00SPC300
S1730S-S:
V200R019C00SPC500
V200R019C10SPC500
V200R020C00SPC200
V200R020C00SPC300
S2720: These versions can be directly upgraded to
V200R011C10SPC500 V200R020C10 (including the SPC versions
of S2720 V200R020C10).
V200R011C10SPC600
Some commands will be modified after the
V200R012C00SPC500 upgrade. For details, see the Release Notes
V200R013C00SPC500 of the corresponding versions.
V200R019C00SPC500
V200R019C10SPC500
V200R020C00SPC200
V200R020C00SPC300
S5700: These versions can be directly upgraded to
V200R010C00SPC600 V200R020C10 (including the SPC versions
of S5700 V200R020C10).
V200R011C00SPC200
Some commands will be modified after the
V200R011C10SPC500 upgrade. For details, see the Release Notes
V200R011C10SPC600 of the corresponding versions.
V200R012C00SPC500
V200R012C20
V200R013C00SPC500
V200R013C02
V200R019C00SPC500
V200R019C10SPC500
V200R020C00SPC200
V200R020C00SPC300
S6700: These versions can be directly upgraded to
V200R008C00SPC500 V200R020C10 (including the SPC versions
of S6700 V200R020C10).
V200R009C00SPC500
Some commands will be modified after the
V200R010C00SPC600 upgrade. For details, see the Release Notes
V200R011C00SPC200 of the corresponding versions.
V200R011C10SPC500
V200R011C10SPC600
V200R012C00SPC500
V200R013C00SPC500
V200R013C02
V200R019C00SPC500
V200R019C10SPC500
V200R020C00SPC200
V200R020C00SPC300
The service interruption time depends on many factors, such as the system software size, upgrade
method, operator's skill, and service configurations. The following service interruption time is for your
reference.
In the following examples, the switches are not configured and they are not in any stack.
If the switches are upgraded using the BootROM and the system software is uploaded
through the console port, the service interruption time is as follows (the baudrate is
115200): 50 minutes.
If the switches are upgraded using the BootROM and the system software is uploaded
through the network port (FTP mode), the service interruption time is as follows: 6
minutes.
If the switches are upgraded using the command line, the service interruption time is as
follows: 5 minutes.
When a device has typical configurations, services are interrupted for about 10 minutes during a
command-line upgrade. In the scenario where service deployment is complicated, the service
interruption time increases and the time depends on the complexity of services.
1.3 Precautions
BootROM/BootLoad
password to the default
value, and then specify
the system software.
Otherwise, the
BootROM/BootLoad
password will become
invalid or the switch
works abnormally. If the
BootROM/BootLoad
password has become
invalid after downgrade,
run the reset boot
password command
again to restore the
password to the default
value.
When the system software
of a switch is
downgraded from
V200R011C10 or a later
version to V200R010 or
an earlier version, you
need to restore the
default BootLoad
password; otherwise, the
downgrade may fail.
When the startup
system-software
command is run, the
system displays a prompt
and the current password
is cleared only after the
user confirms the
operation. If you perform
the downgrade operation
using tools such as the
NMS, no prompt is
displayed and the current
password is directly
cleared after the
downgrade. The
password clearance
operation is recorded in a
log.
After a cloud switch is
downgraded to
V200R011C10 and
managed by the Agile
Controller again, you
need to change the
MEth0/0/2 IP address of
encrypted configuration
file to the USB flash
drive. These operations
prevent configuration
leak during upgrade.
If the configuration file of
a switch contains the
http server load
configuration, this
configuration will not be
restored after the
software version of the
switch is upgraded to
V200R007 or later.
3 Versions earlier than After the software version
V200R008C00 is upgraded to
V200R008C00 or later,
the log and alarm
thresholds for interface
bandwidth usage are
80%. To change the
thresholds, run the log-
threshold input-rate
output-rate and trap-
threshold input-rate
output-rate commands.
When an earlier version is
upgraded to
V200R008C00 or later,
the storm control mode
is automatically changed
from kbps or percentage
to pps. The storm control
function is not affected.
4 Versions earlier than In V200R009 and later
V200R009C00 versions, the default
broadcast suppression
threshold is changed to
10%. If the default
threshold (100%) is used
in earlier versions, the
buildrun is not generated
after the software version
is upgraded to
V200R010 or a later
version. In this situation,
the broadcast
suppression threshold on
interface is 10%. The
buildrun is generated for
other configurations after
the upgrade.
When the number of
request packet
retransmissions, timeout
period, and the number
of RADIUS server Down
detections and interval
retain the default values,
if only one user is
authenticated and goes
online, this user cannot
detect the Down state of
the RADIUS server and
cannot enter the survival
state. To avoid this
problem, adjust the
parameter settings, to
make the user quickly
detect the server Down
state and enter the
survival state. For
example, run the radius-
server retransmit retry-
times command to set the
number of packet
retransmissions to 2, run
the radius-server
timeout time-value
command to set the
timeout period to 2s, run
the radius-server dead-
count dead-count
command to set the
maximum number of no
response times to 2, and
run the radius-server
dead-interval dead-
interval command to set
the server status
detection interval to 5s.
With these settings, a
single user can enter the
survival state within 10s.
5 Versions earlier than After a switch running a
V200R010C00 version earlier than
V200R010C00 is upgraded
to V200R010C00 or a later
version, the source port
number of RADIUS packets
is changed from 1812 or
1813 to a random value in
the range from 1 to 65535.
0b-0c-xx-xx-xx.
Otherwise, the switch
cannot ping other
devices after the
upgrade.
By default, the S1720GW-
E, S1720GWR-E,
S1720GF, S1720GFR-P,
S2720-EI, S5720I-SI,
S5720-LI, and S5720S-
LI in a version earlier
than V200R013C00 do
not trust priorities of
packets. If the trust
command is not executed
to change the switches to
trust 802.1p or DSCP
priority of packets, the
switches will process
packets based on the
mapping of the 802.1p
priority after they are
updated to
V200R013C00 and later
versions.
9 Versions earlier than After a switch is upgraded
V200R019C00 to V200R019C00 or a
later version through the
Agile Controller-
Campus, the original
CLI configurations can
only be modified on the
Agile Controller-
Campus. This is because
the related commands
are blacklisted in the
target version.
After switches using ENP
and BCM chips are
upgraded to
V200R019C00 or a later
version, they change the
DSCP and 802.1p
priorities of packets
based on the authorized
DSCP and 802.1p
values.
In V200R019C00 and
later versions, the cloud-
based management mode
and NETCONF mode
reboot command is
executed to restart any
stack member. If the
stacking function is
enabled on a single
switch, the system
software package for the
next startup is earlier
than V200R019C10, and
the stack slot renumber
command is executed to
change the stack ID of
the switch to a non-zero
value, then the stack
configuration of the
switch will be cleared
and the slot-ID-related
configuration cannot be
restored after the reboot
command is executed to
restart the switch.
User CAC and load
balancing based on the
channel utilization are
not supported in
V200R019C10. If these
function are configured
before an upgrade, the
function settings will be
restored to the defaults
after the upgrade.
The DBS function is
enabled by default in
V200R019C10. If this
function is not
configured before the
upgrade, the new default
value is used after the
upgrade.
For the V200R019C10
and later versions, the
S5735-S and S5735S-S
support only URPF
check in loose mode. If
URPF check in strict
mode is configured in
V200R019C00, the
configuration will be
changed to URPF check
in loose mode after the
version is upgraded to
V200R019C10 or later.
In V200R020C00 and
later versions, the default
BootLoad password is
deleted. If no BootLoad
password is configured
on a switch running a
version earlier than
V200R020C00, the
BootLoad login
password must be
configured when you log
in to the BootLoad menu
after the switch is
upgraded to
V200R020C00 or a later
version.
If a switch running a
version earlier than
V200R020C00 is
configured with the
radius server
authorization
command, the radius-
server authorization
server-source all-
interface command is
automatically delivered
after the switch is
upgraded to
V200R020C00 or a later
version.
In versions earlier than
V200R020C00, if a
cloud switch has the
native AC function
enabled and has both a
locally loaded AP license
and a cloud management
AP license obtained from
the controller, the locally
loaded license is
preferentially used and
the controller does not
manage APs. After the
switch is upgraded to
V200R020C00 or a later
version, the cloud
management AP license
obtained from the
controller is
preferentially used.
For the S1730S-S,
S1730S-H, S5735-L,
S5735S-L, S5735S-L-M,
S5735-S, and S5735S-S:
The relative aging time
function in port security
is no longer supported in
V200R020C00 and later
versions. If a switch
running a version earlier
than V200R020C00 has
the port-security aging-
time time type inactivity
command configured,
this configuration still
takes effect after the
switch is upgraded to
V200R020C00 or a later
version.
In V200R020C00SPC300
and later versions, the
PKI module uses the
enhanced key algorithm
for encryption and
decryption by default.
The enhanced key
algorithm is
incompatible with the
key algorithm used by
the PKI module in
versions earlier than
V200R020C00SPC300.
Therefore, before
downgrading a device
from
V200R020C00SPC300
or a later version to a
version earlier than
V200R020C00SPC300,
run the undo pki key
enhance enable
command to disable this
function so that the PKI
module uses the same
key algorithm before and
after the device
downgrade, ensuring
service continuity.
15 Versions earlier than In V200R020C10SPC100
V200R020C10SPC100 or later versions, you
must specify the source
IP address or source
interface used for
be specific, in versions
earlier than
V200R020C10SPC100,
you do not need to
specify the source IP
address or source
interface used for
connecting to terminals.
However, in
V200R020C10SPC100
and later versions, you
must run the portal web-
authen-server server-
source all-interface or
portal web-authen-
server server-source ip-
address ip-address
command to specify the
source IP address or
source interface used for
connecting to the
terminal. If the
HTTP/HTTPS-based
Portal authentication
function is enabled in a
version earlier than
V200R020C10SPC100,
the portal web-authen-
server server-source
all-interface command
will be generated after
the version is upgraded
to
V200R020C10SPC100
or later to enable services
of all interfaces. This
ensures that services are
not affected.
In V200R020C10SPC100
or later versions, you
must specify the source
IP address or source
interface used for
connecting to the
RADIUS server before
enabling the RADIUS
session management
function. To be specific,
in versions earlier than
V200R020C10SPC100,
you do not need to
specify the source IP
address or source
S1720GFR, S1720GW-E,
S1720GWR-E, S1720X-E,
S2750EI, S5720LI, S5720S-
LI, S6720LI, S6720S-LI,
S5700S-LI, S5700LI,
S5710-X-LI, S5720S-SI,
S5720SI, S5730SI, S5730S-
EI, S6720SI, or S6720S-SI,
the device broadcasts
unknown multicast traffic in
a VLAN if the MAC
address-based Layer 2
multicast forwarding mode
is used, and discards
received unknown multicast
traffic if the IP address-
based Layer 2 multicast
forwarding mode is used.
2 Upgrade Flowchart
In the following sections, the S6730-H is used as an example to describe the upgrade procedure.
1 Log in to http://support.huawei.com/enterprise.
Step 1 Search for S1700, S2700, S5700, and S6700 V200R020C10 to obtain the latest product
documents and release notes.
----End
Huawei does not provide the SFTP server, FTP server, or TFTP server software. Obtain and install the
software before the upgrade.
