Configuring USB-based Deployment

Pre-configuration Tasks

Start the device.

Procedure

Before using a USB flash drive to upgrade a device, make an index file and save the index file and files to be loaded to the USB flash drive. Then connect the USB flash drive to the device to start the upgrade.

1. Run the system-view command to enter the system view.
2. Run the undo set device usb-deployment disable command to enable the USB-based deployment function.

   The USB-based deployment function is disabled by default. It is recommended that you disable this function after a USB-based deployment is complete. If a device has no configuration file, the USB-based deployment function is always enabled on the device.

3. (Optional) Run the set device usb-deployment config-file password password command to configure an encryption password for the configuration file.

   

   If upgrade files include a configuration file, it is recommended that you run this command to configure an encryption password for the configuration file and compress the configuration file using the configured password before saving it in the USB flash drive. This configuration improves security. This step is mandatory if HMAC verification is required for the configuration file.

4. (Optional) Run the set device usb-deployment hmac-key command to configure an HMAC key for HMAC verification during USB-based deployment.
   

   During USB-based deployment, if HMAC verification is enabled on a device, the device uses the HMAC key configured using the set device usb-deployment hmac-key command to calculate the HMAC value for the configuration file to be loaded, and compares the calculated value with the HMAC field value in the index file. If the two values are the same, the configuration file is valid and loaded to the device for USB-based deployment. If the two values are different, the configuration file is invalid and cannot be loaded for USB-based deployment.

5. (Optional) Run the set device usb-deployment hmac command to enable HMAC verification for configuration files.

   

   If upgrade files include a configuration file, you can enable HMAC verification to ensure validity of the configuration file to be loaded.

6. Make an index file.

   For details, see Making an Index File.

7. Save the index file in the root directory of the USB flash drive and the upgrade files specified in the index file to the specified directory of the USB flash drive (root directory by default).
8. Connect the USB flash drive to the device and start the upgrade process.
   

   Devices to be deployed are unconfigured devices and do not have security measures configured. Therefore, when onsite non-professionals perform deployment task, ensure that they do not perform any unauthorized operations on the devices, USB flash drive, and deployment files.

   • During the upgrade, the system obtains the upgrade files according to the description in the smart_config.ini file and saves the files in the default storage medium. In a stack, the master switch copies the upgrade files to all the member switches.

   • After all the required files are copied, the system activates the files using the method specified in the ACTIVEMODE field.

   • If an upgrade requires the device to restart, the device waits 10 seconds before a restart. In this period, the USB indicator is steady yellow.

Observing the Indicator to Check the USB-based Deployment Progress

# Observe the SYS indicator on the S6720S-EI, S5720I-6X-PWH-SI-AC, or S5720I-10X-PWH-SI-AC to determine the progress of USB-based deployment:

• Slow blinking yellow (once every 2s): The USB-based deployment has succeeded.

• Fast blinking green (four times every 1s): The system is reading data from the USB flash drive.

• Fast blinking red (four times every 1s): USB-based deployment has failed.

Observe the USB indicator to determine the progress of USB-based deployment (except S5720I-6X-PWH-SI-AC and S5720I-10X-PWH-SI-AC).

• Steady green: The USB-based deployment has succeeded.
• Fast blinking green (four times every 1s): The system is reading data from the USB flash drive.
• Fast blinking red (four times every 1s): USB-based deployment has failed.
• Steady yellow: The system will restart.
• Off: An error occurred. For example, no index file is saved in the USB flash drive, no USB flash drive is installed, the USB port is damaged, the ACT indicator is damaged, the USB flash drive contains no file for device deployment, or the switch is restarting.

• If the USB-based deployment succeeds, the system creates a deployment success report usbload_verify.txt in the root directory of the USB flash drive. You can remove the USB flash drive now.

• If the USB-based deployment fails, the system creates an error report usbload_error.txt in the root directory of the USB flash drive. View the report to analyze cause of the deployment failure.

• It is recommended that you run the set device usb-deployment disable command to disable the USB-based deployment function after completing a deployment. Otherwise, an unnecessary upgrade will be triggered if a USB flash drive is connected to the device by mistake, causing service interruption.