NetEngine AR V300R021C00 Upgrade Guide

NetEngine AR
V300R021C00
Upgrade Guide
Issue 01
Date 2021-12-13
HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2021. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior
written consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees
or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Website: https://e.huawei.com
Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. i

NetEngine AR
Upgrade Guide About This Document
1 About This Document
Purpose
This document describes how to upgrade to V300R021C00SPC200 and roll back to the
source version and provides the common-fault rectification methods, operations, and tool use
guide.
Intended Audience
This document is intended for upgrade personnel. Upgrade personnel must:
 Be familiar with the product networking and related NEs' versions.
 Have device maintenance experience and be familiar with device operation and
maintenance.
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol Conventions
Symbol Description
Indicates an imminently hazardous situation

which, if not avoided, will result in death or
serious injury.
Indicates a potentially hazardous situation
which, if not avoided, could result in death
or serious injury.
which, if not avoided, may result in minor
or moderate injury.
Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. ii

NetEngine AR
Upgrade Guide About This Document
Symbol Description

which, if not avoided, could result in
equipment damage, data loss, performance
deterioration, or unanticipated results.
NOTICE is used to address practices not
related to personal injury.
Calls attention to important information,
best practices and tips.
NOTE is used to address information not
related to personal injury, equipment
damage, and environment deterioration.
Change History
Issue Date Description
01 2021-12-13 This issue is the first official

release.
Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. iii

Contents
Contents
About This Document........................................................................ii

1 Before You Start............................................................................ 1
1.1 Precautions.....................................................................................................................................................................1
1.2 Upgrade Overview..........................................................................................................................................................4
1.3 Version Requirements.....................................................................................................................................................5
1.4 Impact of the Upgrade....................................................................................................................................................7
1.4.1 Impact on the System During the Upgrade.................................................................................................................7
1.4.2 Impact on the System After the Upgrade....................................................................................................................8
2 Upgrade Process Overview.............................................................9

3 Preparing for the Upgrade............................................................11
3.1 Pre-upgrade Checklist...................................................................................................................................................11
3.2 Obtaining Upgrade Reference Documents...................................................................................................................13
3.3 Obtaining Tools............................................................................................................................................................13
3.4 Obtaining Upgrade Software........................................................................................................................................13
3.5 (Optional) Preparing the Configuration File................................................................................................................14
3.6 (Optional) Preparing the License File..........................................................................................................................15
3.7 Verifying Software Integrity.........................................................................................................................................15
3.8 Verifying the Current Version.......................................................................................................................................15
3.9 Verifying the Current System Files..............................................................................................................................16
3.10 Verifying the Running Status of the Device...............................................................................................................16
3.11 Setting Up the Upgrade Environment........................................................................................................................16
3.11.1 Scenario 1: Use the AR as the FTP Server..............................................................................................................17
3.11.2 Scenario 2: Use the AR as the FTP Client, and use the PC as the FTP Server........................................................18
3.11.3 Scenario 3: Use the AR as the TFTP Client, and use the PC as the TFTP Server...................................................24
3.11.4 Scenario 4: Use the AR as the SFTP Client, and use the PC as the SFTP Server...................................................25
3.12 Backing Up the Key Data in the Flash/SD Memory..................................................................................................25
3.12.1 Method 1: Use the AR as the FTP Server................................................................................................................26
3.12.2 Method 2: Use the AR as the FTP Client................................................................................................................27
3.12.3 Method 3: Use the AR as the TFTP Client..............................................................................................................28
3.12.4 Method 4: Use the AR as the SFTP Client..............................................................................................................28
3.13 Checking the Space in the Flash/SD Memory............................................................................................................29
Issue ()
Contents
4 Upgrading the System Version Using the CLI.................................31

4.1 Loading System Software.............................................................................................................................................32
4.1.1 Method 1: Use the AR as the FTP Server..................................................................................................................32
4.1.2 Method 2: Use the AR as the FTP Client..................................................................................................................33
4.1.3 Method 3: Use the AR as the TFTP Client................................................................................................................34
4.1.4 Method 4: Use the AR as the SFTP Client................................................................................................................35
4.2 Verifying File Loading..................................................................................................................................................35
4.3 Specifying the System Software...................................................................................................................................36
4.3.1 AR Series Using a Single SRU.................................................................................................................................36
4.3.2 AR Series Using Dual SRUs.....................................................................................................................................37
4.4 Restarting the Device...................................................................................................................................................39
4.5 (Optional) Activating the License................................................................................................................................39
4.6 Verifying the Upgrade..................................................................................................................................................40
4.6.1 Verification Checklist................................................................................................................................................40
4.6.2 Verifying the Current System Software.....................................................................................................................40
4.6.3 (Optional) Verifying the License Status....................................................................................................................41
4.6.4 Verifying the SRU Registration Status......................................................................................................................41
4.6.5 Verifying Configuration Restoration.........................................................................................................................41
4.6.6 Verifying Services.....................................................................................................................................................41
4.7 Rolling Back to an Earlier Version...............................................................................................................................42
4.7.1 Rollback Scenarios and Methods..............................................................................................................................42
4.7.2 Rollback Process.......................................................................................................................................................43
4.7.3 Specify the startup software and configuration file of an early version....................................................................43
4.7.4 Restarting the Device................................................................................................................................................44
4.7.5 Verifying the Rollback...............................................................................................................................................44
5 Upgrading the System Software Using a USB Flash Drive...............45

5.1 Preparing for the Upgrade............................................................................................................................................45
5.1.1 Hardware...................................................................................................................................................................45
5.1.2 Loaded Files..............................................................................................................................................................45
5.1.3 Index File...................................................................................................................................................................46
5.1.4 Examples...................................................................................................................................................................49
5.1.5 Copying Files.............................................................................................................................................................51
5.2 Procedure......................................................................................................................................................................51
6 Upgrading the System Software Using the BootROM Menu............53

6.2 Procedure......................................................................................................................................................................54
7 Upgrading the System Software Using the Web System.................58

Issue ()
Contents
7.2 Procedure......................................................................................................................................................................60
8 Upgrading AR Routers Through iMaster NCE-WAN.........................61

8.2 Upgrading AR Routers.................................................................................................................................................61
8.4 Rolling Back to an Earlier Version...............................................................................................................................64
9 Smart Upgrade............................................................................ 67
9.2 Procedure......................................................................................................................................................................67
10 Upgrading the System Version Using the uUpgrade.....................69

10.1 Version Mapping........................................................................................................................................................69
10.2 Obtaining the Installation Package and Guide...........................................................................................................69
10.3 Upgrading the Software Version................................................................................................................................70
10.3.1 Preparing for the Upgrade.......................................................................................................................................70
10.3.1.1 (Optional) Configuring a Template......................................................................................................................70
10.3.1.2 Configuring the File Transfer Service..................................................................................................................73
10.3.1.3 Creating an Upgrade Project................................................................................................................................75
10.3.1.4 Upgrading a Single NE.........................................................................................................................................76
10.3.1.5 Importing NEs in Batches....................................................................................................................................79
10.3.2 Performing an Upgrade...........................................................................................................................................80
10.3.3 Rolling Back the NE Version...................................................................................................................................81
10.4 Installing Patches........................................................................................................................................................81
10.5 Verifying the Upgrade................................................................................................................................................82
Issue ()
NetEngine AR
Upgrade Guide 1 Before You Start
2 Before You Start
1.1 Precautions
1.2 Upgrade Overview
1.3 Version Requirements
1.4 Impact of the Upgrade
2.1 Precautions
During the upgrade, do not power off the device. Otherwise, the upgrade may fail.
Table 2-1 Others Precautions

No. Description
1 Before the upgrade, collect information

about the routing table, FIB table, MAC
address table, device information, interface
information, version information, and
configuration file. Back up important files
such as certificates and configuration files
in the flash memory.
After the upgrade, collect the same
information again. Compare the before and
after information to check whether the
device is operating properly and
transmitting service traffic properly.
2 Ensure that the system files including
system software and configuration file are
stored in the flash memory. Do not save the
Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 1

NetEngine AR
No. Description
system files in the USB flash drive.

3 Except for the device restart steps described
in this document, do not restart or power off
the switch, or reset, swap, power on, or
power off any board during the upgrade.
After the upgrade is complete, you can
perform device reset, power-on, or power-
off only when verifying that services are
recovered.
4 During the upgrade, ensure that all
configured cards work properly. Otherwise,
the configuration may fail.
5 After the device is rolled back from
V300R019C10SPC200 and later versions to
a version earlier than
V300R019C10SPC100 in the scenario
where the device is connected to the Agile
Controller:

If the device is offline, the service
configuration delivered by the Agile
Controller cannot be restored. In this
case, you need to register the device with
the Agile Controller and deliver the
configuration again through the Agile
Controller.

If the device can connect to the Agile
Controller, the service configuration can
be re-delivered through the Agile
Controller. However, it takes a long
period of time to restore the service
configuration.
6 If a device is upgraded from a version
earlier than V300R019C10SPC100 to
V300R019C10SPC100 or a later version
and the cellular interface on the 1LTE-Lc
card alternates between Up and Down and
fails to obtain an IP address, run the
following commands to restart the interface
card after the upgrade:
<Huawei> power off slot slot-id
In this command, slot-id specifies the actual
slot ID of the card to be powered off and is
an integer.
<Huawei> power on slot slot-id
In this command, slot-id specifies the actual
slot ID of the card to be powered on and is
an integer.

NetEngine AR
No. Description
7 After the system software is upgraded, all

cards cannot automatically load the
corresponding BootROM, and you need to
manually upgrade the BootROM on these
cards.
8 If a device is upgraded from a version
V300R019C10SPC200 and later versions
and the pre-shared key used by an IPSec
IKE user is in plain text, the pre-shared key
will change to the cipher text format after
the upgrade. This does not affect the
interconnection with devices of the source
version. Before the upgrade, record the key
so that it can be queried after the upgrade.
9 After a device is upgraded from a version
V300R019C10SPC200 and later versions,
the information queried by running the
display reset-reason (reset reason)
commands in the all view. In the diagnostic
view, run the display inspect black-box
(exception information), display lastwords
(dying gasp), display kernel-logbuf (kernel
log), and display reset-snapshot (reset
snapshot) commands in the diagnostic view
will be lost. To query such information after
the upgrade, record the information before
the upgrade.
10 In V300R019C10 and later versions, Python
3.7.3 is supported. If Python of an earlier
version is used to compile scripts, script
compatibility issues will occur. Therefore,
Python 3.7.3 is recommended.
11 After the version is upgraded to
V300R019C10SPC200 and later versions,
the key exchange algorithm
dh_group1_sha1 is disabled on the SSH
server by default. To use the
dh_group1_sha1 key exchange algorithm,
you need to manually enable it.
12 After a version earlier than
V300R019C10SPC200 is upgraded to
V300R019C10SPC200, the power supply
backup mode is available to the SRU-100H,
SRU-200H, SRU-400H, and SRU-600H.
After the upgrade, both power modules are
powered on. By default, the power modules
work in 1:1 backup mode. The device uses

NetEngine AR
No. Description
the power module with smaller power as the

primary power module to provide power for
the device. In the source version, if the used
power of a device is greater than the power
of the primary power module, the following
exceptions will occur:

If the device is reset and then upgraded,
the original cards can be powered on
after the upgrade. However, the
remaining power is 0 (the actual power
exceeds the power supply capacity of the
power module), and no power can be
supplied to newly inserted cards. In this
case, you need to run the change power-
mode command in the system view to
change the power supply mode to 1+1
mode so that power can be properly
supplied to all cards on the device.

