(Optional) Enabling ASs to Automatically Upgrade After Going Online

Context

During online automatic upgrade, an AS checks whether its software version is consistent with that of the parent. If not, the AS searches for and downloads the system software from the parent to upgrade its software version.

The AS first searches for the software version with the same V, R, C, and SPC versions as the parent. If such version is unavailable, the AS searches for the software version with the same V, R, and C versions as the parent and selects the one with the latest SPC version. If no version meets the preceding requirements, the AS does not upgrade its software version. Additionally, a version upgrade failure alarm is generated when the AS runs a software version with a different V, R, or C version than the parent.

The files used to upgrade an AS are often saved in the root directory unimng/ of the parent. These files can also be saved on an AS when the AS is upgraded or downgraded to the software version that is consistent with that of the parent.
To upgrade an AS, you must configure the FTP or SFTP server function on the parent so that the AS can download the related upgrade files from the parent.

Procedure

Run system-view
The system view is displayed.
Run uni-mng
The uni-mng view is displayed.
Run upgrade { local-ftp-server | local-sftp-server } username username password password
The local file server is configured.

By default, no local file server is configured on the parent.
- If the local file server is not configured, an AS cannot download upgrade files from the parent and so cannot be upgraded.
- FTP has potential security risks, and so SFTP is recommended. If you want to use FTP, you are advised to configure ACLs to improve security. For details, see Configure the FTP ACL in "File Management" in the S2720, S5700, and S6700 V200R019C10 Configuration Guide - Basic Configuration.
- When the file server is an FTP server, the FTP service is automatically enabled and an FTP user is created on the parent, removing the need to perform the FTP configuration.
- When the file server type is set to SFTP, the SFTP service is not automatically enabled and no SFTP user is created on the parent. You need to manually pre-configure SFTP on the parent.
  
  For more details about the SFTP configuration, see File Management in the S2720, S5700, and S6700 V200R019C10 Configuration Guide - Basic Configuration.
- After the upgrade { local-ftp-server | local-sftp-server } command is executed, the same user name and password configuration is also generated in the AAA view. If you modify the configured local user information (the user password for example) in AAA view, the version management function does not take effect.
- If information about a user already exists in the AAA view, running this command to create the same user will change the user password in the AAA view to the configured password and change the user level to level 3. Changing the user password is allowed only when the user level of the user running this command is higher or equal to the user level configured in the AAA view. Otherwise, the command does not take effect.
- Running this command multiple times to create new users will delete previous user information. Previous user information can be deleted only when the user level of the user running this command is higher or equal to the user level configured in the AAA view. Otherwise, the command does not take effect.
- If a remote authentication server is used for AAA authentication, the user name and password configured using this command must also be configured on the remote authentication server.
- If a remote authentication server is used for AAA authentication and the remote authentication server does not support FTP or SFTP, ASs will fail to be authenticated. In this case, run the authentication-scheme authentication-scheme-name command in the AAA view to create an authentication scheme and run the authentication-mode local command in the authentication scheme view to set the authentication mode to local authentication. Then, run the domain command in the AAA view to create a domain and run the authentication-scheme authentication-scheme-name command in the AAA domain view to apply the created authentication scheme to the domain. ASs can be authenticated when they use the newly created domain for local authentication.
(Optional) Run as type as-type { system-software system-software | patch patch } ^*
Files to be loaded on an AS of the specified type are specified.

If files to be loaded on an AS are specified, the AS downloads the specified files when connecting to an SVF system without searching for the upgrade files, even though the matching system software version exists on the parent.