S5720S-LI-bootloader.bin
S5720I-SI: S5720SI-uboot.bin,
S5720SI-bootloader.bin
S5720SV2-LI: S5720SV2-LI-uboot.bin,
S5720SV2-LI-bootloader.bin
S5731-H: S5731-H-uboot.bin, S5731-H-
bootloader.bin
S5731S-H: S5731S-H-uboot.bin,
S5731S-H-bootloader.bin
S5731-S: S5731-S-uboot.bin, S5731-S-
bootloader.bin
S5731S-S: S5731S-S-uboot.bin, S5731S-
S-bootloader.bin
S5732-H: S5732-H-uboot.bin, S5732-H-
bootloader.bin
S5735-L: S5735-L-uboot.bin, S5735-L-
bootloader.bin
S5735S-L/S5735S-L-M: S5735S-L-
uboot.bin, S5735S-L-bootloader.bin
S5735-S: S5735-S-uboot.bin, S5735-S-
bootloader.bin
S5735S-S: S5735S-S-uboot.bin, S5735S-
S-bootloader.bin
S6720-EI/S6720S-EI: S6720EI-
uboot.bin, S6720EI-bootloader.bin
S6730-H: S6730-H-uboot.bin, S6730-H-
bootloader.bin
S6730S-H: S6730S-H-uboot.bin,
S6730S-H-bootloader.bin
S6730-S: S6730-S-uboot.bin, S6730-S-
bootloader.bin
S6730S-S: S6730S-S-uboot.bin, S6730S-
S-bootloader.bin
If the target version does not have a matching patch file, skip this step.
To obtain the latest patch of the target system software version, contact Huawei technical
support engineers or visit http://support.huawei.com/enterprise/.
To prevent security risks, do not upload an incomplete software package to the switch.
Using the OpenPGP Tool to Verify Integrity of a ZIP Package or Single File
To prevent a software package from being maliciously tampered with during transmission or
storage, download the corresponding digital signature file for integrity verification when
downloading the software package.
After the software package is downloaded, verify its PGP digital signature according to the
OpenPGP Signature Verification Guide. If the software package fails the verification, do not
use the software package, and contact Huawei technical support engineers.
Before a software package is used in installation or upgrade, its digital signature also needs to
be verified according to the OpenPGP Signature Verification Guide to ensure that the software
package is not tampered with.
Visit either of the following websites to obtain the OpenPGP Signature Verification Guide:
Carrier customers: https://support.huawei.com/carrier/digitalSignatureAction.
Enterprise customers: https://support.huawei.com/enterprise/en/tool/pgp-verify-
TL1000000054.
<HUAWEI> display version #The storage capacity may vary depending on the
actual environment.
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (S6730 V200R020C00SPC300)
RPS information
RPS Version : 020a.0002
Figure 3.11.1.1.1.1.1 Network diagram of upgrading the system through TFTP or FTP
1 Run the dir command to check whether the flash memory space is sufficient for the upgrade file. For
a stack system, ensure that sufficient space is available for all member switches. The preceding information shows
that there is 4,544 KB space.
<HUAWEI> dir
Directory of flash:/
In the following example, the name of the device where the slave MPU resides in the stack is
slot1#flash.
<HUAWEI> cd slot1#flash:
<HUAWEI> dir
Directory of slot1#flash:/
Before deleting the system software (with the file name extension .cc), configuration file (with the file
name extension .cfg or .zip), license file (with the file name extension .dat), web file (with the file name
extension .web.zip or .web.7z), patch file (with the file name extension .pat), and plugin (with the file
name extension .mod), ensure that they are not in use.
Run the delete command to delete redundant files to ensure that there is enough space for
storing relevant upgrade files. Confirm that the file you want to delete has been backed up or
is not needed. In this example, the s6730.cc file is deleted. For details, see File Management
in the CLI-based Configuration Guide - Basic Configuration.
After you run the delete/unreserved command to delete a file from the flash memory, the file
cannot be restored; therefore, run this command with caution, and a file backup is
recommended.
If the slave MPU has insufficient space, delete redundant files from the slave MPU to release
space. For example, the name of the device where the slave MPU resides is slot1#flash and
the file to be deleted is s6730.cc.
<HUAWEI> cd slot1#flash:
<HUAWEI> delete /unreserved s6730.cc
----End
The methods of upgrading the system software using command line are similar on the S1700,
S2700, S5700, and S6700. In the following description, the system software of the S6730-H is
upgraded.
The MEth interface can be used as a Layer 3 interface.
Before the upgrade, use the terminal monitor command to enable the terminal to display logs,
traps, and debugging information sent from the information center.
In the following sections, the patch to be installed is S6730-H-V200R020SPH001.pat.
You can use any of the following methods to load the system software:
Use the S6730-H as the TFTP client.
Huawei does not provide the TFTP server software. Obtain and install the software before the upgrade.
Do not stop the TFTP server program when you are backing up data.
Step 1 Back up the system software, configuration file, and patch file to the TFTP server.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
Before the backup, check the size of the files. After the backup, compare the size of the
original file with the size of the backup file. Ensure that the two files have the same size.
<HUAWEI> dir *.cc
Directory of flash:/
Run the following commands on the switch to back up the data. The backup system software
is s6730-h-v200r020c00spc300-bak.cc, the backup configuration file is vrpcfg-bak.zip, and
the backup patch file is s6730-h-v200r020sph001-bak.pat.
<HUAWEI> tftp 10.164.30.29 put s6730-h-v200r020c00spc300.cc s6730-h-
v200r020c00spc300-bak.cc
Info: Transfer file in binary mode.
Uploading the file to the remote TFTP server. Please wait...|
TFTP: Uploading the file successfully.
14083796 byte(s) sent in 91 seconds.
<HUAWEI> tftp 10.164.30.29 put vrpcfg.zip vrpcfg-bak.zip
Info: Transfer file in binary mode.
Uploading the file to the remote TFTP server. Please wait.../
TFTP: Uploading the file successfully.
3284 byte(s) sent in 0.01 second(s).
<HUAWEI> tftp 10.164.30.29 put s6730-h-v200r020sph001.pat s6730-h-v200r020sph001-
bak.pat
Info: Transfer file in binary mode.
Uploading the file to the remote TFTP server. Please wait...\
TFTP: Uploading the file successfully.
90602 byte(s) sent in 1 second(s).
Step 2 Obtain the system software of the target version from the server.
<HUAWEI> tftp 10.164.30.29 get S6730-H-V200R020C10.cc
Info: Transfer file in binary mode.
Downloading the file from the remote TFTP server. Please wait.../
TFTP: Downloading the file successfully.
14,701,348 byte(s) received in 93 second(s).
If the message "Downloading the file successfully" is displayed, the system software has
been downloaded.
If the file size is too large, file transfer may require more than 2 minutes.
Downloading the file from the remote TFTP server. Please wait...\
TFTP: Downloading the file successfully.
1748 byte(s) received in 1 second(s).
Step 6 Specify the system software that is loaded when the switch starts.
<HUAWEI> startup system-software S6730-H-V200R020C10.cc
If the following information is displayed when you run the startup system-software file command,
enter Y to update the BootROM. When the update is successful, the system proceeds to the next step. If
the following information is not displayed, go to the next step.
Warning: Basic BootROM will be upgraded. Continue?(Y/N)[N]: y
Upgrading BootROM,please wait for a moment...
Step 7 (Optional) Specify the configuration file for the device startup.
<HUAWEI> startup saved-configuration vrpcfgnew.zip
Info: Succeeded in setting the configuration for booting system.
Step 8 Specify the patch file that is loaded when the switch starts.
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat
----End
Huawei does not provide the FTP client software. Obtain and install the software before the upgrade.
Start the FTP server on the switch, and set the FTP user name to ftpuser, password to
admin@123456, and FTP working directory to flash:/.
<HUAWEI> system-view
[HUAWEI] ftp server-source -i GigabitEthernet 0/0/1
Warning: To make the server source configuration take effect, the FTP server will
be restarted. Continue? [Y/N]: y
Info: Succeeded in setting the source interface of the FTP server to
GigabitEthernet 0/0/1.
Info: Succeeded in starting the FTP server.
[HUAWEI] ftp server enable
[HUAWEI] aaa
[HUAWEI-aaa] local-user ftpuser password irreversible-cipher admin@123456
[HUAWEI-aaa] local-user ftpuser privilege level 3
[HUAWEI-aaa] local-user ftpuser service-type ftp
The user level must be set to 3 or upper levels to ensure successful connection establishment.
Save the file to be uploaded in the specified directory (for example, D:\>directory). Choose
Start > Run. Enter cmd and press Enter. Then enter d:. Enter FTP 10.1.1.1. Enter the user
name at the User prompt and the password at the Password prompt, and then press Enter.
The following information is displayed:
D:\>ftp 10.1.1.1
Connected to 10.1.1.1.
220 FTP service ready.
User (10.1.1.1:(none)): ftpuser
331 Password required for 1.
Password:
230 User logged in.
ftp>
Step 3 Back up the system software, configuration file, and patch file to D:\>directory.
ftp> binary
200 Type set to I.
ftp> get s6730-h-v200r020c00spc300.cc
200 Port command okay.
150 Opening BINARY mode data connection for directory list.
226 Transfer complete.
ftp: 14083796 bytes received in 10.43 seconds 1350.65Kbytes/sec.
If the file size is too large, file transfer may require more than 2 minutes.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
The preceding output indicates that the system software has been transferred and you can find
it in D:\>directory.
ftp> get vrpcfg.zip
200 Port command okay.
150 Opening BINARY mode data connection for directory list.
226 Transfer complete.
ftp: 589 bytes received in 0.01 seconds 60Kbytes/sec.
The preceding output indicates that the system software has been transferred and you can find
it in D:\>directory.
ftp> get s6730-h-v200r020sph001.pat
200 Port command okay.
150 Opening BINARY mode data connection for directory list.
226 Transfer complete.
ftp: 90602 bytes received in 0.07 seconds 1333.74Kbytes/sec.
The preceding output indicates that the system software has been transferred and you can find
it in D:\>directory.
Step 4 Upload the system software to the switch.
Run the put source-filename [ destination-filename ] command on the FTP client (PC) to
upload the system software from the PC.
ftp> put S6730-H-V200R020C10.cc
200 Port command okay.
150 Opening BINARY mode data connection for directory list.
226 Transfer complete.
ftp: 14,701,348 bytes sent in 104.44Seconds 140.76Kbytes/sec.
ftp>
If the file size is too large, file transfer may require more than 2 minutes.
Step 8 (Optional) Disable FTP server on the switch to ensure network security.
Step 9 Specify the system software that is loaded when the switch starts.
<HUAWEI> startup system-software S6730-H-V200R020C10.cc
If the following information is displayed when you run the startup system-software file command,
enter Y to update the BootROM. When the update is successful, the system proceeds to the next step. If
the following information is not displayed, go to the next step.
Warning: Basic BootROM will be upgraded. Continue?(Y/N)[N]: y
Upgrading BootROM,please wait for a moment...
Step 10 (Optional) Specify the configuration file for the device startup.
<HUAWEI> startup saved-configuration vrpcfgnew.zip
Info: Succeeded in setting the configuration for booting system.
Step 11 Specify the patch file that is loaded when the switch starts.
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat
----End
Huawei does not provide FTP server software. Obtain and install the software before the upgrade.
Run an FTP server program on the PC. Choose Security > Users/rights.
Click New User to set the user name and password. Here, the user name is S6730 and the
password is admin@123456. Set the FTP working directory in the home directory, for
example, D:\ftp. Place the V200R020 system software package, patch file, and configuration
file to the FTP working directory. Click Done to close the dialog box.
Do not stop the FTP server program when the system is backing up data.