If the device is powered off and then
upgraded, some cards cannot be powered
on after the upgrade due to insufficient
power. In this case, you need to run the
change power-mode command in the
system view to change the power supply
mode to 1+1 mode so that power can be
properly supplied to all cards on the
device.
13 In V300R019C10SPC200 and later
versions, only the header information file in
flash:/header can be configured as the
header information displayed when a user
logs in to the device. If the header
information file is saved in another path
before the upgrade, the header information
becomes invalid after the upgrade. In this
case, you need to save the header
information file to flash:/header and run
the header login file command to re-
configure the header information file.
versions, the SSH server supports only the
SHA2_256 encryption algorithm for HMAC
encryption by default. To use other
encryption algorithms, you need to
manually enable them.
versions, the following commands related to
the 3DES, DES, and MD5 algorithms are
deleted (service recovery is not affected):

NetEngine AR
No. Description
sftp 0.0.0.0 prefer_stoc_cipher 3des

sftp 0.0.0.0 prefer_ctos_cipher 3des
sftp 0.0.0.0 prefer_ctos_hmac md5
sftp 0.0.0.0 prefer_stoc_hmac md5
stelnet 0.0.0.0 prefer_stoc_cipher 3des
stelnet 0.0.0.0 prefer_ctos_cipher 3des
stelnet 0.0.0.0 prefer_ctos_hmac md5
stelnet 0.0.0.0 prefer_stoc_hmac md5
esp encryption-algorithm { des | 3des }
encryption-algorithm { des | 3des }
ssh server cipher { 3des_cbc }
encryption-algorithm { des | 3des }
snmp-agent usm-user v3 user-name privacy-
mode des56
snmp-agent usm-user v3 user-name
authentication-mode md5
ssh server hmac { md5 | md5_96 }
versions, before enabling the following
services, you need to run the corresponding
command to configure the interfaces used
for access:
HTTP/HTTPS: http server permit interface
xxx
FTP: ftp server permit interface xxx
TFTP: tftp server permit interface xxx
Telnet: telnet server permit interface xxx
STelnet/SFTP: ssh server permit interface
xxx
SNMP: snmp-agent permit interface xxx
17 
The AR611, AR611-S, AR611W,
AR611W-S, AR611W-LTE4CN,
AR617VW, AR617VW-LTE4, and
AR617 VW-LTE4EA, AR651U-A4,
AR651W, and AR657W running
V300R019C13SPC200 and later
versions can be downgraded only to
V300R019C10SPC600 or
V300R019C13SPC200.

After the AR611, AR611-S, AR611W,
AR611W-S, AR611W-LTE4CN,
AR617VW, AR617VW-LTE4,
AR617VW-LTE4EA, AR651U-A4,
AR651W, and AR657W running

NetEngine AR
No. Description
V300R021C00SPC100 or later versions

are downgraded, the system software
package specified for startup using the
startup system command takes 30 more
seconds to take effect than that before
the downgrade. In addition, the
command output on the device varies
slightly. Prevent unexpected power-off
of the device when specifying the system
software package for startup. Otherwise,
the version downgrade will fail.
2.2 Upgrade Overview

Select the upgrade guide based on the upgrade path. Items marked with ● require special
attention
Upgrade 4 5 6 7
Path Upgrading Upgrading Upgrading Upgrading
the System the System the System the System
Version Software Software Software
Using the Using a Using the Using the
CLI USB Flash BootROM Web
Drive Menu System
V300R019C00 ● ● ● ●
V300R019C00
SPC100
V300R019C00
SPC200
V300R019C00
SPC300
V300R019C10
SPC100
V300R019C10
SPC200
V300R019C10
SPC300
V300R019C11
V300R019C11
SPC100
V300R019C11
SPC200
V300R019C13
V300R019C13

NetEngine AR
Upgrade 4 5 6 7
Path Upgrading Upgrading Upgrading Upgrading
the System the System the System the System
Version Software Software Software
Using the Using a Using the Using the
CLI USB Flash BootROM Web
Drive Menu System
SPC200
V300R021C00
V300R021C00
SPC100
Upgrade the
system software
to
V300R021C00
SPC200
2.3 Version Requirements

Version Product Model Upgrade Instruction
V300R019C00 AR651U-A4 The version can be directly

V300R019C00SPC100 AR651F-Lite upgraded to
V300R021C00SPC200.
V300R019C00SPC200 AR651C
Some commands are
V300R019C00SPC300 AR651 modified after the upgrade.
V300R019C10SPC100 AR651-LTE6EA For details, see NetEngine
V300R019C10SPC200 AR651W AR V300R021C00
V300R019C10SPC300 AR6120 Command, Alarm, MIB, and
API Delta Information.
V300R019C11 AR6120-VW
V300R019C11SPC100 AR6140-9G-2AC
V300R019C11SPC200 AR6140-16G4XG
V300R019C13 AR6280
V300R019C13SPC200 AR6300
V300R021C00 AR6120-S
V300R021C00SPC100 AR6140-S
AR6300-S
V300R019C10SPC100 AR617VW
V300R019C10SPC200 AR617VW-LTE4EA
V300R019C10SPC300 AR611W
V300R019C11 AR611W-LTE4CN
V300R019C11SPC100 AR6121

NetEngine AR
Version Product Model Upgrade Instruction
V300R019C11SPC200
V300R019C13
V300R019C13SPC200
V300R021C00
V300R021C00SPC100
V300R019C10SPC200 AR657W
V300R019C10SPC300
V300R019C11
V300R019C11SPC100
V300R019C11SPC200
V300R019C13
V300R019C13SPC200
V300R021C00
V300R021C00SPC100
V300R019C10SPC300 AR617VW-LTE4
V300R019C11 AR6121C-S
V300R019C11SPC100 AR6121-S
V300R019C11SPC200 AR6140H-S
V300R019C13 AR6280-S
V300R019C13SPC200
V300R021C00
V300R021C00SPC100
V300R019C13 AR651W-8P
V300R019C13SPC200 AR6121E
V300R021C00 AR6140E-9G-2AC
V300R021C00SPC100
2.4 Impact of the Upgrade

Before you upgrade the system software to V300R021C00SPC200, read this section carefully
to understand how the upgrade affects the system.
2.4.1 Impact on the System During the Upgrade

Impact on Services
The router needs to be restarted during the upgrade. Services are interrupted when the router
is restarting.

NetEngine AR
 A router without a configuration file will finish restarting within 4 minutes (services are
interrupted for about 7 minutes when the system software is upgraded by using the
BootROM menu).
 The restart time required by a configured router depends on the size of the configuration
file.
Impact on Network Communication

When the router is restarting, communication between the router and the network
management system (NMS) will be interrupted for about 4 minutes (communication will be
interrupted for about 7 minutes when the system software is upgraded by using the BootROM
menu).
2.4.2 Impact on the System After the Upgrade

A device running V300R019C10 or a later version uses Python 3.7.3. If you use Python of an
earlier version to compile scripts, compatibility issues may occur. You are advised to use
Python 3.7.3. For details about Python version updates, visit
https://docs.python.org/release/3.7.3.

NetEngine AR
Upgrade Guide 2 Upgrade Process Overview
3 Upgrade Process Overview
Figure 3-1 Upgrade flowchart

NetEngine AR
Upgrade Guide 2 Upgrade Process Overview
Table 3-1 Upgrade schedule

Procedure Step Time Required Remarks
(Minutes)
Prepare for the upgrade About 5 minutes Prepare tools and software.
Perform the upgrade About 15 minutes 1. Back up files.
2. Load the system
software.
3. Restart the device.
Verify the upgrade About 1 minute 1. Verify that
configurations are
correct.
2. Verify that the device is
running properly.
(Optional) Roll back to an About 10 minutes 1. Specify the system
earlier version software of an earlier
version for next startup.
2. Restart the device.

NetEngine AR
Upgrade Guide 3 Preparing for the Upgrade
4 Preparing for the Upgrade
3.1 Pre-upgrade Checklist

3.2 Obtaining Upgrade Reference Documents
3.3 Obtaining Tools
3.4 Obtaining Upgrade Software
3.5 (Optional) Preparing the Configuration File
3.6 (Optional) Preparing the License File
3.7 Verifying Software Integrity
3.8 Verifying the Current Version
3.9 Verifying the Current System Files
3.10 Verifying the Running Status of the Device
3.11 Setting Up the Upgrade Environment
3.12 Backing Up the Key Data in the Flash/SD Memory
3.13 Checking the Space in the Flash/SD Memory
4.1 Pre-upgrade Checklist

lists the items to be checked before the upgrade.
Table 4-1 Pre-upgrade checklist

No. Item Expected Actual Result
Result
1 Obtaining Upgrade The reference -

Reference documents have
Documents been printed or
downloaded to your
computer.

NetEngine AR

Result
2 Obtaining Tools The operation -

terminal, network
cable, serial cable,
and FTP or TFTP
software are ready.
3 Obtaining Upgrade The target system -
Software software (.cc) has
been obtained from
Huawei.
4 (Optional) Preparing The license files -
the License File have been obtained
from Huawei.
5 (Optional) Preparing The commands in -
the Configuration the configuration
File file meet the target
version
requirements.
6 Verifying the The current version -
Current Version meets Version
Requirements.
7 Verifying the Record the file -
Current System names for later file
Files backup.
8 Verifying the The SRU and -
Running Status of service cards are
the Device working properly.
Keep a record of the
status of the board in
each slot for future
troubleshooting.
9 Setting Up the The network to be -
Upgrade upgraded has been
Environment set up.
10 Backing Up the Key The key data in the -
Data in the Flash or Flash or SD has
SD Memory been backed up. Key
data includes the
configuration file,
license file, and
system startup file of
the current version.
11 Checking the Space The Flash or SD has -
in the Flash or SD sufficient space for
Memory the system software.

NetEngine AR

Result
12 Preparing the Voice Contact Huawei -

File Package technical support for
customization.
4.2 Obtaining Upgrade Reference Documents

Contact Huawei technical personnel or visit https://support.huawei.com/enterprise to obtain
the latest documents, including:
 NetEngine AR V300R021C00SPC200 Release Notes
 NetEngine AR V300R019 Product Documentation
4.3 Obtaining Tools

Prepare the following tools before the upgrade:
 Operation terminal, such as a desktop computer or a portable computer.
 Network cable and serial cable.
 TFTP client software, TFTP server software, SFTP client software, SFTP server
software, FTP server software, or FTP client software for the upgrade.
If FTP, SFTP, or TFTP is used, the AR can function as the TFTP server, TFTP client,
SFTP server, SFTP client, FTP client, or FTP server.
The device can transfer files through FTP, TFTP, and SFTP. Using FTP and TFTP has potential security
risks. SFTP is recommended.
4.4 Obtaining Upgrade Software

Step 1 To obtain the upgrade software, contact Huawei technical personnel or visit
https://support.huawei.com/enterprise/.
Step 2 Download V300R021C00SPC200 upgrade software and related documents.
Step 3 Decompress the downloaded upgrade software. Check that information about the upgrade
software is consistent with that in the table.
Model Version Size (Byte) File
AR651-LTE6EA V300R021C00SPC200 174,523,520 AR650A-

V300R021C00SPC200.c
c
AR651 174,523,520 AR650A-
V300R021C00SPC200.c

NetEngine AR
c
AR651W 174,523,520 AR650A-
V300R021C00SPC200.c
c
AR651W-8P 174,523,520 AR650A-
V300R021C00SPC200.c
c
AR651U-A4 174,523,520 AR650A-
V300R021C00SPC200.c
c
AR651F-Lite 141,632,640 AR650AL-
V300R021C00SPC200.c
c
AR651C 141,632,640 AR650AL-
V300R021C00SPC200.c
c
AR657W 174,523,520 AR650A-
V300R021C00SPC200.c
c
AR617VW-LTE4EA 157,101,696 AR610-
V300R021C00SPC200.c
c
AR617VW 157,101,696 AR610-
V300R021C00SPC200.c
c
AR611W-LTE4CN 157,101,696 AR610-
V300R021C00SPC200.c
c
AR611W 157,101,696 AR610-
V300R021C00SPC200.c
c
AR611 157,101,696 AR610-
V300R021C00SPC200.c
c
AR6120 198,262,528 AR6120-
V300R021C00SPC200.c
c
AR6121 198,262,528 AR6120-
V300R021C00SPC200.c
c
AR6121E 198,262,528 AR6120-
V300R021C00SPC200.c

NetEngine AR
c
AR6120-VW 231,491,072 AR6120-VW-
V300R021C00SPC200.c
c
AR6140-9G-2AC 215,918,848 AR6140-
V300R021C00SPC200.c
c
AR6140E-9G-2AC 215,918,848 AR6140-
V300R021C00SPC200.c
c
AR6140-16G4XG 203,193,344 AR6140H-
V300R021C00SPC200.c
c
AR6280 233,264,896 AR6280-
(SRU-100H/SRU- V300R021C00SPC200.c
200H/SRU-400H/SRU- c
600H/SRU-100HH)
AR6300 233,264,896 AR6300-
(SRU-100H/SRU- V300R021C00SPC200.c
200H/SRU-400H/SRU- c
600H/SRU-100HH)
AR617VW-LTE4 157,101,696 AR610-
V300R021C00SPC200.c
c
AR-10 198,262,528 AR-10-
V300R021C00SPC200.c
c
----End
Visit https://support.huawei.com/enterprise/, choose Software Download > By Product > Router >
Access Router, and download the required product and software version.
4.5 (Optional) Preparing the Configuration File

If the configuration in the target version varies significantly from the configuration in the
source version, you can prepare a new configuration file, load it onto the device, and
configure it for the next startup. After the device is restarted, the new configuration file is
used for configuration delivery.

