第一種方法: Fast Software Upgrade(FSU) 快速軟件升級
通過FSU對VSS進(jìn)行升級,與基于RPR的獨立機(jī)箱的FSU是類似的.
當(dāng)獨立機(jī)箱升級時,會將standby引擎重啟, 而VSS升級時會將standby機(jī)箱重啟.在FSU過程中,主備機(jī)箱的軟件版本不同,形成RPR冗余模式,無法進(jìn)行SSO狀態(tài)化切換,此時系統(tǒng)的停機(jī)時間將參照RPR切換時間.
配置案例:
Router# config terminal
Router(config)# no boot system //移除之前配置的參數(shù)
Router(config)# config-register0x2102 //設(shè)置配置寄存器值為0x2102
Router(config)# boot system flashdisk0:image_name //指定加載新的IOS的路徑
Router(config)# end
Router# copyrunning-config startup-config //保存配置
Router# redundancy reloadpeer //重啟standby機(jī)箱,使其運行新的IOS. 由于兩個機(jī)箱IOS版本不一致,standby機(jī)箱將進(jìn)入RPR冗余模式. 重啟standby機(jī)箱之前,需要等待一段時間,確保所有配置同步完成.
Router# redundancyforce-switchover //將active的角色切換到運行了新IOS的standby機(jī)箱上. 所有模塊將會重啟,并且從新的active機(jī)框下載板卡的軟件. 重啟后,將運行新的IOS成為VSS standby.
第二種方法: Enhanced Fast Software Upgrade (eFSU) 增強(qiáng)快速軟件升級
eFSU與ISSU( in-service software upgrade)使用相同的命令行和軟件基礎(chǔ)設(shè)施. 與ISSU不同的是它會重啟板卡,造成數(shù)據(jù)流量中斷.eFSU的升級方式與單一機(jī)框雙引擎的eFSU升級步驟是相同的,只不過現(xiàn)在這2塊引擎在兩臺不同的機(jī)框內(nèi). 在eFSU過程中,VSS standby機(jī)箱內(nèi)的引擎和板卡, 將會被升級并形成SSO冗余模式. 隨后進(jìn)行狀態(tài)化切換,對另一臺機(jī)箱進(jìn)行升級,并使其成為VSS standby.
VSS的eFSU升級包含以下階段:
-Preparation
-Loadversion Stage
-Runversion Stage
-Acceptversion Stage (Optional)
-Commitversion Stage
-Abortversion (Optional)
在每個階段,有對應(yīng)的issu命令行,你可以確認(rèn)系統(tǒng)的狀態(tài),或者在進(jìn)入下一個階段之前進(jìn)行回退.
Preparation
在初始化eFSU進(jìn)程之前, 需要將升級所需的IOS拷貝到每個機(jī)箱的引擎中. 否則,初始化命令將會被拒絕. VSS必須處于穩(wěn)定的運行狀態(tài), 一臺機(jī)箱是VSS active狀態(tài), 另一臺是VSS standby狀態(tài).
Loadversion Stage
當(dāng)你執(zhí)行 issu loadversion命令指定升級所需IOS的路徑,eFSU升級隨之開始.確認(rèn)輸入issu loadversion命令后,整臺VSS standby機(jī)箱包括引擎和板卡都將會重啟加載新的IOS. 由于VSS standby機(jī)箱的板卡在重啟過程中無法轉(zhuǎn)發(fā)數(shù)據(jù),在這個階段,整個VSS的轉(zhuǎn)發(fā)能力將臨時降至50%. 在重啟之后,VSS standby機(jī)箱加載新的IOS,并進(jìn)入SSO模式,恢復(fù)流量轉(zhuǎn)發(fā)能力. 在此時, VSS standby機(jī)箱運行的IOS軟件版本與VSS active機(jī)箱不同. VSSactive機(jī)箱需要與兩個機(jī)箱內(nèi)運行著不同IOS的板卡通信.
Runversion Stage
當(dāng)運行新IOS的VSS standby成功進(jìn)入SSO模式后,你可以使用 issu runversion命令. 這條命令,將強(qiáng)制進(jìn)行主備切換,讓升級后的VSS standby機(jī)箱成為新的VSSactive機(jī)箱. 原先的VSS acitve機(jī)箱將會重啟并運行舊IOS,成為SSO模式的VSS standby機(jī)箱. 如同在loadversion階段, 當(dāng)VSS standby機(jī)箱重啟時,VSS的轉(zhuǎn)發(fā)能力將臨時降至50%.此時,VSS active和VSS standby機(jī)箱運行著不同的軟件版本.
