Secospace USecospace USG2100

8/9/2019 Secospace USecospace USG2100

1/46

Version Upgrade Instructions

USG2100V100R003C01SPC010

Issue 01

Date 2010-5-12

Huawei Symantec Technologies Co., Ltd.


2/46

Huawei Symantec Technologies Co., t!. "#o$i!es custome#s with com"#ehensi$e technical su""o#t an!

se#$ice. Please %eel %#ee to contact ou# local o%%ice o# com"any hea!&ua#te#s.

Huawei Symantec Technologies Co., t!.

'!!#ess( )uil!ing 1

The *est +one Science Pa# o% U-STC, o. //, Tianchen Roa!

Cheng!u, 1131

P.R.China

*esite( htt"(www.huaweisymantec.com

Tel( 4005///52333

6a7( 8/502/5//9:::

;ailo7( su""o#t


3/46

Contents

1 Upgrade Mode Overview................................................................7

1.1 pgrade ode...................................................................................................................................................

1.1.1 pgrade /uring /evice 'tartup...............................................................................................................

1.1.2 pgrade hen /evice #s unning...........................................................................................................

2 Upgrade Impacts...........................................................................9

3 Upgrade Procedure.....................................................................10

.1 pgrade (rocedure of 3ersions Earier than 3100001)01'()001...................................................... .......10

.1.1 pgrade 4ow )hart...............................................................................................................................10

.1.2 pgrade (rocedure.................................................................................................................................11

.2 pgrade (rocedure of 3100001)01'()001 and *ater 3ersions.................................................................12

.2.1 pgrade 4ow )hart...............................................................................................................................12

.2.2 pgrade (rocedure.................................................................................................................................1

4 Preparations or Upgrade............................................................1!

+.1 (reparations for pgrade.................................................................................................................................15

+.1.1 (reparing pgrade Toos....................................................................................................................... .15

+.1.2 btaining pgrade eference and 'oftware..........................................................................................16

+.1. 7ac!ing up the current host software, configuration fies, and icense fies..........................................16

+.2 )hec!ist 7efore pgrade................................................................................................................................18

+.2.1 9uerying the &ost 'oftware 3ersion......................................................................................................20

! Upgrade Operations....................................................................21

5.1 pgrade perations of 3ersions Earier than 3100001)01'()001......................................................... ...21

5.2 pgrade perations of 3100001)01'()001 and *ater 3ersions................................................................26

5.2.1 pgrade perations /uring /evice 'tartup...........................................................................................26

5.2.2 pgrade perations hen /evice #s unning......................................................................................2

" Upgrade #eri$cation....................................................................34

:.1 3erification )hec!ist.......................................................................................................................................+

:.1.1 9uerying the &ost 'oftware 3ersion......................................................................................................+

7 #ersion %o&&'ac(.........................................................................37

.1 obac! perations of 3ersions Earier than 3100001)01'()001.................................................... .......6

.1.1 obac! 4ow )hart...............................................................................................................................6


4/46

';2100 310000)01'()010

3ersion pgrade #nstructions

.1.2 obac! perations...............................................................................................................................8

.2 obac! perations of 3100001)01'()001 and *ater 3ersions...............................................................+5

.2.1 obac! 4ow )hart...............................................................................................................................+5

.2.2 obac! perations...............................................................................................................................+5

) Upgrade %ecord..........................................................................47

#ssue 01 $2010-5-12%&uawei 'ymantec (roprietary and )onfidentia

)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age + of +


5/46

';2100 310000)01'()010


*igures

Figure 3-1 4ow chart of upgrade during device startup.......................................................................................10

Figure 3-2 4ow chart of upgrade during device startup.......................................................................................12

Figure 3-3 4ow chart of upgrade when device is running...................................................................................12

Figure 4-1 )onnection between the () and the ';2100 through the seria port..............................................15

Figure 4-2 )onnection between the () and the ';2100 through the Ethernet interface..................................1:

Figure 4-3 )reating a connection..........................................................................................................................1:

Figure 4-4 )onnect to diaog bo".........................................................................................................................1

Figure 4-5 'etting port parameters........................................................................................................................1

Figure 7-1 Flow chart of the version Earlier than V100R001C01SPC001 rollback....................6

Figure 7-2 Flow chart of V100R001C01SPC001 and later versions rollback...............................+5


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age 5 of +


6/46

';2100 310000)01'()010


+a'&es

Table 3-1 (rocedure for upgrade during device startup........................................................................................11

Table 3-2 (rocedure for upgrade during device startup........................................................................................1

Table 3-3 (rocedure for upgrade when device is running.....................................................................................1

Table 4-1 )hec!ist before upgrade.......................................................................................................................18

Table 5-1 (arameters of the 4T( mode.............................................................................................................. ...2:

Table 5-2 (arameters of the 4T( mode.............................................................................................................. ...0

Table 6-1 3erification chec!ist.............................................................................................................................+

Table 7-1 (arameters of the 4T(


7/46

';2100 310000)01'()010


1 Upgrade Mode Overview1.1 Upgrade Mode

The ';2100 310000 version can be upgraded when it is powered on, or it runs.

&owever, the ';21003100001)01701c version and the ';21003100001)01701f

version are earier than the ';2100 3100001)01'()001 version. The earier twoversions can be upgraded ony when the device is powered on. ther versions can use either

of the two upgrade modes to upgrade the version. =o matter which mode is adopted, you need

to ma!e preparations for the upgrade according to )hapter +.

1.1.1 Upgrade ,uring ,evice -tartup

7efore the ';2100 starts the 7oot, enter the 7oot main menu. #n the Ethernet

submenu, configure the Ethernet interface. Then, oad the host software pac!age from theT4T( or 4T( server.