Step 1 Back up the system software, configuration file, and patch file.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
The FTP commands on the switch are the same as the FTP commands in the DOS system.
Assume that the IP address of the FTP server is 10.164.30.27, the FTP user name is S6730,
and the password of the FTP user is admin@123456.
<HUAWEI> cd flash:/
<HUAWEI> ftp 10.164.30.27
Trying 10.164.30.27 ...
Press CTRL+K to abort
Connected to 10.164.30.27.
220 WFTPD 2.0 service (by Texas Imperial Software) ready for new user
User(10.164.30.27:(none)):S6730 # Enter the user name and press Enter.
331 Give me your password, please
Enter password: # Enter admin@123456 and press Enter. The password is not
displayed on the screen.
230 Logged in successfully
[ftp] binary
200 Type set to I.
Back up the system software s6730-h-v200r020c00spc300.cc to the FTP server and specify
the name of the backup file as s6730-h-v200r020c00spc300-bak.cc. If the name of the
backup file is not specified, the original name is used.
[ftp] put s6730-h-v200r020c00spc300.cc s6730-h-v200r020c00spc300-bak.cc
200 PORT command okay
150 "D:\s6730-h-v200r020c00spc300-bak.cc" file ready to receive in ASCII mode
226 Transfer finished successfully.
FTP: 14083796 byte(s) sent in 11.09 second(s) 1296.55Kbyte(s)/sec.
Back up the configuration file vrpcfg.zip to the FTP server and specify the name of the
backup file as vrpcfg-bak.zip. If the name of the backup file is not specified, the original
name is used.
[ftp] put vrpcfg.zip vrpcfg-bak.zip
200 PORT command okay
150 "D:\vrpcfg-bak.zip" file ready to receive in ASCII mode
226 Transfer finished successfully.
FTP: 1387 byte(s) sent in 0.176 second(s) 22.04Kbyte(s)/sec.
Back up the patch file s6730-h-v200r020sph001.pat to the FTP server and specify the name
of the backup file as s6730-h-v200r020sph001-bak.pat. If the name of the backup file is not
specified, the original name is used.
[ftp] put s6730-h-v200r020sph001.pat s6730-h-v200r020sph001-bak.pat
200 PORT command okay
150 "D:\s6730-h-v200r020sph001-bak.pat" file ready to receive in ASCII mode
226 Transfer finished successfully.
FTP: 90602 byte(s) sent in 0.087 second(s) 1035.51Kbyte(s)/sec.
If the file size is too large, file transfer may require more than 2 minutes.
Step 7 Specify the system software that is loaded when the switch starts.
<HUAWEI> startup system-software S6730-H-V200R020C10.cc
If the following information is displayed when you run the startup system-software file command,
enter Y to update the BootROM. When the update is successful, the system proceeds to the next step. If
the following information is not displayed, go to the next step.
Warning: Basic BootROM will be upgraded. Continue?(Y/N)[N]: y
Upgrading BootROM,please wait for a moment...
Step 8 (Optional) Specify the configuration file for the device startup.
<HUAWEI>startup saved-configuration vrpcfgnew.zip
Info: Succeeded in setting the configuration for booting system.
Step 9 Specify the patch file that is loaded when the switch starts.
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat
.pat
----End
Huawei does not provide SFTP server software. Obtain and install the software before the upgrade.
Run the SFTP server on the PC, for example, the Core FTP mini-sftp-server, on the PC.
Click User and set the user name and password. Here, the user name is 123 and the password
is 123. Enter the SFTP working directory, for example, D:\ftp. Do not stop the SFTP server
program when you are backing up data.
Step 1 Back up the system software, configuration file, and patch file.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
The SFTP commands on the switch are the same as the SFTP commands in the DOS system.
In this example, the SFTP server IP address is 10.138.112.38, the FTP user name is 123, and
the password of the SFTP user is 123
<HUAWEI> cd flash:/
<HUAWEI> system-view
[HUAWEI] ssh client first-time enable
[HUAWEI] sftp 10.138.112.38
Please input the username:123
Trying 10.138.112.38 ...
Press CTRL+K to abort
Connected to 10.138.112.38 ...
The server is not authenticated. Continue to access it? [Y/N] :y
Save the server's public key? [Y/N] :y
The server's public key will be saved with the name 10.138.112.38. Please wait…
Back up the system software s6730-h-v200r020c00spc300.cc to the SFTP server and specify
the name of the backup file as s6730-h-v200r020c00spc300-bak.cc. If the name of the
backup file is not specified, the original name is used.
Back up the configuration file vrpcfg.zip to the SFTP server and specify the name of the
backup file as vrpcfg-bak.zip. If the name of the backup file is not specified, the original
name is used.
sftp-client> put vrpcfg.zip vrpcfg-bak.zip
local file: vrpcfg.zip ---> Remote file: / vrpcfg-bak.zip
|
Info: Uploading file successfully ended.
SFTP: 1387 byte(s) sent in 0.176 second(s) 22.04Kbyte(s)/sec.
Back up the patch file s6730-h-v200r020sph001.pat to the SFTP server and specify the name
of the backup file as s6730-h-v200r020sph001-bak.pat. If the name of the backup file is not
specified, the original name is used.
sftp-client> put s6730-h-v200r020sph001.pat s6730-h-v200r020sph001-bak.pat
local file: s6730-h-v200r020sph001.pat ---> Remote file: / s6730-h-
v200r020sph001-bak.pat
|
Info: Uploading file successfully ended.
SFTP: 90602 byte(s) sent in 0.087 second(s) 1035.51Kbyte(s)/sec.
If the file size is too large, file transfer may require more than 2 minutes.
You can specify the file name of the loaded system software. If the file name is not specified,
the original name is used.
Step 3 Obtain the new patch file.
If the patch file is not modified, this step is not required
sftp-client> get S6730-H-V200R020SPH001.pat
Step 7 Specify the system software that is loaded when the switch starts.
<HUAWEI> startup system-software S6730-H-V200R020C10.cc
If the following information is displayed when you run the startup system-software file command,
enter Y to update the BootROM. When the update is successful, the system proceeds to the next step. If
the following information is not displayed, go to the next step.
Warning: Basic BootROM will be upgraded. Continue?(Y/N)[N]: y
Upgrading BootROM,please wait for a moment...
Step 8 (Optional) Specify the configuration file for the device startup.
<HUAWEI>startup saved-configuration vrpcfgnew.zip
Info: Succeeded in setting the configuration for booting system.
Step 9 Specify the patch file that is loaded when the switch starts.
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI>startup patch S6730-H-V200R020SPH001.pat
----End
When the source version is V200R009C00 or an earlier version, it is time-consuming to transfer system
software packages if a switch acts as the SFTP server. Therefore, using a switch as an SFTP client is
recommended.
The switch does not provide the SFTP client software. Obtain and install the software before the
upgrade.
Set the SFTP user name to sftpuser, the password to admin@123456, and the SFTP working
directory to flash:/.
<HUAWEI> system-view
Enter system view, return user view with Ctrl+Z.
[HUAWEI] dsa local-key-pair create
Info: The key name will be: HUAWEI_Host_DSA.
Info: The key modulus can be any one of the following : 1024, 2048.
Info: If the key modulus is greater than 512, it may take a few minutes.
Please input the modulus [default=2048]:
Info: Generating keys...
Info: Succeeded in creating the DSA host keys.
[HUAWEI] sftp server-source -i GigabitEthernet 0/0/1
Warning: To make the server source configuration take effect, the SFTP server will
be restarted. Continue? [Y/N]: y
Info: Succeeded in setting the source interface of the SFTP server to
GigabitEthernet 0/0/1.
Info: Succeeded in starting the SFTP server.
[HUAWEI] sftp server enable
Info: Succeeded in starting the SFTP server.
[HUAWEI] ssh user sftpuser sftp-directory flash:/
[HUAWEI] ssh user sftpuser authentication-type password
This example assumes that the SFTP server runs the Windows XP operating system. OpenSSH
commands can be used in the Windows command line interface only after the OpenSSH software is
installed.
Save the file in the specified directory (for example, D:\>directory) on the PC. Choose Start
> Run. Enter cmd and press Enter. Then enter d:, sftp sftpuser@10.1.1.1, and the password
at the prompt, and then press Enter. The command output information is as follows:
D:\>sftp sftpuser@10.1.1.1
Connecting to 10.1.1.1...
The authenticity of host '10.1.1.1 (10.1.1.1)' can't be established.
DSA key fingerprint is 69:1c:c6:20:5b:29:0e:15:47:50:4f:31:ae:68:5b:0e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.1.1.1' (DSA) to the list of known hosts.
User Authentication
Password:
sftp>
Step 3 Back up the system software, configuration file, and patch file to D:\>directory.
sftp> get s6730-h-v200r020c00spc300.cc
Remote file: /s6730-h-v200r020c00spc300.cc ---> Local file: s6730-h-
v200r020c00spc300.cc
|
End of file
Success
Info: Downloading file successfully ended.
If the file size is too large, file transfer may require more than 2 minutes.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
The preceding information indicates that the system software has been transferred
successfully and you can find the file in D:\>directory.
sftp> get vrpcfg.zip
Remote file: / vrpcfg.zip ---> Local file: vrpcfg.zip
|
End of file
Success
Info: Downloading file successfully ended.
The preceding information indicates that the system software has been transferred
successfully and you can find the file in D:\>directory.
sftp> get s6730-h-v200r020sph001.pat
Remote file: /s6730-h-v200r020sph001.pat ---> Local file: s6730-h-
v200r020sph001.pat
|
End of file
Success
Info: Downloading file successfully ended.
The preceding information indicates that the system software has been transferred
successfully and you can find the file in D:\>directory.
Step 4 Upload the system software of the target version to the switch.
Run the put source-filename [ destination-filename ] command on the SFTP client (PC) to
upload new version files to the switch.
sftp> put S6730-H-V200R020C10.cc
local file: S6730-H-V200R020C10.cc ---> Remote file: / S6730-H-V200R020C10.cc
\
Success
Info: Uploading file successfully ended.
sftp>
If the file size is too large, file transfer may require more than 2 minutes.
Step 8 (Optional) Disable SFTP server on the switch to ensure network security.
[HUAWEI] undo sftp server enable
Info: Succeeded in closing the SFTP server.
[HUAWEI] quit
Step 9 Specify the system software that is loaded when the switch starts.
<HUAWEI> startup system-software S6730-H-V200R020C10.cc
If the following information is displayed when you run the startup system-software file command,
enter Y to update the BootROM. When the update is successful, the system proceeds to the next step. If
the following information is not displayed, go to the next step.
Warning: Basic BootROM will be upgraded. Continue?(Y/N)[N]: y
Upgrading BootROM,please wait for a moment...
Step 10 (Optional) Specify the configuration file for the device startup.
<HUAWEI> startup saved-configuration vrpcfgnew.zip
Info: Succeeded in setting the configuration for booting system.
Step 11 Specify the patch file that is loaded when the switch starts.
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat
----End
This chapter uses V200R020C00SPC300 as the basic version and V200R020C10 as the target
version.
This section describes only the web-based upgrade for a stand-alone switch.
The methods of upgrading the system software are similar on the S1700, S2700, S5700, and
S6700. In the following description, the system software of the S6720 is upgraded.
V200R011C10 and later versions do not support Web Classic Edition.
For more upgrade precautions, see 1.3 Precautions.
page may not be properly displayed. Upgrade the browser and browser patch. In
addition, the browser must support JavaScript.