Acceptversion Stage (Optional)
當(dāng)你執(zhí)行issu runversion命令后, 當(dāng)主備切換到運行新IOS的機(jī)箱時, 將自動啟用回退計時器(rollbacktimer), 它將作為一種安全措施，以確保升級過程不會導(dǎo)致VSS無法運行.在回退計時器超時之前, 你必須接受或者承認(rèn)新的軟件版本.如果計時器超時, 已經(jīng)升級了的機(jī)箱將重啟,并回退到舊的軟件版本. 想要停止回退計時器,可以輸入 issuacceptversion 命令. 在開始eFSU升級之前,你可以禁止回退計時器,或者配置計時器值(默認(rèn)45分鐘,最大可以配置到2小時).
在這個階段, 你可以檢驗運行在新IOS的VSS active 機(jī)箱的功能.當(dāng)你滿意并愿意接受當(dāng)前的新IOS版本, 可以使用 issu commitversion命令去完成升級過程.
Commitversion Stage
需要使用issu commitversion來完成eFSU,并將另一臺機(jī)箱進(jìn)行軟件升級. VSS standby機(jī)箱會重啟并加載新IOS成為VSS standby. 如同在loadversion階段,當(dāng)板卡重啟并初始化時, VSS的轉(zhuǎn)發(fā)能力將臨時降至50%.
在成功重啟成為VSS standby之后, 便完成了對VSS的升級.
Abortversion (Optional)
當(dāng)你在執(zhí)行 issu commitversion命令之前的任何時候, 你可以使用 issu abortversion命令將終止升級過程并回退. 如果軟件檢測到故障,升級過程也將自動終止.回退過程和當(dāng)前狀態(tài)相關(guān). 如果在執(zhí)行issu runversion命令之前終止eFSU, VSS standby 機(jī)箱會重啟加載舊IOS. 如果在執(zhí)行issu runversion命令之后終止eFSU, 執(zhí)行了主備切換. 運行舊IOS的VSS standby機(jī)箱將成為VSS active機(jī)箱. 先前的VSS active機(jī)箱將會重啟并加載舊IOS,完成回退.
配置eFSU回退計時器
Router(config)# issu set rollback-timer 3600
% Rollback timer value set to [ 3600 ] seconds
Router(config)# issu set rollback-timer 01:00:00
% Rollback timer value set to [ 3600 ] seconds
//配置回退計時器,有兩種格式: seconds 或者 hh:mm:ss, 配置范圍是0到7200秒(2小時), 默認(rèn)是2700秒(45分鐘). 設(shè)置為0,將禁止回退計時器.
Router# show issurollback timer //顯示當(dāng)前回退計時器值
終止eFSU升級
Router# issu abortversion //停止升級進(jìn)程并回退到先前的軟件版本.
執(zhí)行eFSU升級:
Router# copy tftp disk_name //使用TFTP將新IOS拷貝到VSS active和standby機(jī)箱中.
Router# show issu state [switch/slot ] [ detail ] //(可選命令)查看VSS是否準(zhǔn)備好進(jìn)行eFSU升級.在任何一個階段,都可以使用 show issustate命令去查看升級的狀態(tài)
Router# issu loadversion
[ active_switch/slot ]active-image [standby_switch/slot ]standby-image //開始升級,讓VSS standby加載新IOS.
Router# issu runversion //主備切換. 使運行新IOS的VSS standby 成為VSS active. 原先的VSS active將運行舊IOS并成為VSS standby
Router# issuacceptversion //(可選命令)停止回退計時器, 確保IOS升級過程不會由于回退計時器超時而被自動中斷.