1.1.2 Upgrade /en ,evice Is %unning

hen the ';2100 is running, you can oad the host software pac!age from the 4T( server

by running 4T( commands.


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age of +


8/46

2 Upgrade Impacts#f the ';2100 is running on the current networ!, using the upgrade method described

in section 1.1.1pgrade /uring /evice 'tartup eads to service interruption during the

upgrade. sing the upgrade method described in section 1.1.2pgrade hen /evice #sunning re>uires the reboot of the firewa after the software pac!age is oaded, which eads

to service interruption. ?ou can determine when to perform the upgrade according to the

actua situation.

hen ';2100 3100001)01701c or ';21003100001)01701f is upgraded to

';2100 310000)01'()010, the 4ash needs to be formatted, which resuts in the oss

of important fies such as the configuration fies. Therefore, before the version upgrade,configuration fies, host software, and icense fies shoud be bac!ed up. 4or detais, see

section +.1..


9/46

';2100 310000)01'()010


3 Upgrade Procedure3.1 Upgrade Procedure o #ersions ar&ier t/an#100%001C01-PC001

3.1.1 Upgrade *&ow C/art

Figure 1.1 4ow chart of upgrade during device startup




10/46

';2100 310000)01'()010





11/46

';2100 310000)01'()010


3.1.2 Upgrade Procedure

Figure 1.1 (rocedure for upgrade during device startup

o. Operation Impact ,uration Mandatoror Optiona&

1 7ac!ing up the )urrent &ost 'oftware,)onfiguration 4ies, and *icense 4ies

=one About 1min

Mandator

2 *oad the

software upgrade

pac!age throughthe 7oot

during the

startup.

Enter the 7oot

main menu and update

the 7ootsoftware

#f you are oading

for the first time,

you must oad thesoftware upgrade

pac!age through the

7oot@

otherwise, the

';2100 cannotstart.

About min andatory

4ormat the fash

*oad the softwareupgrade pac!age to the4ash.

)ompete the oading

and specify the nameof the software

upgrade pac!age.

'tart the ';2100 from the 4ash. =one =uconfiguration

fieA About 2

min

andatory

+ eoad the configuration fie, (af-icense

fie, and icense fie. Then active the

icense fie.

=one About 1 min. andatory

5 'et the fie for the ne"t startup and

configuration fie.

=one About 0.5

min.

andatory

: estart the device. =one =uconfiguration

fieA About 2

min.

andatory




12/46

';2100 310000)01'()010


3.2 Upgrade Procedure o#100%001C01-PC001 and ater #ersions

3.2.1 Upgrade *&ow C/art

Figure 1.1 4ow chart of upgrade during device startup

Figure 1.2 4ow chart of upgrade when device is running




13/46

';2100 310000)01'()010


3.2.2 Upgrade Procedure

Figure 1.1 (rocedure for upgrade during device startup


1 *oad the

softwareupgrade

pac!age

through the7oot

during the

startup.

Enter the 7oot main

menu and update the7oot software

#f you are oading for

the first time, youmust oad the software

upgrade pac!age

through the7oot@ otherwise,

the ';2100 cannot

start.

Bbout

min

andatory

/eete the currenty usedhost software, and

downoad the host

software pac!age by

running 4T( commands.

'et the downoadedsoftware pac!age as the

startup pac!age.

2 eboot the system. =one =u

configuratio

n fieA

About

min

andatory

;et (af-icense fie by running 4T(commands

=one Bbout 1min

andatory

+ eboot the system. =one =uconfiguratio

n fieA About

min

andatory

Figure 1.2 (rocedure for upgrade when device is running


1 *oad thesoftware

upgrade

pac!age when

device isrunning by

running

commands.

)onfigure the 4T(software, set the user

name and password, and

save the host software

pac!age to the 4T(directory.

=one Bbout min

andatory

/eete the currenty usedhost software, and

downoad the host

software pac!age and

(af-icense by running

4T( commands.


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age 1+ of +


14/46

';2100 310000)01'()010


'et the downoaded

software pac!age as the

startup pac!age.

2 eboot the system. The duration of the

startup is affected bythe current

configuration fie.

ore configurations

ta!e a onger time forrecovery@ thus, the

startup sows down.

=u

configuration fieA

About 2

min

andatory




15/46

';2100 310000)01'()010


4 Preparations or Upgrade4.1 Preparations or Upgrade

4.1.1 Preparing Upgrade +oo&s

+as( ,escription

The () and the ';2100 need to be connected through the seria port cabe and networ!

cabe.

?ou need to chec! whether the ';2100 starts or runs propery during upgrade. Therefore,

the seria port of the () needs to be connected to the ';2100. The physica in!s between

Ethernet interfaces are used to transmit software@ therefore, the Ethernet interfaces must beavaiabe.

Con$guration otes

The 4T( or T4T( software must be instaed on the (). The 4T( and T4T( software is not

described here because it is a third-party software.

The Ethernet cabe for upgrade must be inserted to the B= interface other than the *B=interface. therwise, the upgrade fais.

Operation Procedure

-tep 1 )onnect a seria port of the () and the )onsoe port on the ( of the ';2100 through aseria port cabe, as shown in 4igure 1.1.


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age 1: of +


16/46

';2100 310000)01'()010


Figure 1.1 )onnection between the () and the ';2100 through the seria port

RS5232 se#ial inte#%ace

Console caleConsole inte#%ace

USG2100PC

-tep 2 )onnect the Ethernet interface of the () and the B= interface on the ( of the ';2100through a networ! cabe, as shown in 4igure 1.1.