NetEngine AR
4.6 (Optional) Preparing the License File

To use some features, apply for the licenses. For details, see License Usage Guide.
4.7 Verifying Software Integrity

To ensure the integrity of the software you have obtained, obtain the software and digital
certificate, and use the OpenPGP tool to verify the software.
To prevent a software package from being maliciously tampered with during transmission or storage,
download the corresponding digital signature file for integrity verification when downloading the
software package.
After the software package is downloaded, verify its PGP digital signature according to the OpenPGP
Signature Verification Guide. If the software package fails the verification, do not use the software
package, and contact Huawei technical support engineers.
Before a software package is used in installation or upgrade, its digital signature also needs to be
verified according to the OpenPGP Signature Verification Guide to ensure that the software package is
not tampered with.
Visit either of the following websites to obtain the OpenPGP Signature Verification Guide:

Enterprise customers: https://support.huawei.com/enterprise/en/tool/pgp-verify-TL1000000054
4.8 Verifying the Current Version

Run the display version command in the user view to check the current system software
version and ensure that it meets the upgrade requirement.
<Huawei>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AR651U-A4 V300R021C00SPC100)
Copyright (C) 2011-2018 HUAWEI TECH CO., LTD

Huawei AR651U-A4 Router uptime is 0 week, 0 day, 2 hours, 9 minutes
MPU 0(Master) : uptime is 0 week, 0 day, 2 hours, 9 minutes

SDRAM Memory Size : 4096 M bytes
Flash 0 Memory Size : 1024 M bytes
MPU version information :
1. PCB Version : AR-SRU651 VER.A
2. MAB Version : 0
3. Board Type : AR651U-A4
4. CPLD0 Version : 273

5. BootROM Version : 1
In the preceding output, the information in bold indicates the system software version running
on the device. If this is the target version, no upgrade is necessary.

NetEngine AR
4.9 Verifying the Current System Files

Run the display startup command in the user view to verify the system files in use. Record
the file names for later file backup.
The device equipped with the flash memory is used as an example.
<Huawei> display startup
MainBoard:
Startup system software: flash:/AR650A-
V300R021C00SPC100.cc
Next startup system software: flash:/AR650A-
Backup system software for next startup: null
Startup saved-configuration file: flash:/vrpcfg.zip
Next startup saved-configuration file: flash:/vrpcfg.zip
Startup license file: null
Next startup license file: null
Startup patch package: null

Next startup patch package: null
Startup voice-files: null
Next startup voice-files: null
4.10 Verifying the Running Status of the

Device
Step 1 Run the display device command in the user view to check the status of the SRU and
interface cards. Ensure that the SRU and interface cards are working properly.
<Huawei>display device
AR651U-A4's Device status:
Slot Sub Type Online Power Register Alarm Primary

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
0 - AR651U-A4 Present PowerOn Registered Normal
Master
If the SRU is working properly, the value in the Online field is Present, the value in the
Register field is Registered, and the value in the Alarm field is Normal.
If the value of the Register field is Unregistered, the board failed to register. If the value of
the Alarm field is Abnormal, the board is not operating properly.
For AR600 and AR6000 series, if some boards cannot be registered or do not work properly,
ask Huawei technical personnel to determine whether the boards can be upgraded or must be
replaced. If upgrading board is an option, recheck the status of the boards after the upgrade is
complete.

NetEngine AR
----End
4.11 Setting Up the Upgrade Environment

As shown in , to upgrade the system using FTP, TFTP, or SFTP, the following environment
must be set up:
 The RS-232 serial port of the PC is connected to the AR console port with a console
cable.
 The FTP, TFTP, or SFTP server is connected to GigabitEthernet0/0/0 of the SRU with a
network cable.
 There is a reachable route from the FTP, TFTP, or SFTP server to GigabitEthernet0/0/0.
 The system software and license file (optional) are stored on the FTP, TFTP, or SFTP
server.
A PC can also function as the server to store the system software and license file (optional). You only
need to connect the PC to GigabitEthernet0/0/0 of the AR using a network cable and ensure that devices
can ping each other.
Figure 4-1 Upgrading the system using FTP, TFTP, or SFTP
4.11.1 Scenario 1: Use the AR as the FTP Server

In the following description, the IP address of GigabitEthernet0/0/0 is 10.164.30.20, the FTP
user name is AR, the password of the FTP user is huawei@123, and the FTP root directory is
flash:/. The device equipped with the flash memory is used as an example.
<Huawei> system-view
[Huawei] ftp server permit interface GigabitEthernet 0/0/0
Info: Set permit interface success.

NetEngine AR
[Huawei] ftp server enable

Info: Succeeded in starting the FTP server
Info: FTP is insecure, recommended to use SFTP with encryption features.
[Huawei] aaa
[Huawei-aaa] local-user AR password irreversible-cipher huawei@123
info: A new user added
[Huawei-aaa] local-user AR ftp-directory flash:/
[Huawei-aaa] local-user AR service-type ftp
[Huawei-aaa] local-user AR privilege level 15
The NetEngine AR configuration files are stored in the flash or sd1 memory; therefore, the
FTP root directory is set to flash:/.
4.11.2 Scenario 2: Use the AR as the FTP Client, and

use the PC as the FTP Server
Step 1 Access https://filezilla-project.org and download the FileZilla Server installation packet to the
local PC.
Step 2 Install FileZilla Server as prompted.
The procedure may vary depending on the FileZilla Server version. The following uses FileZilla Server
0.9.60.2 as an example.
1. Double-click FileZilla_Server-0_9_60_2.exe.
2. Click I Agree.

NetEngine AR
3. Click Next and select an installation path.
4. Click Next.

NetEngine AR
5. Click Next.
6. Click Install.

NetEngine AR
7. Click Close. In the dialog box that is displayed, set related parameters.
− Host: host name or address. Set this parameter to 127.0.0.1.

− Port: FTP port number, which must be the same as that set in Step 2.4. The default
value is 14147.
− Password: FTP password, for example, admin.
8. Click Connect. If Logged on is displayed, the installation and connection are successful.

NetEngine AR
Step 3 Create a user name and set the password on FileZilla Server.
1. Optional: Choose Edit > Users.
2. Click Add, and enter the user name admin.
3. Click OK, select Password, and enter the password admin123.

NetEngine AR
Step 4 Set an accessible directory on FileZilla Server.

1. Click Shared folders.
2. Click Add. Select a local directory to be accessed, that is, the folder where files to be
transferred are stored. Click Set as home dir.

NetEngine AR
3. Click OK.
----End
4.11.3 Scenario 3: Use the AR as the TFTP Client,

and use the PC as the TFTP Server
The device can function as the TFTP client or TFTP server. Here, the device functions as the TFTP
client.
The AR does not come with TFTP server software installed. The customer must purchase and install
TFTP server software. The TFTPD32 program is recommended.
Run the TFTP server program on the PC and configure the PC:
 Click Browse to set the current directory to the TFTP working directory.
 Set the TFTP server address in Server interface, for example, 10.164.30.29.

NetEngine AR
4.11.4 Scenario 4: Use the AR as the SFTP Client,

and use the PC as the SFTP Server
The device can function as the SFTP client or SFTP server. Here, the device functions as the SFTP
client. For details about the device used as the SFTP server, see "Basic Configurations - File
Management" in Configuration Guide.
Huawei does not provide the SFTP server and client software; therefore, the customer needs to buy the
SFTP server and client software and install it.
Run an SFTP server program on the PC, for example, Core FTP mini-sftp-server.
Click New User and set the user name and password. Here, the user name is 123 and the
password is 123. Enter the SFTP working directory in the Root path text box. Here, the
working directory is D:\ftp. Do not stop the SFTP server program during data transfer.
4.12 Backing Up the Key Data in the Flash/SD

Memory
Ensure that the key data, including the patch files, configuration file, license file, and system
startup file of the current version, stored in the Flash/SD memory is backed up before
upgrade.
The backup method of license and patch files is the same as that of system software, and is not described
here.
AR650 is used as an example. The description that follows uses AR651U-A4-

V300R021C00SPC100.cc as current system software and vrpcfg.zip as the configuration
file.
You can use any of the following methods to back up key data:

NetEngine AR
 Use the AR as the FTP server.

 Use the AR as the FTP client.
 Use the AR as the TFTP client.
 Use the AR as the SFTP client.
4.12.1 Method 1: Use the AR as the FTP Server

Step 1 Configure the AR as the FTP server. See Scenario 1: Use the AR as the FTP Server.
Step 2 Back up the system software and configuration file.
Log in to the FTP server (AR) and use either of the following methods to back up files:
 Log in to the AR using any FTP client program and back up files to the FTP client.
In the Address box of the FTP client program, enter the IP address and the FTP root
directory of the AR, and copy the files from the FTP root directory to a directory on the
PC. Here, the directory on the PC is D:\ftp.
 Log in to the AR using the operation terminal, and back up files to the FTP client.
It is recommended that the upgrade program directory (FTP root directory) be used as
the login directory, for example, D:\ftp.
On Windows 10, perform the following operations to start the FTP program:
a. Choose Start > Run.
b. Enter cmd.
c. Enter d:.
d. Enter cd ftp to enter the FTP directory.
C:\Documents and Settings\Administrator>d:
D:\>cd ftp
D:\ftp> ftp 10.164.30.20
Connected to 10.164.30.20.
220 FTP service ready.
User(10.164.30.20:(none)):AR # Enter the user name and press Enter.
331 Password required for AR.
Password: # Enter the password huawei@123 and press Enter. The password is not
displayed on the screen.
230 User logged in.
ftp> binary
200 Type set to I.
ftp> get AR650A-V300R021C00SPC100.cc
200 Port command okay.
150 Opening binary mode data connection for AR650A-V300R021C00SPC100.cc.
226 Transfer complete.
ftp: 184129984 bytes received in 110.24Seconds 927.10Kbytes/sec.
The preceding output indicates the configuration file has been transferred and you can
find it in D:\ftp.
ftp> get vrpcfg.zip
200 Port command okay.
150 Opening binary mode data connection for vrpcfg.zip
226 Transfer complete.
ftp: 1197 bytes received in 0.00Seconds 1197000.00Kbytes/sec.
The preceding output indicates the configuration file has been transferred and you can
find it in D:\ftp.

