Professional Documents
Culture Documents
Issue 02
Date 2020-07-15
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees or
representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Change History
Issue Date Description
02 2020-07-15 This issue is the second official release.
01 2020-05-15 This issue is the first official release.
Contents
9 Emergency Recovery................................................................................................................... 77
9.1 Preparing for the Emergency Recovery ...................................................................................................................... 77
9.1.1 Hardware ................................................................................................................................................................. 77
9.1.2 Files to Be Loaded ................................................................................................................................................... 78
9.1.3 Making the Configuration File................................................................................................................................. 78
9.1.4 Copying Files ........................................................................................................................................................... 78
9.2 Procedure .................................................................................................................................................................... 78
9.3 Verifying the Upgrade ................................................................................................................................................. 79
1.1 Precautions
1.2 Upgrade Overview
1.3 Version Requirements
1.4 Impact of the Upgrade
1.1 Precautions
During the upgrade, do not power off the device. Otherwise, the upgrade may fail.
After a new device or a device that restores the factory default settings is upgraded to
V200R010C10SPC700, you need to change the default password. Otherwise, you cannot log
in to the system after the upgrade.
WLAN AC
Voice
No Description
.
No Description
.
Others
No Description
.
service traffic properly.
5 Ensure that the system files including system software and configuration file are
stored in the flash memory or built-in SD card (sd1). Do not save the system files in
the USB flash drive or external SD card (sd0).
6 Except for the device restart steps described in this document, do not restart or
power off the switch, or reset, swap, power on, or power off any board during the
upgrade.
After the upgrade is complete, you can perform device reset, power-on, or power-off
only when verifying that services are recovered.
7 On the AR1200, AR2200, and AR3200, after the system software is upgraded, the
2FE and 1GEC cards do not support automatic BootROM loading. You must
manually run commands to upgrade the BootROM of the 2FE and 1GEC cards.
8 If you upgrade an AR version from V200R001 or V200R002 to
V200R003C00SPC100 or later, ensure that the version number in the configuration
file used for upgrade remains unchanged when the configuration file used for
upgrade contains a URL of 3322 information. Otherwise, the AR cannot
communicate with the DDNS server provided by the vendor at www.3322.org. If
you upgrade AR V200R003 (earlier than AR V200R003C00SPC100) to
V200R003C00SPC100 or later, replace commas (,) in the URL with question marks
(?) when the configuration file for upgrade contains a URL of 3322 or dyndns
information. Otherwise, the AR cannot communicate with the DDNS server
provided by the vendor at www.3322.org or www.dyndns.com.
9 During the upgrade, ensure that all configured cards work properly. Otherwise, the
configuration may fail.
10 The super command is deleted in V200R005C10SPC300 and later versions. If the
super password command that sets the password used to change a user from a lower
level to a higher level has been configured before the upgrade, the super command
can still be used.
11 V200R005C10SPC300 and later versions do not support the fixdisk command.
12 The AR is upgraded from an earlier version of V200R005C10SPC300 to
V200R005C10SPC300 or later. When the certificate is modified or updated and the
AR version is rolled back to an earlier version of V200R005C10SPC300, the
certificate may become unavailable or lost.
The AR version is rolled back from V200R005C10SPC300 or later to an earlier
version of V200R005C10SPC300. When the certificate is modified or updated and
the AR is upgraded to V200R005C10SPC300 or later, the certificate may become
unavailable or lost.
It is recommended that the certificate be backed up after the device software version
is upgraded or rolled back. When the certificate becomes unavailable or lost, you can
import the certificate again.
13 If the software version is upgraded from a version earlier than
V200R005C10SPC300 to V200R005C10SPC300 or later, the private key file of the
local certificate in the original version is loaded to the security zone but the private
key in the disk is not deleted. To improve security, it is recommended that the device
No Description
.
administrator should delete the private key file in the disk.
14 In V200R005C20SPC100 and later versions, you must run the engine enable
command in the system view so that you can configure IPS and URL filtering. If the
AR uses an earlier version of V200R005C20SPC100 and has IPS and URL filtering
configured, upgrading the AR to V200R005C20SPC100 or later will cause the IPS
and URL filtering configuration loss. Before the upgrade, back up the IPS and URL
filtering configuration. After the upgrade, run the engine enable command in the
system view, and then reconfigure IPS and URL filtering.
15 When the AR is upgraded from an earlier version of V200R005C00 to
V200R005C00 or later, software forwarding is enabled by default. To disable
software forwarding, run the undo ip soft-forward enhance enable command in the
system view.
16 When the device is upgraded from V200R005C20 to V200R006C10 or later, if batch
VLAN termination is configured, the configuration of batch VLAN termination will
be lost. Before the upgrade, back up the configuration of batch VLAN termination.
After the upgrade, run the termination-vid batch enable command on the
corresponding sub-interface to enable batch VLAN termination and restore the
configuration of batch VLAN termination.
17 When the AR is upgraded from an earlier version of V200R007C00 to
V200R007C00 or later and no license is available, SAC commands of the original
version can be delivered. However, SAC commands of the new version cannot be
delivered. As a result, the SAC configuration will be lost. Before the upgrade, install
the license or back up the SAC configuration.
18 When the AR160 series models are upgraded from V200R005 or an earlier version
of V200R005 to V200R006 or later, obtain different installation packages based on
models.
V200R005 or an earlier version of V200R005: All AR160 series models use the
installation package AR160.cc.
V200R006 or later: The AR161, AR161G-L, AR169, AR169G-L, AR161W, and
AR161FW use the installation package AR160.cc. The AR161F, AR161FG-L,
AR161FGW-L, AR162F, AR168F, AR169F, AR169BF, AR169FVW, and
AR169FGVW-L use the installation package AR160F.cc.
19 After the AR is upgraded to V200R008C20 or later, NAC commands are configured
using templates to facilitate understanding. There are wired and wireless NAC
functions. Wired NAC functions are compatible, whereas wireless NAC functions
need to be upgraded by using the eDesk to convert commands.
20 The CloudVPN plug-and-play function is available only when the device is
upgraded to V200R010C10SPC700.
21 When the AR is upgraded from an earlier version to V200R010C10SPC700 and
needs to connect to the Agile Controller, first run the pki delete-certificate ca realm
default and pki delete-certificate local realm default command to delete the
certificate of the default domain.
22 In versions earlier than V2R9C00SPC300, the Boot password in plain test is first
encrypted using the MD5 algorithm and then encrypted using the SHA256
algorithm. The password in cipher text then is stored in the flash memory. In
No Description
.
V2R9C00SPC300 and later versions, the Boot password in plain text is encrypted
using the MD5 algorithm, the SHA256 algorithm, and the PBKDF2 algorithm in
ascending order. The password in cipher text then is stored in the flash memory.