Figure 1.1 )onnection between the () and the ';2100 through the Ethernet interface

-tep 3 'tart the 4T( server or T4T( server software on the ().

-tep 4 'ave the software pac!age for upgrade to the 4T( or T4T( root directory.

4or how to obtain the software pac!age, see section +.1.2.

-tep ! 'et seria port parameters.

1. un the termina emuation program such as the &yperTermina on the (). )hoose Start

C All Programs C Accessories C Commuicatios C !"#er Termial. The

Coectio Descri#tio diaog bo" is dispayed.

2. #nput the name of the connection, such as C$%%1 in the fied &ame, between the ()and the ';2100. 'eect one of the icons, as shown in 4igure 2.1.




17/46

';2100 310000)01'()010


Figure 2.1 )reating a connection

. )ic! $' . The Coect to diaog bo" is dispayed.

+. 'eect the seria port such as C$%1 used for the connection from the Coect usig

drop down ist, as shown in 4igure +.1.

Figure 4.1 )onnect to diaog bo"

5. )ic! $' . The C$%1 Pro#erties diaog bo" is dispayed.

:. 'et the communication parameters of the port, as shown in 4igure :.1.




18/46

';2100 310000)01'()010


Figure 6.1 'etting port parameters

. )ic! $' .

ther termina software can be used instead of &yperTermina.

----()

%esu&t #eri$cation

'tart the ';2100. )hec! whether the startup information coected through the seria port isdispayed on the &yperTermina of the (). #f the information is coected through the seria

port, it indicates that the connection between the () and the ';2100 is estabished and the

seria port cabe is propery connected.

4.1.2 O'taining Upgrade %eerence and -otware

+as( ,escription

btain upgrade reference and software

pgrade instructionsA

';2100 310000)01'()010 3ersion pgrade #nstructions$Engish%.doc

eferenceA

';2100 310000)01'()010 eease =otes $Engish%.doc

'oftware pac!ageA




19/46

';2100 310000)01'()010


';2100D31)01'()010.bin

big.bin

Operation Procedure

btain the reference and version from the customer service center. The phone number of the

customer service center is +00-666-2.

4.1.3 ac(ing up t/e current /ost sotware5con$guration $&es5 and &icense $&es

+as( ,escription

7efore the version upgrade, the current host software, configuration fies, and icense fiesshoud be bac!ed up to ensure that the version robac! can be impemented in case of the

abnorma upgrade.

Con$guration otes

The 4T( or T4T( software must be instaed on the (). The 4T( and T4T( software is not

described here because it is a third-party software.

Operation Procedure

-tep 1 'tart the 4T( or T4T( server on the ().

-tep 2 )onfigure the #( addresses of the ';2100 and () so that the ';2100 and () cancommunicate with each other.

-tep 3 poad the host software, current configuration fies, and icense fies on the ';2100 to the4T( server for bac!up.*og in to the 4T( server through the 4T( cient.#n the user view, enter

ftp the #( address of the 4T( serverC. ?ou can og in to the 4T( server and then upoad the

configuration fies and icense fies to the 4T( server.

ftp 10.2.1.2

Trying 10.2.1.2 ...

Press CTRL+K to abort

Connecte to 10.2.1.2.

220 !"TP# 2.0 ser$ice %by Te&as '(peria) Soft*are reay for ne* ,ser

User%10.2.1.2-%none-12

1 Gi$e (e yo,r pass*or/ p)ease

Pass*or-

20 Logge in s,ccessf,))y

ftpp,t $rpcfg.ip %3ote- $rpcfg.ip is t4e c,rrent config,ration fi)e.

200 P5RT co((an o6ay

170 8#-9$rpcfg.ip8 fi)e reay to recei$e in :SC'' (oe

22; Transfer finis4e s,ccessf,))y.

"TP- =1 byte%s sent in 0.11 secon%s .;1Kbyte%s?sec.

ftpp,t )icense.at （3ote- )icense.at is t4e c,rrent)y ,se )icense fi)e.）





20/46

';2100 310000)01'()010


170 8#-9)icense.at8 fi)e reay to recei$e in :SC'' (oe


"TP- 20= byte%s sent in 0.11 secon%s 1.Kbyte%s?sec.

ftp

ftpp,t ,sg2100$1r1c01b01f.bin （3ote- ,sg2100$1r1c01b01f.bin is t4e c,rrent)y

,se syste( soft*are）


170 8#-9 ,sg2100$1r1c01b01f.bin 8 fi)e reay to recei$e in :SC'' (oe


"TP- 7;;@ byte%s sent in 11.200 secon%s 702.7;Kbyte%s?sec.

----()

4.2 C/ec(&ist eore Upgrade

Figure 1.1 )hec!ist before upgrade

o. Item C/ec( Points

1 9uerying the host software version The host software version shoud be

directy upgraded to this version.

4.2.1 6uering t/e ost -otware #ersion

#n the command ine view of the ';2100, run the )is#la" *ersio command to view theversion of the host software running on the ';2100.

isp)ay $ersion

+as( ,escription

1. The version can be directy upgraded to 310000)01'()010 regardess of the version

of the current software.

2. #n the case of the startup with nu configurations, the defaut user name is a)mi and

the password is A)mi+123.




21/46

';2100 310000)01'()010


! Upgrade Operations!.1 Upgrade Operations o #ersions ar&iert/an #100%001C01-PC001

-tep 1 )onnect the () to the consoe port of the ';2100 through a standard '-22 cabe.

-tep 2 )opy the reeased host software to the specified path, and set an #( address for the Ethernetinterface of the ().'tart the 4T( server program on the (), and configure a path for the fiethat needs to be downoaded. #n the case of the 4T( server, a user name and a password need

to be configured.