NetEngine AR
----End
4.12.2 Method 2: Use the AR as the FTP Client

Step 1 Configure the PC as the FTP server. See Scenario 2: Use the AR as the FTP Client, and use
the PC as the FTP Server.
Do not stop the FTP program when you are backing up data.

The FTP commands on the AR are the same as the FTP commands in the DOS system.
Assume that the IP address of the FTP server is 10.1.1.1, the FTP user name is admin, and the
password of the FTP user is admin123.
<Huawei>cd flash:/
<Huawei>ftp 10.1.1.1 //Indicates the IP address of the FTP server, that is,
the IP address of the PC.
Trying 10.1.1.1 ...
Press CTRL+K to abort
220-FileZilla Server 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/
User(10.1.1.1:(none)):admin //User name of the FTP server: admin
331 Password required for admin

Enter password:****** //Password of the FTP server user: admin123
230 Logged on
[Huawei-ftp]binary
200 Type set to I
Back up the system software AR650A-V300R021C00SPC100.cc to the FTP server and

specify the name of the backup file as AR650A-V300R021C00SPC100-bak.cc. If the name
of the backup file is not specified, the original name is used.
[Huawei-ftp] put AR650A-V300R019C10SPC200.cc AR650A-V300R021C00SPC100-bak.cc
200 PORT command okay
150 "D:\FTP\AR650A-V300R021C00SPC100-bak.cc" file ready to receive in binary mode
226 Transfer finished successfully.

FTP: 155990912 byte(s) sent in 119.68 second(s) 1303.42Kbyte(s)/sec.
Back up the configuration file iascfg.zip to the FTP server and specify the name of the backup
file as iascfg-bak.zip. If the name of the backup file is not specified, the original name is used.
[Huawei-ftp] put iascfg.zip iascfg-bak.zip
200 Port command successful.
150 "D:\FTP\ iascfg-bak.zip" file ready to receive in binary mode

NetEngine AR
226 Transfer finished successfully.

FTP: 669 byte(s) sent in 0.169 second(s) 3.95Kbyte(s)/sec.
----End
4.12.3 Method 3: Use the AR as the TFTP Client

Step 1 Configure the TFTP server. See Scenario 3: Use the AR as the TFTP Client, and use the PC
as the TFTP Server.
Do not stop the TFTP server program when you are backing up data.

Before the backup, check the size of the configuration file. After the backup, compare the size
of the original file with the size of the backup file. Ensure that the two files are the same size.
The AR651U-A4 is used as an example.
<Huawei>dir flash:/*.cc
Directory of flash:/
Idx Attr Size(Byte) Date Time(LMT) FileName
0 -rw- 184,393,408 May 12 2018 23:48:48 AR650A-V300R021C00SPC100.cc
468,336 KB total available (428,432 KB free)

<Huawei>dir flash:/*.zip
0 -rw- 843,312 May 12 2018 17:38:24 web.zip
1 -rw- 445 May 12 2018 23:59:52 vrpcfg.zip
468,336 KB total available (428,432 KB free)
Run the following commands on the AR to back up the data. In the following description, the
AR651U-A4 is used as an example. The backup system software is AR650A-
V300R021C00SPC100-bak.cc, and the backup configuration file is vrpcfg-bak.zip.
<Huawei> tftp 10.164.30.29 put AR650A-V300R021C00SPC100.cc AR650A-
V300R021C00SPC100-bak.cc
Info: Transfer file in binary mode.
Uploading the file to the remote TFTP server. Please wait...
69129984 bytes send in 341 seconds.
TFTP: Uploading the file successfully.
<Huawei> tftp 10.164.30.29 put vrpcfg.zip vrpcfg-bak.zip
Uploading the file to the remote TFTP server. Please wait...
1197 bytes send in 1 second.
TFTP: Uploading the file successfully.
----End

NetEngine AR
4.12.4 Method 4: Use the AR as the SFTP Client

Step 1 Configure the PC as the SFTP server according to Scenario 4: Use the AR as the SFTP Client,
and use the PC as the SFTP Server.
Do not stop the SFTP server program when you are backing up data.

Step 3 The SFTP commands on the AR are the same as the SFTP commands in the DOS system. In
this example, the SFTP server IP address is 10.164.30.29, the FTP user name is 123, and the
password of the SFTP user is huawei@123.
<Huawei> cd flash:/
[Huawei]ssh client first-time enable
[Huawei]sftp 10.164.30.29
Please input the username:123
Trying 10.164.30.29 ...
Connected to 10.164.30.29 ...
The server is not authenticated. Continue to access it? [Y/N] :y
Save the server's public key? [Y/N] :y
The server's public key will be saved with the name 10.164.30.29. Please wait
Enter password: # Enter the password:huawei@123
sftp-client>
Step 4 Back up the system software AR650A-V300R021C00SPC100.cc to the SFTP server and
specify the name of the backup file as AR650A-V300R021C00SPC100-bak.cc. If the name
of the backup file is not specified, the original name is used.
sftp-client>put AR650A-V300R021C00SPC100.cc AR650A-V300R021C00SPC100-bak.cc
local file: AR650A-V300R021C00SPC100.cc ---> Remote file: / AR650A-

V300R021C00SPC100-bak.cc
Success
Info: Uploading file successfully ended.
Back up the configuration file vrpcfg.zip to the SFTP server and specify the name of the
backup file as vrpcfg-bak.zip. If the name of the backup file is not specified, the original
name is used.
sftp-client> put vrpcfg.zip vrpcfg-bak.zip
local file: iavrpcfg.zip--> Remote file:/vrpcfg-bak.zip
Success
Info: Uploading file successfully ended.
----End

NetEngine AR
4.13 Checking the Space in the Flash/SD

Memory
Step 1 Check the available space.
In the user view, run the dir command to check whether the Flash/SD memory has sufficient
available space for the new system software.
<Huawei> dir flash:/
0 -rw- 184,129,984 May 12 2018 13:51:47 AR650A-V300R021C00SPC100.cc
1 -rw- 1,738,816 May 12 2018 13:55:29 web.zip

2 -rw- 396 May 11 2018 13:55:32 rsa_host_key.efs
3 -rw- 540 May 11 2018 13:55:52 rsa_server_key.efs
1,929,520 KB total (1,741,311 KB free)
If the free space is larger than the size of system software package of the target version, the
space is sufficient. Otherwise, perform step 2 to delete unnecessary files.
Step 2 Delete unnecessary files.
If the flash/SD memory does not have sufficient space for the new system software, delete
unnecessary files to free up space.
Before deleting the system software (with the file name extension .cc or .zip), configuration file (with
the file name extension .cfg or .zip), and license file (with the file name extension .dat), ensure that they
are not in use.
Run the following commands in the user view to delete unnecessary files from the flash/SD
memory.
Files deleted using the delete command are stored in the recycle bin. Files in the recycle bin
still occupy flash/SD memory space. To restore these files, run the undelete command. The
reset recycle-bin command permanently deletes all files currently in the recycle bin.
You can also run the delete/unreserved command to permanently delete all files without
placing them in the recycle bin. This command is equivalent to running the delete and reset
recycle-bin commands in sequence.
# Delete unnecessary files from the flash/SD memory.

<Huawei> delete flash:/iascfg1.zip
Info: Delete flash:/iascfg1.zip? [Y/N]:y
Info: Deleting file flash:/iascfg1.zip...succeed.
# Run the following command to restore the files in the recycle bin.
<Huawei> undelete flash:/iascfg1.zip
Info: Undelete flash:/iascfg1.zip?[Y/N]:y

NetEngine AR
Info: Undeleted file flash:/iascfg1.zip.
# Run the following command to permanently delete files from the recycle bin.
<Huawei> reset recycle-bin flash:/
# Run the following command to permanently delete a specified file from the recycle bin.
<Huawei> delete /unreserved flash:/iascfg1.zip
----End

NetEngine AR
Upgrade Guide 4 Upgrading the System Version Using the CLI
5 Upgrading the System Version

Using the CLI
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
For more upgrade precautions, see 1.1 Precautions.
Upgrade process
shows the upgrade process.
Table 5-1 Upgrade process

No. Action Command Reference
1 Back up key data, - 4.1 Loading System

then load the new Software
system software,
license file
(optional), and
configuration file
(optional) to the
flash memory.
2 Check whether the dir 4.2 Verifying File
files were loaded. Loading
3 Specify the system startup system- 4.3 Specifying the
software and software System Software
configuration file for startup saved-
next startup. configuration
4 Check whether the display startup 4.3 Specifying the
system software and System Software
configuration file

NetEngine AR
No. Action Command Reference
specified for next

startup are correct.
5 Restart the device. reboot 4.4 Restarting the
Device
6 Verify the upgrade. display startup 4.6 Verifying the
display device Upgrade
display version
display current-
configuration
4.1 Loading System Software

4.2 Verifying File Loading
4.3 Specifying the System Software
4.4 Restarting the Device
4.5 (Optional) Activating the License
4.6 Verifying the Upgrade
4.7 Rolling Back to an Earlier Version
5.1 Loading System Software
The license file must be saved in the root directory of the file system.
In the following description, the AR651U-A4 is used as an example. The target system
software is AR650A-V300R021C00SPC200.cc, license file is license.dat, and the
configuration file is vrpcfgnew.zip.
You can use any of the following methods to load the system software:
 Use the AR as the FTP server.
 Use the AR as the FTP client.
 Use the AR as the TFTP client.
 Use the AR as the SFTP client.
5.1.1 Method 1: Use the AR as the FTP Server

Step 1 Configure the AR as the FTP server. See Scenario 1: Use the AR as the FTP Server.
Step 2 Upload the system software of the target version to the AR.

NetEngine AR
You can load the system software to the AR using either of the following methods:
 Copy the system software to flash:/ on the AR using any FTP client program.
 Similar to file backup, you only need to upload the system software to the FTP server
(AR).
 Load the system software by running the following commands on your computer.
D:\ftp> ftp 10.164.30.20
220 FTP service ready.
User(10.164.28.20:(none)):AR # Enter the user name.
Give me your password, please AR.
Enter Password: # Enter the password huawei@123 and press Enter. The password is
not displayed on the screen.
230 Logged in successfully
ftp> binary
200 Type is Image (Binary)
ftp> put AR650A-V300R021C00SPC200.cc
200 PORT command okay.
150 "D:\FTP\AR650A-V300R021C00SPC200.cc""file ready to receive in IMAGE / Binary
mode. 226 Transfer finished successfully.
FTP: 184655744 byte(s) in 277.024 second(s) 984.63Kbyte(s)/sec.
You can use put command specify a file name for the loaded system software. If a file name
is not specified, the original file name is used.
Step 3 (Optional) Upload the license file to the AR.
ftp> put license.dat
Step 4 (Optional) Upload the new configuration file to the AR.

ftp> put vrpcfgnew.zip
----End
5.1.2 Method 2: Use the AR as the FTP Client

Step 1 Configure the PC as the FTP server. See Scenario 2: Use the AR as the FTP Client, and use
the PC as the FTP Server
Step 2 Copy the upgrade system version files including the software package, license file, and
configuration file to the FTP working directory (such as D:\ftp) on the PC.
Step 3 Obtain the system software of the target version.
<Huawei>cd flash:/
<Huawei>ftp 10.1.1.1 //Indicates the IP address of the FTP server, that is,
the IP address of the PC.
Trying 10.1.1.1 ...
220-FileZilla Server 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/
User(10.1.1.1:(none)):admin //User name of the FTP server: admin
331 Password required for admin

NetEngine AR
Enter password:****** //Password of the FTP server user: admin123
230 Logged on
[Huawei-ftp]binary
200 Type set to I
[Huawei-ftp]AR650A-V300R021C00SPC200.cc
200 Port command successful

150 Opening data channel for file download from server of "/AR650A-
V300R021C00SPC200.cc"
226 Successfully transferred "/AR650A-V300R021C00SPC200.cc"
FTP: 190047232 byte(s) received in 735.524 second(s) 258.38Kbyte(s)/sec.
You can specify a file name for the system software. If a file name is not specified, the
original file name is used.
Step 4 (Optional) Obtain the license file.
[Huawei-ftp] get license.dat
Step 5 (Optional) Obtain the new configuration file.

