故障處理srx5600防火墻的issu升級(jí)原理

1、I升級(jí)方法，只需要通過(guò)一條命令，即可以實(shí)現(xiàn) SRX 雙機(jī)的無(wú)會(huì)話中斷升級(jí)操作。1.2.通過(guò)FTP 方法將升級(jí)文件上傳到 Node 0（主）。在 Node 0 上 發(fā) 出 I命令 (userhost request system softwarein-service-upgrade “image_name” reboot)，I進(jìn)程將檢查config、升級(jí)文件和各種兼容性。如果存在問題將提示相關(guān)操作或停止繼續(xù)升級(jí)。3.4.II將升級(jí)文件copy 到 Node 1（備）。在Node 1 上加載新的操作系統(tǒng)文件、并重啟，然后同步RTO（各種實(shí)時(shí)對(duì)象，如ses的操作系統(tǒng)版本是不同的，I表等）。這時(shí)主備需

2、要進(jìn)行大量的檢查工作，如果存在問題將提示相關(guān)操作或 停止繼續(xù)升級(jí)。5.6.7.II在 Node 0 上加載新的操作系統(tǒng)文件，然后做主備切換。重啟Node 0。最后需要手工將 Node 0 切換為主，恢復(fù)為原來(lái)的主備關(guān)系：a)b)c)d)reqreqreqreqhassis cluster failover redundancy-group 0 node 0 hassis cluster failover redundancy-group 1 node 0 hassis cluster failover reset redundancy-group 0hassis cluster failove

3、r reset redundancy-group 11.只有一臺(tái)設(shè)備完成升級(jí)若I升級(jí)失敗，只有一臺(tái)設(shè)備完成升級(jí)，則可在已升級(jí)設(shè)備上通過(guò)如下意外情況處理升級(jí)原理：SRX5600的 I升級(jí)原理 20120702-v2時(shí)間：2012 年 7 月 2 日撰寫：Juniper 工程師概要：命令回退reqhassis cluster in-service-upgrade abortrequest system software rollbackrequest system reboot 2.升級(jí)過(guò)程中設(shè)備掉電如果在發(fā)布I命令后，設(shè)備在使用新版本完成啟動(dòng)前掉電，那么當(dāng)電力恢復(fù)啟動(dòng)設(shè)備后，該設(shè)備將仍處于I進(jìn)程

4、執(zhí)行中間狀態(tài)，需要輸入命令reqhassis cluster in-service-upgrade abort 停止I進(jìn)程并重啟設(shè)備。On NODE 0:primary:node0roottest-node0 request system software in-service-upgrade/var/tmp/junos-srx5000-10.2R3.10-domestic.tgz rebootChassis Inode1:StartedChassis IStartedI: Validating ImageInitiing in-service-upgradenode1:Initiing in

5、-service-upgradeChecking compatibility with configuration Initializing.Verified manifest signed by PackageProduction_10_2_0Verified junos-10.2-domestic signed by PackageProduction_10_2_0 Using /var/tmp/junos-srx5000-domestic.tgzI過(guò)程的輸出及說(shuō)明Checking junos requirements on /Saving boot file package in /va

6、r/sw/pkg/junos-boot-srx5000-10.2R3.10.tgz Verified manifest signed by PackageProduction_10_2_0Hardware Database regeneration succeeded Validating against /config/juniper.conf.gz mgd: commit completeValidation succeededValidating against /config/rescue.conf.gz mgd: commit completeValidation succeeded

7、I: Preparing Backup REPushing bundle to node1JUNOS 10.2R3.10 wille active at next rebootWARNING: A reboot is required to load this software correctlyWARNING:WARNING:Use the request system rebootdwhen software installation is completeSaving package file in /var/sw/pkg/junos-10.2R3.10.tgz .Saving se f

8、or rollback .Finished upgrading secondary node node1Rebooting Secondary Nodenode1:Shutdown NOW!I21958: Backup RE Prepare DoneWaiting for node1 to reboot.node1 booted up.Waiting for node1 toe secondarynode1 became secondary.Waiting for node1 to be ready for failoverI: Preparing Daemons此時(shí)node1 以新版本啟動(dòng)完成，I行切換?？赏ㄟ^(guò)以下命令檢查狀態(tài)及告警等待node1 數(shù)據(jù)平面ready 后將執(zhí)show chassis cluster susshow chass