分类:
2013-01-11 16:46:10
从2.3(1)升级到2.3(2) 步骤如下:
1>先进入 Active FWSM :
7600A# session slot 4 processes 1
User Access Verification
Password:
FWSM# show failover
Failover On
Failover unit Primary
Failover LAN fover Vlan 999
Unit Poll frequency 15 seconds, holdtime 45 seconds
Interface Poll frequency 15 seconds
Interface Policy 50%
Monitored Interfaces 2 of 250 maximum
Config sync: active
Last Failover at: 05:31:56 May 15 2005
This host: Primary - Active
Active time: 2310 (sec)
Interface inside (192.168.1.254): rmal
Interface dmz1 (0.0.0.0): Normal (Not-Monitored)
Interface dmz2 (0.0.0.0): Normal (Not-Monitored)
Interface dmz3 (0.0.0.0): Normal (Not-Monitored)
Interface outside (193.1.1.254): Normal
Other host: Secondary - Standby
Active time: 0 (sec)
Interface inside (192.168.1.253): Normal
Interface dmz1 (0.0.0.0): Normal (Not-Monitored)
Interface dmz2 (0.0.0.0): Normal (Not-Monitored)
Interface dmz3 (0.0.0.0): Normal (Not-Monitored)
Interface outside (193.1.1.253): Normal
2) FWSM 上升级ios
FWSM# copy tftp://192.168.1.10/c6svc-fwm-k9.2-3-1.bin flash:image
copying tftp://192.168.1.10/c6svc-fwm-k9.2-3-1.bin to flash:image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Received 5800448 bytes.
Erasing current image.This may take some time..
Writing 5799936 bytes of image.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Image installed.
FWSM# show version
FWSM Firewall Version 2.2(1)
FWSM Device Manager Version 4.1(1)
在7600A#hw-module module 4 reset
failover 会立即切换到7600B 上
3> 用同样方法升级7600B FWSM 模块上的2.3(2) IOS
升级过后:
FWSM# sh ver
FWSM Firewall Version 2.3(2)
FWSM Device Manager Version 4.1(1)
Compiled on Wed 06-Apr-05 13:08 by dalecki
FWSM up 21 mins 3 secs
Hardware: WS-SVC-FWM-1, 1024 MB RAM, CPU Pentium III 1000 MHz
Flash 2.20 TOSHIBA THNCF128MBA @ 0xc321, 20MB
0: gb-ethernet0: irq 5
1: gb-ethernet1: irq 7
2: ethernet0: irq 11
Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES: Enabled
Maximum Interfaces: 256
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Throughput: Unlimited
ISAKMP peers: Unlimited
Security Contexts: 2
This machine has an Unrestricted (UR) license.
Serial Number: SFU02980036
Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000
Configuration has not been modified since last system restart.