request system software in-service-upgrade (Maintenance)
语法
request system software in-service-upgrade image_name <no-copy> <no-old-master-upgrade> <no-sync> <no-tcp-syn-check> <no-validate> <status> <unlink>
描述
不中断服务的软件升级 （ISSU） 功能允许从受支持的 Junos OS 版本升级机箱群集对，其流量影响类似于冗余组故障切换。升级之前，必须执行故障转移，以便所有冗余组仅在一台设备上处于活动状态。建议在启动 ISSU 之前启用路由协议的平稳重启。
对于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备，必须使用该 no-sync 参数执行带内群集升级 （ICU）。这样就可以在大约 30 秒的最小服务中断的情况下升级机箱群集对。
对于SRX1500、SRX4100和SRX4200设备，使用 ISSU 升级时不支持该 no-sync 参数。该 no-sync 选项指定状态不会从主节点同步到辅助节点。
对于SRX1500设备，使用 ISSU 升级时不支持该 no-tcp-syn-check 参数。
选项
image_name- 指定要安装的软件升级包的位置和名称。no-copy—（可选）安装软件升级包，但不保存包文件的副本。no-old-master-upgrade—（可选）切换后不要升级旧的主数据库。此参数仅适用于SRX5400、SRX5600和SRX5800设备。
no-sync—（可选）当旧的辅助节点使用新的 Junos OS 映像启动时，停止流状态同步。此参数仅适用于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备。这是重症监护室所必需的。
no-tcp-syn-check—（可选）创建一个窗口，其中禁用了传入数据包的 TCP SYN 检查。窗口的默认值为 7200 秒（2 小时）。此参数仅适用于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备。
no-validate—（可选）在安装时禁用配置验证步骤。系统行为类似于命令的行为request system software add。此参数仅适用于 SRX300、SRX320、SRX340、SRX345 和 SRX380 设备。
status—（可选）显示升级期间统一 ISSU 的状态。您需要在触发 ISSU 的路由引擎上运行此命令，以显示正确的 ISSU 日志文件。此参数仅适用于SRX1500、SRX4100、SRX4200、SRX4600、SRX5400、SRX5600和SRX5800设备。
unlink—（可选）安装成功后删除软件包。
所需权限级别
维护
输出字段
输入此命令时，系统会提供有关请求状态的反馈。
示例输出
请求系统软件服务升级状态（SRX1500、SRX4100、SRX4200、SRX4600、SRX5400、SRX5600和SRX5800）
user@host> request system software in-service-upgrade status [Apr 29 01:31:11]:ISSU: Validating Image [Apr 29 01:43:13]:ISSU: Validating Image Done [Apr 29 01:43:13]:ISSU: Preparing Backup RE [Apr 29 01:43:13]:ISSU: Pushing /var/tmp/junos-install-mx-x86-32-19.3I20190425_1 100_divyansh.tgz to re1:/var/tmp/junos-install-mx-x86-32-19.3I20190425_1100_divy ansh.tgz [Apr 29 01:44:48]:ISSU: Pushing package /var/tmp/junos-install-mx-x86-32-19.3I20 190425_1100_divyansh.tgz to re1 done [Apr 29 01:44:48]:ISSU: Installing package /var/tmp/junos-install-mx-x86-32-19.3 I20190425_1100_divyansh.tgz on re1 [Apr 29 01:52:35]:ISSU: Installing package /var/tmp/junos-install-mx-x86-32-19.3 I20190425_1100_divyansh.tgz on re1 done [Apr 29 01:52:35]:ISSU: Rebooting Backup RE [Apr 29 01:52:36]:ISSU: Backup RE Prepare Done [Apr 29 01:52:36]:ISSU: Waiting for Backup RE reboot [Apr 29 01:56:45]:ISSU: Backup RE reboot done. Backup RE is up [Apr 29 01:56:45]:ISSU: Waiting for Backup RE state synchronization [Apr 29 01:57:10]:ISSU: Backup RE state synchronization done [Apr 29 01:57:10]:ISSU: GRES operational [Apr 29 01:58:16]:ISSU: Preparing Daemons [Apr 29 01:58:40]:ISSU: Daemons Ready for ISSU [Apr 29 01:58:46]:ISSU: Offline Incompatible FRUs [Apr 29 01:58:51]:ISSU: Starting Upgrade for FRUs [Apr 29 02:03:32]:ISSU: Preparing for Switchover [Apr 29 02:03:57]:ISSU: Ready for Switchover [Apr 29 02:03:59]:ISSU: RE switchover Done [Apr 29 02:03:59]:ISSU: Upgrading Old Master RE [Apr 29 02:12:51]:ISSU: Old Master Upgrade Done [Apr 29 02:12:51]:ISSU: IDLE
示例输出
请求系统软件不中断服务升级（SRX300、SRX320、SRX340、SRX345 和 SRX380 设备）
user@host> request system software in-service-upgrade /var/tmp/junos-srxsme-15.1I20160520_0757-domestic.tgz no-sync
ISSU: Validating package
WARNING: in-service-upgrade shall reboot both the nodes
in your cluster. Please ignore any subsequent
reboot request message
ISSU: start downloading software package on secondary node
Pushing /var/tmp/junos-srxsme-15.1I20160520_0757-domestic.tgz to node0:/var/tmp/junos-srxsme-15.1I20160520_0757-domestic.tgz
Formatting alternate root (/dev/da0s1a)...