[Huawei-ftp] get vrpcfgnew.zip
----End
5.1.3 Method 3: Use the AR as the TFTP Client

Step 1 Configure the TFTP server. See Scenario 3: Use the AR as the TFTP Client, and use the PC
as the TFTP Server.
configuration file to the TFTP working directory (such as D:\tftp32) on the operation
terminal.
Step 3 Obtain the system software of the target version from the server.
<Huawei> tftp 10.164.30.29 get AR650A-V300R021C00SPC200.cc
Downloading the file from the remote TFTP server. Please wait...
184655744 bytes received in 699 seconds.
TFTP: Downloading the file successfully.
If the message "Downloading the file successfully" is displayed, the system software has been
downloaded.
Step 4 (Optional) Obtain the license file from the server.
<Huawei> tftp 10.164.30.29 get license.dat
1686 bytes received in 1 second.
Step 5 (Optional) Obtain the new configuration file from the server.

NetEngine AR
<Huawei> tftp 10.164.30.29 get vrpcfgnew.zip

2396 bytes received in 1 second.
----End
5.1.4 Method 4: Use the AR as the SFTP Client

Step 1 Configure the PC as the SFTP server according to Scenario 4: Use the AR as the SFTP Client,
and use the PC as the SFTP Server.
configuration file to the SFTP working directory (such as D:\ftp) on the operation terminal.
Step 3 Obtain the system software of the target version.
<Huawei> cd flash:/
[Huawei] ssh client first-time enable
[Huawei] sftp 10.164.30.29
Please input the username:123
Trying 10.164.30.29 ...
Connected to 10.164.30.29 ...
The server is not authenticated. Continue to access it? [Y/N] :y
Save the server's public key? [Y/N] :y
The server's public key will be saved with the name 10.164.30.29. Please wait…
Enter password: # huawei@123
sftp-client>get AR650A-V300R021C00SPC200.cc
Remote file:/AR650A-V300R021C00SPC200.cc ---> Local file: AR650A-
End of file
SuccessInfo: Downloading file successfully ended.
You can specify the file name of the loaded system software. If the file name is not specified,
the original name is used.
Step 4 (Optional) Obtain the license file.
sftp-client> get license.dat
Step 5 (Optional) Obtain the new configuration file.

If the configuration file remains unchanged after the upgrade, this step is not required.
sftp-client> get vrpcfgnew.zip
Step 6 Close the SFTP connection.

sftp-client> quit
----End

NetEngine AR
5.2 Verifying File Loading

Run the dir command on the AR to verify that the upgrade program file exists and that the file
size is the same as the size of the file on the FTP or TFTP server.
<Huawei> dir flash:
0 -rw- 151,648,000 Jan 12 2017 08:34:23 AR650A-V300R021C00SPC100.cc
1 -rw- 1,738,816 Jan 12 2017 08:50:47 web.zip
2 -rw- 396 Jan 12 2017 08:50:50 rsa_host_key.efs
3 -rw- 540 Jan 12 2017 08:51:08 rsa_server_key.efs
4 -rw- 1,258 Jan 12 2017 22:21:44 vrpcfg.zip
5 -rw- 96,445,568 Jan 12 2017 09:42:59 AR650A-V300R021C00SPC200.cc

6 -rw- 2,396 Jan 12 2017 09:49:35 vrpcfgnew.zip
7 -rw- 1,686 Jan 12 2017 09:51:05 elabel.txt

8 -rw- 1,686 Jan 12 2017 09:51:05 license.dat
1,929,520 KB total available (1,792,762 KB free)
5.3 Specifying the System Software

Before specifying the system software, determine whether the device uses the single SRU or
dual SRUs, and then determine the mode in which the system software is specified.
5.3.1 AR Series Using a Single SRU

Step 1 Specify the system software for next startup.
Configure the loaded system software as the startup system software of the SRU.
<Huawei> startup system-software flash:/AR650A-V300R021C00SPC200.cc
This operation will take several minutes, please wait............

Info: Succeeded in setting the file for booting system
Run the display startup command to verify that the specified startup software is the newly
loaded system software.
MainBoard:

NetEngine AR

Step 2 (Optional) Specify the configuration file for next startup.

If a new configuration file has been loaded, specify the new configuration file for next startup.
If you do not specify the new configuration file, the old configuration file will be used after
the upgrade.
<Huawei> startup saved-configuration flash:/vrpcfgnew.zip
This operation will take several minutes, please wait..........
Run the display startup command to verify that the specified configuration file is the new
configuration file.
MainBoard:

Next startup saved-configuration file: flash:/vrpcfgnew.zip
----End
5.3.2 AR Series Using Dual SRUs

NetEngine AR
When configuring dual SRUs for the AR6300 that has one SRU installed, pay attention to the
following points:

The two SRUs must be the same type, for example, they are both SRU-200Hs or SRU-
400Hs.

Two power modules must be configured; otherwise, the interface card may fail to be
powered on due to insufficient power.
Step 1 Specify the system software for next startup.

Run the following command to change the startup system software of the master MPU to the
newly loaded system software. Then the system copies the system software to the slave MPU.
<Huawei> startup system-software flash:/AR6300-V300R021C00SPC200.cc all
This operation will take several minutes, please

wait..............................
Info: Copying file, this operation may take a long time, please
wait........................
wait..................................
Info: Succeeded in setting the file for slave booting system
Run the display startup command to verify that the specified startup software of the master
and slave SRUs is the newly loaded system software.
MainBoard:
Startup system software: flash:/AR6300-
Next startup system software: flash:/AR6300-


SlaveBoard:
system software for next startup: null

NetEngine AR

Step 2 (Optional) Specify the configuration file for next startup.

If a new configuration file has been loaded, specify the new configuration file for next startup.
If you do not specify the new configuration file, the old configuration file will be used after
the upgrade.
<Huawei> startup saved-configuration flash:/vrpcfgnew.zip all
This operation will take several minutes, please wait..........

Info: Copying file, this operation may take a long time, please wait...
wait.................................
Info: Succeeded in setting the file for slave booting system
Run the display startup command to verify that the specified configuration file is the new
configuration file.
MainBoard:


SlaveBoard:

NetEngine AR

system software for next startup: null

----End
5.4 Restarting the Device
Do not power off the device or remove the interface card when the device is restarting;
otherwise, the interface card may fail to start.
Run the reboot command to restart the device. The system uses the specified system software
and configuration file for next startup. When the system asks you whether to save the
configuration, enter y or n. After the setting is complete, the system asks you whether to
restart the device. Enter y to restart the device.
<Huawei> reboot
Info: The system is comparing the configuration, please wait.
Warning: All the configuration will be saved to the next startup configuration.
Continue ? [y/n]:y
It will take several minutes to save configuration file, please wait...
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
System will reboot! Continue ? [y/n]:y

Info: system is rebooting ,please wait...
5.5 (Optional) Activating the License

NetEngine AR
The ESN in the imported license file must be the same as the actual ESN of the device. When
a license is activated, the system reads the ESN of the device and compares the ESN with the
ESN field in the license file to check whether the license file is valid.If an invalid ESN is used
to apply for a license file, the license file is invalid and the system turns to the Protected state.
After a license file is loaded to the device, the file must be activated for it to take effect.
<Huawei> license active flash:/license.dat
Info: The License is being activated. Please wait for a moment.
Info: Succeeded in activating the License file on the master board.
Run the display license state command to view the license status. The commercial license
status should be Normal and the non-commercial license status should be Demo or Trial.
<Huawei> display license state
Info: Master board license state: Trial. The remain days is 59.

5.6.1 Verification Checklist
Table 5-1 Verification checklist
Result
1 Verifying the The current version -

Current System is the same as the
Software target version.
2 (Optional) Verifying The commercial -
the License Status license status should
be Normal and the
non-commercial
license status should
be Demo or Trial.
3 Verifying the SRU The boards are in -
Registration Status Registered state.
4 Verifying No configuration -
Configuration has been lost.
Restoration
5 Verifying Services Services are -
working properly.

NetEngine AR
5.6.2 Verifying the Current System Software

After device restart, run the display version command in the user view to check the version
of the system software. Verify that the current version matches the target version. If the
current version does not match the target version, review upgrade procedures, and perform the
upgrade again.
<Huawei>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AR650 V300R021C00SPC200)
Copyright (C) 2011-2019 HUAWEI TECH CO., LTD

Huawei AR651U-A4 Router uptime is 0 week, 0 day, 2 hours, 37 minutes
MPU 0(Master) : uptime is 0 week, 0 day, 2 hours, 37 minutes
SDRAM Memory Size : 4096 M bytes
MPU version information :
1. PCB Version : AR-SRU651 VER.A
2. MAB Version : 0
3. Board Type : AR651U-A4
4. CPLD0 Version : 112
5. BootROM Version : 1
5.6.3 (Optional) Verifying the License Status

Run the display license state command to view the license status. The commercial license
status should be Normal and the non-commercial license status should be Demo or Trial.
<Huawei> display license state
Info: Master board license state: Trial. The remain days is 59.
You can use the display license resource usage command to check the usage of the resource
items defined in the license file.
5.6.4 Verifying the SRU Registration Status

Run the display device command in the user view to check the registration status of the SRU.
All the boards should be in Registered state.
<Huawei>display device
AR651U-A4's Device status:
Slot Sub Type Online Power Register Alarm Primary

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2 - 1E1/T1-M Present PowerOn Registered Normal NA
0 - AR651U-A4 Present PowerOn Registered Normal Master
5.6.5 Verifying Configuration Restoration

After device restart, run the display current-configuration command in the user view to
check the AR configuration.
<Huawei> display current-configuration
[V300R021C00SPC200]
# The detailed configuration is not mentioned.

NetEngine AR
To compare the new configuration file with the configuration file saved in the flash memory, run the
compare configuration command in the user view.
You can also use the Beyond Compare tool to find out the differences between the configuration files.
5.6.6 Verifying Services

Use either of the following methods to check whether services are working properly after the
upgrade:
Do not run the save command before you ensure that all services are working properly.
 Check whether any table entries are missing, for example, the entries from the routing
table, FIB table, or MAC address table. Check whether the service traffic volume
remains the same after the upgrade.
 Confirm with the network management administrator that all services are working
properly and that servers such as the network management device and NetStream servers
function properly.

This section only describes the rollback using command line. For the operations of rollback
using BootROM, see Upgrading the System Software Using the BootROM Menu.
5.7.1 Rollback Scenarios and Methods

Rollback Scenarios
 The upgrade was successful and the device is functioning properly, but the new system
software does not meet service requirements.
 The device does not function properly after the upgrade.
Rollback Methods
 If the device functions properly after the upgrade, perform rollback using the command
line.
 If the device does not function properly after the upgrade, perform rollback using the
BootROM. See chapter 6 Upgrading the System Software Using the BootROM Menu.