When the system software version changes, such as upgrade or downgrade, you are
advised to clear the browser cache before using the web system; otherwise, the page may
not be correctly displayed.
The web system does not support the built-in back, next, and update buttons of the
browser. Using these buttons will return the system to the monitoring or device panel
page.
The minimum SSL version supported by SSL policy is TLS 1.1. Ensure that the SSL
version supported by your browser is the same as the SSL version supported by the
switch; otherwise, you may fail to log in to the web system. To view the supported SSL
version, for example, in IE, Choose Tools > Internet Options > Advanced.
Before rolling V200R002 or a later version back to an earlier version, back up the SSL
private key file.
For more precautions of using the web system, see the corresponding web-based
configuration sections in the Product Documentation.
For the preparations such as new system software, patch file, and configuration file, see 3
Preparations for Upgrade.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
The product models, system software, configuration file, and patch file in the screenshots in
this section are only represented in their formats, but not actual values.
Open the browser on your PC, enter the address of the web system, for example
https://192.168.1.253, in the address bar, and press Enter. The login page is displayed. In
Figure 4-1, enter the user name and password of a web account that has the administrator
right. Click GO or press Enter. The EasyOperation edition is displayed.
If the level of the web account is non-administrator (lower than 3), the user cannot configure the
switch through web. Raise the level to 3 or above according to Web-based Configuration in the
product manual.
There is a default local account (with user name admin and password admin@huawei.com) in the
system. If the password of default account is not changed, the system will ask you to change the
password when you log in as a management user. Click OK. The User Management page is
displayed on which you can change the password of the default user. For security purposes, you are
advised to change the default password.
2. Click behind a file name (such as configuration file, system software package, license
file, and patch file), and select a path to back up the file to the PC.
3. Check whether there is sufficient space in the storage medium on the switch to store the
new system software package. If the space is insufficient, select the undesired file and
click Permanently Delete to release space.
Step 4 Upload the new version files from the PC to switch.
1. On the File Management page, click Upload to open the Upload a file page, as shown
in Figure 4-4.
2. Click Browse to select the system software, patch file, and configuration file to be
uploaded.
3. Click OK. The system prompts that the file is uploaded successfully after the upload is
finished.
The file with the same name as that in File Management cannot be uploaded.
If the security level of the web browser is too high, the message "The security level of the browser is too
high" may be displayed when you attempt to upload a file. In this case, choose Tools > Internet
Options > Security, and click Custom level. In the displayed dialog box, set Initialize and script
ActiveX controls not marked as safe for scripting and Include local directory path when uploading
files to a server to Enable.
Step 5 Specify the file for next startup and restart the switch.
1. Choose Maintenance > System Maintenance > Upgrade to open the Upgrade page, as
shown in Figure 5 Upgrade.
2. In Reboot Settings, select the system software, configuration file, and patch file for next
startup, and click Apply.
Assume that the system software name is S6730-V200R020C10.cc, configuration file is
vrpcfgnew.zip, and patch file is S6730-V200R020SPH001.pat.
If the target version does not have a matching patch file, the patch file does not need to be selected.
3. Select a restart method and click Apply.
− If you select immediate restart, the system asks you whether to save the
configuration.
가 Click Save and Restart. The switch restarts immediately with configuration
saved and disconnects from the web system.
나 Click Restart. The switch restarts without saving the configurations. Unsaved
configurations will be lost.
다 To cancel the reboot, click Cancel.
The switch is disconnected from the web system during restart. The restart of the switch
may require longer than five minutes.
− If you select timed restart, enter the restart time, and the system waits until the
restart time is reached.
Step 6 When the restart is complete, log in to the web system, and view the current system software
version and patch version to verify the upgrade.
After an unconfigured switch is upgraded to V200R020C00 or a later version, you must create an
administrator account and configure the password before logging in to the switch.
Click Monitoring and check whether the system software and patch versions are the target
versions, as shown in Figure 4-6.
If WLAN has been configured before the upgrade, upgrade the AP version to match the
switch version V200R020C10; otherwise, the AP cannot go online. For the version mappings,
see Version Mappings in the release notes.
In the versions earlier than V200R009C00, the EasyOperation edition does not support AP
upgrade.
b. Check whether the current AP software version matches the switch version
V200R020C10. If the versions match, the AP does not need to be upgraded;
otherwise, go to next step.
c. Check the AP type to confirm the AP upgrade file to be uploaded. Assume that the
AP type is AP6010DN-AGN and upgrade file is
FitAP6X10XN_V200R007C10.bin.
d. Check whether the AP status is normal or vmiss. The AP can be upgraded through
web only when it is in normal or vmiss state.
2. Set the upgrade mode.
a. Choose Maintenance > AP Maintenance > AP Upgrade > Upgrade
Configuration to open the Upgrade Configuration page, as shown in Figure 4-8.
When the upgrade mode is set to AC, back up the key data and check storage space according
to Step 3 and upload the AP upgrade file according to Step 4.
나 FTP: Upgrade the system software to the FTP server and ensure that the AP
and FTP server can communicate with each other.
다 SFTP: Upgrade the system software to the SFTP server and ensure that the AP
and SFTP server can communicate with each other.
For example, set the upgrade mode to SFTP, enter the SFTP server IP address, and
user name as well as password of the SFTP server, as shown in Figure 4-9.
c. Click Apply. When the prompt dialog box is displayed, click OK.
3. Upgrade a single AP to check whether the upgrade version can function properly. If the
upgrade is successful, upgrade other APs in batches.
a. In the AP Upgrade area, click beside Select AP. Select an AP from the
AP list and select an upgrade file (when the upgrade mode is AC) or enter the
upgrade file name (when the upgrade mode is FTP or SFTP).
For example, set the upgrade mode to SFTP, set AP to 0058-eedf-a300, and enter
the upgrade file name FitAP6X10XN_V200R007C10.bin, as shown in Figure 4-
10.
b. Click Upgrade. When the prompt dialog box is displayed, click OK to start to
upgrade a single AP.
c. Choose Maintenance > AP Maintenance > AP Upgrade > Upgrade Status to
open the Upgrade Status page, as shown in Figure 4-11.
e. After the AP restarts, verify whether the upgrade is successful according to Step
7.5. If the upgrade succeeds, perform the following steps.
4. Upgrade the APs of the same type in a batch.
a. Choose Maintenance > AP Maintenance > AP Upgrade > Upgrade
Configuration to open the Upgrade Configuration page.
b. Click Create in the AP Upgrade Configuration List area. Select the AP type and
select an upgrade file (when the upgrade mode is AC) or enter the upgrade file
name (when the upgrade mode is FTP or SFTP). You can also select an AP group,
as shown in Figure 4-12.
For example, set the upgrade mode to SFTP, select the AP type AP6010DN-AGN,
and enter the upgrade file name FitAP6X10XN_V200R007C10.bin.
f. After the APs restart, verify whether the upgrade is successful according to Step
7.5.
5. Check the AP upgrade status.
a. Choose Configuration > Wireless Services > AP Config > AP Info to open the
AP Info page, as shown in Figure 4-14.
b. Check whether the AP status is normal. If so, go to the next step. If the AP state is
fault, wait until the AP state becomes normal.
c. Check whether the running AP software version is the target version.
----End
1 Reset the Boot password. (Only the EasyOperation edition supports this step.)
Choose Maintenance > System Maintenance > System and select Initialization tab, as
shown in Figure 4-15. Click Reset Boot Password to restore the default BootLoad password.
Click OK.
Step 1 must be performed before you specify the system software for rollback; otherwise, the
BootROM or BootLoad password may be invalid or the switch may work abnormally. If the
BootROM or BootLoad password becomes invalid after downgrade, run the reset boot
password to restore the default password.
Step 2 Other steps are the same as those in the upgrade procedure. See 4.2.2 Upgrade Procedure
(EasyOperation). Note that you need to specify the old system software and old
configuration file backed up previously for next startup.
When you roll back the version with WLAN configured, you need to roll back the AP version.
Pay attention to the following points:
If rollback is performed between V200R009C00 and a later version, the AP version can be
rolled back using EasyOperation.
If the version is rolled back to be earlier than V200R009C00, you can downgrade APs in
either of the following methods:
Use the Classic edition of a version earlier than V200R009C00. (Downgrade the switch and
then APs.)
Use the EasyOperation edition of V200R009C00 and later versions. (Downgrade APs and
then the switch.)
----End
Figure 4.3.1.1.1.1.1 Procedure for upgrading the version to V200R020C10 using BootLoad
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
Press Ctrl+B before the countdown timer expires, and then enter the password. In V002R019
and earlier versions, the default Bootload password is Admin@huawei.com. In V002R020
and later versions, the Bootload password is not configured by default. Then the BootLoad
menu is displayed. The following information is displayed:
BootLoad Menu
If the TFTP protocol is used, you do not need to enter the user name and password.
'.' = clear field; '-' = go to previous field; ^D = quit
Load File name : S6730-H-V200R020C10.cc
Switch IP address : 192.168.1.15 192.168.0.1
Server IP address : 192.168.1.40 192.168.0.2
FTP User Name : huawei user
FTP User Password :
switch does not have a management interface, connect a cable to port 1 on the front panel.
Then select 2. Download file to Flash through ethernet interface to load the file. The
following information is displayed:
Use ftp to download file : S6730-H-V200R020C10.cc , please wait for a
moment......
Successfully download S6730-H-V200R020C10.cc
After the upgrade file is transferred, select 5. Return to main menu to return to the BootLoad
menu.
----End
Specify the system software that is loaded when the switch starts.
1 Enter the BootLoad menu and select 3. Enter startup submenu to enter the startup submenu. The
Step 1 Select 2. Modify startup configuration to set the startup mode of the S6730-H, system
software, configuration file, and patch file. The following information is displayed:
Note: startup file field can not be cleared
'.'=clear field; '^D'=quit; Enter=use current configuration
current: S6730-H-V200R020C00SPC300.cc
new : S6730-H-V200R020C10.cc
saved-configuration file
current: vrpcfg.zip
new : vrpcfgnew.zip
patch package
current: S6730-H-v200r011sph001.pat
new : S6730-H-V200R020C10SPH001.pat
Step 2 After entering the startup information, select 3. Return to main menu to return to the
BootLoad menu.
BootLoad Menu
----End
The S1720 does not support USB-based deployment. For details, see the configuration notes of USB-
based deployment in the latest configuration guide.
In V200R003C00 and earlier versions, USB-based deployment is not supported in the stack
environment. In later versions, USB-based deployment can be implemented in a stack system by using a
new index file (smart_config.ini).
In the following description, the system software of the S6730-H is upgraded.
1 Copy files.
When the switch is started successfully (the SYS indicator is in green and blinks at 0.5 Hz),
insert the USB flash drive to load files. The switch automatically downloads the system
software and configuration file according to the index file in the USB flash drive.
Step 1 Restart the switch.
The switch sets the system software and configuration file for next startup, and then restarts
automatically.
Step 2 Verify file loading.
# Observe the SYS indicator on the S6720S-EI, S5720I-6X-PWH-SI-AC, or S5720I-10X-
PWH-SI-AC to determine the progress of USB-based deployment.
Slow blinking yellow (once every 2s): The USB-based deployment has succeeded.
Fast blinking green (four times every 1s): The system is reading data from the USB flash
drive.
Fast blinking red (four times every 1s): USB-based deployment has failed.
# Observe the USB indicator to determine the progress of USB-based deployment (except
S6720S-EI, S5720I-6X-PWH-SI-AC, or S5720I-10X-PWH-SI-AC).