When the system software package of a device is upgraded, the password encrypted
using the SHA256 algorithm is further encrypted using the PBKDF2 algorithm, and
then is stored in the flash memory. In this case, the password is properly used. If the
system software package of a device is downgraded to a version that does not
support the PBKDF2 algorithm, the Boot password set by the customer will be
cleared and the default password is restored.
23 In V200R007 and earlier versions, you can run the pki credential-storage
<local-dir> command to configure the storage path. In V200R008 and later
versions, this command cannot be configured. During the upgrade, if the paths of the
old and new versions are different, the system automatically copies the file to the
new path and loads the file to the memory of the device.
24 In V200R007 and earlier versions, you can run the non-exportable command to
specify whether the RSA key pair can be exported and run the rsa-key-size <size>
command to configure the number of digits in the RSA key pair. After the AR is
upgrade to V200R008 or later, the two commands cannot be configured. The two
commands are equivalent to the exportable and modulus parameters in the pki rsa
local-key-pair create <key-name> [ modulus <modulus-size> ] [ exportable ]
command.
25 In V200R010 and later versions, the FTPv6 management packets generated by the
local device are forwarded using the enhanced forwarding function by default. The
QoS and ACL policies configured for the FTPv6 packets on the outbound interface
take effect by default.
26 IPv6 firewalls in the local domain are supported since V200R010. In versions earlier
than V200R010, IPv6 firewalls in the local domain can be configured but do not take
effect. They take effect only after the version is upgraded to V200R010 or a later
version.
27 For the AR169RW-P-M9:
After the upgrade is completed, run the delete /unreserved
flash:/m2mgateway/statiflowrate.txt command in the user view to delete the traffic
file. After the file is deleted, it must be restarted within 5 minutes.
After a version earlier than V200R010C00SPC200 is upgraded to
V200R010C00SPC200 or a later version, the traffic statistics will be reset to zero
and re-accumulated.
28 After a device running a version earlier than V200R008 is upgraded to V200R008 or
a later version, the source port number in RADIUS packets sent by the device
changes from 1812 or 1813 to a random value. If port policies are configured on the
firewall to permit only RADIUS packets with source port numbers 1812 and 1813,
RADIUS authentication fails after the device is upgraded to V200R008 or a later
version. In this case, you can modify the port policy of the firewall and set the source
port number of permitted RADIUS packets to any to ensure successful RADIUS
authentication.
V200R002C00 ● ● ● ●
V200R002C00SP
C100
V200R002C01
V200R002C01SP
C100
V200R002C01SP
C200
V200R002C02SP
C100
V200R002C02SP
C200
V200R002C02SP
C300
V200R003C00
V200R003C00SP
C100
V200R003C01
V200R003C01SP
C100
V200R003C01SP
C300
V200R003C01SP
C900
V200R005C00
V200R005C00SP
C100
V200R005C10
V200R005C10SP
C300
V200R005C10SP
C500
V200R005C20
V200R005C20SP
C100
Descriptions in this document are based on the recommended target version V200R010C10SPC700.
interrupted for about 7 minutes when the system software is upgraded by using the BootROM
menu).
After the upgrade, run the display voice upgrade-info command in the diagnosis view to view the
upgrade log. The configuration change and loss during the upgrade are recorded in logs.
In V200R005C10SPC300, voice commands have great changes. If the AR uses
V200R003 or an earlier version of V200R003 and has voice features configured,
upgrading the AR to V200R005C10SPC300 or later will greatly affect voice services on
the AR. Therefore, contact Huawei technical support engineers before the upgrade.
The AR of V200R005C10SPC300 and later versions does not support the following
voice features in the following table. If the AR of V200R003 and earlier versions
requires the following voice features, do not upgrade the AR to V200R005C10SPC300
or later.
Others
V200R005C00 and later versions use new encryption mechanism. After the AR is
upgraded to V200R005C00 and later versions, you are advised to change the password to
a more secure password.
V200R005C00 and later versions use new encryption mechanism. If the version is rolled
back, the original version cannot identify the password configured in V200R005C00 and
later versions. As a result, the configuration becomes invalid. To ensure that the
password takes effect after rollback, during rollback, restore the password-relevant
configuration in the configuration file to the configuration before the upgrade or change
the password-relevant configuration in the configuration file to the configuration that can
be identified by the original version.
In earlier versions of V200R005C00, the AR is enabled to send ICMP Unreachable
packets by default. In V200R005C00 and later versions, the AR is disabled from sending
ICMP Unreachable packets by default. After the AR is upgraded to V200R005C00, to
ensure that the AR as the detected target device to respond to Tracert request packets
from the source device, run the icmp port-unreachable send command to enable the
AR to send ICMP Unreachable packets.
For the AR1200&AR2200&AR3200 series, ,in earlier versions of V200R005C00, if a
user name is configured in the MAC address format for MAC address authentication and
the AAA authentication scheme is local authentication, the online users are not affected
after the version is upgraded to V200R005C00 and later versions. However, for new
users, run mac-authen username macaddress format { with-hyphen |
without-hyphen } password cipher password to modify configuration and local-user
user-name password cipher password to reconfigure the accounts and passwords for old
users; otherwise, old users cannot go online again.
After the AR is upgraded to V200R005C00SPC100, V200R005C01, or later, if the set
fan-speed command has been executed to set the fan speed, the fan speed configuration
is lost. In addition, automatic fan speed adjustment is used. After the upgrade, you can
run the set fan-speed command to set the fan speed, but the configuration file is no
longer generated. If the AR restarts after the fan speed is set, the set fan-speed command
does not take effect. In addition, automatic fan speed adjustment is used.
When the AR is upgraded from a version earlier than V200R005C00SPC100 to
V200R005C00SPC100 or later in USB-based deployment mode, pay attention to the
following points:
a. If password authentication for USB-based deployment is used, the password
configuration will be lost after the upgrade. The PASSWORD field in the index file
of the USB flash drive becomes invalid. If the AR needs to be upgraded to
V200R005C00SPC100 or later in the scenario where password authentication for
USB-based deployment is used, perform operations according to chapter 5
Upgrading the System Software Using a USB Flash Drive.
b. If no-authentication for USB-based deployment is used, services are not affected.
When password authentication for USB-based deployment is used and the version
is rolled back from V200R005C00SPC100 or later to a version earlier than
V200R005C00SPC100, the password configuration will be lost after the version
rollback. If the version needs to be rolled back to a version earlier than
V200R005C00SPC100 in the scenario where password authentication for
USB-based deployment is used, perform operations according to chapter
"Upgrading the System Software Using a USB Flash Drive". For example, after the
version is rolled back from V200R005C00SPC100 to V200R003C01SPC900, if the
version needs to be rolled back to V200R003C01SPC300 in the scenario where
password authentication for USB-based deployment is used, perform operations
according to "Upgrading the System Software Using a USB Flash Drive" in the
V200R003C01SPC900 upgrade guide.