The 4T( server software are purchased and instaed by users@ the ';2100 does not contain such

software. 4or different 4T( server software, the configuration interface may vary.

-tep 3 'witch on the power and power on the device or restart the device.

-tep 4 poad the host software, current configuration fies, and icense fies on the ';2100 to the4T( server for bac!up. *og in to the 4T( server through the 4T( cient. #n the user view, enter

,t# te IP a))ress o, te FTP ser*er/. ?ou can og in to the 4T( server and then upoad

the configuration fies and icense fies to the 4T( server.

ftp 10.2.1.2

Trying 10.2.1.2 ...




User%10.2.1.2-%none-12


Pass*or-


ftpp,t $rpcfg.ip %3ote- $rpcfg.ip is t4e c,rrent config,ration fi)e


170 8#-9$rpcfg.ip8 fi)e reay to recei$e in :SC'' (oe


"TP- =1 byte%s sent in 0.11 secon%s .;1Kbyte%s?sec.

ftpp,t )icense.at（3ote

：)icense.at is t4e c,rrent)y ,se )icense fi)e

）





22/46

';2100 310000)01'()010


170 8#-9)icense.at8 fi)e reay to recei$e in :SC'' (oe


"TP- 20= byte%s sent in 0.11 secon%s 1.Kbyte%s?sec.

ftp

ftpp,t ,sg2100$1r1c01b01f.bin （3ote：,sg2100$1r1c01b01f.bin is t4e c,rrent)y

,se syste( soft*are）


170 8#-9 ,sg2100$1r1c01b01f.bin 8 fi)e reay to recei$e in :SC'' (oe


"TP- 7;;@ byte%s sent in 11.200 secon%s 702.7;Kbyte%s?sec.

-tep ! hen starting the device, you can view the startup process of the main contro board on theseria port too. #f the foowing information is dispayed, press and hod )trFB to enter the

'B**-7T menu.

35! G5 T5 C C5#A...

Go on C4ec6ing t4e Sra(B es or 3o%?3-

Press CTRL+: to Stop :,toDootE

Starting...

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

J Creation ate- an @ 200=/ 11-22-77 J

J C4ange Da,Rate J

J Upate LargeDootro( J

J Doot ain Syste( J

J Reboot J

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Anter yo,r c4oice%0H- 2

-tep " #n the 'B**-7T menu, enter 2. )hoose Transfer C 'end 4ie on the seria port

too.

The foowing interface is dispayed. $'eect the directory where big.bin is saved as the

viewing part, and seect Gmodem in the protoco drop-down ist.% The seection must be




23/46

';2100 310000)01'()010


>uic!, or if the time for upgrading e"ceeds the timeout time, you need to seect both big.binand Gmodem once again.

)ic! 'end, and wait unti the upgrade competes.

Bfter sending, the foowing interface is dispayed again.

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

J Creation ate- an @ 200=/ 11-22-77 J

J C4ange Da,Rate J

J Upate LargeDootro( J

J Doot ain Syste( J

J Reboot J


Anter yo,r c4oice%0H-0

-tep 7 -nte# 0. The !e$ice #esta#ts. *hen sta#ting the !e$ice, you can $iew the sta#tu""#ocess o% the main cont#ol oa#! on the se#ial "o#t tool. *hen the %ollowingin%o#mation is !is"laye!, "#ess an! hol! Ctrl8' to ente# the )ootR=; main menu

Dootro(/ Ier1.1

Copyrig4t%C 200H2010 by M,a*ei Sy(antec Tec4no)ogies Co./Lt.


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age 2+ of +


24/46

';2100 310000)01'()010


CPU type - PC21A

CPU L1 Cac4e - 2KD

CPU C)oc6 Spee - M

e(ory Sie - 27;

Press Ctr)+D to Anter Doot en,... @

Pass*or-

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

J #e)ete fi)e fro( ")as4 J

J 'nit ")as4 "i)e Syste( Space. J

J #isp)ay ")as4 "i)es J

J Anter ")as4H:ging Test J

J ")as4 Test J

J A2PRo( Test J

J CPL# Test J

J ##R (e(ory Test J

J Syste( C)oc6 Test J

J Syste( Le Test J

J S4o* Syste(H:ging Res,)t J

J IRPSoft*are Dac6,p J

J Reco$er conso)e0 pass*or JJ Dig Dootro( Dac6,p J

J S(a)) Dootro( Upgrae J

J IRPSoft*are Dac6,p Test J

J A&it To ain en, J


Anter yo,r c4oice%0Hg- 2

'nit ")as4 "i)e Syste( Space...

"or(atting ")as4/ P)ease !aiting ...#one.