NetEngine AR
5.7.2 Rollback Process

Figure 5-1 Version rollback flowchart
5.7.3 Specify the startup software and configuration

file of an early version
Assume that the system software of the version prior to the upgrade was AR651U-A4-
V300R021C00SPC100.cc. Run the following command to specify the previous system
software for next startup, the device equipped with the flash memory is used as an example:
<Huawei> startup system-software flash:/AR651U-A4-V300R021C00SPC100.cc
Assume that the old configuration file is vrpcfg.zip. Run the following command to specify
the old configuration file for startup:

NetEngine AR
<Huawei> startup saved-configuration flash:/vrpcfg.zip

Info: Succeeded in setting the configuration for booting system.
Check whether the system software and configuration file of the earlier version have been
specified for next startup.
MainBoard:
Startup system software: flash:/AR651U-A4-
Next startup system software: flash:/AR651U-A4-
Startup saved-configuration file: flash:/vrpcfgnew.zip

Startup saved-configuration file: flash:/vrpcfgnew.zip
5.7.4 Restarting the Device

Run the reboot command to restart the device. When the system restarts, the system software
is used before the upgrade.
<Huawei> reboot
Info: The system is now comparing the configuration, please wait.

Warning: All the configuration will be saved to the next startup configuration.
Continue ? [y/n]:y #Enter n if the new configuration file is used.
It will take several minutes to save configuration file, please wait...
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
<Huawei>
System will reboot! Continue ? [y/n]:y
Info: system is rebooting ,please wait...
5.7.5 Verifying the Rollback

The procedure for verifying a version rollback is identical to the procedure for verifying an
upgrade. For details, see Verifying the Upgrade.

NetEngine AR 5 Upgrading the System Software Using a USB Flash
Upgrade Guide Drive
6 Upgrading the System Software

Using a USB Flash Drive
5.1 Preparing for the Upgrade

5.2 Procedure

6.1.1 Hardware
 USB port: The AR provides a USB port.
 USB flash drive:
a. To ensure compatibility between USB flash drives and devices, use Huawei-
certified USB flash drives to upgrade the Huawei devices. Netac U208 (4 GB) flash
drive has passed Huawei certification. If you have not bought the USB flash drive,
contact local Huawei office.
b. The USB flash drive must use the FAT32 format. If the USB flash drive does not
use the FAT32 format, format the USB flash drive to convert the format to FAT32.
c. The USB flash drive must have sufficient space for the system software and
configuration file.

Upgrade Guide Drive
6.1.2 Loaded Files

The files include system software (mandatory), configuration file (optional), patch file
(optional), and license file (optional).
6.1.3 Index File

Perform the following steps to make the index file on your PC:
Step 1 Create a file named USB_AR.ini.
Step 2 Edit the index file in the following format:
BEGIN AR
[USB CONFIG]
SN=
EMS_ONLINE_STATE=
[UPGRADE INFO]
OPTION=
DEVICENUM=
[DEVICEn DESCRIPTION]
OPTION=
ESN=
MAC=
VERSION=
DIRECTORY=
FILENUM=
TYPEn=
FILENAMEn=
FILE_HMACn=
END AR
Table 6-1 Fields in the index file

Field Description
BEGIN AR Start tag of the index file. This field cannot

be modified.
USB CONFIG USB flash drive configuration. This field
cannot be modified.
SN Data change time in the format
YearMonthDay.HourMinuteSecond.
For example, the value 20110628.080910
indicates 2011-06-28 08:09:10.
NOTE
The SN field is a USB-based deployment flag. A
device has a default USB-based deployment flag.
If the USB_AR.ini file exists in the USB flash
drive, the device checks whether the default
USB-based deployment flag and the SN value in
the USB_AR.ini file are the same. If they are
different, the USB-based deployment process is
triggered. If the deployment succeeds, the value
of the default USB-based deployment flag on the
device is changed to the SN value in the

Upgrade Guide Drive
Field Description
USB_AR.ini file.
EMS_ONLINE_STATE Indicates whether the NMS is online. The

options are as follows:

YES: The NMS is online.

NO: The NMS is offline.
UPGRADE INFO Upgrade information header. This field
cannot be modified.
OPTION Upgrade mode flag. The field has a fixed
value of AUTO.
DEVICENUM Number of devices to be upgraded using
this index file.

To upgrade the software version of one
device, set the value of the
DEVICENUM field to 1 and use the
device's ESN and MAC address.

To upgrade software versions of multiple
devices to the same version, set the value
of the DEVICENUM field to 1 and use
the default ESN and MAC address.

To upgrade software versions of multiple
devices to different versions, set the
value of the DEVICENUM field to the
number of devices to be upgraded and
use devices' ESNs and MAC addresses.
DEVICEn DESCRIPTION Description information header of device n.
The value of n is an integer that ranges from
1 to 100.
OPTION Indicates whether to upgrade a device. The
value OK indicates that the device must be
upgraded. The value NOK indicates that the
device does not need to be upgraded.
ESN Serial number of a device. If the value of
this field is DEFAULT, the index file is
applicable to all devices. Otherwise, the
index file is applicable to a specific device.
NOTE
If this field is left empty, this field matches all
devices.
MAC MAC address of a device. If the value of

this field is DEFAULT, the index file is
applicable to all devices. Otherwise, the
index file is applicable to a specific device.
NOTE
If this field is left empty, this field matches all
devices.

Upgrade Guide Drive
Field Description
VERSION Version number after the upgrade.

DIRECTORY Path for storing deployment files.

If the value is DEFAULT, the
deployment files are stored in the root
directory of the USB flash drive.

If the value is /abc, the deployment files
are stored in the abc directory.
NOTE
If this field is left empty, the deployment files are
saved in the root directory of the USB flash
drive.
FILENUM Number of files to be loaded.

If only the system software needs to be
loaded, the value of this field is set to 1. If
the system software and patch file need to
be loaded, the value of this field is set to 2.
TYPEn Upgrade file type. The options are as
follows:

SYSTEM-SOFTWARE: system
software.

SYSTEM-CONFIG: configuration file.
NOTE
If the device supports the voice function and
works as a PBX, the configuration file is
SYSTEM-CONFIG_PBX.
If the device supports the voice function and
works as a SIPAG, the configuration file is
SYSTEM-CONFIG_SIPAG.

SYSTEM-PAT: patch file.

SYSTEM-LICENSE: license file.

SYSTEM-VOICE: voice file.

USER-DEFINE: user-defined file.
The value of n starts from 1.
FILENAMEn Upgrade file name. For example, if the
value of the TYPE1 field is SYSTEM-
SOFTWARE and the name of the system
software corresponding to the U disk is
system-software.cc, the value of the
FILENAME1 field is system-software.cc.
The value of n starts from 1.
FILE_HMACn HMAC used to verify a file to be
downloaded. The MAC is a 64-byte
character string that is calculated for a
specific file using a file checker based on
the HMAC-SHA256 algorithm. The key
used to calculate the HMAC must be the

Upgrade Guide Drive
Field Description
same as the password configured by the set

usb autoupdate password command.
The value of n starts with 1.
NOTE
This field is optional.
END AR End tag of the index file.
----End
6.1.4 Examples
Example 1
You need to create an index file for upgrading one device, and the requirements are as
follows:
 Data is changed at 08:09:10 on Jan 12, 2017.
 The NMS is offline.
 Upgrade is required.
 The device ESN is 00080123456789 and the MAC address is 0018-0303-1234.
 The system software system-software01.cc is stored in the root directory of the USB
flash drive. The version number is V300R021C00SPC200. The HMAC string is
c3caaee8f4f6bd1389f438801e40dad9af30f2fbbe7e8f55121b39c6c16ba488.
The index file that meets the preceding requirements is as follows:
BEGIN AR
[USB CONFIG]
SN=20170112.080910
EMS_ONLINE_STATE=NO
[UPGRADE INFO]
OPTION=AUTO
DEVICENUM=1
[DEVICE1 DESCRIPTION]
OPTION=OK
ESN=00080123456789
MAC=0018-0303-1234
VERSION=V300R021C00SPC200
DIRECTORY=DEFAULT
FILENUM=1
TYPE1=SYSTEM-SOFTWARE
FILENAME1=system-software01.cc
FILE_HMAC1=c3caaee8f4f6bd1389f438801e40dad9af30f2fbbe7e8f55121b39c6c16ba488
END AR

Upgrade Guide Drive
Example 2
You need to create an index file for upgrading multiple devices to the same software version,
and the requirements are as follows:
 Upgrade is required.
 The system software system-software01.cc is stored in the root directory of the USB
flash drive. The version number is V300R021C00SPC200. HMAC check is not required
for any file.
BEGIN AR
[USB CONFIG]
SN=20170112.080910
EMS_ONLINE_STATE=NO
[UPGRADE INFO]
OPTION=AUTO
DEVICENUM=1
OPTION=OK
ESN=DEFAULT
MAC=DEFAULT
DIRECTORY=DEFAULT
FILENUM=1
FILENAME1=system-software01.cc
END AR
Example 3
You need to create an index file for two devices with different description information, and
the requirements are as follows:
 The ESN of the first device is 00080123456789. The MAC address is 0018-0303-1234.
The name of the system software is V300R021C00SPC200.cc. The version number is
V300R021C00SPC200. The configuration file system-config01.zip must be loaded.
HMAC check is not required for any file.
 The ESN of the second device is 66680123456789. The MAC address is 0018-0303-
5678. The name of the system software is V300R021C00SPC200.cc. The version
number is V300R021C00SPC200. The configuration file system-config02.zip must be
loaded. HMAC check is not required for any file.
BEGIN AR
[USB CONFIG]
SN=20170112.080910
EMS_ONLINE_STATE=NO
[UPGRADE INFO]

Upgrade Guide Drive
OPTION=AUTO
DEVICENUM=2
OPTION=OK
ESN=00080123456789
MAC=0018-0303-1234
DIRECTORY=DEFAULT
FILENUM=2
FILENAME1=V300R021C00SPC200.cc
TYPE2=SYSTEM-CONFIG
FILENAME2=system-config01.zip
OPTION=OK
ESN=66680123456789
MAC=0018-0303-5678
DIRECTORY=DEFAULT
FILENUM=2
FILENAME1=V300R021C00SPC200.cc
TYPE2=SYSTEM-CONFIG
FILENAME2=system-config02.zip
END AR
6.1.5 Copying Files

Copy the index file to the root directory of the USB flash drive and copy the system software
package, configuration file, license file, and patch file to the directory specified in the index
file.

Do not power off the AR while files are being copied. If the AR is powered off, the
upgrade will fail or the AR will be unable to restart.

Do not remove the USB flash drive before the upgrade is completed. If the USB flash
drive is removed, it may be damaged.
6.2 Procedure
Insert the USB flash drive.
Step 1 If the ACT indicator blinks green every 2 seconds, the system is copying the files specified in
the index file from the USB flash drive.
Step 2 After copying the files and specifying the startup file, the system restarts.
Step 3 If the ACT indicator is steady green after the restart, the upgrade is successful.

Upgrade Guide Drive
If the ACT indicator is steady red, an error occurs. Power recycle the device, and then insert
the USB flash drive again. If the upgrade fails three times, check whether the index files and
the directory on the USB flash drive are correct, or contact Huawei technical support
personnel.
----End

See Verifying the Upgrade.

NetEngine AR 6 Upgrading the System Software Using the BootROM
Upgrade Guide Menu

Using the BootROM Menu
This section describes how to upgrade the system software using the BootROM menu. This
method is used when the system software fails to start.

6.2 Procedure
This upgrade procedure is complicated and not recommended for use under normal
circumstances. Use this method when the system software will not start.
You can use the FTP or TFTP client mode through the BootROM software. The PC can use a
terminal emulation program such as the HyperTerminal of Windows 10 to communicate with
an AR through a serial port only. The PC must function as the FTP or TFTP server. Ensure
that the PC is directly connected to the management port of the AR to be upgraded and can
communicate on the same network segment.
This section describes the AR6000 upgrade process. You can upgrade other NetEngine AR of
the AR600 devices in the same way.