Steady green: The USB-based deployment has succeeded.
Fast blinking green (four times every 1s): The system is reading data from the USB flash
drive.
Fast blinking red (four times every 1s): USB-based deployment has failed.
Steady yellow: The system will restart.
Off: An error occurred. For example, no index file is saved in the USB flash drive, no
USB flash drive is installed, the USB port is damaged, the ACT indicator is damaged, the
USB flash drive contains no file for device deployment, or the switch is restarting.
----End
ESN=
MAC=
AUTODELFILE=
ACTIVEMODE=
DEVICETYPE=
HMAC=
DIRECTORY=
SYSTEM-SOFTWARE=
SYSTEM-CONFIG=
SYSTEM-LICENSE=
SYSTEM-PAT=
SYSTEM-WEB=
SYSTEM-USERDEF1=
SYSTEM-USERDEF2=
SYSTEM-USERDEF3=
END LSW
2 Copy the index file, system software, configuration file, web file, and patch file to the root directory
The index files must be stored to the root directory on the USB flash drive; the other files are stored in
the corresponding directories.
Do not power off the switch during file copy; otherwise, the upgrade fails or the switch
cannot start.
Do not remove the USB flash drive before the upgrade is finished; otherwise, the USB
flash drive may be damaged.
----End
4.4.2.2 Procedure
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
1
minutes).
Power on the switch and wait until the system completes the startup (you may need to wait for 3
Step 1 Confirm that the system is operating stably (the SYS indicator is in green and blinks every 2
seconds). If the system operating is unstable, wait until the system operates stably or manually
solve the issue.
If the SYS indicator is on and in green or orange, the system startup is not finished. Wait
until the system starts successfully.
If the SYS indicator is steady red, the system is started but an error occurs. Fix the
problem before the next step. Check whether the power supply and the fan function
properly. If no, power recycle the switch. If the fault persists (the indicator is red),
contact Huawei technical support personnel.
Step 2 Insert the USB flash drive.
1. If the USB indicator is in green and blinks more than twice every second, the system is
copying the system software and configuration file from the USB flash drive.
2. After copying the files, the system restarts.
3. If the USB indicator is steady on green after the restart, the upgrade is successful. Now
you can remove the USB flash drive.
If the USB indicator is steady on or blinks red, an error occurs. Power recycle the switch, and
then insert the USB flash drive again. If the upgrade fails three times, check whether the index
file on the USB flash drive is correct, view the usbload-error.txt file in the root directory of
the USB flash drive to find the reason of the upgrade failure, or contact Huawei technical
personnel for technical support.
If you want to upgrade the software through USB flash drive upon a failure of USB-based upgrade, load
the files to the USB flash drive again.
----End
For the support on stacking, see the stack configuration precautions in product documents.
The CLI-based upgrade methods on all models are the same. This section uses S6730-H as an
example.
The section describes how to download the system software by using the switch as the FTP server.
For other methods, see the Configuration Guide - Basic Configuration. If high security is required,
the SFTP protocol is recommended.
Switch provides a management interface MEth. You can use this interface as a Layer 3 interface.
To retain the roles of the master and slave switches after the upgrade, set priority of the master
switch to be the highest in the stack before the upgrade.
Before the upgrade, use the terminal monitor command to enable the terminal to display logs,
traps, and debugging information sent from the information center.
The following operations are performed on the master switch. Here, the stack contains two
S6730-H switches.
1 Ensure that all the member switches have sufficient available space in the flash memory. For details,
If the file size is too large, file transfer may require more than 2 minutes.
If the file size is too large, file transfer may require more than 2 minutes.
If the target system software version does not have a matching patch file, skip this step.
Copy the current system software to the specified directory, for example, D:\>directory, on
the PC. The following information is displayed:
ftp> put D:\S6730-H-V200R020SPH001.pat
200 Port command okay.
150 Opening BINARY mode data connection for directory list.
226 Transfer complete.
ftp: 11050 bytes received in 0.249 second(s) 44.38Kbyte(s)/sec.
ftp> bye
221 Server closing.
D:\>
Step 10 Specify the system software that is loaded when the switch starts.
<HUAWEI> startup system-software S6730-H-V200R020C10.cc all
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI> copy S6730-H-V200R020SPH001.pat slot 1
Step 12 Specify the patch file that is loaded when the switch starts.
If the target system software version does not have a matching patch file, skip this step.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat
For a stack, specify the startup patch file for all slots, for example, slot 1.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat slot 1
Step 13 (Optional) Specify the configuration file that is loaded when the switch starts.
<HUAWEI> startup saved-configuration vrpcfgnew.zip
Info: Succeeded in setting the configuration for booting system.
----End
Device Upgrade
Start the new member switch.
The master switch of the stack automatically upgrades the new switch. If the upgrade is
successful, the following information is displayed:
On the master switch:
Start loading system-software to the new slot 0, and the server slot is 1Succeeded
in loading system-software to the new device 0, and the server slot ID is 1
If the flash memory of the new member switch does not have sufficient space for the upgrade
software, the following information is displayed:
On the master switch:
Start loading system-software to the new slot 0, and the server slot is 1Succeeded
in loading system-software to the new device 0, and the server slot ID is 1
Before adding the switch to a stack, upgrade its version to be the same as the master switch
version according to 4.1 Upgrading a Switch Using the Command Line or 4.3 Upgrading the
Version Using BootLoad.
4. Member switches have the same system software specified for next startup, with the
same software package name, version, and path.
5. The stack cables are correctly connected.
6. The actual slot IDs of cards are the same as configured slot IDs.
The switches of V200R003C00 and later versions can be upgraded using the smooth upgrade function.
1 Upload the same system software package, patch file, and configuration file (with the same name,
version, and path) to all the member switches in the stack. In addition, specify the system software, patch file, and
configuration file to be loaded when the member switches start. For details, see steps 1 to 13 in 5.1 Upgrading All
Stack Member Switches by Using the Command Line.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
The active and backup areas cannot contain the same member switch, and both areas must have at
least one member switch.
The backup area cannot contain the master switch.
Member switches in the active and backup areas must be directly connected.
Member switches in the active and backup areas form the entire stack.
Step 3 (Optional) Run the display upgrade area command to check whether the configured areas
meet the requirements of the current stack topology.
If the stack topology changes after the areas are configured, the smooth upgrade will fail. To
avoid this problem, check the area configuration before starting a smooth upgrade. If the areas
fail the check, define the active and backup areas correctly according to the current stack
topology.
Step 4 Run the upgrade start command to enable smooth upgrade.
Step 5 (Optional) Run the display upgrade state [ slot slot-id ] command to check the smooth
upgrade status.
If errors occur during a smooth upgrade, member switches can automatically downgrade to the original
system version and set up a stack again.
----End
Among S series fixed switches, only the S6720EI, S6720S-EI, S5731-H, S5731S-H, S5732-H, S6730-H,
S6730-S, and S6730S-S can function as the parent. S6720EI and S6720S-EI are first available in
V200R009; S5731-H, S5731S-H, S5732-H, S6730-H, S6730-S, and S6730S-S are first available in
V200R019C00.
The S600-E can function as an AS since V200R010.
For the SVF support on other models, see the SVF configuration notes in the Configuration Guide -
Device Management.
To ensure that the SVF system works normally, if the parent and AS are both running versions earlier
than V200R011, the parent version must be the sam as the AS version. If they are running V200R011 or
later versions, the parent version can be the same as or higher than (no more than two R versions higher)
the AS version.
This chapter uses V200R020C00SPC300 as the basic version and V200R020C10 as the target version.
In this example, the S6730-H functions as a parent and the S5720LI functions as AS. The SVF upgrade
methods of other models are the same.
6.1.2 Precautions
No. Version Used Before Precautions
Upgrade
1 Log in to http://support.huawei.com/enterprise.
Step 1 Search for S1700, S2700, S5700, and S6700 V200R020C10 to obtain the latest product
documents and release notes.
----End
If the target version does not have a matching patch file, skip this step.
To obtain the latest patch of the target system software version, contact Huawei technical
support engineers or visit http://support.huawei.com/enterprise/.
In the following sections, the patch to be installed is S6730-H-V200R020SPH001.pat and
S5720LI-V200R020SPH001.pat.
PWR1 information
Pcb Version : PWR VER.A
-------------------------------------------------------------------------------
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
1.1.1 Loading the New System Software and the Patch of Parent
and ASs to the Parent
For details, see 4.1 Upgrading a Switch Using the Command Line.
The new system software files of ASs need to be uploaded to the flash:/unimng directory on the parent.
Load the system software matching the AS type to the parent.
6.4.1 Loading the New System Software and the Patch of ASs to
the Parent
If the local file server has been configured, skip this step.
[HUAWEI] uni-mng
[HUAWEI-um] upgrade local-ftp-server username admin-uni password Test@1234
If the target system software version does not have a matching patch file, skip this step.
[HUAWEI-um] as type S5720-LI patch S5720LI-V200R020SPH001.pat
[HUAWEI-um] return
If the results (Result field) on all ASs are displayed as successful, system software has been
successfully loaded to all ASs.
----End
6.4.2 Specifying the System Software and the Patch on the Parent
Step 1 Specify the patch matching the system software package for next startup.
If the target version does not have a matching patch file, skip this step.
<HUAWEI> startup patch S6730-H-V200R020SPH001.pat
Info: Succeeded in setting the software for booting system.
----End
If the target system software does not have a matching patch file, the Startup patch package and Next
startup patch package fields are displayed as NULL.
<HUAWEI> display startup
MainBoard:
Configured startup system software: flash:/S6730-H-V200R020C10.cc
Startup system software: flash:/ S6730-H-V200R020C10.cc
Next startup system software: flash:/ S6730-H-V200R020C10.cc
Startup saved-configuration file: flash:/vrpcfg.zip
Next startup saved-configuration file: flash:/vrpcfg.zip
Startup paf file: default
Next startup paf file: default
Startup license file: default
Next startup license file: default
Startup patch package: flash:/S6730-H-V200R020SPH001.pat
Next startup patch package: flash:/S6730-H-V200R020SPH001.pat
In rollback, specify the configuration file backed up in 6.3.9 Backing Up Data for next
startup.
The method is the same as the method of specifying startup system software after upgrade.
For details, see 6.4.3 Specifying the System Software and the Patch on the Parent.
If the local file server has been configured, skip this step.
[HUAWEI] uni-mng
[HUAWEI-um] upgrade local-ftp-server username admin-uni password Test@1234
Step 1 Set the name of the system software package on AS (for example, s5720li-
v200r020c00spc300.cc).
[HUAWEI-um] as type S5720-LI system-software s5720li-v200r020c00spc300.cc
Step 2 Set the name of the patch software on AS (for example, s5720li-v200r020sph001.pat).
7 Upgrading AP Through AC
The WLAN commands in V200R020C10 have a few changes compared with those in
versions earlier than V200R009C00. Use the commands of the corresponding version.
The display command output and prompt information may vary according to software
versions.
C10.bin
4 TFTP/FTP/SFTP server -
program installed on the
portable computer
5 AC's IP address, user name, -
and password
6 Telnet tool -
7 Network cable and serial -
cable
Do not modify the file name. Modifying the file name will cause an AP upgrade failure.
If you fail to log in to the AC, check whether the network connection is correct.
Log in to the AC through the serial port.
Connect the serial ports of the PC and AC with a serial cable and connect the network
port of the PC and the maintenance network port of the AC with a network cable. If the
PC and AC are on different network segments, configure a route from the PC to the
maintenance network port of the AC.