Router# issu commitversion //使VSS standby機(jī)箱加載新IOS
Router# show issu state [switch/slot ][ detail ] //查看升級狀態(tài). 如果升級成功,VSS acitve和standby都運行著新IOS.
eFSU升級案例:
1/確認(rèn)系統(tǒng)就緒
在將新IOS文件拷貝到主備引擎中,使用show issu state detail和showredundancy status命令來檢查VSS eFSU升級是否準(zhǔn)備就緒.其中一臺機(jī)箱必須處于active狀態(tài),另一臺處于standby狀態(tài). 兩臺機(jī)箱都需處于ISSU init狀態(tài)和SSO 冗余狀態(tài).在以下輸出中, 兩臺機(jī)箱都運行著'oldversion'鏡像.
Router# show issu state detail
Slot = 1/2
RP State = Active
ISSU State = Init
Boot Variable =disk0:s72033-oldversion.v1,12;
Operating Mode = sso
Primary Version = N/A
Secondary Version = N/A
Current Version =disk0:s72033-oldversion.v1
Variable Store = PrstVbl
Slot = 2/7
RP State = Standby
ISSU State = Init
Boot Variable =disk0:s72033-oldversion.v1,12;
Operating Mode = sso
Primary Version = N/A
Secondary Version = N/A
Current Version =disk0:s72033-oldversion.v1
Router# show redundancy status
my state = 13 -ACTIVE
peer state = 8 -STANDBY HOT
Mode = Duplex
Unit = Secondary
Unit ID = 18
Redundancy Mode (Operational) =sso
Redundancy Mode (Configured) = sso
Redundancy State = sso
Maintenance Mode = Disabled
Communications = Up
client count = 132
client_notification_TMR = 30000milliseconds
keep_alive TMR = 9000 milliseconds
keep_alive count = 0
keep_alive threshold = 18
RF debug mask = 0x0
2/讓VSS stadnby機(jī)箱加載新的IOS
輸入 issu loadversion 命令開始升級. 在這步, VSS standby機(jī)箱重啟,加載新IOS, 成為SSO冗余模式的VSS standby機(jī)箱. 當(dāng)配置同步后, 顯示'Bulk syncsucceeded'信息表示這步已經(jīng)完成.
Router# issu loadversion disk0:s72033-newversion.v2
000133: Aug 6 16:17:44.486 PST:%LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet1/2/4,changed state to down
000134: Aug 6 16:17:43.507 PST:%LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet2/7/4,changed state to down
000135: Aug 6 16:17:43.563 PST:%LINK-3-UPDOWN: Interface TenGigabitEthernet2/7/4, changed state to down
000136: Aug 6 16:17:44.919 PST:%LINK-3-UPDOWN: Interface TenGigabitEthernet1/2/4, changed state to down
(Deleted many interface andprotocol down messages)
%issu loadversionexecuted successfully, Standby is being reloaded
(Deleted many interface andprotocol down messages, then interface and protocol up messages)
0000148: Aug 6 16:27:54.154 PST:%LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet1/2/5,changed state to up
000149: Aug 6 16:27:54.174 PST:%LINK-3-UPDOWN: Interface TenGigabitEthernet2/7/5, changed state to up
000150: Aug 6 16:27:54.186 PST:%LINEPROTO-5-UPDOWN: Line protocol on Interface TenGigabitEthernet2/7/5,changed state to up
000151: Aug 616:32:58.030 PST: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED:Bulk Sync succeeded
3/確認(rèn)VSS standby機(jī)箱運行新的IOS
你可以使用 show issu state detail和show redundancy命令檢查兩臺機(jī)箱是否處于ISSU Load Version狀態(tài) 和SSO冗余狀態(tài). 在以下的輸出中, VSS standby 機(jī)箱正運行 “newversion” 鏡像.