FFFFFFFFFFFFFFFFFFFFFF


25/46

';2100 310000)01'()010





J ")as4 Test J

J A2PRo( Test J

J CPL# Test J

J ##R (e(ory Test J


J Syste( Le Test J


J Reco$er conso)e0 pass*or J

J Dig Dootro( Dac6,p J


J A&it To ain en, J


Anter yo,r c4oice%0Hf-0

FFFFFFFFFFFFFFFFFFFFF


26/46

';2100 310000)01'()010


fi)e na(e - USG2100I1RC01SPC010.bin %"i)e to be o*n)oae on

t4e ser$er

inet on et4ernet %e - 1=2.1;.2.1@ %'P aress of t4e boar

inet on bac6p)ane %b - %353A

4ost inet %4 - 1=2.1;.2.1@2 %'P aress of t4e ser$er

gate*ay inet %g - %353A

,ser %, - 12 %User na(e of t4e ser$er

ftp pass*or %p* %b)an6 F ,se rs4- 12 %Pass*or corresponing to t4e

ser$er

f)ags %f - 0&0 %#o*n)oa (oe- 0&0 "TP

target na(e %tn - USG2100I1RC01SPC010.bin %3a(e of t4e fi)e sa$e on t4e

boar

start,p script %s - %353A

ot4er %o - %353A

Figure 1.1 (arameters of the 4T( mode

Item *+P Mode

4iename =ame of the fie to be oaded

#net on Ethernet #( address of the downoading

interface of the ';2100

host inet $h% #( address of the 4T( server

user $u% ser name, which shoud be the

same as the user name that

specified on the 4T( server

ftp password $pw%

$ban! I use rsh%

ser password, which shoud be

the same as the 4T( password thatspecified on the 4T( server

fags $f% 4T( downoading fag, which is

-tep 11 #f you enter 2 in the Ethernet submenu, the host software pac!age is downoaded to the 4ashmemory.

#f you enter 2, the screen dispay is as foowsA

)hec! whether the parameters are correct. #f the parameters are correct, enter . Then, press(ter.

Loa......#oneE

127=0@0@ Dytes #o*n)oae.

-tep 12 Enter 5 in the 7oot main menu. The foowing information is dispayedA

C4ange ")as4 #escriptor.

")as4"i)e3a(eFf)as4-?,sg2100.bin/ oify t4e "i)e 3a(e if 3eee.


27/46

';2100 310000)01'()010


T4e fi)e na(e yo, inp,t is USG2100I1RC01SPC010.bin/

are yo, s,reB es or 3o%?3 Y

Enter . Then, press (ter. The foowing information is dispayedA

!riting ")as4...one

-tep 13 Enter 1 to e"ecute the new host software pac!age

This step is for chec!ing that the oaded host software pac!age starts normay, and for viewing the

version number after startup. #n addition, you can switch off the device and then restart it, or press(S(T on the main contro pane.

Bfter the host software is started, you can further chec! whether the version is properyoaded and chec! the version of the new software that is running on the device.

-tep 14 *oad the configuration fie and (af-icense fie and new icense fie, and activate the icensefie. *oad them from the server to the 4ash through 4T(.

ftp 10.2.1.2

Trying 10.2.1.2 ...




User%10.2.1.2-%none-12


Pass*or-


ftpget $rpcfg.ip


170 8#-9$rpcfg.ip8 fi)e reay to sen %=1 bytes in :SC'' (oe


"TP- =1 byte%s recei$e in @.@; secon%s 1==.@;byte%s?sec.

ftpget )icense.t&t


170 8#-9)icense.t&t8 fi)e reay to sen % bytes in :SC'' (oe


"TP- byte%s recei$e in =.@;; secon%s 7.;7byte%s?sec.

ftpget )icense.at


170 8#-9)icense.at8 fi)e reay to sen %20= bytes in :SC'' (oe22; Transfer finis4e s,ccessf,))y.

"TP- 20= byte%s recei$e in @.@;; secon%s @;.;7byte%s?sec.

Bfter getting the icense fie , active the icense fie.USG2100)icense fi)e )icense.at

S,ccee to acti$ate fi)e

-tep 1! estart the device. The device automaticay runs usg218913C1SPC1.bi.

a!e sure that the 4ash has sufficient space during the version upgrade. ?ou need to specify the name

of the system fie for the ne"t startup before restarting the system.

----()




28/46

';2100 310000)01'()010


!.2 Upgrade Operations o#100%001C01-PC001 and ater #ersions

!.2.1 Upgrade Operations ,uring ,evice -tartup-tep 1 )onnect the () to the consoe port of the ';2100 through a standard '-22 cabe.

-tep 2 )opy the reeased host software to the specified path, and set an #( address for the Ethernetinterface of the ().'tart the 4T( server program on the (), and configure a path for the fiethat needs to be downoaded. #n the case of the 4T( server, a user name and a password need

to be configured.

The 4T( server software are purchased and instaed by users@ the ';2100 does not contain such

software. 4or different 4T( server software, the configuration interface may vary.

-tep 3 'witch on the power and power on the device or restart the device.-tep 4 hen the ';2100 is being powered on, you can view the ( startup process on

&yperTermina of the (). hen the foowing output is dispayed, press CtrlF0 to enter the

7oot main menu.

Unifie Sec,rity Gate*ay 2100 Dootro(/ Ier1.1;

Copyrig4t%C 200H2010 by M,a*ei Sy(antec Tec4no)ogies Co./Lt.

CPU type - PC21A

CPU L1 Cac4e - 2KD

CPU C)oc6 Spee - Me(ory Sie - 27;


Pass*or-

FFFFFFFFFFFFFFFFFFFFF


29/46

';2100 310000)01'()010


Mien en,...



30/46

';2100 310000)01'()010


J Doot !it4 #efa,)t oe J

J Doot "ro( ")as4 J

J Anter Seria) S,ben, J

J Anter At4ernet S,ben, J

J C4ange ")as4 Doot "i)e J

J oify Dootro( Pass*or J

J Restore "actory Setting J

J Restore #efa,)t Config J

J Reboot J


Anter yo,r c4oice%0H-

-tep " #n the 7oot main menu, enter 4 to enter the Ethernet submenu.

Enter your choice$0-6%A+

Doot "ro( 3et Port.


J #o*n)oa Progra( To S#R: :n R,n JJ #o*n)oa Progra( To ")as4 J

J C4ange Doot Para(eter... J

J A&it To ain en, J

J J



-tep 7 Bfter entering 3 in the Ethernet submenu, you can change the parameters of the Ethernetinterface. The parameters are dispayed as foowsA

C4ange boot para(eter t4ro,g4 net port

3ote- :$ai)ab)e Doot #e$ice- Nefcc1

O.O F c)ear fie) OHO F go to pre$io,s fie) Q# F N,itboot e$ice - Nefcc1 %o, o not nee to c4ange t4e

para(eter $a),e.

processor n,(ber - 0 %o, o not nee to c4ange t4e

para(eter $a),e.