Log in to the AC through the serial port.
Username:admin #Enter the username.
Password: #Enter the password.
<HUAWEI> system-view
[HUAWEI] sysname S6730-H
[S6730-H]
Step 1 Check the IP address of the maintenance network port. Here, the IP address is 192.168.10.10.
[S6730-H] display ip interface brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 0
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 0
----End
The following command output shows that the AP type ID of AP6010DN-AGN is 19.
The command output varies according to AC versions. The following command output displays
information of V200R020C10.
<S6730-H> display ap-type all
--------------------------------------------------------------------------------
ID Type
--------------------------------------------------------------------------------
17 AP6010SN-GN
19 AP6010DN-AGN
21 AP6310SN-GN
23 AP6510DN-AGN
25 AP6610DN-AGN
27 AP7110SN-GN
28 AP7110DN-AGN
29 AP5010SN-GN
30 AP5010DN-AGN
31 AP3010DN-AGN
33 AP6510DN-AGN-US
34 AP6610DN-AGN-US
35 AP5030DN
36 AP5130DN
37 AP7030DE
38 AP2010DN
39 AP8130DN
40 AP8030DN
42 AP9330DN
43 AP4030DN
44 AP4130DN
45 AP3030DN
46 AP2030DN
47 AP9131DN
48 AP9132DN
49 AP5030DN-S
50 AP3010DN-V2
51 AP4030DN-E
52 AD9430DN-24
53 AD9430DN-12
54 R230D
55 R240D
56 AP6050DN
57 AP6150DN
58 AP7050DE
59 AP7050DN-E
60 AP4030TN
61 AP4050DN-E
62 AP4050DN-HD
64 AP430-E
65 R250D
66 R250D-E
68 AP1010SN
69 AP2050DN
70 AP2050DN-E
71 AP8130DN-W
73 AP2050DN-S
75 AP4050DN
76 AP4051DN
77 AP4151DN
78 AP4050DN-S
79 AP4051DN-S
80 AP8050DN
81 AP8150DN
82 AP8050DN-S
83 AD9431DN-24X
84 R450D
85 AP1050DN-S
86 AP4051TN
87 AP6052DN
88 AP7052DN
89 AP7052DE
91 AP7152DN
92 AP8050TN-HD
93 AP8082DN
94 AP8182DN
95 R251D
96 R251D-E
97 AP2051DN
98 AP2051DN-S
99 AP2051DN-E
100 AP7060DN
101 AP5050DN-S
102 AP2030DN-S
103 AP4050DE-M
104 AP4050DE-M-S
105 AP100EC
106 AP200EC
107 AP300EC
--------------------------------------------------------------------------------
-------
Total: 79
----End
Procedure
You can use FTP, TFTP, or SFTP to transfer the AP upgrade version file to the AC.
In this example, the FTP/TFTP/SFTP server can communicate with the AC properly, the server IP
address is 192.168.10.11, IP address of the AC is 192.168.10.10, and the AP upgrade version file has
been saved on the server.
Method 1: Use FTP to transfer the AP upgrade version file.
Start the FTP server program on your PC and specify the working directory. For details, see 4.1.3
Method 3: Use the Switch as the FTP Client.
<S6730-H> dir
Directory of flash:/
Idx Attr Size(Byte) Date Time FileName
0 drw- - Apr 01 2016 23:55:54 logfile
1 -rw- 753 Apr 10 2016 18:53:48 vrpcfg.zip
2 -rw- 10,305,536 Apr 21 2016 11:07:42 FitAP6X10XN_V200R006C10.bin
Enter password:
230 User logged in.
[ftp] binary
200 Type set to I.
Start the TFTP server program on your PC and specify the working directory. For details, see 4.1.1
Method 1: Use the Switch as the TFTP Client.
<S6730-H> dir
Directory of flash:/
Idx Attr Size(Byte) Date Time FileName
0 drw- - Apr 01 2016 23:55:54 logfile
1 -rw- 753 Apr 10 2016 18:53:48 vrpcfg.zip
2 -rw- 10,305,536 Apr 21 2016 11:07:42 FitAP6X10XN_V200R006C10.bin
3 -rw- 73,127,860 Feb 24 2016 18:35:30 S6730-H-V200R020C10.cc
…
<S6730-H> tftp 192.168.10.11 get FitAP6X10XN_V200R007C10.bin
Info: Transfer file in binary mode.
Downloading the file from the remote TFTP server. Please wait...|
TFTP: Downloading the file successfully.
11969076 bytes received in 74 seconds.
Start the SFTP server program on your PC and specify the working directory. For details, see 4.1.4
Method 4: Use the Switch as the SFTP Client.
<S6730-H> dir
Directory of flash:/
Idx Attr Size(Byte) Date Time FileName
0 drw- - Apr 01 2016 23:55:54 logfile
1 -rw- 753 Apr 10 2016 18:53:48 vrpcfg.zip
2 -rw- 10,305,536 Apr 21 2016 11:07:42 FitAP6X10XN_V200R006C10.bin
3 -rw- 73,127,860 Feb 24 2016 18:35:30 S6730-H-V200R020C10.cc
...
<S6730-H> system-view
[S6730-H] ssh client first-time enable
[S6730-H] sftp 192.168.10.11
Please input the username:huawei#Enter the username and press Enter.
Trying 192.168.10.11 ...
Press CTRL+K to abort
The server is not authenticated. Continue to access it? (y/n)[n]:y
Save the server's public key? (y/n)[n]:y
The server's public key will be saved with the name 192.168.10.11.Please wait
...
Enter password:#Enter huawei and press Enter. The password is not displayed on
the screen.
sftp-client> get FitAP6X10XN_V200R007C10.bin
Remote file: /FitAP6X10XN_V200R007C10.bin --->Local file:
FitAP6X10XN_V200R007C10.bin
End of file
Success
Info: Downloading file successfully ended.
Now begins to save file, please wait...
File had been saved successfully.
Step 1 Check that the AP upgrade version file has been uploaded to the AC.
<S6730-H> dir
Directory of flash:/
Idx Attr Size(Byte) Date Time FileName
0 drw- - Apr 01 2016 23:55:54 logfile
1 -rw- 753 Apr 10 2016 18:53:48 vrpcfg.zip
3 -rw- 10,305,536 Apr 21 2016 11:07:42 FitAP6X10XN_V200R006C10.bin
4 -rw- 11,969,076 Mar 04 2016 12:21:42 FitAP6X10XN_V200R007C10.bin
5 -rw- 73,127,860 Feb 24 2016 18:35:30 S6730-H-V200R020C10.cc
----End
When a switch runs V200R009C00 and later versions, ensure that the APs to be upgraded
are in vmiss or normal state; otherwise, the online AP upgrade will fail.
When a switch runs a version earlier than V200R009C00, ensure that the APs to be
upgraded are in ver-mismatch, normal, or config-failed state; otherwise, the AP upgrade
will fail. When the AP status is config-failed, only automatic upgrade can be performed.
When the AC mode is used, upgrading multiple APs requires a long time. In the typical
scenarios, the S6730-H can upgrade about 100 APs per hour. Select a proper upgrade
mode according to your requirement. To reduce the service interruption time during
upgrade, FTP or SFTP is recommended.
On the AC, only Fit APs can be upgraded, but Fat APs cannot be upgraded. The
V200R010C00 version of switch supports upgrade from Fit AP to Fat AP.
The AC can issue configurations to AP only when the switch and AP versions match. If the
AP and AC versions do not match, the AP cannot process WLAN services. For example, if
the AC version is V200R020C10 and AP version is V200R005C10, the AP cannot work
properly. Run the display ap all command on the AC, and the AP state displays vmiss,
indicating that the AP must be upgraded to the same R version as the AC, for example,
V200R007C10.
An AP cannot process wireless services if its version does not match the AC version. As a
result, users can only telnet to the AC through the wired network to upgrade the AP.
The BIOS file is integrated into this AP file and will be upgraded together with the AP file.
When the display ap update status all (V200R009C00 and later versions) or display ap-update
status all (earlier than V200R009C00) command is run to display AP upgrade result, the displayed
result may be failed(link down). However, the AP may be upgraded successfully. The possible
reasons are as follows:
1. If the CAPWAP link is disconnected when the AP is writing data to the flash memory. The AC
considers the CAPWAP link faulty and records that the AP upgrade failed. However, the AP may
have been successfully upgraded. In such a case, the upgrade result recorded on the AC is
inconsistent with the actual situation.
2. The timeout period for AP upgrade is 90 minutes in AC mode and is 30 minutes for AP upgrade in
FTP and SFTP modes. If the upgrade time exceeds the timeout period, the AC records that the AP
upgrade failed. However, if the AP is writing data to the flash memory or the AP is upgraded in FTP
or SFTP mode but the FTP or SFTP server is not the AC, the AP may have been successfully
upgraded. In such a case, the upgrade result recorded on the AC is inconsistent with the actual
situation.
To address the preceding problem, restart the AP by the ap-reset command and then upgrade the AP
again.
If a Fit AP cannot obtain an IP address from the DHCP server, the Fit AP can use the default IP
address 169.254.1.1 and subnet mask 255.255.0.0.
This document assumes that: In AC mode, the FTP or TFTP server can communicate with the AC
normally. In FTP mode, the FTP or TFTP server can communicate with the AC normally, and the
server IP address is 192.168.10.11.
The procedure for upgrading the central AP and RRUs is similar to that for upgrading common APs.
Upgrade the central AP first and then upgrade the RRUs.
AP Upgrade Mode
ac-mode: An AP downloads the upgrade version file from an AC.
The FTP mode and SFTP mode are recommended for an upgrade.
AP Upgrade Scenarios
Automatic upgrade
Before an AP goes online, the AP discovers that its software version is earlier than that
on the AC or FTP server. At this time, the AP starts to upgrade the software from the AC
or FTP server. The FTP mode and SFTP mode can upgrade APs of different types
simultaneously, while the AC mode cannot. Automatic upgrade is recommended for
upgrading APs that are not online yet.
After automatic upgrade is configured, an AP automatically upgrades its version when
the AP is restarted or powered on. To implement an automatic upgrade, an AP can be
restarted manually or using commands.
In actual situations, if an AP that has automatic upgrade configured finds that its version
is different from the AP version specified on the AC, FTP server, or SFTP server after the
AP is powered on and accesses the network, the AP starts to upgrade its version.
In-service upgrade
When an AP is working, the AP discovers that its software version is earlier than that on
the AC, FTP server, or SFTP server. At this time, the AP starts to upgrade the software.
APs of different types cannot be upgraded simultaneously. In-service upgrade is
recommended for upgrading online APs.
When the AC mode is used and some APs are upgrading automatically, an in-service upgrade cannot be
performed.
After an AC is upgraded to the target version, delete upgrade configurations on the AC. In a dual-AC
backup scenario, delete upgrade configurations on both the active and standby ACs to prevent
misoperations.
In a dual-AC backup scenario, if online APs exist only on the active AC, perform the following AP
upgrade operations on the active AC and delete upgrade configurations on the standby AC. This
prevents APs going online on the standby AC from being upgraded to the AP version configured on
the standby AC when the active AC fails.
In a dual-AC backup scenario, if the active and standby ACs have the same priority and both have
APs online, configure the same AP upgrade configurations on both ACs.
AP Upgrade Methods
Single AP-based upgrade: Before upgrading multiple APs, upgrade a single AP to check
whether the upgrade version can function properly. If the upgrade is successful, upgrade
other APs in batches.