/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048
using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,
3384608, 3760672, 4136736, 4512800, 4888864
Installing package '/altroot/cf/packages/install-tmp/junos-15.1I20160520_0757-domestic' ...
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
WARNING: The software that is being installed has limited support.
WARNING: Run 'file show /etc/notices/unsupported.txt' for details.
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
JUNOS 15.1I20160520_0757 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING: Use the 'request system reboot' command
WARNING: when software installation is complete
cp: cannot overwrite directory /altroot/cf/etc/ssh with non-directory /cf/etc/ssh
Saving state for rollback ...
ISSU: finished upgrading on secondary node node0
ISSU: start upgrading software package on primary node
Formatting alternate root (/dev/da0s1a)...
/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048
using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,
3384608, 3760672, 4136736, 4512800, 4888864
Installing package '/altroot/cf/packages/install-tmp/junos-15.1I20160520_0757-domestic' ...
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
WARNING: The software that is being installed has limited support.
WARNING: Run 'file show /etc/notices/unsupported.txt' for details.
Verified junos-boot-srxsme-15.1I20160520_0757.tgz signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
Verified junos-srxsme-15.1I20160520_0757-domestic signed by PackageDevelopmentEc_2016 method ECDSA256+SHA256
JUNOS 15.1I20160520_0757 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING: Use the 'request system reboot' command
WARNING: when software installation is complete
cp: cannot overwrite directory /altroot/cf/etc/ssh with non-directory /cf/etc/ssh
Saving state for rollback ...
ISSU: failover all redundancy-groups 1...n to primary node
Successfully reset all redundancy-groups priority back to configured priority.
Successfully reset all redundancy-groups priority back to configured priority.
error: Command failed. None of the redundancy-groups has been failed over.
Some redundancy-groups' priority on node1 are 0.
e.g.: priority of redundancy-groups-1 on node1 is 0.
Use 'force' option at the end to ignore this check.
WARNING: Using force option may cause traffic loss.
ISSU: rebooting Secondary Node
Shutdown NOW!
ISSU: Waiting for secondary node node0 to reboot.
ISSU: node 0 went down
ISSU: Waiting for node 0 to come up
ISSU: node 0 came up
ISSU: secondary node node0 booted up.
ISSU: failover all redundancy-groups 1...n to remote node, before reboot.
Successfully reset all redundancy-groups priority back to configured priority.
Shutdown NOW!
{primary:node1}
user@host>
*** FINAL System shutdown message from user@host ***
System going down IMMEDIATELY
发布信息
对于 SRX5400、SRX5600 和SRX5800设备，Junos OS 9.6 版中引入的命令。对于SRX5400设备，该命令在 Junos OS 版本 12.1X46-D20 中引入。对于 SRX300、SRX320、SRX340 和 SRX345 设备，可在 Junos OS 15.1X49-D40 版中引入命令。对于SRX1500设备，Junos OS 15.1X49-D50 版中引入的命令。对于 SRX380 设备，Junos OS 20.1R1 版中引入的命令。
从 Junos OS 15.1X49-D80 版开始，SRX4100 和SRX4200设备支持 ISSU。
从 Junos OS 17.4R1 版开始，SRX4600 设备支持 ISSU。
SRX300 系列设备和 vSRX 虚拟防火墙不支持 ISSU。
对于 SRX1500、SRX4100、SRX4200、SRX4600、SRX5400、SRX5600 和 SRX5800，Junos OS 20.4R1 版中引入了该 status 选项。