故障处理srx5600防火墙的issu升级原理

1、I升级方法，只需要通过一条命令，即可以实现 SRX 双机的无会话中断升级操作。1.2.通过FTP 方法将升级文件上传到 Node 0（主）。在 Node 0 上 发 出 I命令 (userhost request system softwarein-service-upgrade “image_name” reboot)，I进程将检查config、升级文件和各种兼容性。如果存在问题将提示相关操作或停止继续升级。3.4.II将升级文件copy 到 Node 1（备）。在Node 1 上加载新的操作系统文件、并重启，然后同步RTO（各种实时对象，如ses的操作系统版本是不同的，I表等）。这时主备需

2、要进行大量的检查工作，如果存在问题将提示相关操作或 停止继续升级。5.6.7.II在 Node 0 上加载新的操作系统文件，然后做主备切换。重启Node 0。最后需要手工将 Node 0 切换为主，恢复为原来的主备关系：a)b)c)d)reqreqreqreqhassis cluster failover redundancy-group 0 node 0 hassis cluster failover redundancy-group 1 node 0 hassis cluster failover reset redundancy-group 0hassis cluster failove

3、r reset redundancy-group 11.只有一台设备完成升级若I升级失败，只有一台设备完成升级，则可在已升级设备上通过如下意外情况处理升级原理：SRX5600的 I升级原理 20120702-v2时间：2012 年 7 月 2 日撰写：Juniper 工程师概要：命令回退reqhassis cluster in-service-upgrade abortrequest system software rollbackrequest system reboot 2.升级过程中设备掉电如果在发布I命令后，设备在使用新版本完成启动前掉电，那么当电力恢复启动设备后，该设备将仍处于I进程

4、执行中间状态，需要输入命令reqhassis cluster in-service-upgrade abort 停止I进程并重启设备。On NODE 0:primary:node0roottest-node0 request system software in-service-upgrade/var/tmp/junos-srx5000-10.2R3.10-domestic.tgz rebootChassis Inode1:StartedChassis IStartedI: Validating ImageInitiing in-service-upgradenode1:Initiing in

5、-service-upgradeChecking compatibility with configuration Initializing.Verified manifest signed by PackageProduction_10_2_0Verified junos-10.2-domestic signed by PackageProduction_10_2_0 Using /var/tmp/junos-srx5000-domestic.tgzI过程的输出及说明Checking junos requirements on /Saving boot file package in /va

6、r/sw/pkg/junos-boot-srx5000-10.2R3.10.tgz Verified manifest signed by PackageProduction_10_2_0Hardware Database regeneration succeeded Validating against /config/juniper.conf.gz mgd: commit completeValidation succeededValidating against /config/rescue.conf.gz mgd: commit completeValidation succeeded

7、I: Preparing Backup REPushing bundle to node1JUNOS 10.2R3.10 wille active at next rebootWARNING: A reboot is required to load this software correctlyWARNING:WARNING:Use the request system rebootdwhen software installation is completeSaving package file in /var/sw/pkg/junos-10.2R3.10.tgz .Saving se f

8、or rollback .Finished upgrading secondary node node1Rebooting Secondary Nodenode1:Shutdown NOW!I21958: Backup RE Prepare DoneWaiting for node1 to reboot.node1 booted up.Waiting for node1 toe secondarynode1 became secondary.Waiting for node1 to be ready for failoverI: Preparing Daemons此时node1 以新版本启动完成，I行切换。可通过以下命令检查状态及告警等待node1 数据平面ready 后将执show chassis cluster susshow chass