AP region- and type-based upgrade: APs in a hotspot area are upgraded to meet users'
requirement for upgrading AP according to areas. APs of the same type in the same area
are upgraded in batches.
A region is a logical concept. Multiple APs can be grouped into one region. AP regions are configured
based on AP deployment. Generally, a region maps a hotspot.
AP group- and type-based upgrade: Upgrade the APs of the same type and in the same
group in a batch.
AP type-based upgrade: APs of one type are upgraded in batches. You can also upgrade
specified APs of the same type.
The upgrade version file of APs upgraded in AC mode, FTP mode, or SFTP mode is uploaded to the AC,
FTP, or SFTP server respectively.
Upgrade Schedule
Context
You are advised to use an external FTP or SFTP server to upgrade APs.
If an AC is used as the FTP server, the maximum number of FTP connections is 5; therefore, a maximum
of 5 APs can be upgraded simultaneously.
If an AC is used as the SFTP server, the maximum number of SFTP connections is 5; therefore, a
maximum of 5 APs can be upgraded simultaneously.
Procedure
Set the upgrade mode to SFTP and configure the SFTP server.
Switch of V200R009C00 and later versions:
<S6730-H> system-view
[S6730-H] wlan
[S6730-H-wlan-view] ap update mode sftp-mode
Info:Changing AP update mode causes an AP update failure, continue?[Y/N]:y
[S6730-H-wlan-view] ap update sftp-server ip-address 192.168.10.11 sftp-
username xxx sftp-password cipher yyy #xxx and yyy indicate the user name and
password for logging in to the SFTP server.
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: sftp-mode
FTP configuration
FTP IP: -
Set the upgrade mode to FTP and configure the FTP server.
Switch of V200R009C00 and later versions:
<S6730-H> system-view
[S6730-H] wlan
[S6730-H-wlan-view] ap update mode ftp-mode
Info:Changing AP update mode causes an AP update failure, continue?[Y/N]:y
Warning: FTP is not a secure protocol, and it is recommended to use SFTP.
[S6730-H-wlan-view] ap update ftp-server ip-address 192.168.10.11 ftp-username
xxx ftp-password cipher yyy #xxx and yyy indicate the user name and password
for logging in to the FTP server.
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: ftp-mode
FTP configuration
FTP IP: 192.168.10.11
FTP username: xxx
FTP password: ******
FTP max number: 50
SFTP configuration
SFTP IP: -
SFTP username: anonymous
SFTP password: ******
SFTP max number: 50
-------------------------------------------------------------------------------
-
----End
Procedure
1 Upgrade a single AP to check whether the upgrade version can function properly. If the upgrade is
successful, upgrade other APs in batches. Run the display ap all command to check the AP name or ID.
For example, for a switch running V200R009C00 and later versions, upgrade AP6010DN-
AGN named area_1:
[S6730-H-wlan-view] display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
vmiss: ver-mismatch [5]
--------------------------------------------------------------------------------
ID MAC Name Group IPT ype State STA Uptime
--------------------------------------------------------------------------------
060de-4476-e320 area_0 default192.168.109.254 AP6010DN-AGNvmiss08D:2H:59M:27S
160de-4476-e340 area_1 default192.168.109.253 AP6010DN-AGNvmiss07D:14H:59M:22S
260de-4476-e360 area_2 default192.168.109.252 AP6010DN-AGNvmiss08D:2H:59M:9S
360de-4476-e380 area_3 default192.168.109.251 AP6010DN-AGNvmiss08D:2H:59M:3S
460de-4476-e3a0 area_4 default192.168.109.250 AP6010DN-AGNvmiss08D:2H:59M:3S
--------------------------------------------------------------------------------
Total: 5
[S6730-H-wlan-view] ap update load ap-name area_1 update-filename
FitAP6X10XN_V200R007C10.bin
Info: Start to load the update file,please wait for several seconds.
Info: Starting Single AP update. AP type AP6010DN-AGN, AP number 1.
Warning: Do not power off the AP during the upgrade.
Step 1 Wait for the system to report the upgrade result. After the upgrade is complete, the upgrade
result is displayed.
[S6730-H-wlan-view]
AP update result
AP number : 1
Success: 1
Failure: 0
Step 4 Check whether the AP is upgraded successfully. For details, see 7.4 Verifying Fit AP
Upgrade. After successfully upgrading a single AP, upgrade multiple APs by specifying an
AP type or a combination of an AP type and an AP group.
Step 5 Specify the name of the AP upgrade version file. Do not modify the file name. The AC
obtains version information according to the configured upgrade version file name. Changing
the file name of the AP software package may cause an AP upgrade failure.
Choose an appropriate upgrade method according to the site requirements.
For a switch of V200R009C00 and later versions, set the version file name for the APs of
a certain type and in the same group. Assume that the AP group name is default.
[S6730-H-wlan-view] ap update update-filename FitAP6X10XN_V200R007C10.bin ap-
type 19 ap-group default
Warning: If AP update mode is AC-mode, update-file's default path is cfcard:/,
c
ontinue?[Y/N]:y
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: sftp-mode
FTP configuration
FTP IP: -
FTP username: anonymous
FTP password: ******
FTP max number: 50
SFTP configuration
SFTP IP: 192.168.10.11
SFTP username: xxx
SFTP password: ******
SFTP max number: 50
AP type/AP-group update filename
AP6010DN-AGN/default: FitAP6X10XN_V200R007C10.bin
-------------------------------------------------------------------------------
-
For a switch of a version earlier than V200R009C00, set the version file name for AP
region 10.
[S6730-H-wlan-view] ap-update update-filename FitAP6X10XN_V200R007C10.bin ap-
type 19 region 10
Warning: If ap-update mode is ac-mode, update-file's default path is flash:/.
Step 6 Run the following command to upgrade APs of a specified type, for example, AP6010DN-
AGN.
Perform this step if you have specified the name of the upgrade version file for APs of
the same type in Step 6.
Switch of V200R009C00 and later versions:
[S6730-H-wlan-view] ap update multi-load ap-type 19
You can also upgrade some APs of a certain type, for example, there are 11 APs (0 to 10) of AP6010DN-
AGN, and you can choose to upgrade APs 0 to 4.
For a switch of V200R009C00 and later versions, run the ap update multi-load ap-type 19 ap-id 0
ap-id 1 ap-id 2 ap-id 3 ap-id 4 command.
For a switch of a version earlier than V200R009C00, run the ap-update multi-load ap-type 19 ap-
id 0 to 4 command.
For a switch of V200R009C00 and later versions, if a version file name is specified for
the AP group in Step 6, perform this step. If an error is reported after this command is
run, see Table 7-4.
For a switch of a version earlier than V200R009C00, if the version file name is set for
the AP region in Step 6, perform this step. If an error is reported after this command is
run, see Table 7-4.
[S6730-H-wlan-view] ap-update multi-load ap-type 19 region 10
Error: AP upgrade file name is The upgrade file name is not configured for
notconfigured the specified AP type. Configure the correct
file name.
Other errors Contact Huawei technical personnel.
During the loading, run the display ap update status all (V200R009C00 and later versions) or display
ap-update status all (earlier than V200R009C00) command to check the AP upgrade progress.
To check the loaded system software package, APs failed to be upgraded, and APs successfully
upgraded, run the display ap update status { downloading | failed | succeed } (V200R009C00 and
later versions) or display ap-update status { downloading | failed | succeed } (earlier than
V200R009C00) command.
To cancel batch AP upgrade, run the undo ap update multi-load ap-type type-id (V200R009C00 and
later versions), undo ap update multi-load ap-type type-id ap-group group-name (V200R009C00 and
later versions), undo ap-update multi-load ap-type type-id (earlier than V200R009C00), or undo ap-
update multi-load ap-type type-id region region-id (earlier than V200R009C00) command. If the AP
has started writing the upgrade file to the flash memory, the upgrade cannot be canceled.
In AC upgrade mode, canceling upgrade of RRUs in the download stage may cause an upgrade failure of
RRUs in other upgrade stages.
If the upgrade result of the APs is displayed as failed, check network connections and upgrade the APs
again.
Status Description
fails.
failed(AP type in the EFS mismatch): The
upgrade failed because the AP type in
the EFS file trailer of the current AP
version does not match the AP.
failed(AP type mismatch batch upgrade
AP type): The upgrade failed because
the AP type is different from the batch
upgrade AP type.
failed(AP wait file timeout): The upgrade
failed because the time that the AP waits
for fragment data expired.
failed(block full): The upgrade failed
because the number of APs
simultaneously upgraded in AC mode
reaches the maximum.
failed(change to standby): The upgrade
failed due a revertive switchover failure.
failed(fail to download the file): The
upgrade failed because the system
software failed to be downloaded.
failed(file content error): The upgrade
failed due to incorrect system software
file contents.
failed(file version inconsistent): The
upgrade failed because the AP type in
the EFS file trailer does not match the
AP type contained in the system
software package name.
failed(invalid file name): The upgrade
failed because the name of the AP
version file is incorrect.
failed(link down): The upgrade failed
because the AP failed to communicate
with the AC.
failed(mode changed): The upgrade failed
because the AP upgrade mode is
changed during the AP automatic
upgrade.
failed(nospace in AP memory): The
upgrade failed because the AP memory
resources were insufficient.
failed(not receive update result): The
upgrade failed because the AC receives
no AP upgrade result.
failed(over max upgrade time): The
upgrade failed because the upgrade
duration exceeds the maximum upgrade
Status Description
time allowed.
failed(server password is too long): The
upgrade failed because the FTP/SFTP
server password is too long.
failed(read file): The upgrade failed
because no upgrade file is available in
the flash memory.
failed(receive file failed): The upgrade
failed because fragments failed to be
received.
failed(retransfer over times): The upgrade
failed because the number of fragment
retransmissions exceeds the threshold.
failed(send first file failed): The upgrade
failed because the first fragment failed to
be sent.
failed(other reason): The upgrade failed
due to an unknown error.
failed(upgrade timeout): The upgrade
timed out and failed.
failed(user canceled): The upgrade failed
because the user canceled the upgrade.
failed(waited for next batch): The upgrade
failed. The AP has to wait for the next
upgrade.
failed(write flash error): The upgrade
failed because the system software
package failed to be written to the flash
memory.
failed(file changed): The upgrade failed
because the upgrade file was modified
during the automatic upgrade.
failed(age time out): The upgrade failed
because the state machine aged out.
succeed: The upgrade succeeded.
succeed(auto resetting): The upgrade
failed, and the AP is being restarted.
succeed(need reset): The upgrade
succeeded. The AP must be restarted.
succeed(resetting): The upgrade
succeeded and the AP is being manually
restarted.
succeed(no need to update): The upgrade
succeeded. There is no need to upgrade
the AP.
succeed(need mode switch): The upgrade
succeeded. The AP mode needs to be
Status Description
switched.
failed(send upgrade configuration): The
upgrade failed because the upgrade
configuration failed to be sent.
failed(send upgrade request): The upgrade
failed because the upgrade request failed
to be sent.
failed(upgrade configuration response
error): The upgrade failed because there
was an error in the AP's upgrade
response.
failed(process upgrade filename): The
upgrade failed because the AC failed to
process the upgrade file name.
failed(cannot get AP type): The upgrade
failed because the AC failed to obtain
the AP type.
failed(analyze the version by upgrade
filename): The upgrade failed because
the device failed to analyze the version
number in the file name.
failed(age time out): The upgrade failed
because the state machine aged out.
failed(state transition check failed for the
update module): The upgrade failed
because the AC failed to check the status
transition of the upgrade module.