After the version is upgraded to V200R005C10 or later, the calculation method used by
user CAR and user traffic statistics collection is changed. In the versions earlier than
V200R005C10, the packet length is Length of IP payload + Length of frame header +
Length of Preamble. In V200R005C10 and later versions, the packet length is the length
of IP payload.
After the AR is upgraded from an earlier version of V200R007C00 to V200R007C00,
the query of the remote URL category server is unavailable and the configuration of the
query of the remote URL category server will be lost.
For the AR3200 series, V200R005C10SPC300 and later versions support dual SRUs.
After the AR1220 is upgraded to V200R008C20 or later, the logic file of the E3/T3 card
cannot be upgraded.
After the AR169-P-M9&AR169W-P-M9&AR169RW-P-M9 is upgraded to
V200R008C20 or later, the kernel and rootfs of the OSP card cannot be upgraded.
After the AR is upgraded to V200R010C10SPC700, the firewall active/standby function
becomes unavailable.
V200R010C10SPC700 does not support SVPN. After the AR is upgraded to
V200R010C10SPC700, SVPN becomes unavailable. V200R007C00 is recommended.
In versions earlier than V200R009C00, the http server permit interface command
takes precedence over the http acl command. When a user accesses the Web Platform,
the system preferentially compares the packet with the permit rule. If the packet does not
match the permit rule, it is discarded. In V200R009C00 and later versions, the http acl
command takes precedence over the http server permit interface command. When a
user accesses the Web Platform, the system preferentially compares the packet with the
ACL. If the packet does not match the ACL, it is discarded.
If the device runs a V200R009C00SPC500 version and has a commercial patch of a
version earlier than V200R009C00SPH012 installed or has no commercial patch
installed, the 4GE-2S card is installed on the device, and interfaces of the 4GE-2S card
have been added to a VLAN, the device automatically delivers the set vlan-range slot
command and proactively restarts the 4GE-2S card after the version is upgraded to
V200R010C00SPC500. After the 4GE-2S card is restarted, you are advised to run the
save command again to save configurations. This ensures that VLAN services on the
4GE-2S card can run properly.
When the NetStream sampling function is enabled after the version is upgraded from
V200R007 to the target version, run the mpls netstream { inbound | outbound } or
ip-mpls netstream { inbound | outbound } command on the interface to sample and
report MPLS packets to the NSC server. After either of the preceding commands is run,
packets with the template ID 1317 are reported to the NSC server.
The AR2240, AR2240C, and AR3260 manufactured after June 30, 2020 must run
V200R010C00 or a later version and cannot be downgraded. If an AR3260 is equipped
with dual SRUs and either SRU is replaced with one manufactured after June 30, 2020,
both SRUs must run V200R010C00 or a later version.
Prepare for the upgrade About 5 minutes Prepare tools and software.
Perform the upgrade About 15 1. Back up files.
minutes 2. Load the system software.
3. Restart the device.
Verify the upgrade About 1 minute 1. Verify that configurations are correct.
The device can transfer files through FTP, TFTP, and SFTP. Using FTP and TFTP has potential security
risks. SFTP is recommended.
For the AR2240 and AR3260 configured with pluggable SRUs, determine the software version based on
the model of the SRU. For details, see the table in step 2.
Use the requested user name to visit http://support.huawei.com/enterprise/, choose Support > Product
Support > Software Download > Router > Access Router > AR, and download the required product
and software version.
If the configuration file for next startup is translated by the eDesk, enter n, that is, restart the
AR without saving the configuration. If you enter y, the current configuration will be written
into the configuration file for next startup. As a result, the translated configuration file is
invalid. For details, see section 4.4 Restarting the Device.
If you do not use the eDesk to translate the WLAN AC configuration, the original WLAN AC
configuration becomes unavailable after the upgrade.
To prevent a software package from being maliciously tampered with during transmission or storage,
download the corresponding digital signature file for integrity verification when downloading the
software package.
After the software package is downloaded, verify its PGP digital signature according to the OpenPGP
Signature Verification Guide. If the software package fails the verification, do not use the software
package, and contact Huawei technical support engineers.
Before a software package is used in installation or upgrade, its digital signature also needs to be
verified according to the OpenPGP Signature Verification Guide to ensure that the software package is
not tampered with.
Visit either of the following websites to obtain the OpenPGP Signature Verification Guide:
Carrier customers: https://support.huawei.com/carrier/digitalSignatureAction
Enterprise customers: https://support.huawei.com/enterprise/en/tool/pgp-verify-TL1000000054
In the preceding output, the information in bold indicates the system software version running
on the device. If this is the target version, no upgrade is necessary.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
0 - AR161G-Lc Present PowerOn Registered Normal Master
If the SRU is working properly, the value in the Online field is Present, the value in the
Register field is Registered, and the value in the Alarm field is Normal.
If the value of the Register field is Unregistered, the board failed to register. If the value of
the Alarm field is Abnormal, the board is not operating properly.
For AR1200&AR2200&AR3200 series, if some boards cannot be registered or do not work
properly, contact Huawei technical personnel to determine whether the boards can be
upgraded or must be replaced, and record the board status. If boards can be upgraded, upgrade
the boards and verify that the board status is the same as that before the upgrade.
----End
A PC can also function as the server to store the system software and license file (optional). You only
need to connect the PC to GigabitEthernet0/0/0 or Ethernet0/0/0 (AR150&AR160&AR200) of the AR
using a network cable and ensure that devices can ping each other.
Figure 3-2 Upgrading the system using FTP, TFTP, or SFTP (AR150&AR160&AR200)
<Huawei> system-view
[Huawei] ftp server enable
Info: Succeeded in starting the FTP server
Info: FTP is insecure, recommended to use SFTP with encryption features.
[Huawei] aaa
[Huawei-aaa] local-user AR password irreversible-cipher huawei@123
info: A new user added
[Huawei-aaa] local-user AR ftp-directory flash:
[Huawei-aaa] local-user AR service-type ftp
[Huawei-aaa] local-user AR privilege level 15
3.12.2 Scenario 2: Use the AR as the FTP Client, Use the PC as the
FTP Server
Step 1 Access https://filezilla-project.org and download the FileZilla Server installation packet to the
local PC.
Step 2 Install FileZilla Server as prompted.
The procedure may vary depending on the FileZilla Server version. The following uses FileZilla Server
0.9.60.2 as an example.