Upgrade Guide Menu
7.2 Procedure
Step 1 Run the FTP program on the operation terminal or PC and specify the path of the system
software. Create the FTP user AR and set the password of the FTP user to huawei@123.
The IP address of the configuration terminal or PC (IP address of the FTP server) and the IP address of
the management interface of the AR must be on the same network segment.
Step 2 Restart the AR.

When the AR is powered on, the operation terminal displays the following information:
Start bootloader
pack log backstage
Bootloader creation date: Dec 13 2019, 16:07:07
Bootloader boardid: 0xf0
Press Ctrl+B to break auto startup ...3
Step 3 Press Ctrl+B within 3 seconds. If you do not press Ctrl+B within 3 seconds, you need to
restart the device.
Enter Password:
Step 4 Enter the extended BootROM password to display the main BootROM menu. (The default
password is Admin@huawei.)
In versions later than V300R019C11SPC100, there is no default password. When you log in to the
device for the first time, the system prompts you to configure a password.
When the correct password is entered, the following BootROM menu is displayed:
1. Default Startup: Uses the startup software specified in option 4 to start the system. You
do not need to configure the basic BootROM or extended BootROM.
2. Serial SubMenu: Updates the BootROM and CPLD.
3. Ethernet SubMenu: Downloads files through the management interface.
4. Modify Startup Parameters: Specifies the startup software.
5. File System: Manages the file system.
6. Password Manager: Changes the BootROM login password and clears the serial port
login password.
7. DFX submenu Manager: Access the DFX submenu to view the electronic label of a
device.
8. Reboot: Uses the system software specified in option 4 to restart the system.
Main Menu
1. Default Startup
2. Serial SubMenu
3. Ethernet SubMenu
4. Startup parameters submenu
5. File system submenu
6. Password manager submenu
7. DFX submenu
8. Reboot
Enter your choice(1-8):3

Upgrade Guide Menu
Step 5 Enter 3 to display the network menu.

Ethernet SubMenu
1. Update Software
2. Display Parameters
3. Modify Parameters
4. Save Parameters
0. Return
Step 6 Enter 3 to set the parameters of the network interface.

1. Set Ftp type to 0 or 1 and press Enter.
The value 0 indicates FTP and the value 1 indicates TFTP. If you keep the Ftp type field
blank, FTP is used.
2. Set Ethernet ip address to the AR's management IP address and press Enter.
The AR's management IP address and the value of Ftp host ip address must be on the
same network segment.
3. Set Ethernet ip mask to the subnet mask of the AR's management IP address. If the
subnet mask is 255.255.255.0, set Ethernet ip mask to 255.255.255.0.
4. Set Ftp host ip address to the gateway IP address of the FTP/TFTP server and press
Enter.
5. Set Ftp user to the FTP user name and press Enter. If TFTP is used, press Enter
directly.
6. Set Ftp password to the FTP user password and press Enter. If TFTP is used, press
Enter directly.
NOTE:
Ftp type define: 0(ftp), 1(tftp),
ENTER = no change;
Ftp type : 0
Server IP address : 192.168.1.6
Local IP address : 192.168.1.3
Local IP mask : 255.255.255.0
FTP username : AR
FTP password : **********
In the command output, FTP is used, the IP address of the AR is 192.168.1.3, the IP address of
the ftp server is 192.168.1.6, the FTP user name is AR, and the password of the FTP user is
huawei@123. You can modify these parameters based on site requirements.

Upgrade Guide Menu
The parameter values can contain letters, Arabic numerals, underscores, and periods. Spaces are not
allowed. To change configured network parameters, enter new parameters following the configured
parameters. Spaces are not allowed.
Step 7 Enter 1 and select a software update option.

Update Software
1. Update System Software

0. Return
Step 8 Enter 1 to download the system software to the flash memory.

Please input the file name: AR6300-V300R021C00SPC200.cc
Downloading ....
file downloading is completed,writing file writing file:[ flash:/AR6300-
V300R021C00SPC200.cc ]to file
system ...........................................................................
..................................................................................
..................................................................................
..................................................................................
..................................................................................
..................................................................................
.............................OK!
Save load state word...OK!

Set flash:/AR6300-V300R021C00SPC200.cc as default startup file.
Update Software
1. Update System Software

0. Return
Step 9 Enter 0 twice to return to the main menu.

Ethernet SubMenu
1. Update Software
2. Display Parameters
3. Modify Parameters
4. Save Parameters
0. Return
Main Menu
1. Default Startup
2. Serial SubMenu
3. Ethernet SubMenu
4. Modify Startup Parameters
5. File System

Upgrade Guide Menu
6. Password Manager
7. DFX submenu
8. Reboot
Step 10 The downloaded system file has been configured as the default startup file. In the main menu,
select 8 to restart the AR.
----End

See section Verifying the Upgrade.

NetEngine AR
Upgrade Guide 7 Upgrading the System Software Using the Web System

Using the Web System

7.2 Procedure

The AR series routers have a built-in web server. You can connect an operation terminal (for
example, a PC) to an AR and use the web browser to access this AR.
shows the operating environment of the web system.

NetEngine AR
Figure 8-1 Operating environment of the web system
The web service has been enabled by default. If the web service is not configured, you can use
the following methods:
Step 1 When new system software is uploaded on the AR, the system software contains the web
page file. After HTTP or HTTPS is enabled on the AR using the http server enable or http
secure-server enable command, the AR extracts web.zip from the system software to the
memory. You need to configure login through the console port and management interface's IP
address.
The AR uploads the web page file using FTP. You need to log in through the console port, set the
management interface's IP address, upload the web page file, and load the web page file.
Step 2 If HTTPS is enabled, when a user enters the HTTP request address in the address bar, the
HTTPS login page is displayed. After the user logs in successfully, the HTTPS access page is
displayed.
You must enable both HTTP and HTTPS. Otherwise, the system displays the message "The login page
cannot be accessed."
Step 3 HTTPS does not provide defense against DoS attacks. You can configure the firewall to
defend against DoS attacks. For details on how to configure the firewall, see Firewall
Configuration.
Step 4 After the http server enable command is used to enable the HTTP service, HTTP and
HTTPS are enabled. Therefore, you can use HTTPS to access the web system.
If the web system user is not configured, perform the following steps.
1. Run the system-view command to enter the system view.
2. Run the aaa command to enter the AAA view.
3. Run the local-user user-name password irreversible-cipher password command to set
the web user name and password.
4. Run the local-user user-name privilege level level command to set the user level.
5. Run the local-user user-name service-type http command to set the service type to
HTTP.
6. Run the quit command to return to the system view.
7. (Optional) Run the http timeout timeout command to set the timeout interval of HTTP
sessions.

NetEngine AR
By default, the timeout interval is 10 minutes.
The default user name is admin, the default password is admin@huawei.com, and the default user
level is 15. You can directly log in to the web system. After login, you are advised to change the
password and periodically update the password to ensure the security. Users at level 0 or users whose
user levels are not configured are not allowed to log in to the web system. User level 1 corresponds to a
common administrator; user level 2 corresponds to an enterprise administrator; user levels 3 to 15
correspond to a super administrator.
----End
8.2 Procedure
Step 1 Log in to the web system.
Enter https://management interface's IP address in the browser, and enter the user name and
password.
The default user name is admin, and the default password is Admin@huawei or admin@huawei.com.
Step 2 Load the system software.
Figure 8-1 Loading the system software
1. Choose Maintenance > Upgrade&Maintenance > Software Upgrade.

2. Click Browse and select the system software to upload.
3. Click Load to upload the system software to the device. The loaded system software is
specified as the next startup system software.

NetEngine AR
4. Restart the device to make the system software take effect.

Step 3 Select the loaded system software and restart the device to make the configuration take effect.
----End

See section Verifying the Upgrade.

NetEngine AR
Upgrade Guide 8 Upgrading AR Routers Through iMaster NCE-WAN
9 Upgrading AR Routers Through

iMaster NCE-WAN

8.2 Upgrading AR Routers
Before performing an upgrade, back up the configuration file of the source version for version
rollback. Otherwise, version rollback may fail.
For more precautions about the upgrade, refer to Precautions.
Version Requirements
Step 1 Verify that iMaster NCE-WAN runs a software version of V100R020C10SPC100.
Step 2 Verify that the AR routers can be upgraded through iMaster NCE-WAN.
----End
9.2 Upgrading AR Routers

Context
This section describes how to upgrade AR routers through iMaster NCE-WAN.

NetEngine AR
iMaster NCE-WAN has a limited egress bandwidth in the southbound direction. If you
upgrade a large number of devices on iMaster NCE-WAN at the same time, the message "The
download fails." may be displayed for some devices that need to wait for a long period. If this
occurs, try again later.
Procedure
Step 1 Log in to the management plane.
Step 2 Choose Product > Deploy Product Software from the main menu, choose More > Modify
Configurations, set RSA_ENABLE to true, and click OK.
Step 3 Wait for 3 to 5 minutes, choose Product > System Monitoring from the main menu, click
the Service tab, search for FIProxyService, and check whether FIProxyService is restarted
successfully. If FIProxyService is in the normal state, the device can be upgraded.
Step 4 Log in to iMaster NCE-WAN as an administrator and choose Maintenance > Maintenance >
File Management from the main menu.
Step 5 Click Upload File and upload the AR V300R021C00SPC200 software package to iMaster
NCE-WAN.
Step 6 Check the model and software version of the device to be upgraded.
1. Choose Maintenance > Device Maintenance > Device Upgrade.
2. Click on the left of the device list, and check Device Model, Current Software,
and Current Patch.
Step 7 Select a software installation package or patch package and configure an upgrade policy.
1. Choose Maintenance > Device Maintenance > Device Upgrade from the main menu.
2. Select a site, click Upgrade Plan, and configure a device upgrade policy as prompted.
3. Configure the time mode. If Time mode is set to Device System Time, Time to
Download Upgrade Files and Software Update Restart Time are subject to the device
time. If Time mode is set to Client Time, Time to Download Upgrade Files and
Software Update Restart Time are subject to the time when the tenant administrator
performs operations on the terminal.
4. Under Time to Download Upgrade Files, set the upgrade file download time. Three
options are available: Specific Date and Time, Specific Time Every Week, and
Immediately.

NetEngine AR
5. Set Software Update Restart Time to specify a restart policy. The options are Specific
Time Every Week and Immediately.

If a device has started the upgrade process and the process is ongoing, modifying parameters under
Software Update Restart Time will not take effect.

For AR routers, you must select and upload both the software package and patch package when
upgrading the patch. The software package version must be the same as the version of the software
package on the current device.

During hot patch upgrade, the devices will not restart. In a hot patch upgrade plan, Software Update
Restart Time indicates the time when the hot patch takes effect.

When loading a patch, you need to select both the upgrade package and patch package. Otherwise,
the patch fails to be loaded.
6. Configure the upgrade mode and upgrade path.
Set Upgrade mode to Device Name, click Add in the Upgrade Path area, select the
device to be upgraded, select the upgrade software package and patch, and click OK.
Then, the selected device will be upgraded. Alternatively, click Upgrade All to Latest to
upgrade all devices at the site to the latest version. You can select the patch to be
uninstalled.
The device restarts during the upgrade and goes online after the upgrade is successful.
Step 8 Click the Upgrade Detail tab to view device upgrade details, including the upgrade progress
and upgrade failure causes. If the upgrade fails, check the cause of the upgrade failure. After
the fault is rectified, select the device and click Update Again to reupgrade the device
separately.