4ost na(e - %Most na(e

fi)e na(e - USG2100I1RC01SPC010.bin %"i)e to be o*n)oae on

t4e ser$er







ser$er

f)ags %f - 0&0 %#o*n)oa (oe- 0&0 "TP

target na(e %tn - USG2100I1RC01SPC010.bin %3a(e of t4e fi)e sa$e on t4e

boar


ot4er %o - %353A

Figure 1.1 (arameters of the 4T( mode

Item *+P Mode

4iename =ame of the fie to be oaded




31/46

';2100 310000)01'()010


Item *+P Mode

#net on Ethernet #( address of the downoading

interface of the ';2100

host inet $h% #( address of the 4T( server




ftp password $pw%

$ban! I use rsh%


the same as the 4T( password thatspecified on the 4T( server


-tep 8 #f you enter 2 in the Ethernet submenu, the host software pac!age is downoaded to the 4ashmemory.

#f you enter 2, the screen dispay is as foowsA

)hec! whether the parameters are correct. #f the parameters are correct, enter . Then, press

(ter.

Loa......#oneE

127=0@0@ Dytes #o*n)oae.





32/46

';2100 310000)01'()010


ftp 10.2.1.2

Trying 10.2.1.2 ...




User%10.2.1.2-%none-12


Pass*or-


-tep 12 btain the (af-icense fie$ icense.t"t %。?ou can obtain this fie by entering get licese.tt onthe 4T( cient.

ftpget )icense.t&t


170 8#-9 )icense.t&t8 fi)e reay to sen %0 bytes in :SC'' (oe


-tep 13 estart the device.

----()

!.2.2 Upgrade Operations /en ,evice Is %unning

-tep 1 )opy the reeased host software to the specified path, and set an #( address for the Ethernet

interface of the ().'tart the T4T( or 4T( server program on the (), and configure a path forthe fie that needs to be downoaded. #n the case of the 4T( server, a user name and a

password need to be configured.

The 4T( server and T4T( server software are purchased and instaed by users@ the ';2100 does not

contain such software. 4or different T4T( server and 4T( server software, the configuration interface

may vary.

-tep 2 /eete the od host software（for e"ampeA usg2100Dv1r1c01spc001.bin）。

e)ete ?,nreser$e ,sg2100$1r1c01spc001.bin

Ca,tionE o, are e)eting t4e syste( start,p fi)eE

T4e contents cannot be recyc)eEEE #e)ete f)as4-? ,sg2100$1r1c01spc001.binB

?3-y

#e)eting fi)e f)as4-? ,sg2100$1r1c01spc001.bin...

#e)eting fi)e per(anent)y fro( f)as4 *i)) ta6e a )ong ti(e if neee............

................................................................................

........................#oneE

-tep 3 *og in to the 4T( server through the 4T( cient. #n user mode, you can og in to the 4T(server by entering ,t# .

ftp 10.2.1.2

Trying 10.2.1.2 ...





)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age of +


33/46

';2100 310000)01'()010


User%10.2.1.2-%none-12


Pass*or-


-tep 4 btain the :S;218913C1SPC1.bi fie a) Pa,-licese


34/46

';2100 310000)01'()010


" Upgrade #eri$cation".1 #eri$cation C/ec(&ist

Figure 1.1 3erification chec!ist

o. Item C/ec( Points

1 )hec!ing whether theversion of the host

software is correct

se the command ine. The version numberdispayed shoud be 310000)01'()010.

(rint 4igure 1.1pgrade ecord in advance for recording.

".1.1 6uering t/e ost -otware #ersion

un the )is#la" *ersio command to view the version of the host software running on the

';2100.

+as( ,escription

#f the version information in the command output is the same as the information in #'tep

14igure 1.1, it indicates that the software version is correct.

Con$guration otes

7efore running the command, ma!e sure that the host software pac!age of the ';2100 is

oaded successfuy. therwise, the software versions may not match.

Operation Procedure

-tep 1 btain the correct host software pac!age and oad it to the ';2100.

-tep 2 'tart the ';2100 after oading the host software pac!age.

-tep 3 Enter the )is#la" *ersio command in the command ine, and chec! the information that isdispayed.




35/46

';2100 310000)01'()010


----()

%esu&t #eri$cation

#f the version information in the command ine output is the same as the information in #'tep14igure 1.1, it indicates that the software version is correct.


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age : of +


36/46


37/46

';2100 310000)01'()010


7.1 %o&&'ac( Operations o #ersions ar&iert/an #100%001C01-PC001

7.1.1 %o&&'ac( *&ow C/art

Figure 1.1 Flow chart of the version Earlier than V100R001C01SPC001 rollback




38/46

';2100 310000)01'()010


7.1.2 %o&&'ac( Operations

-tep 1 /eete the current host software $for e"ampeA ';2100D31)01'()010.bin%.

e)ete ?,nreser$e ,sg2100I1RC01SPC010.bin


T4e contents cannot be recyc)eEEE #e)ete f)as4-? ,sg2100I1RC01SPC010.binB

?3-y

#e)eting fi)e f)as4-? ,sg2100I1RC01SPC010.bin...


................................................................................

........................#oneE

-tep 2 *og in to the 4T( server through the 4T( cient. #n user mode, og in to the 4T( server byentering ,t# .

ftp 10.2.1.2

Trying 10.2.1.2 ...