1. Double-click FileZilla_Server-0_9_60_2.exe.
2. Click I Agree.
4. Click Next.
5. Click Next.
6. Click Install.
7. Click Close. In the dialog box that is displayed, set related parameters.
Step 3 Create a user name and set the password on FileZilla Server.
1. Optional: Choose Edit > Users.
2. Click Add. Select a local directory to be accessed, that is, the folder where files to be
transferred are stored. Click Set as home dir.
3. Click OK.
----End
The device can function as the TFTP client or TFTP server. Here, the device functions as the TFTP
client.
The AR does not come with TFTP server software installed. The customer must purchase and install
TFTP server software. The TFTPD32 program is recommended.
Run the TFTP server program on the PC and configure the PC:
Click Browse to set the Current Directory to the TFTP working directory.
Set the TFTP server address in Server interface, for example, 10.164.30.29.
The device can function as the SFTP client or SFTP server. Here, the device functions as the SFTP client.
For details about the device used as the SFTP server, see section "Basic Configurations - File
Management" in Configuration Guide.
Huawei does not provide the SFTP server and client software; therefore, the customer needs to buy the
SFTP server and client software and install it.
Run an SFTP server program on the PC, for example, Core FTP mini-sftp-sever.
Click New User and set the user name and password. Here, the user name is 123 and the
password is 123. Enter the SFTP working directory in the Root path text box. Here, the
working directory is D:\ftp. Do not stop the SFTP server program during data transfer.
The backup method of license and patch files is the same as that of system software, and is not described
here.
Log in to the AR using any FTP client program and back up files to the FTP client.
In the Address box of the FTP client program, enter the IP address and the FTP root
directory of the AR, and copy the files from the FTP root directory to a directory on the
PC. Here, the directory on the PC is D:\ftp.
Log in to the AR using the operation terminal, and back up files to the FTP client.
It is recommended that the upgrade program directory (FTP root directory) be used as
the login directory, for example, D:\ftp.
On Windows 7, perform the following operations to start the FTP program:
− Choose Start > Run.
− Enter cmd.
− Enter d:.
− Enter cd ftp to enter the FTP directory.
C:\Documents and Settings\Administrator> d:
D:\> cd ftp
D:\ftp> ftp 10.164.30.20
Connected to 10.164.30.20.
220 FTP service ready.
User(10.164.30.20:(none)):AR # Enter the user name and press Enter.
331 Password required for AR.
Password: # Enter the password huawei@123 and press Enter. The password is
not displayed on the screen.
230 User logged in.
ftp> binary
200 Type set to I.
ftp> get AR160-V200R010C10SPC600.cc
200 Port command okay.
150 Opening binary mode data connection for AR160-V200R010C10SPC600.cc.
226 Transfer complete.
ftp: 159554432 bytes received in 110.24 Seconds 627.10 Kbytes/sec.
The preceding output indicates the configuration file has been transferred and you
can find it in D:\ftp.
ftp> get iascfg.zip
200 Port command okay.
150 Opening binary mode data connection for iascfg.zip
226 Transfer complete.
ftp: 1197 bytes received in 0.00 Seconds 627.10 Kbytes/sec.
The preceding output indicates the configuration file has been transferred and you
can find it in D:\ftp.
----End
Do not stop the FTP program when you are backing up data.
230 Logged on
[Huawei-ftp]binary
200 Type set to I
Back up the system software AR160-V200R010C10SPC600.cc to the FTP server and specify
the name of the backup file as AR160-V200R010C10SPC600-bak.cc. If the name of the
backup file is not specified, the original name is used.
[Huawei-ftp] put AR160-V200R010C10SPC600.cc AR160-V200R010C10SPC600-bak.cc
200 PORT command okay
150 "D:\FTP\ AR160-V200R010C10SPC600-bak.cc" file ready to receive in IMAGE / Binary
mode
226 Transfer finished successfully.
FTP: 155945856 byte(s) sent in 132.892 second(s) 1173.47Kbyte(s)/sec.
Back up the configuration file iascfg.zip to the FTP server and specify the name of the backup
file as iascfg-bak.zip. If the name of the backup file is not specified, the original name is used.
[Huawei-ftp] put iascfg.zip iascfg-bak.zip
200 PORT command okay
150 "D:\FTP\ iascfg-bak.zip" file ready to receive in IMAGE / Binary mode
226 Transfer finished successfully.
FTP: 1197 byte(s) sent in 0.099 second(s) 12.09Kbyte(s)/sec.
----End
Do not stop the TFTP server program when you are backing up data.
Run the following commands on the AR to back up the data. In the following description, the
AR161G-LC is used as an example. The backup system software is
AR160-V200R010C10SPC600-bak.cc, and the backup configuration file is iascfg-bak.zip.
<Huawei> tftp 10.164.30.29 put AR160-V200R010C10SPC600.cc
AR160-V200R010C10SPC600-bak.cc
Info: Transfer file in binary mode.
Uploading the file to the remote TFTP server. Please wait...
155945856 bytes send in 132 seconds.
TFTP: Uploading the file successfully.
<Huawei> tftp 10.164.30.29 put iascfg.zip iascfg-bak.zip
Info: Transfer file in binary mode.
Uploading the file to the remote TFTP server. Please wait...
1197 bytes send in 1 second.
TFTP: Uploading the file successfully.
----End
Do not stop the SFTP server program when you are backing up data.
Step 4 Back up the system software AR160-V200R010C10SPC600.cc to the SFTP server and
specify the name of the backup file as AR160-V200R010C10SPC600-bak.cc. If the name of
the backup file is not specified, the original name is used.
sftp-client> put AR160-V200R010C10SPC600.cc AR160-V200R010C10SPC600-bak.cc
local file: AR160-V200R010C10SPC600.cc ---> Remote file: /
AR160-V200R010C10SPC600-bak.cc
Success
Info: Uploading file successfully ended.
Back up the configuration file iascfg.zip to the SFTP server and specify the name of the
backup file as iascfg-bak.zip. If the name of the backup file is not specified, the original name
is used.
sftp-client> put iascfg.zip iascfg-bak.zip
local file: iascfg.zip ---> Remote file:/iascfg-bak.zip
Success
Info: Uploading file successfully ended.
----End
If the free space is larger than the size of system software package of the target version, the
space is sufficient. Otherwise, perform step 2 to delete unnecessary files.
Step 2 Delete unnecessary files.
If the flash/SD memory does not have sufficient space for the new system software, delete
unnecessary files to free up space.
Before deleting the system software (with the file name extension .cc or .zip), configuration file (with
the file name extension .cfg or .zip), and license file (with the file name extension .dat), ensure that they
are not in use.
Run the following commands in the user view to delete unnecessary files from the flash/SD
memory.