-: The AP requires no upgrade.
Step 7 Wait for the system to report the upgrade result. After all APs of the specified type are
upgraded, the upgrade result is displayed.
[S6730-H-wlan-view]
AP update result
AP number : 5
Success: 5
Failure: 0
For a switch of V200R009C00 and later versions, if the specified AP is upgraded in Step 7, run the ap
update multi-reset ap-type 19 ap-id 0 ap-id 1 ap-id 2 ap-id 3 ap-id 4 command.
For a switch of a version earlier than V200R009C00, if the specified AP is upgraded in Step 7, run the
ap-update multi-reset ap-type 19 ap-id 0 to 4 command.
In V200R009C00 and later versions, the APs are reset based on AP group after an
upgrade. Perform this step if you have specified the name of the upgrade version file for
APs in the same group in Step 6.
[S6730-H-wlan-view] ap update multi-reset ap-type 19 ap-group default
Info: Starting batch AP reset.done.
Info: Batch AP reset completely. Success number 5, failure number 0.
In a version earlier than V200R009C00, the APs are reset based on AP region after an
upgrade. Perform this step if you have specified the name of the upgrade version file for
APs in the same region in Step 6.
[S6730-H-wlan-view] ap-update multi-reset ap-type 19 region 10
Info: Starting batch AP reset. AP type AP6010DN-AGN.
Info: Batch AP reset completely. Success number 5, failure number 0.
The upgrade version file of APs upgraded in AC mode, FTP mode, or SFTP mode is uploaded to the AC,
FTP, or SFTP server respectively.
Upgrade Schedule
Context
You are advised to use an external FTP or SFTP server to upgrade APs.
If a switch is used as the FTP server, the maximum number of FTP connections is 5; therefore, a
maximum of 5 APs can be upgraded simultaneously.
If a switch is used as the SFTP server, the maximum number of SFTP connections is 5; therefore, a
maximum of 5 APs can be upgraded simultaneously.
Procedure
Set the upgrade mode to SFTP and configure the SFTP server.
Switch of V200R009C00 and later versions:
<S6730-H> system-view
[S6730-H] wlan
[S6730-H-wlan-view] ap update mode sftp-mode
Info:Changing AP update mode causes an AP update failure, continue?[Y/N]:y
[S6730-H-wlan-view] ap update sftp-server ip-address 192.168.10.11 sftp-
username xxx sftp-password cipher yyy #xxx and yyy indicate the user name
and password for logging in to the SFTP server.
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: sftp-mode
FTP configuration
FTP IP: -
FTP username: anonymous
FTP password: ******
FTP max number: 50
SFTP configuration
SFTP IP: 192.168.10.11
SFTP username: xxx
SFTP password: ******
SFTP max number:50
-------------------------------------------------------------------------------
-
password cipher yyy #xxx and yyy indicate the user name and password for
logging in to the SFTP server.
[S6730-H-wlan-view] display ap-update sftp-server
SFTP IP : 192.168.10.11
SFTP username : xxx
SFTP password : ******
SFTP max connect num : 50
Set the upgrade mode to FTP and configure the FTP server.
Switch of V200R009C00 and later versions:
<S6730-H> system-view
[S6730-H] wlan
[S6730-H-wlan-view] ap update mode ftp-mode
Info:Changing AP update mode causes an AP update failure, continue?[Y/N]:y
Warning: FTP is not a secure protocol, and it is recommended touse SFTP.
[S6730-H-wlan-view] ap update ftp-server ip-address 192.168.10.11 ftp-username
xxx ftp-password cipher yyy #xxx and yyy indicate the user name and password
for logging in to the FTP server.
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: ftp-mode
FTP configuration
FTP IP: 192.168.10.11
FTP username: xxx
FTP password: ******
FTP max number: 50
SFTP configuration
SFTP IP: -
SFTP username: anonymous
SFTP password: ******
SFTP max number: 50
-------------------------------------------------------------------------------
-
----End
Procedure
1 Specify the name of the AP upgrade version file. Do not modify the file name. The AC obtains
version information according to the configured upgrade version file name. Changing the file name of the AP
software package may cause an AP upgrade failure.
Choose an appropriate upgrade method according to the site requirements.
Specify the upgrade file name for APs of a specified type.
Switch of V200R009C00 and later versions:
[S6730-H-wlan-view] ap update update-filename FitAP6X10XN_V200R007C10.bin ap-
type 19
Warning: If AP-update mode is AC-mode, update-file's default path is flash:/,
continue?[Y/N]:y
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: sftp-mode
FTP configuration
FTP IP: -
FTP username: anonymous
For a switch of V200R009C00 and later versions, set the version file name for the APs in
the same group. Assume that the AP group name is default.
[S6730-H-wlan-view] ap update update-filename FitAP6X10XN_V200R007C10.bin ap-
type 19 ap-group default
Warning: If AP-update mode is AC-mode, update-file's default path is flash:/,
continue?[Y/N]:y
[S6730-H-wlan-view] display ap update configuration
-------------------------------------------------------------------------------
-
AP update mode: sftp-mode
FTP configuration
FTP IP: -
FTP username: anonymous
FTP password: ******
FTP max number: 50
SFTP configuration
SFTP IP: 192.168.10.11
SFTP username: xxx
SFTP password: ******
SFTP max number: 50
AP type/AP-group update filename
AP6010DN-AGN/default: FitAP6X10XN_V200R007C10.bin
-------------------------------------------------------------------------------
-
For a switch of a version earlier than V200R009C00, set the version file name for AP
region 10.
[S6730-H-wlan-view] ap-update update-filename FitAP6X10XN_V200R007C10.bin ap-
type 19 region 10
Warning: If ap-update mode is ac-mode, update-file's default path is flash:/.
In V200R009C00 and later versions, if you specify an upgrade file name for an AP type and an AP
group respectively and restart APs by specifying the AP type, the upgrade file specified for the AP
group takes effect but the restart operation performed on APs of the specified type does not take
effect. To solve this problem, delete the upgrade file specified for the AP group.
In a version earlier than V200R009C00, if you specify an upgrade file name for an AP type and an
AP region respectively and restart APs by specifying the AP type, the upgrade file specified for the
AP region takes effect but the restart operation performed on APs of the specified type does not take
effect. To solve this problem, delete the upgrade file specified for the AP region.
In V200R009C00 and later versions, you can run the ap update command at most 256 times to
specify upgrade file names for AP types or AP groups. If 256 command lines have been configured
in the system, no more configuration can be made until you delete unnecessary ap update
configurations.
In a version earlier than V200R009C00, you can run the ap-update command at most 512 times to
specify upgrade file names for AP types and AP regions. If 512 command lines have been configured
in the system, no more configuration can be made until you delete unnecessary ap-update
configurations.
Step 1 Upgrade a single AP to check whether the upgrade version can function properly. If the
upgrade is successful, upgrade other APs in batches. Run the display ap all command to
check the AP name.
AP6010DN-AGN is used here.
[S6730-H-wlan-view] display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
vmiss: ver-mismatch [5]
--------------------------------------------------------------------------------
ID MAC Name Group IP TypeState STA Uptime
--------------------------------------------------------------------------------
060de-4476-e320 area_0 default192.168.109.254 AP6010DN-AGNvmiss08D:2H:59M:27S
160de-4476-e340 area_1 default192.168.109.253 AP6010DN-AGNvmiss07D:14H:59M:22S
260de-4476-e360 area_2 default192.168.109.252 AP6010DN-AGNvmiss08D:2H:59M:9S
360de-4476-e380 area_3 default192.168.109.251 AP6010DN-AGNvmiss08D:2H:59M:3S
460de-4476-e3a0 area_4 default192.168.109.250 AP6010DN-AGNvmiss08D:2H:59M:3S
--------------------------------------------------------------------------------
Total: 5
Step 3 Check whether the AP is upgraded successfully. For details, see 7.4 Verifying Fit AP
Upgrade. After successfully upgrading a single AP, upgrade multiple APs by specifying an
AP type or a combination of an AP type and an AP group.
Resetting an AP will interrupt the connection between AP and the AC. The connection will be
restored after a period of time.
If the connection cannot be recovered after 30 minutes, the AP upgrade may have failed.
Connect an operation terminal to the AP through the serial port to locate the fault.
If the AC and AP versions do not match, the AP status displays config-failed. This does not
affect AP automatic upgrade.
The AP automatically downloads the version file from the AC. In this case, the AP is in
download state.
[S6730-H-wlan-view] display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
dload: download[5]
--------------------------------------------------------------------------------
ID MAC Name Group IP TypeState STA Uptime
--------------------------------------------------------------------------------
060de-4476-e320 area_0 default192.168.109.254 AP6010DN-AGNdload08D:2H:59M:27S
160de-4476-e340 area_1 default192.168.109.253 AP6010DN-AGNdload07D:14H:59M:22S
260de-4476-e360 area_2 default192.168.109.252 AP6010DN-AGNdload08D:2H:59M:9S
360de-4476-e380 area_3 default192.168.109.251 AP6010DN-AGNdload08D:2H:59M:3S
460de-4476-e3a0 area_4 default192.168.109.250 AP6010DN-AGNdload08D:2H:59M:3S
--------------------------------------------------------------------------------
Total: 5
During the loading, run the display ap update status all (V200R009C00 and later versions) or display
ap-update status all (a version earlier than V200R009C00) command to check the AP upgrade
progress.
To check the loaded system software package, APs failed to be upgraded, and APs successfully
upgraded, run the display ap update status { downloading | failed | succeed } (V200R009C00 and
later versions) or display ap-update status { downloading | failed | succeed } (a version earlier than
V200R009C00) command.
If the upgrade result of the APs is displayed as failed, check network connections and upgrade the APs
again.
------------------------------------------------------------------------------
Total: 5
Procedure
Run the display ap all command to check whether the APs are working properly.
Step 2 After the upgrade is successful, undo all upgrade commands on the AC to prevent
misoperations.
1. Delete the configured AP upgrade mode.
[S6730-H-wlan-view] undo ap update mode
− If a version file name is specified for the AP group, perform this step.
[S6730-H-wlan-view] undo ap update update-filename ap-type 19 ap-group
default
In a dual-AC backup scenario, delete upgrade configurations on both the active and standby ACs
----End
The AC uniformly delivers configuration to Fit APs, and you do not need to separately perform version
rollback on Fit APs.
If the target version does not have a matching patch file, skip this step.
Perform the following operations to check whether the patches are installed successfully.
Check that the patch name is the same as the name of the required patch. If an incorrect
patch is loaded, load the correct one.
Check the patch status.
If the patch is in Running state, the patch is working properly.
If the patch is in Deactive state, run the patch active all command in the user view to
activate the patch, and run the patch run all command to run the patch. If the patch is
still not in Running state, contact Huawei technical support personnel.
If the patch is in Active state, run the patch run all command in the user view to run the
patch. If the patch is still not in Running state, contact Huawei technical support
personnel.
----End
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password irreversible-cipher %^#%#&7&:=fi9h.A_(%+XC]OBzij5#7
.LzBjAS]-ZSuh0PMCo=`>{p/w<vT3s<A&'%^%#
local-user admin service-type http
#
9 Version Rollback
Before rolling back the system software from V200R020C10 to an earlier version, check
whether the corresponding patch file has been installed. If so, install and activate the
patch.
Back up the configuration file before the upgrade. Rename the configuration file and
save it to the flash memory. During version rollback, specify the old configuration file
for the next startup. Otherwise, login may fail or services may be interrupted.