User%10.2.1.2-%none-12


Pass*or-


-tep 3 poad the current configuration fie and icense fie to the 4T( server for bac!up.

-tep 4 btain the :S;218911C101,.bi fie of the version to be roed bac! to. Enter get:S;218911C101,.bi on the 4T( cient.

ftpget USG2100I1R1C01D01f.bin200 P5RT co((an o6ay

170 8#-9 USG2100I1R1C01D01f.bin8 fi)e reay to sen %7;;@ bytes in :SC'' (oe


ftp- 7;;@ bytes are trans(itte/ ta6ing =.;= secons. Rate- 7.1 6 bytes?s.

ftp

-tep ! Enter the )ir command on the ';2100 to view the name and siJe of the fie on the';2100.#f the transmission succeeds, the siJe of the fie on the ';2100 shoud be the

same as that of the fie on the 4T( server host.

ir

#irectory of f)as4-?

0 Hr*H 7;;@ :pr 02 2000 00-@@-@; ,sg2100$1r1c01D01f.bin

1 Hr*H @ :pr 01 2000 2-77-0 bootti(es

2 Hr*H 2@ :pr 01 2000 2-7;-0 pri$ateHata.t&t

Hr*H =07 :pr 01 2000 2-7;-0= $rpcfg.ip

@ Hr*H @17= :pr 02 2000 01--7 [email protected]

7 Hr*H ;=0 :pr 02 2000 0@-2-1 ,sg2100ospfreset.cfg

; Hr*H 770= :pr 0 2000 0-1- ,sg2100ospftest.cfg

-tep " #n the user view, enter the startu# s"stem-so,tare usg218*1r1c1b1,.bi command toset the host software for the ne"t startup.




39/46

';2100 310000)01'()010


start,p syste(Hsoft*are USG2100I1R1C01D01f.bin

o, *i)) c4ange t4e start,p soft*areE Contin,eB?3-y

C4ec6ing i(age fi)e f)as4-? USG2100I1R1C01D01f.bin

T4e i(age fi)e f)as4-?USG2100I1R1C01D01f.bin is correctE

Start,p fro( t4e syste(Hsoft*are f)as4-?USG2100I1R1C01D01f.binB?3-y

-tep 7 estart the device. The device automaticay runs :S;218911C101,.bi.

?ou shoud ensure that the 4ash has enough free space during the version upgrade. ?ou need to specify

the name of the system fie for the ne"t startup before restarting the system.

-tep 8 hen starting the device, view the startup process of the ain (rocessing nit $(% on theseria port too. hen the foowing information is dispayed, press CtrlF0 to enter the

7oot main menu.

Unifie Sec,rity Gate*ay 2100 Dootro(/ Ier1.1

Copyrig4t%C 200H2010 by MU:!A' S:3TAC TACM35L5G'AS C5./LT#.

CPU type - PC21A

CPU L1 Cac4e - 2KD

CPU C)oc6 Spee - M

e(ory Sie - 27;


Pass*or-



)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age +0 of +


40/46

';2100 310000)01'()010


J #e)ete fi)e fro( ")as4 J




J ")as4 Test J

J A2PRo( Test J

J CPL# Test J

J ##R (e(ory Test J


J Syste( Le Test J


J IRPSoft*are Dac6,p J

J Reco$er conso)e0 pass*or J

J Dig Dootro( Dac6,p J


J IRPSoft*are Dac6,p Test J

J A&it To ain en, J

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFAnter yo,r c4oice%0Hg- 2

'nit ")as4 "i)e Syste( Space...

"or(atting ")as4/ P)ease !aiting ...#one.



41/46

';2100 310000)01'()010



-tep 10 #n the 7oot main menu, enter 4 to enter the Ethernet submenu.

Enter your choice$0-6%A+

Doot "ro( 3et Port.


J #o*n)oa Progra( To S#R: :n R,n J

J #o*n)oa Progra( To ")as4 J

J C4ange Doot Para(eter... J

J A&it To ain en, J

J J



-tep 11 Enter 3 in the Ethernet submenu, change the parameters of the Ethernet interface. The parameters are dispayed as foowsA

hen fags $f% is set to , the downoad mode is 4T(, which re>uires 4T( password@ whenfags $f% is set to @, the downoad mode is T4T(.

C4ange boot para(eter t4ro,g4 net port

3ote- T*o protoco)s for o*n)oa/ tftp ftp.

o, can (oify t4e f)ags fo))o*ing t4e (en,.

tftpHH0&0/ ftpHH0&0.

:$ai)ab)e Doot #e$ice- Nefcc1

O.O F c)ear fie) OHO F go to pre$io,s fie) Q# F N,it

boot e$ice - Nefcc1 %o, o not nee to c4ange t4e

para(eter $a),e.

processor n,(ber - 0 %o, o not nee to c4ange t4e

para(eter $a),e.4ost na(e - %Most na(e

fi)e na(e - USG2100I1R1C01D01f.bin %"i)e to be o*n)oae on t4e

ser$er







ser$er

f)ags %f - 0&0 %#o*n)oa (oe- 0&0 "TP 0&0 T"TP

target na(e %tn - USG2100I1R1C01D01f.bin %3a(e of t4e fi)e sa$e on t4e

boar


ot4er %o - %353A

Figure 1.1 (arameters of the 4T(


42/46

';2100 310000)01'()010


Item *+P Mode +*+P Mode




=one

ftp password $pw%

$ban! I use rsh%


the same as the 4T( password that


=one


T4T( downoading fag, which

is @

-tep 12 Enter 2 in the Ethernet submenu, and the host software pac!age is downoaded to the 4ash.