Files deleted using the delete command are stored in the recycle bin. Files in the recycle bin
still occupy flash/SD memory space. To restore these files, run the undelete command. The
reset recycle-bin command permanently deletes all files currently in the recycle bin.
You can also run the delete/unreserved command to permanently delete all files without
placing them in the recycle bin. This command is equivalent to running the delete and reset
recycle-bin commands in sequence.
# Run the following command to restore the files in the recycle bin.
<Huawei> undelete flash:/iascfg1.zip
Info: Undelete flash:/iascfg1.zip?[Y/N]:y
Info: Undeleted file flash:/iascfg1.zip.
# Run the following command to permanently delete files from the recycle bin.
<Huawei> reset recycle-bin flash:
# Run the following command to permanently delete a specified file from the recycle bin.
<Huawei> delete /unreserved flash:/iascfg1.zip
----End
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
Starting from V200R008, if the configuration file contains WLAN AC commands before the
upgrade, you must use the eDesk to translate the configuration file. If you do not use the
eDesk to translate the WLAN AC configuration, the original WLAN AC configuration
becomes unavailable after the upgrade. For details about the eDesk, see chapter 10 Appendix:
eDesk Configuration Translation Guide.
For more upgrade precautions, see section 1.1 Precautions.
Upgrade process
Table 4-1 shows the upgrade process.
1 Back up key data, then load the new - 4.1 Loading System
system software, license file, and Software
configuration file (optional) to the
flash/SD memory.
2 Check whether the files were loaded. dir 4.2 Verifying File
Loading
3 Specify the system software and startup 4.3 Specifying the
configuration file for next startup. system-software System Software
startup
saved-configurat
ion
4 Check whether the system software and display startup 4.3 Specifying the
configuration file specified for next System Software
startup are correct.
5 Restart the device. reboot 4.4 Restarting the
Device
6 Verify the upgrade. display startup 4.6 Verifying the
display device Upgrade
display version
display
current-configur
ation
The license file must be saved in the root directory of the file system.
In the following description, the AR161G-Lc is used as an example. The target system
software is AR160-V200R010C10SPC700.cc, license file is license.dat, and the
configuration file is vrpcfgnew.zip.
You can use any of the following methods to load the system software:
Use the AR as the FTP server.
Use the AR as the FTP client.
Use the AR as the TFTP client.
Use the AR as the SFTP client.
You can use put command specify a file name for the loaded system software. If a file name
is not specified, the original file name is used.
Step 3 (Optional) Upload the license file to the AR.
ftp> put license.dat
----End
[Huawei-ftp]binary
200 Type set to I
[Huawei-ftp]get AR160-V200R010C10SPC700.cc
200 Port command successful
150 Opening data channel for file download from server of "/AR160-V200R010C10SPC700.cc"
226 Successfully transferred "/AR160-V200R010C10SPC700.cc"
FTP: 190047232 byte(s) received in 735.524 second(s) 258.38Kbyte(s)/sec.
You can specify a file name for the system software. If a file name is not specified, the
original file name is used.
Step 4 (Optional) Obtain the license file.
[Huawei-ftp] get license.dat
----End
If the message Downloading the file successfully is displayed, the system software has been
downloaded.
Step 4 (Optional) Obtain the license file from the server.
<Huawei> tftp 10.164.30.29 get license.dat
Info: Transfer file in binary mode.
Downloading the file from the remote TFTP server. Please wait...
1686 bytes received in 1 second.
TFTP: Downloading the file successfully.
Step 5 (Optional) Obtain the new configuration file from the server.
----End
You can specify the file name of the loaded system software. If the file name is not specified,
the original name is used.
Step 4 (Optional) Obtain the license file.
sftp-client> get license.dat
----End
Run the display startup command to verify that the specified startup software of the master
and slave SRUs is the newly loaded system software.
<Huawei> display startup
MainBoard:
Startup system software: flash:/AR160-V200R010C10SPC600.cc
Next startup system software: flash:/AR160-V200R010C10SPC700.cc
Backup system software for next startup: null
Startup saved-configuration file: flash:/iascfg.zip
Next startup saved-configuration file: flash:/iascfg.zip
Startup license file: null
Next startup license file: null
Startup patch package: null
Next startup patch package: null
Startup voice-files: null
Next startup voice-files: null
Run the display startup command to verify that the specified configuration file is the new
configuration file.
<Huawei> display startup
MainBoard:
Startup system software: flash:/AR160-V200R010C10SPC600.cc
Next startup system software: flash:/AR160-V200R010C10SPC700.cc
Backup system software for next startup: null
Startup saved-configuration file: flash:/iascfg.zip
Next startup saved-configuration file: flash:/vrpcfgnew.zip
Startup license file: null
Next startup license file: null
Startup patch package: null
Next startup patch package: null
Startup voice-files: null
Next startup voice-files: null
----End
Do not power off the device or remove the interface card when the device is restarting;
otherwise, the interface card may fail to start.
Run the reboot command to restart the device. The system uses the specified system software
and configuration file for next startup. When the system asks you whether to save the
configuration, enter y or n. After the setting is complete, the system asks you whether to
restart the device. Enter y to restart the device.
<Huawei> reboot
Info: The system is comparing the configuration, please wait.
Warning: All the configuration will be saved to the next startup configuration.
Continue ? [y/n]:y //If the old configuration file has been translated using eDesk,
enter n upon the system prompt after you run the reboot command; otherwise, the current
configuration will be written into the configuration file for next startup and the
translated configuration file will be invalid.
It will take several minutes to save configuration file, please wait...
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
<Huawei>
Run the display license state command to view the license status. The commercial license
status should be Normal and the non-commercial license status should be Demo or Trial.
<Huawei> display license state
Info: Master board license state: Trial. The remain days is 59.
You can use the display license resource usage command to check the usage of the resource
items defined in the license file.
To compare the new configuration file with the configuration file saved in the sd1 memory, run the
compare configuration command in the user view.
You can also use the Beyond Compare tool to find out the differences between the configuration files in
the Flash and sd1 directories.
Do not run the save command before you ensure that all services are working properly.
Check whether any table entries are missing, for example, the entries from the routing
table, FIB table, or MAC address table. Check whether the service traffic volume
remains the same after the upgrade.
Confirm with the network management administrator that all services are working
properly and that servers such as the network management device and NetStream servers
function properly.
Rollback methods
If the device functions properly after the upgrade, perform rollback using the command
line.
If the device does not function properly after the upgrade, perform rollback using the
BootROM.
Assume that the old configuration file is iascfg.zip. Run the following command to specify
the old configuration file for startup:
<Huawei> startup saved-configuration flash:/iascfg.zip
Info: Succeeded in setting the configuration for booting system.
Check whether the system software and configuration file of the earlier version have been
specified for next startup.
