帮助我们改善您的体验。

让我们了解您的想法。

您是否能抽出两分钟的时间完成一份问卷调查?

close
keyboard_arrow_left
Junos CLI 参考
Table of Contents Expand all
list Table of Contents

机器翻译对您有帮助吗?

starstarstarstarstar
Go to English page
免责声明:

我们将使用第三方机器翻译软件翻译本页面。瞻博网络虽已做出相当大的努力提供高质量译文,但无法保证其准确性。如果对译文信息的准确性有任何疑问,请参阅英文版本. 可下载的 PDF 仅提供英文版.

request system software in-service-upgrade (Maintenance)

date_range 18-Dec-23

语法

content_copy zoom_out_map
request system software in-service-upgrade image_name 
<no-copy>
<no-old-master-upgrade>
<no-sync>
<no-tcp-syn-check>
<no-validate>
<status>
<unlink>

描述

不中断服务的软件升级 (ISSU) 功能允许从受支持的 Junos OS 版本升级机箱群集对,其流量影响类似于冗余组故障切换。升级之前,必须执行故障转移,以便所有冗余组仅在一台设备上处于活动状态。建议在启动 ISSU 之前启用路由协议的平稳重启。

对于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备,必须使用该 no-sync 参数执行带内群集升级 (ICU)。这样就可以在大约 30 秒的最小服务中断的情况下升级机箱群集对。

对于SRX1500、SRX4100和SRX4200设备,使用 ISSU 升级时不支持该 no-sync 参数。该 no-sync 选项指定状态不会从主节点同步到辅助节点。

对于SRX1500设备,使用 ISSU 升级时不支持该 no-tcp-syn-check 参数。

选项

  • image_name- 指定要安装的软件升级包的位置和名称。

  • no-copy—(可选)安装软件升级包,但不保存包文件的副本。

  • no-old-master-upgrade—(可选)切换后不要升级旧的主数据库。

    此参数仅适用于SRX5400、SRX5600和SRX5800设备。

  • no-sync—(可选)当旧的辅助节点使用新的 Junos OS 映像启动时,停止流状态同步。

    此参数仅适用于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备。这是重症监护室所必需的。

  • no-tcp-syn-check—(可选)创建一个窗口,其中禁用了传入数据包的 TCP SYN 检查。窗口的默认值为 7200 秒(2 小时)。

    此参数仅适用于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备。

  • no-validate—(可选)在安装时禁用配置验证步骤。系统行为类似于命令的行为 request system software add

    此参数仅适用于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备。

  • status—(可选)显示升级期间统一 ISSU 的状态。您需要在触发 ISSU 的路由引擎上运行此命令,以显示正确的 ISSU 日志文件。

    此参数仅适用于SRX1500、SRX4100、SRX4200、SRX4600、SRX5400、SRX5600和SRX5800设备。

  • unlink—(可选)安装成功后删除软件包。

所需权限级别

维护

输出字段

输入此命令时,系统会提供有关请求状态的反馈。

示例输出

请求系统软件服务升级状态(SRX1500、SRX4100、SRX4200、SRX4600、SRX5400、SRX5600和SRX5800)

content_copy zoom_out_map
user@host> request system software in-service-upgrade status
[Apr 29 01:31:11]:ISSU: Validating Image
[Apr 29 01:43:13]:ISSU: Validating Image Done
[Apr 29 01:43:13]:ISSU: Preparing Backup RE
[Apr 29 01:43:13]:ISSU: Pushing /var/tmp/junos-install-mx-x86-32-19.3I20190425_1
100_divyansh.tgz to re1:/var/tmp/junos-install-mx-x86-32-19.3I20190425_1100_divy
ansh.tgz
[Apr 29 01:44:48]:ISSU: Pushing package /var/tmp/junos-install-mx-x86-32-19.3I20
190425_1100_divyansh.tgz to re1 done
[Apr 29 01:44:48]:ISSU: Installing package /var/tmp/junos-install-mx-x86-32-19.3
I20190425_1100_divyansh.tgz on re1
[Apr 29 01:52:35]:ISSU: Installing package /var/tmp/junos-install-mx-x86-32-19.3
I20190425_1100_divyansh.tgz on re1 done
[Apr 29 01:52:35]:ISSU: Rebooting Backup RE
[Apr 29 01:52:36]:ISSU: Backup RE Prepare Done
[Apr 29 01:52:36]:ISSU: Waiting for Backup RE reboot
[Apr 29 01:56:45]:ISSU: Backup RE reboot done. Backup RE is up
[Apr 29 01:56:45]:ISSU: Waiting for Backup RE state synchronization
[Apr 29 01:57:10]:ISSU: Backup RE state synchronization done
[Apr 29 01:57:10]:ISSU: GRES operational
[Apr 29 01:58:16]:ISSU: Preparing Daemons
[Apr 29 01:58:40]:ISSU: Daemons Ready for ISSU
[Apr 29 01:58:46]:ISSU: Offline Incompatible FRUs
[Apr 29 01:58:51]:ISSU: Starting Upgrade for FRUs
[Apr 29 02:03:32]:ISSU: Preparing for Switchover
[Apr 29 02:03:57]:ISSU: Ready for Switchover
[Apr 29 02:03:59]:ISSU: RE switchover Done
[Apr 29 02:03:59]:ISSU: Upgrading Old Master RE
[Apr 29 02:12:51]:ISSU: Old Master Upgrade Done
[Apr 29 02:12:51]:ISSU: IDLE