#f you enter 1 in the Ethernet submenu, host software pac!age is downoaded to the ';2100 andoaded directy. Bfter the restart, the';2100 resumes the origina host software pac!age for the startup.

#f you enter 2 in the Ethernet submenu, the host software pac!age is downoaded to the 4ash. Bfter the

restart, the';2100 uses the atest host software pac!age for the startup.$?ou are recommended to enter 2.%

Bfter you enter 2, the foowing information is dispayedA

)hec! whether the parameters are correct. #f yes, enter and press (ter.

Load......Done! 7;;@ Dytes #o*n)oae.





43/46

';2100 310000)01'()010


-tep 1! *oad the configuration fie, and icense fie from the server to the 4ash through 4T(.

ftp 10.2.1.2

Trying 10.2.1.2 ...


Connecte to 10.2.1.2.220 !"TP# 2.0 ser$ice %by Te&as '(peria) Soft*are reay for ne* ,ser

User%10.2.1.2-%none-12


Pass*or-


ftpget $rpcfg.ip


170 8#-9$rpcfg.ip8 fi)e reay to sen %=1 bytes in :SC'' (oe


"TP- =1 byte%s recei$e in @.@; secon%s 1==.@;byte%s?sec.

ftpget )icense.at


170 8#-9)icense.at8 fi)e reay to sen %20= bytes in :SC'' (oe


"TP- 20= byte%s recei$e in @.@;; secon%s @;.;7byte%s?sec.

-tep 1" 'et the fie for the ne"t startup and configuration fie.

start,p syste(Hsoft*are ,sg2100$1r1c01b01f.bin


3e&t start,p syste( soft*are-f)as4-?,sg2100$1r1c01b01f.bin/ Rea fi)e fro(

f)as4....

start,p sa$eHconfig,ration $rpcfg.ip

Start,p fro( t4e sa$eHconfig,ration f)as4-?$rpcfg.ipB?3-y

-tep 17 estart the device. The device automaticay runs usg218*1r1c1b1,.bi and oads theorigina configurations. The robac! is competed.

?ou need to ensure that the 4ash has enough free space during the version upgrade. ?ou need to specify


----()


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age ++ of +


44/46

';2100 310000)01'()010


7.2 %o&&'ac( Operations o#100%001C01-PC001 and ater #ersions

7.2.1 %o&&'ac( *&ow C/art

Figure 1.1 Flow chart of V100R001C01SPC001 and later versions rollback

7.2.2 %o&&'ac( Operations

-tep 1 /eete the current host software $for e"ampeA ';2100D311)01'()001.bin%.

e)ete ?,nreser$e ,sg2100$1r1c01spc001.bin


T4e contents cannot be recyc)eEEE #e)ete f)as4-? ,sg2100$1r1c01spc001.binB

?3-y

#e)eting fi)e f)as4-? ,sg2100$1r1c01spc001.bin...


................................................................................

........................#oneE

-tep 2 *og in to the 4T( server through the 4T( cient. #n user mode, og in to the 4T( server byentering ,t# .

ftp 10.2.1.2

Trying 10.2.1.2 ...




User%10.2.1.2-%none-12


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age +5 of +


45/46

';2100 310000)01'()010



Pass*or-


-tep 3 poad the preceding version to the 4ash. Enter get ';2100D311)01'()001.bin on the

4T( cient. $'uppose that the preceding used version is ';2100D311)01'()001.bin.%.

ftpget USG2100I1R1C01SPC001.bin


170 8#-9 USG2100I1R1C01SPC001.bin8 fi)e reay to sen %727=0 bytes in :SC''

(oe


ftp- 727=0 bytes are trans(itte/ ta6ing =;.;= secons. Rate- [email protected] 6bytes?s.

ftp

-tep 4 se the dir command on the ';2100 to view the name and siJe of the fie on the ';2100after the fie is successfuy transferred. #f the transmission succeeds, the siJe of the fie on

the ';2100 shoud be the same as that of the fie on the 4T( server host

>USG2100?!i#

@i#ecto#y o% %lash(

0 5#w5 :2:90/ '"# 02 2000 00(44(4 usg2100A$1#1c01s"c001.in

1 5#w5 4 '"# 01 2000 23(::(0 oottimes

2 5#w5 24 '"# 01 2000 23(:(0 "#i$ate5!ata.t7t

3 5#w5 90: '"# 01 2000 23(:(09 $#"c%g.Bi"

4 5#w5 41:9 '"# 02 2000 01(3/(:/ on101:243.!at

: 5#w5 90 '"# 02 2000 04(23(1/ usg2100os"%#eset.c%g

5#w5 ::09 '"# 03 2000 0/(13(33 usg2100os"%test.c%g

-tep ! n the use# $iew, ente# the startup system(so)tware usg2100A$1#1c01s"c001.in

comman! to set the host so%twa#e %o# the ne7t sta#tu"

start,p syste(Hsoft*are ,sg2100$1r1c01spc001.bin


C4ec6ing i(age fi)e f)as4-? ,sg2100$1r1c01spc001.bin

T4e i(age fi)e f)as4-? ,sg2100$1r1c01spc001.bin is correctE

Start,p fro( t4e syste(Hsoft*are f)as4-? ,sg2100$1r1c01spc001.binB?3-y

< USG2100>

-tep " estart the device. The device automaticay runs usg218*1r1c1s#c1.bi and oads theorigina configurations. The robac! is competed.

?ou need to ensure that the 4ash has enough free space during the version upgrade. ?ou need to specify


----()


)opyright $c% &uawei 'ymantec Technoogies )o., *td.(age +: of +


46/46

Documents

Secospace USecospace USG2100