<Huawei> display startup
MainBoard:
Startup system software: flash:/AR160-V200R010C10SPC700.cc
Next startup system software: flash:/AR160-V200R010C10SPC600.cc
Backup system software for next startup: null
Startup saved-configuration file: flash:/vrpcfgnew.zip
Next startup saved-configuration file: flash:/iascfg.zip
Startup license file: null
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
Starting from V200R008, if the configuration file contains WLAN AC commands before the
upgrade, you must use the eDesk to translate the configuration file. If you do not use the
eDesk to translate the WLAN AC configuration, the original WLAN AC configuration
becomes unavailable after the upgrade.For details about the eDesk, see chapter 10 Appendix:
eDesk Configuration Translation Guide.
For more upgrade precautions, see section 1.1 Precautions.
Field Description
BEGIN AR Start tag of the index file. This field cannot be modified.
USB CONFIG USB flash drive configuration. This field cannot be modified.
SN Data change time in the format YearMonthDay.HourMinuteSecond.
For example, the value 20110628.080910 indicates 2011-06-28
08:09:10.
NOTE
The SN field is a USB-based deployment flag. A device has a default
USB-based deployment flag. If the USB_AR.ini file exists in the USB flash
drive, the device checks whether the default USB-based deployment flag and
the SN value in the USB_AR.ini file are the same. If they are different, the
USB-based deployment process is triggered. If the deployment succeeds, the
value of the default USB-based deployment flag on the device is changed to
the SN value in the USB_AR.ini file.
EMS_ONLINE_S Indicates whether the NMS is online. The options are as follows:
TATE YES: The NMS is online.
NO: The NMS is offline.
Field Description
UPGRADE INFO Upgrade information header. This field cannot be modified.
OPTION Upgrade mode flag. The field has a fixed value of AUTO.
DEVICENUM Number of devices to be upgraded using this index file.
To upgrade the software version of one device, set the value of the
DEVICENUM field to 1 and use the device's ESN and MAC
address.
To upgrade software versions of multiple devices to the same
version, set the value of the DEVICENUM field to 1 and use the
default ESN and MAC address.
To upgrade software versions of multiple devices to different
versions, set the value of the DEVICENUM field to the number of
devices to be upgraded and use devices' ESNs and MAC
addresses.
DEVICEn Description information header of device n. The value of n is an
DESCRIPTION integer that ranges from 1 to 100.
OPTION Indicates whether to upgrade a device. The value OK indicates that
the device must be upgraded. The value NOK indicates that the
device does not need to be upgraded.
ESN Serial number of a device. If the value of this field is DEFAULT, the
index file is applicable to all devices. Otherwise, the index file is
applicable to a specific device.
NOTE
If this field is left empty, this field matches all devices.
MAC MAC address of a device. If the value of this field is DEFAULT, the
index file is applicable to all devices. Otherwise, the index file is
applicable to a specific device.
NOTE
If this field is left empty, this field matches all devices.
Field Description
SYSTEM-SOFTWARE: system software.
SYSTEM-CONFIG: configuration file.
NOTE
If the device supports the voice function and works as a PBX, the
configuration file is SYSTEM-CONFIG_PBX.
If the device supports the voice function and works as a SIPAG, the
configuration file is SYSTEM-CONFIG_SIPAG.
SYSTEM-PAT: patch file.
SYSTEM-LICENSE: license file.
SYSTEM-VOICE: voice file.
USER-DEFINE: user-defined file.
The value of n starts from 1.
FILENAMEn Upgrade file name. For example, if the value of the TYPE1 field is
SYSTEM-SOFTWARE and the name of the system software
corresponding to the U disk is system-software.cc, the value of the
FILENAME1 field is system-software.cc.
The value of n starts from 1.
HMACn HMAC used to verify a file to be downloaded. The HMAC is a
64-byte character string that is calculated for a specific file using a
file checker based on the HMAC-SHA256 algorithm. The key used to
calculate the HMAC must be the same as the password configured by
the set usb autoupdate password command.
The value of n starts with 1.
NOTE
This field is optional.
----End
5.1.4 Examples
Example 1
You need to create an index file for upgrading one device, and the requirements are as
follows:
Data is changed at 08:09:10 on Jan 12, 2017.
The NMS is offline.
Upgrade is required.
The device ESN is 00080123456789 and the MAC address is 0018-0303-1234.
The system software system-software01.cc is stored in the root directory of the USB
flash drive. The version number is V200R010C10SPC700. The HMAC string is
c3caaee8f4f6bd1389f438801e40dad9af30f2fbbe7e8f55121b39c6c16ba488.
Example 2
You need to create an index file for upgrading multiple devices to the same software version,
and the requirements are as follows:
Data is changed at 08:09:10 on Jan 12, 2017.
The NMS is offline.
Upgrade is required.
The system software system-software01.cc is stored in the root directory of the USB
flash drive. The version number is V200R010C10SPC700. HMAC check is not required
for any file.
The index file that meets the preceding requirements is as follows:
BEGIN AR
[USB CONFIG]
SN=20170112.080910
EMS_ONLINE_STATE=NO
[UPGRADE INFO]
OPTION=AUTO
DEVICENUM=1
[DEVICE1 DESCRIPTION]
OPTION=OK
ESN=DEFAULT
MAC=DEFAULT
VERSION=V200R010C10SPC700
DIRECTORY=DEFAULT
FILENUM=1
TYPE1=SYSTEM-SOFTWARE
FILENAME1=system-software01.cc
END AR
Example 3
You need to create an index file for two devices with different description information, and
the requirements are as follows:
Data is changed at 08:09:10 on Jan 12, 2017.
The NMS is offline.
The ESN of the first device is 00080123456789. The MAC address is 0018-0303-1234.
The name of the system software is V200R010C10SPC700.cc. The version number is
V200R010C10SPC700. The configuration file system-config01.zip must be loaded.
HMAC check is not required for any file.
The ESN of the second device is 66680123456789. The MAC address is
0018-0303-5678. The name of the system software is V200R010C10SPC700.cc. The
version number is V200R010C10SPC700. The configuration file system-config02.zip
must be loaded. HMAC check is not required for any file.
