Huawei USG6000 Upgrade Manual page 132

HUAWEI USG6000&USG9500
Upgrade Guide
l
l
l
l
l
l
Issue 01 (2018-01-16)
<sysname>dir /charset_backup/
Idx Attr Size(Byte)
FileName
0 -rw-
usermanage.db
1 -rw-
– To roll back to the previous encoding format, set charset_back.cfg as the
configuration file for next startup, copy usermanage.db to the umdb/umsystem/
directory to overwrite the user database file, and run the delete log sdb command in
the system view to delete log-related files. Then restart the device.
– In the hot standby scenario, the encoding format switching can be performed only
in the active/standby hot standby environment but not the load-balancing hot
standby environment.
– In the hot standby scenario, complete the encoding format switching on the standby
device, perform an active/standby device switchover, and then complete the
encoding format switching on the new standby device.
Impact on MIB nodes:
Use the mapping MIB database.
Impact on the SSL VPN client:
– When a plug-in is updated, the local device needs to obtain the new SecoClient.
– During version upgrade, you are advised to upgrade matching program SecoClient
so that new functions can work properly. For example, SecoClient 1.50.2 applies to
V500R001C50.
DSVPN
DSVPN is incorporated in V500R001C50 and later versions. However, DSVPN does not
support hot standby.
NOTE
Although DSVPN does not support service backup between two devices, active/standby hot
standby can be implemented for load balancing or fault tolerance. If the active device or the link of
a service interface fails, an active/standby device switchover can be performed. The standby
device automatically takes over services. Traffic interruption may occur during the active/standby
device switchover.
The service restoration time on the active and standby devices is related to the registration interval
configured using the nhrp registration interval command and entry aging time configured using
the nhrp entry holdtime seconds command.
Impact on the signature databases:
After the software version is upgrade, you must upgrade the signature databases as well.
Impact on the web database:
In V500R001C50 and later versions, the web database type is changed to SQL. The user
web database can be upgraded smoothly. However, to ensure availability and version
rollback, back up the database to the local PC. That is, you can use FTP to export /hda1/
webuserinfo.db from the device.
Impact on ACLs:
If ACLs are used to control SNMP, SSH, TELNET, WEB, API, FTP, and NTP access,
check whether the referenced ACL and accessed interface are in the same VPN instance.
If not, the administrator cannot log in to the device. In this case, modify the
configuration. To be specific, bind the ACL to the corresponding VPN instance. The
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Date
35,840 Nov 03 2017 15:30:34
59,141 Nov 03 2017 18:20:00
Time
charset_back.cfg
2 USG9500
123