示例输出

请求系统软件不中断服务升级(SRX300、SRX320、SRX340、SRX345 和 SRX380 设备)

content_copy zoom_out_map
user@host> request system software in-service-upgrade /var/tmp/junos-srxsme-15.1I20160520_0757-domestic.tgz no-sync           

ISSU: Validating package
WARNING: in-service-upgrade shall reboot both the nodes
         in your cluster. Please ignore any subsequent
         reboot request message 
ISSU: start downloading software package on secondary node
Pushing /var/tmp/junos-srxsme-15.1I20160520_0757-domestic.tgz to node0:/var/tmp/junos-srxsme-15.1I20160520_0757-domestic.tgz
Formatting alternate root (/dev/da0s1a)...
/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048
        using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,
3384608, 3760672, 4136736, 4512800, 4888864
Installing package '/altroot/cf/packages/install-tmp/junos-15.1I20160520_0757-domestic' ...
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
 
WARNING:     The software that is being installed has limited support.
WARNING:     Run 'file show /etc/notices/unsupported.txt' for details.
 
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
JUNOS 15.1I20160520_0757 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING:     Use the 'request system reboot' command
WARNING:         when software installation is complete
cp: cannot overwrite directory /altroot/cf/etc/ssh with non-directory /cf/etc/ssh
Saving state for rollback ...
ISSU: finished upgrading on secondary node node0
ISSU: start upgrading software package on primary node
Formatting alternate root (/dev/da0s1a)...
/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048
        using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,
3384608, 3760672, 4136736, 4512800, 4888864
Installing package '/altroot/cf/packages/install-tmp/junos-15.1I20160520_0757-domestic' ...
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
 
WARNING:     The software that is being installed has limited support.
WARNING:     Run 'file show /etc/notices/unsupported.txt' for details.
 
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
JUNOS 15.1I20160520_0757 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING:     Use the 'request system reboot' command
WARNING:         when software installation is complete
cp: cannot overwrite directory /altroot/cf/etc/ssh with non-directory /cf/etc/ssh
Saving state for rollback ...
ISSU: failover all redundancy-groups 1...n to primary node
Successfully reset all redundancy-groups priority back to configured priority.
Successfully reset all redundancy-groups priority back to configured priority.
error: Command failed. None of the redundancy-groups has been failed over.
        Some redundancy-groups' priority on node1 are 0.
        e.g.: priority of redundancy-groups-1 on node1 is 0.
Use 'force' option at the end to ignore this check.
WARNING: Using force option may cause traffic loss.
ISSU: rebooting Secondary Node
Shutdown NOW!
ISSU: Waiting for secondary node node0 to reboot.
ISSU: node 0 went down
ISSU: Waiting for node 0 to come up
ISSU: node 0 came up
ISSU: secondary node node0 booted up.
ISSU: failover all redundancy-groups 1...n to remote node, before reboot.
Successfully reset all redundancy-groups priority back to configured priority.

Shutdown NOW!
 
{primary:node1}
user@host>                                                                               
*** FINAL System shutdown message from user@host ***                      
 
System going down IMMEDIATELY                                                 
 

发布信息

对于 SRX5400、SRX5600 和SRX5800设备,Junos OS 9.6 版中引入的命令。对于SRX5400设备,该命令在 Junos OS 版本 12.1X46-D20 中引入。对于 SRX300、SRX320、SRX340 和 SRX345 设备,可在 Junos OS 15.1X49-D40 版中引入命令。对于SRX1500设备,Junos OS 15.1X49-D50 版中引入的命令。对于 SRX380 设备,Junos OS 20.1R1 版中引入的命令。

从 Junos OS 15.1X49-D80 版开始,SRX4100 和SRX4200设备支持 ISSU。

从 Junos OS 17.4R1 版开始,SRX4600 设备支持 ISSU。

SRX300 系列设备和 vSRX 虚拟防火墙不支持 ISSU。

对于 SRX1500、SRX4100、SRX4200、SRX4600、SRX5400、SRX5600 和 SRX5800,Junos OS 20.4R1 版中引入了该 status 选项。

external-footer-nav