The index file that meets the preceding requirements is as follows:
BEGIN AR
[USB CONFIG]
SN=20170112.080910
EMS_ONLINE_STATE=NO
[UPGRADE INFO]
OPTION=AUTO
DEVICENUM=2
[DEVICE1 DESCRIPTION]
OPTION=OK
ESN=00080123456789
MAC=0018-0303-1234
VERSION=V200R010C10SPC700
DIRECTORY=DEFAULT
FILENUM=2
TYPE1=SYSTEM-SOFTWARE
FILENAME1=V200R010C10SPC700.cc
TYPE2=SYSTEM-CONFIG
FILENAME2=system-config01.zip
[DEVICE2 DESCRIPTION]
OPTION=OK
ESN=66680123456789
MAC=0018-0303-5678
VERSION=V200R010C10SPC700
DIRECTORY=DEFAULT
FILENUM=2
TYPE1=SYSTEM-SOFTWARE
FILENAME1=V200R010C10SPC700.cc
TYPE2=SYSTEM-CONFIG
FILENAME2=system-config02.zip
END AR
Do not power off the AR while files are being copied. If the AR is powered off, the
upgrade will fail or the AR will be unable to restart.
Do not remove the USB flash drive before the upgrade is completed. If the USB flash
drive is removed, it may be damaged.
5.2 Procedure
AR100&AR120&AR150&AR160&AR200&AR1200&AR2200&AR3200
Insert the USB flash drive.
Step 1 If the ACT indicator blinks green every 2 seconds, the system is copying the files specified in
the index file from the USB flash drive.
Step 2 After copying the files and specifying the startup file, the system restarts.
Step 3 If the ACT indicator is steady green after the restart, the upgrade is successful.
If the ACT indicator is steady red, an error occurs. Power cycle the device, and then insert the
USB flash drive again. If the upgrade fails three times, check whether the index files and the
directory on the USB flash drive are correct, or contact Huawei technical support personnel.
----End
This section describes how to upgrade the system software using the BootROM menu. This
method is used when the system software fails to start.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
Starting from V200R008, if the configuration file contains WLAN AC commands before the
upgrade, you must use the eDesk to translate the configuration file. If you do not use the
eDesk to translate the WLAN AC configuration, the original WLAN AC configuration
becomes unavailable after the upgrade. For details about the eDesk, see chapter 10 Appendix:
eDesk Configuration Translation Guide.
For more upgrade precautions, see section 1.1 Precautions.
This upgrade procedure is complicated and not recommended for use under normal
circumstances. Use this method when the system software will not start.
You can use the FTP or TFTP client mode through the BootROM software. The PC can use a
terminal emulation program such as the HyperTerminal of Windows 7 to communicate with
an AR through a serial port only. The PC must function as the FTP or TFTP server. Ensure
that the PC is directly connected to the management port of the AR to be upgraded and can
communicate on the same network segment.
The management port of the AR is as follows: AR150: Ethernet 0/0/3, AR200: Ethernet 0/0/6,
AR1200 and AR2220: GE0/0/0, AR2240&AR3200: GE0/0/2.
This section describes the AR161G-Lc upgrade process. You can upgrade other
AR150&AR160&AR200&AR1200&AR2200&AR3200 devices in the same way.
6.2 Procedure
Step 1 Run the FTP program on the operation terminal or PC and specify the path of the system
software. Create the FTP user AR and set the password of the FTP user to huawei@123.
The IP address of the configuration terminal or PC (IP address of the FTP server) and the IP address of
the management interface of the AR must be on the same network segment.
Step 3 Press Ctrl+B within 3 seconds. If you do not press Ctrl+B within 3 seconds, you need to
restart the device.
password:
Step 4 Enter the extended BootROM password to display the main BootROM menu. (In
V200R003C01 and earlier versions, the default password is huawei. In V200R005C00 and
later versions, the default password is Admin@huawei.)
When the correct password is entered, the following BootROM menu is displayed:
1. Default Startup: Uses the startup software specified in option 4 to start the system. You
do not need to configure the basic BootROM or extended BootROM.
2. Serial Menu: Updates the BootROM and CPLD.
3. Network Menu: Downloads files through the management interface.
4. Startup Select: Specifies the startup software.
5. File Manager: Manages the file system.
6. Reboot: Uses the system software specified in option 4 to restart the system.
Main Menu
1. Default Startup
2. Serial Menu
3. Network Menu
4. Startup Select
5. File Manager
6. Reboot
7. Password Manager
Enter your choice(1-7):3
In the command output, FTP is used, the name of the system software to be loaded is
AR160-V200R010C10SPC700.cc, the IP address of the AR is 192.168.1.3, the IP address of
the gateway is 192.168.1.16, the IP address of the ftp server is 192.168.1.6 the FTP user name
is AR, and the password of the FTP user is huawei@123. You can modify these parameters
based on site requirements.
The parameter values can contain letters, Arabic numerals, underscores, and periods. Spaces are not
allowed.To change configured network parameters, enter new parameters following the configured
parameters. Spaces are not allowed.
Step 9 Enter 4 to set the loaded system software as the startup program.
Enter your choice(1-7):4
Startup Select
1. Display Startup
2. Set Boot File
3. Set Config File
4. Startupfile Check Manage
5. Set Startup Waiting Time
0. return
Enter your choice(0-5):2
Select Boot File
1. Flash
0. Return
Enter your choice(0-3):1
NOTE: Boot file must be .cc or .CC
Current boot file: flash:/AR160-V200R010C10SPC600.cc
Press ENTER directly for no change.
Or, please input the new file name: flash:/AR160-V200R010C10SPC700.cc
Save the bootfile name: flash:/ AR160-V200R010C10SPC700.cc ? Yes or No(Y/N)y
Save load state word...OK!
Startup Select
1. Display Startup
2. Set Boot File
3. Set Config File
4. Startupfile Check Manage
5. Set Startup Waiting Time
0. return
Enter your choice(0-5):0
This chapter describes how to upgrade the system software using the web system.
Back up the old configuration file before the upgrade, which will be used in rollback.
Otherwise, the rollback may fail.
Starting from V200R008, if the configuration file contains WLAN AC commands before the
upgrade, you must use the eDesk to translate the configuration file. If you do not use the
eDesk to translate the WLAN AC configuration, the original WLAN AC configuration
becomes unavailable after the upgrade.For details about the eDesk, see chapter 10 Appendix:
eDesk Configuration Translation Guide.
For more upgrade precautions, see section 1.1 Precautions.
The web service has been enabled by default. If the web service is not configured, you can use
the following methods:
Step 1 When new system software is uploaded on the AR, the system software contains the web
page file. After HTTP or HTTPS is enabled on the AR using the http server enable or http
secure-server enable command, the AR extracts web.zip from the system software to the
memory. You need to configure login through the console port and management interface's IP
address.
The AR uploads the web page file using FTP. You need to log in through the console port, set the
management interface's IP address, upload the web page file, and load the web page file.
Step 2 If HTTPS is enabled, when a user enters the HTTP request address in the address bar, the
HTTPS login page is displayed. After the user logs in successfully, the HTTPS access page is
displayed.
You must enable both HTTP and HTTPS. Otherwise, the system displays the message "The login page
cannot be accessed."
