[Cisco抗DDoS设备]升级Detector_Guard总结

文章作者 100test 发表时间 2008:02:01 15:01:03
来源 100Test.Com百考试题网

guard-5.1-6.0.i386
detector-5.1-6.0.i386

1. 备份detector的配置
copy [zone zone-name] running-config ftp server full-file-name [login [password]]

copy running-config ftp server full-file-name [login [password]]

配置导回detector: deactive当前zone,当前配置将被取代
copy ftp running-config server full-file-name [login [password]]

2. 导出所有zone的攻击报告

copy reports [details] [xml] ftp server full-file-name [login] [password]

3. 导出Zone report
copy zone zone-name reports [current | report-id] [xml] [details] ftp server full-file-name [login] [password]

4. 导出Log文件

copy [zone zone-name] log ftp server full-file-name [login [password]]

5. 导出packet-dump capture文件,本次没有
copy zone zone-name packet-dump captures [capture-name] ftp server remote-path [login [password]]

6. 下载os软件到ftp server

7. 在设备上执行
copy ftp new-version /server-ipaddress/ fullfile-name/ login/ password/

8. copy完毕后，deactive zone后，执行
install new-version

如：
user@DETECTOR# copy ftp new-version 10.0.0.191 /home/Versions/R3.i386.rpm user
FTP in progress...
user@DETECTOR# install new-version

9. show version检查

10. burning a New Flash Version 如果需要
Bad CFE version (X). This version requires version Y

执行命令：falsh-burn / reload