Router# show issu state detail
Slot = 1/2
RP State = Active
ISSU State = Load Version
Boot Variable = disk0:s72033-oldversion.v1,12
Operating Mode = sso
Primary Version = disk0:s72033-oldversion.v1
Secondary Version = disk0:s72033-newversion.v2
Current Version = disk0:s72033-oldversion.v1
Variable Store = PrstVbl
Slot = 2/7
RP State = Standby
ISSU State = Load Version
Boot Variable =disk0:s72033-newversion.v2,12;disk0:s72033-oldversion.v1,12
Operating Mode = sso
Primary Version = disk0:s72033-oldversion.v1
Secondary Version = disk0:s72033-newversion.v2
Current Version = disk0:s72033-newversion.v2
Router# show redundancy status
my state = 13 -ACTIVE
peer state = 8 -STANDBY HOT
Mode = Duplex
Unit = Secondary
Unit ID = 18
Redundancy Mode (Operational) = sso
Redundancy Mode (Configured) = sso
Redundancy State = sso
Maintenance Mode = Disabled
Communications = Up
client count = 132
client_notification_TMR = 30000 milliseconds
keep_alive TMR = 9000 milliseconds
keep_alive count = 1
keep_alive threshold = 18
RF debug mask = 0x0
4/執(zhí)行準(zhǔn)備切換
當(dāng)VSS standby 機(jī)箱在SSO冗余模式下成功運行新的IOS, 執(zhí)行issu runversion命令來切換主備引擎.已經(jīng)升級到新IOS的VSS standby機(jī)箱,它將成為新的VSS active機(jī)箱. 原先的active機(jī)箱將會重啟,運行舊IOS成為新的VSS standby 機(jī)箱.當(dāng)配置同步后, 顯示'Bulk syncsucceeded'信息表示這步已經(jīng)完成.
Router# issu runversion
This command will reload the Active unit. Proceed ? [confirm]
(Deleted many lines)
Download Start
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!(Deletedmany lines)
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Download Completed! Booting the image.
Self decompressing the image :##########################################################################################
(Deleted many lines)
################################################################################[OK]
running startup....
(Deleted many lines)
000147: Aug 6 16:53:43.199 PST: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED:Bulk Sync succeeded
5/確認(rèn)主備切換
可以使用 show issu state detail和 show redundancy命令去檢查兩臺設(shè)備處于 ISSU Run Version狀態(tài)和SSO冗余狀態(tài).在以下輸出中, active機(jī)箱現(xiàn)在運行在“newversion”鏡像.
Router# show issu state detail
Slot = 2/7
RP State = Active
ISSU State = Run Version
Boot Variable =disk0:s72033-newversion.v2,12;disk0:s72033-oldversion.v1,12
Operating Mode = sso
Primary Version = disk0:s72033-newversion.v2
Secondary Version = disk0:s72033-oldversion.v1
Current Version = disk0:s72033-newversion.v2
Variable Store = PrstVbl
Slot = 1/2
RP State = Standby
ISSU State = Run Version
Boot Variable = disk0:s72033-oldversion.v1,12
Operating Mode = sso
Primary Version = disk0:s72033-newversion.v2
Secondary Version = disk0:s72033-oldversion.v1
Current Version = disk0:s72033-oldversion.v1
Router# show redundancy status
my state = 13 -ACTIVE
peer state = 8 -STANDBY HOT
Mode = Duplex
Unit = Primary
Unit ID = 39
Redundancy Mode (Operational) = sso
Redundancy Mode (Configured) = sso
Redundancy State = sso
Maintenance Mode = Disabled
Communications = Up
client count = 134
client_notification_TMR = 30000 milliseconds
keep_alive TMR = 9000 milliseconds
keep_alive count = 1
keep_alive threshold = 18
RF debug mask = 0x0
6/ 讓VSS standby機(jī)箱加載新IOS
當(dāng)VSS active機(jī)箱在SSO冗余模式運行著新IOS,可以執(zhí)行issu acceptversion 命令去停止回退計時器, 這樣可以無限期停留在這個階段. 或者使用 issu commitversion命令去繼續(xù)eFSU升級步驟. 執(zhí)行 issu commitversion 命令,將會升級VSS standby機(jī)箱并完成后續(xù)的eFSU升級過程. VSS standby機(jī)箱重啟,加載運行新IOS,并成為SSO冗余狀態(tài)的VSS standby機(jī)箱.當(dāng)配置同步后, 顯示'Bulk sync succeeded'信息表示這步已經(jīng)完成.
Router# issu commitversion
Building configuration...
[OK]
000148: Aug 6 17:17:28.267 PST: %LINEPROTO-5-UPDOWN: Line protocolon Interface TenGigabitEthernet2/7/4, changed state to down
000149: Aug 6 17:17:28.287 PST: %LINEPROTO-5-UPDOWN: Line protocolon Interface TenGigabitEthernet1/2/4, changed state to down
(Deleted many interface and protocol down messages)
%issu commitversion executedsuccessfully
(Deleted many interface and protocol down messages, then interfaceand protocol up messages)
000181: Aug 6 17:41:51.086 PST: %LINEPROTO-5-UPDOWN: Line protocolon Interface TenGigabitEthernet1/2/5, changed state to up
000182: Aug 6 17:42:52.290 PST: %HA_CONFIG_SYNC-6-BULK_CFGSYNC_SUCCEED:Bulk Sync succeeded
7/確認(rèn)升級完成
執(zhí)行 show issu state detail和 show redundancy命令, 查詢eFSU的結(jié)果.