Step 3 HTTPS does not provide defense against DoS attacks. You can configure the firewall to
defend against DoS attacks. For details on how to configure the firewall, see Firewall
Configuration.
Step 4 After the http server enable command is used to enable the HTTP service, HTTP and
HTTPS are enabled. Therefore, you can use HTTPS to access the web system.
If the web system user is not configured, perform the following steps.
1. Run the system-view command to enter the system view.
2. Run the aaa command to enter the AAA view.
3. Run the local-user user-name password irreversible-cipher password command to set
the web user name and password.
4. Run the local-user user-name privilege level level command to set the user level.
5. Run the local-user user-name service-type http command to set the service type to
HTTP.
6. Run the quit command to return to the system view.
7. (Optional) Run the http timeout timeout command to set the timeout interval of HTTP
sessions.
The default user name is admin, the default password is Admin@huawei or admin, and the default
user level is 15. You can directly log in to the web system. After login, you are advised to change the
password and periodically update the password to ensure the security. Users at level 0 or users whose
user levels are not configured are not allowed to log in to the web system. User level 1 corresponds to a
common administrator; user level 2 corresponds to an enterprise administrator; user levels 3 to 15
correspond to a super administrator.
----End
7.2 Procedure
Step 1 Log in to the web system.
Enter https://management interface's IP address in the browser, and enter the user name and
password.
The default user name is admin, and the default password is Admin@huawei or admin.
1. Choose System Management > Upgrade and Maintenance > System Software.
2. Click Browse and select the system software to upload.
3. Click Load to upload the system software to the device. The loaded system software is
specified as the next startup system software.
4. Restart the device to make the system software take effect.
Step 3 (Optional) Load the configuration file.
1. Choose System Management > Upgrade and Maintenance > Configuration File.
2. Click Browse and select the configuration file to be uploaded.
3. Click Load to upload the configuration file to the device, and specify the uploaded
configuration file as the configuration file for next startup.
4. Restart the device to make the configuration file take effect.
5. Configure factory settings in Set Factory Configuration.
− Select This operation will save the specify configuration as the factory
configuration in Save type, and specify the configuration file for factory settings in
Configuration file.
− Select This operation will save the current configuration as the factory
configuration in Save type.
6. Click Save to save factory settings.
Step 4 Select the loaded system software or configuration file and restart the device to make the
configuration take effect.
----End
8 Smart Upgrade
Smart upgrade requires that a device be able to access the Huawei Online Upgrade Platform
(http://houp.huawei.com).
8.2 Procedure
Step 1 Log in to the web platform.
Enter https://IP address of the management network port and press Enter. Then enter the user
name and password on the login page.
Step 2 Access the Intelligent Upgrade page.
After Automatic version upgrade check is enabled, the recommended target software
versions are displayed. Click Immediate Upgrade or Scheduled Upgrade to perform an
upgrade.
9 Emergency Recovery
When the AR161FW-P-M5 is being upgraded through the command line mode, USB flash
drive, and web NMS, if an upgrade exception occurs, perform the following operations to
restore the AR161FW-P-M5.
9.1 Preparing for the Emergency Recovery
9.2 Procedure
9.3 Verifying the Upgrade
9.1.1 Hardware
USB port: The AR provides a USB 2.0 port.
USB flash drive:
− To ensure compatibility between USB flash drives and devices, use
Huawei-certified USB flash drives to upgrade the Huawei devices. Netac U208 (4
GB) flash drive has passed Huawei certification. If you have not bought the USB
flash drive, contact local Huawei office.
− The USB flash drive must use the FAT32 format. Set the format to FAT32 before
using the drive.
− The USB flash drive must have sufficient space for the system software and
configuration file.
USB ports 0, 1, and 2, on the backplane of the AR161FW-P-M5 can identify the upgraded
USB flash drive. When the USB flash drive is used to upgrade the AR161FW-P-M5, GE0/0/5
must be configured with an IP address and OSP card (Android) must be dynamically assigned
an IP address so that the AR161FW-P-M5 and OSP card can exchange heartbeat packets.
You can download the upgrade file from Huawei enterprise business support website
http://support.huawei.com/enterprise and rename the upgrade file update.zip for the upgrade using a
USB flash drive.
Do not power off the AR while files are being copied. If the AR is powered off, the
upgrade will fail or the AR will be unable to restart.
Do not remove the USB flash drive before the upgrade is completed. If the USB flash
drive is removed, it may be damaged.
9.2 Procedure
Connect the USB flash drive to the router. If the system detects that an upgrade file is stored
on the USB flash drive, the system starts upgrade.
Step 1 Connect the USB flash drive to the router. If the system detects that the update.zip file is
stored on the USB flash drive, the system immediately restarts.
Step 2 After the system is restarted, the system displays the progress bar. After the progress bar
reaches 100%, the file update.zip is loaded and the upgrade ends.
----End
10.2 Precautions
1. The source configuration file must be a file exported from the switch without
modification.
2. The eDesk supports the configuration file formats of txt, cfg, and log, and UTF-8
encoding format is recommended.
3. The eDesk supports configuration translation and fast translation. The result of
configuration translation can be permanently stored in eDesk, and the converted
configuration file can be exported anytime. The result of fast translation is not stored in
eDesk. If you close the translation window without exporting the configuration file, the
result is lost.
The configuration translation mode is recommended.
4. When the eDesk is used to translate the configuration file of the AR that uses an earlier
version of V200R008 and the configuration file contains NAC commands (in uniform
The WLAN AC configuration translation function has been available on the eDesk since
eDesk V100R005C00SPC300.
Configure translation may require certain account rights. If there is no configuration translation in the
functional menu, there may be no account rights.
----End
Prepare the configuration file to be imported: Back up the configuration file on a switch before the
upgrade, and decompress the configuration file as a .cfg file.
Select the path for storing the backup configuration file, for example, D:\Desk. Select the
configuration file and click Open.
The imported file is as follows. The status is red, indicating that the file is not translated.
If the file is large and requires many WLAN AC-related configurations, the translation process may take
more than 10 minutes.
Close the Configuration Translation window and click Export. In the Export File dialog
box, select the path for storing the configuration file, for example, D:\eDesk, and click Save.
After the file is exported, the system displays "File export successfully." Click Open to open
the directory.
Prepare the configuration file to be imported: Back up the configuration file on a switch before the
upgrade, and decompress the configuration file as a .cfg file.
In the left pane, you can manually enter the commands to be translated or click Import to
import a configuration file.
If you import a configuration file, select the path of the configuration file, for example,
D:\eDesk, and select the configuration file to be translated. Click Open to import the file.
Click the Target drop-down box and select a configuration file version (the device type must
be Huawei).
After the file is exported, the system displays "File export successfully." Click Open to open
the directory.