Secpath1800F 常用的VRP升级方式

 

Secpath1800F VRP升级方式的配置

 

 

一、  组网需求：

     作为tftp server的PC直接与防火墙相连，PC上安装相应的tftp服务，防火墙通过

     tftp的方式下载版本，并应用。

 

二、  组网图：

 

         

三、  配置关键点：

     适用版本：Secpath1800F 所有版本

sysname Secpath1800F

#

firewall packet-filter default permit interzone local trust direction inbound

firewall packet-filter default permit interzone local trust direction outbound

firewall packet-filter default permit interzone local untrust direction inbound

firewall packet-filter default permit interzone local untrust direction outbound

firewall packet-filter default permit interzone local dmz direction inbound

firewall packet-filter default permit interzone local dmz direction outbound

firewall packet-filter default permit interzone trust untrust direction inbound

firewall packet-filter default permit interzone trust untrust direction outbound

firewall packet-filter default permit interzone trust dmz direction inbound

firewall packet-filter default permit interzone trust dmz direction outbound

firewall packet-filter default permit interzone dmz untrust direction inbound

firewall packet-filter default permit interzone dmz untrust direction outbound

#

firewall mode route

#

firewall statistic system enable

#

interface Aux0

async mode flow

link-protocol ppp

#

interface Ethernet0/0/0

#

interface Ethernet0/0/1

#

interface Ethernet1/0/0

#

interface Ethernet1/0/1                              // 配置用来升级的端口

ip address 192.168.1.254 255.255.255.0

#

interface Ethernet1/0/2

#

interface Ethernet1/0/3

#

interface Ethernet1/0/4

#

interface Ethernet1/0/5

#

interface Ethernet1/0/6

#

interface Ethernet1/0/7

#

interface GigabitEthernet2/0/0

#

interface GigabitEthernet2/0/1

#

interface Secp3/0/0

#

interface NULL0

#

firewall zone local

set priority 100

#

firewall zone trust

set priority 85

add interface Ethernet0/0/0

add interface Ethernet1/0/1                      // 把相应端口加入域

#

firewall zone untrust

set priority 5

#

firewall zone dmz

set priority 50

#

firewall interzone local trust

#

firewall interzone local untrust

#

firewall interzone local dmz

#

firewall interzone trust untrust

#

firewall interzone trust dmz

#

firewall interzone dmz untrust

#

aaa

authentication-scheme default

#

authorization-scheme default

#

accounting-scheme default

#

domain default

#

#

user-interface con 0

user-interface aux 0

user-interface vty 0 4

#

return

0   -rw-     94696  Sep 11 2006 10:56:22    matnlog.dat

1   -rw-        16  Sep 04 2006 14:56:10    private-data.txt

2   -rw-   8661044  Sep 04 2006 14:55:28    s1800f-vrp3.30-0336.03(08).bin

3   -rw-       750  May 16 2006 13:15:31   vrpcfg0516.zip

4   -rw-      2904  May 13 2006 09:27:46   vrpcfg0513.cfg

5   -rw-      5150  Jun 05 2006 10:36:44    vrpcfg_sjz_test.zip

6   -rw-   8341452  Aug 07 2006 09:11:06   eu1000-vrp3.30-0350(08).bin

7   -rw-       586  Sep 04 2006 14:56:36    vrpcfg.zip

8   -rw-      1161  Aug 11 2006 17:07:56   vrpcfg_zhangjian.zip

 

31750 KB total (15231 KB free)              // 看剩余的空间是否足够

 

<Secpath1800F>tftp 192.168.1.100 get S1800F-VRP3.30-0331.01(08).bin

                                                             // 使用TFTP方式从PC上获得相应版本

Transfer file in binary mode.

Now begin to download file from remote tftp server, please wait for a while...

|

TFTP:  8480908 bytes received in 66 seconds.

File downloaded successfully.

 

<Secpath1800F>dir

Directory of flash:/

 

0   -rw-   8480908  Sep 11 2006 11:13:57   S1800f-vrp3.30-0331.01(08).bin

1   -rw-     94696  Sep 11 2006 10:56:22   matnlog.dat

2   -rw-        16  Sep 04 2006 14:56:10   private-data.txt

3   -rw-   8661044  Sep 04 2006 14:55:28   s1800f-vrp3.30-0336.03(08).bin

4   -rw-       750  May 16 2006 13:15:31   vrpcfg0516.zip

5   -rw-      2904  May 13 2006 09:27:46   vrpcfg0513.cfg

6   -rw-      5150  Jun 05 2006 10:36:44   vrpcfg_sjz_test.zip

7   -rw-   8341452  Aug 07 2006 09:11:06   eu1000-vrp3.30-0350(08).bin

8   -rw-       586  Sep 04 2006 14:56:36   vrpcfg.zip

9   -rw-      1161  Aug 11 2006 17:07:56   vrpcfg_zhangjian.zip

 

31750 KB total (6749 KB free)

 

<Secpath1800F>

<Secpath1800F>startup system-software s1800f-vrp3.30-0331.01(08).bin

                                                                               // 指定防火墙启动时候使用的系统VRP文件

 [Secpath1800F]dis startup

Configed startup system software:       flash:/s1800f-vrp3.30-0336.03(08).bin

                                                                             // 已配置的系统启动VRP文件

Startup system software:               flash:/s1800f-vrp3.30-0336.03(08).bin

                                                                             // 当前使用的系统VRP文件

Next startup system software:           flash:/s1800f-vrp3.30-0331.01(08).bin

                                                                             // 下一个启动时的系统VRP文件

Startup saved-configuration file:         flash:/vrpcfg.zip

                                                                             // 当前使用的配置文件

Next startup saved-configuration file:     flash:/vrpcfg.zip

                                                                              // 下一次启动时使用的系统文件

 

四、  配置关键点：

    升级版本的过程中，不需单独升级bootrom，VRP软件会自动给bootrom升级。