在以下輸出中,兩臺設(shè)備都運行在“newversion” 鏡像, 表示已經(jīng)成功進(jìn)行eFSU升級. 如同在進(jìn)行eFSU升級之前的狀態(tài),此時他們會再次處于ISSU Init Version 狀態(tài).
Router# show issu state detail
Slot = 2/7
RP State = Active
ISSU State = Init
Boot Variable =disk0:s72033-newversion.v2,12;disk0:s72033-oldversion.v1,12
Operating Mode = sso
Primary Version = N/A
Secondary Version = N/A
Current Version = disk0:s72033-newversion.v2
Variable Store = PrstVbl
Slot = 1/2
RP State = Standby
ISSU State = Init
Boot Variable =disk0:s72033-newversion.v2,12;disk0:s72033-oldversion.v1,12
Operating Mode = sso
Primary Version = N/A
Secondary Version = N/A
Current Version = disk0:s72033-newversion.v2
Router# show redundancy status
my state = 13 -ACTIVE
peer state = 8 -STANDBY HOT
Mode = Duplex
Unit = Primary
Unit ID = 39
Redundancy Mode (Operational) = sso
Redundancy Mode (Configured) = sso
Redundancy State = sso
Maintenance Mode = Disabled
Communications = Up
client count = 134
client_notification_TMR = 30000 milliseconds
keep_alive TMR = 9000 milliseconds
keep_alive count = 1
keep_alive threshold = 18
RF debug mask = 0x0
- 北京炫億時代專業(yè)服務(wù)器運輸，機(jī)房搬遷包裝以及倉儲托
- 思科CISCO無線AP 啟動加載不了ios
- 【云爍俱樂部分享會】第十二期 某游戲開發(fā)公司內(nèi)部網(wǎng)
- 【云爍俱樂部分享會】第十一期 某政府網(wǎng)絡(luò)安全架構(gòu)方
- 【云爍俱樂部分享會】第九期 中小企業(yè)網(wǎng)絡(luò)搭建思路分
- 【云爍俱樂部分享會】第八期 某倉庫無線覆蓋項目分享
- 【云爍俱樂部分享會】第七期 工程師網(wǎng)絡(luò)設(shè)備實操理論
- 【云爍俱樂部分享會】第六期 工程師百度無線覆蓋項目
- 【云爍俱樂部分享會】第五期 工程師項目分享會
- 【云爍俱樂部分享會】第四期 工程師項目分享會
熱門文章
- 北京機(jī)房搬遷改造公司，系統(tǒng)集成有哪些公司？-2019-11-04
- 如何打造一個安全的網(wǎng)絡(luò)環(huán)境？政府要做到這四點-2019-11-04
- 北京辦公室網(wǎng)絡(luò)布線，綜合布線施工價格-2019-11-04
- 深信服產(chǎn)品專業(yè)上網(wǎng)行為管理，安全設(shè)備有保障-2019-11-04
- 兩年內(nèi)網(wǎng)絡(luò)安全市場規(guī)模將達(dá)千億級別？來看看詳細(xì)分析-2019-11-04
- 北京炫億時代專業(yè)機(jī)房設(shè)備除塵，機(jī)房網(wǎng)絡(luò)改造-2019-11-04
- 企業(yè)如何保障移動辦公的安全性？移動辦公存在的七大安-2019-11-01
- 北京深信服AC-1000-A400產(chǎn)品租賃購買，專業(yè)IT上網(wǎng)行為管理-2019-11-01
- 互聯(lián)網(wǎng)企業(yè)軟件開發(fā)如何才能沒有漏洞？專業(yè)工程師給出-2019-11-01
- 如何避免APP的“越權(quán)”行為？要靠制定相關(guān)法律法規(guī)-2019-11-01
企業(yè)通訊
