[Cisco抗DDoS设备] 升级Detector/Guard总结

network

[Cisco抗DDoS设备] 升级Detector/Guard总结
发贴： 2007年11月15日 14:32:09       回帖  



guard-5.1-6.0.i386
detector-5.1-6.0.i386

1. 备份detector的配置
copy [zone zone-name] running-config ftp server full-file-name [login [password]]

copy running-config ftp server full-file-name [login [password]]

配置导回detector:  deactive当前zone,当前配置将被取代
copy ftp running-config server full-file-name [login [password]]

2. 导出所有zone的攻击报告

copy reports [details] [xml] ftp server full-file-name [login] [password]

3. 导出Zone report
copy zone zone-name reports [current | report-id] [xml] [details] ftp server full-file-name [login] [password]

4. 导出Log文件

copy [zone zone-name] log ftp server full-file-name [login [password]]

5. 导出packet-dump capture文件,本次没有
copy zone zone-name packet-dump captures [capture-name] ftp server remote-path [login [password]]

6. 下载os软件到ftp server

7. 在设备上执行
copy ftp new-version /server-ipaddress/ fullfile-name/ login/ password/

8. copy完毕后，deactive zone后，执行
install new-version

如：
user@DETECTOR# copy ftp new-version 10.0.0.191 /home/Versions/R3.i386.rpm user <password>
FTP in progress...
user@DETECTOR# install new-version

9. show version检查

10. burning a New Flash Version 如果需要
Bad CFE version (X). This version requires version Y

执行命令：falsh-burn   /  reload



Any other comments,Pls mail me or raising hands