NetEngine AR
After successful device upgrade, you need to check whether the device configuration is successfully
delivered.
Choose Maintenance > Provisioning Result > Generate Configuration from the main menu. If Status
is displayed as Succeeded, the configuration is successfully delivered.
----End

Step 1 Log in to iMaster NCE-WAN as an administrator and choose Maintenance > Device
Maintenance > Device Upgrade from the main menu.
Step 2 Click on the leftof the device list, and check Device Model, Current Software, and
Current Patch. Verify that the devicesoftware version is V300R021C00SPC200.
Step 3 After successful device upgrade, check whether the device configuration is successfully
delivered.
Choose Maintenance > Provisioning Result > Generate Configuration from the main
menu. If Status is displayed as Succeeded, the configuration is successfully delivered.
----End

Step 1 Log in to iMaster NCE-WAN as an administrator and choose Maintenance > Maintenance >
File Management from the main menu.
Step 2 Click Upload File to upload the software package of an earlier version to iMaster NCE-
WAN.
Step 3 Check the model and software version of the device to be rolled back.
1. Choose Maintenance > Device Maintenance > Device Upgrade.
2. Click on the leftof the device list, and check Device Model, Current Software, and
Current Patch.

NetEngine AR
Step 4 Select a software package and configure a rollback policy.

1. Choose Maintenance > Device Maintenance > Device Upgrade from the main menu.
2. Select a site, click Upgrade Plan, and configure a device rollback policy as prompted.
3. Configure the time mode. If Time mode is set to Device System Time, Time to
Download Upgrade Files and Software Update Restart Time are subject to the device
time. If Time mode is set to Client Time, Time to Download Upgrade Files and
Software Update Restart Time are subject to the time when the tenant administrator
performs operations on the terminal.
4. Under Time to Download Upgrade Files, set the upgrade file download time. Three
options are available: Specific Date and Time, Specific Time Every Week, and
Immediately.
5. Set Software Update Restart Time to specify a restart policy. The options are Specific
Time Every Week and Immediately.
6. Configure the rollback mode and rollback path.

Set the rollback mode to Device Name and select the software version for the device to
be rolled back. Then, the selected device will be rolled back. Alternatively, click
Upgrade All to Latest to roll back all devices at the site to the specified version, and
click OK.

NetEngine AR
The device restarts during the rollback and goes online after the rollback is successful.
----End

NetEngine AR
Upgrade Guide 9 Smart Upgrade
10 Smart Upgrade

9.2 Procedure

Huawei devices support automatic download and self-service upgrade to help you learn about
the mainstream versions of the devices and quickly perform device upgrade and repair. After
enabling the smart upgrade function on the web platform of devices, you hereby authorize
Huawei Technologies Co., Ltd. to exchange information with your devices through the
Huawei Online Upgrade Platform (https://houp.huawei.com/) to collect information such as
device models, basic software versions and patches, and device ESNs. The information will
be used to match the versions or patches that can be upgraded and return the information such
as the upgrade versions or patches and the download URLs of software packages to your
devices. After you confirm the upgrade, the devices will automatically download the software
packages and implement an upgrade. When the upgrade is completed, the upgrade result will
be uploaded to Huawei online upgrade platform. You are advised to enter your email and
phone number for emergency contact upon any upgrade error. We will contact you if
necessary so that your network services can work properly after the upgrade.
Smart upgrade requires that a device be able to access the Huawei Online Upgrade Platform
(https://houp.huawei.com/).
10.2 Procedure
Step 1 Log in to the web platform.
Enter https://IP address of the management network port and press Enter. Then enter the user
name and password on the login page.
Step 2 Access the Intelligent Upgrade page.

NetEngine AR
Upgrade Guide 9 Smart Upgrade
After Automatic version upgrade check is enabled, the recommended target software
versions are displayed. Click Immediate Upgrade or Scheduled Upgrade to perform an
upgrade.
Figure 10-1 Smart upgrade
1. Choose Maintenance> Upgrade & Maintenance > Intelligent Upgrade.

2. Read Letter of Authorization for the Huawei Product Online Upgrade Service,
select I have read and accept Letter of Authorization for the Huawei Product
Online Upgrade Service, and click Intelligent upgrade.
3. Set Email and Phone, and click Apply.
4. In the Check Result area, check the recommended target AR version, and click
Immediate Upgrade or Scheduled Upgrade to perform an upgrade.
----End

For details, see Verifying the Upgrade.

NetEngine AR
Upgrade Guide 10 Upgrading the System Version Using the uUpgrade
11 Upgrading the System

Version Using the uUpgrade
The uUpgrade is a standalone tool for remotely upgrading the version and installing patches
for AR routers.
This tool checks the status and service functions of devices before and after the upgrade and
automatically generates a check report.
Additionally, it can back up configuration files, patches, and version software of devices.
The uUpgrade also supports FTP and SFTP connectivity tests and batch AR upgrade.
10.1 Version Mapping
10.2 Obtaining the Installation Package and Guide
10.3 Upgrading the Software Version
10.4 Installing Patches
11.1 Version Mapping

Since iBox V100R020C10SPC200, uUpgrade can be used to upgrade all AR series devices
running V300R019C11.
11.2 Obtaining the Installation Package and

Guide
You can obtain the installation package and guide from Obtaining the Installation Package
and Guide.
1. Enter uUpgrade in the search box. The related items are automatically displayed. Select
the items that contain iManager uUpgrade, as shown in 1.

NetEngine AR
Figure 11-1 uUpgrade software package download website
2. Click the installation package link and download the installation package and guide.
11.3 Upgrading the Software Version

This section describes software version upgrade for AR devices.
11.3.1 Preparing for the Upgrade

11.3.1.1 (Optional) Configuring a Template
This section describes how to configure a template.
For AR devices, two default templates are provided.
Tempate Configuration Description

The product upgrade process is provided in the form of a template. The templates can be
reused to reduce repeated configuration operations. The following default templates are
provided based on upgrade scenarios:
Default Template Application Key Step

Name Scenario Description
Default software upgrade Software upgrade for AR For a customized template,

template(AR) devices you can select steps to be
performed from the default
Default patch upgrade Patch upgrade for AR template based on the
template(AR) devices scenario.

NetEngine AR
Procedure
Step 1 Log in to uUpgrade and choose Configuration Management > Template Management. The
Template Management page is displayed.
Step 2 Select an AR model from the drop-down list box.
Step 3 Click Create. In the Create Template dialog box that is displayed, enter information in
sequence.
Step 4 (Optional) Select a template from the Select the default template drop-down list box. The
detailed information about Configure the template step is displayed.
Step 5 (Optional) In the Configure the template step area, select or deselect Selected and Pause
before execution as required.

NetEngine AR

You must select at least one step.

Step Name: indicates NE upgrade steps.

Pause before execution: determines whether to pause a step before it is executed.
Step 6 (Optional) Click Next, configure a rollback template, and click OK. The template is
successfully created.

NetEngine AR
Step 7 (Optional) Click OK. The template is created successfully.

----End
11.3.1.2 Configuring the File Transfer Service

This section describes how to configure the file transfer service.
Procedure
Step 1 In the navigation pane on the left, choose xFTP Configuration and click Create on the page
that is displayed.
Step 2 In the Create xFTP Info dialog box that is displayed, enter FTP and SFTP information.

NetEngine AR
The entered FTP and SFTP information must be the same as the configured FTP and SFTP information.
Currently, only local FTP or SFTP and third-party FTP/SFTP are supported.
Step 3 After the connection test is successful, click OK.

NetEngine AR
----End
11.3.1.3 Creating an Upgrade Project

This section describes how to create a project.
Procedure
Step 1 Click NE Upgrade.
Step 2 Click Create. In the Create dialog box that is displayed, set Project Name.

NetEngine AR
Step 3 Click OK.

----End
11.3.1.4 Upgrading a Single NE

uUpgrade supports NE software management. You can select a proper target version for the
NE to be upgraded from the NE software package list.
Prerequisites
The software package has been copied to the FTP root directory.
Procedure
Step 1 On the NE Upgrade page, select Create from the Add NE drop-down list box.
Step 2 In the Create dialog box that is displayed, set NE Information.

NetEngine AR
Step 3 Set NE Type.
Step 4 Set Upgrade Template.

NetEngine AR
Step 5 (Optional) Set Select FTP.
Step 6 (Optional) Set Software, Patch, Configuration, and GTL-License based on the upgrade
template.

NetEngine AR
Step 7 Click Test Connectivity. After the test is complete, click OK.
----End
11.3.1.5 Importing NEs in Batches

This section describes how to add devices in batches.
Prerequisites
The software package has been copied to the FTP root directory.
Procedure
Step 1 In the NE Upgrade page, choose Add NE > Importing NEs In Batchs.
Step 2 In the Importing NEs In Batchs dialog box, select a project and click Download Template.

NetEngine AR
Step 3 Fill in the template with information about the devices to be upgraded and xFTP information
and save the template.
Only the Telnet or SSH mode can be used to connect to NEs at a time.
Step 4 Click Select Template, select the device template, and click OK. The NE is successfully
imported to the new task automatically generated by the project. Select the imported NE and
click Test Connectivity. After the test is successful, the NE upgrade task is created
successfully.
----End
11.3.2 Performing an Upgrade

Procedure
Step 1 After creating a project and an NE, select the NE to be upgraded and click Start/Continue to
upgrade the NE.
Step 2 Perform the upgrade process and steps based on the selected upgrade template.
----End

NetEngine AR
11.3.3 Rolling Back the NE Version

Step 1 In the NE management view, select the NE to be rolled back and click back on the toolbar.
Step 2 Perform the rollback procedure based on the selected template.
----End
11.4 Installing Patches

The procedure for upgrading a patch version is similar to that for upgrading a software
version. When adding an NE, select a patch upgrade template from the Upgrade Template
drop-down list box.

NetEngine AR

For details, see Verifying the Upgrade.

NetEngine AR V300R021C00 Upgrade Guide

Uploaded by

Copyright:

Available Formats

NetEngine AR V300R021C00 Upgrade Guide

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

NetEngine AR V300R021C00 Upgrade Guide

Uploaded by

Copyright:

Available Formats

NetEngine AR

HUAWEI TECHNOLOGIES CO., LTD.

Trademarks and Permissions

Huawei Technologies Co., Ltd.

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. i

1 About This Document

Indicates an imminently hazardous situation

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. ii

Indicates a potentially hazardous situation

01 2021-12-13 This issue is the first official

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. iii

About This Document........................................................................ii

2 Upgrade Process Overview.............................................................9

4 Upgrading the System Version Using the CLI.................................31

5 Upgrading the System Software Using a USB Flash Drive...............45

6 Upgrading the System Software Using the BootROM Menu............53

7 Upgrading the System Software Using the Web System.................58

8 Upgrading AR Routers Through iMaster NCE-WAN.........................61

10 Upgrading the System Version Using the uUpgrade.....................69

2 Before You Start

Table 2-1 Others Precautions

1 Before the upgrade, collect information

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 1

system files in the USB flash drive.

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 2

7 After the system software is upgraded, all

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 3

the power module with smaller power as the

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 4

sftp 0.0.0.0 prefer_stoc_cipher 3des

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 5

V300R021C00SPC100 or later versions

2.2 Upgrade Overview

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 6

2.3 Version Requirements

V300R019C00 AR651U-A4 The version can be directly

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 7

Version Product Model Upgrade Instruction

2.4 Impact of the Upgrade

2.4.1 Impact on the System During the Upgrade

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 8

Impact on Network Communication

2.4.2 Impact on the System After the Upgrade

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 9

3 Upgrade Process Overview

Figure 3-1 Upgrade flowchart

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 10

Table 3-1 Upgrade schedule

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 11

4 Preparing for the Upgrade

3.1 Pre-upgrade Checklist

4.1 Pre-upgrade Checklist

Table 4-1 Pre-upgrade checklist

1 Obtaining Upgrade The reference -

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 12

No. Item Expected Actual Result

2 Obtaining Tools The operation -

Issue 01 (2021-12-13) Copyright © Huawei Technologies Co., Ltd. 13

No. Item Expected Actual Result

12 Preparing the Voice Contact Huawei -