如何从 CLI 手动导入和安装 PAN-OS 主要升级
5801
Created On 02/22/23 07:00 AM - Last Modified 08/14/24 06:17 AM
Objective
本文档介绍从CLI在Palo Alto Networks设备上手动导入和安装PAN-OS主要升级的步骤。
Environment
- 下一代防火墙或全景图
- 支持的 PAN-OS
- 使用 CLI 升级
Procedure
- 使用“scp import software from username@host：path” 或 “tftp import software from <tftp host> file <path>” 从 CLI 上传基本映像版本
- 通过命令“debug swm load-uploaded image <image_name>”加载基础映像（此过程可能需要很长时间才能完成）
- 通过命令“debug swm list”验证基础映像。
- 使用“scp import software from username@host：path” 或 “tftp import software from <tftp host> file <Source path>” 通过 CLI 上传维护版本版本
- 通过命令“请求软件安装版本<选择版本>）安装维护版本。
- 该过程的示例在“附加信息”下给出
Additional Information
- 使用 SCP 或 TFTP 从 CLI 上传基本映像版本。
- 如果使用 SCP
admin@PA-3260> scp import software from panw@10.194.52.194:/home/panw/PanOS_3200-11.0.0
PanOS_3200-11.0.0 100% 1037MB 41.4MB/s 00:25
PanOS_3200-11.0.0 saved
- 如果使用 TFTP
admin@PA-3260> tftp import software from 10.194.52.194 file PanOS_3200-11.0.0
mode set to octet
Connected to 10.194.52.194 (10.194.52.194), port 69
getting from 10.194.52.194:PanOS_3200-11.0.0 to /opt/pancfg/tmp/sw-images/cli.tmp.j6BmRy [octet]
Received 1087766224 bytes in 612.2 seconds [14213607 bit/s]
- 通过命令“debug swm load-uploaded image <image_name>”加载基础映像。
admin@PA-3260> debug swm load-uploaded image PanOS_3200-11.0.0
Decrypting...
Verifying release 11.0.0 integrity...
* * * * * FIPS-CC RPMS verification begins * * * * *
Verifying integrity on release 11.0.0 RPMs in "normal" mode...
FIPS-CC verify: RPMS database verification passed.
* * * * * FIPS-CC RPMS verification ends * * * * *
admin@PA-3260>
- 通过命令“debug swm list”验证基础映像。
admin@PA-3260> debug swm list
Product B Version Built Loaded
--------------------------------------------------------------------------------
panos * 9.1.0 2019-12-12 19:45:23 2020-08-19 16:01:13
...(Output Omitted)...
panos * 11.0.0 2022-11-16 19:40:26 2023-03-21 22:27:00
admin@PA-3260>
- 使用 SCP 或 TFTP 通过 CLI 上传维护版本Upload maintenance release version through CLI using either SCP or TFTP
- 如果使用 SCP
admin@PA-3260> scp import software from panw@10.194.52.194:/home/panw/PanOS_3200-11.0.2
PanOS_3200-11.0.2 100% 498MB 41.4MB/s 00:12
PanOS_3200-11.0.2 saved
- 如果使用 TFTP
admin@PA-3260> tftp import software from 10.194.52.194 file PanOS_3200-11.0.2
mode set to octet
Connected to 10.194.52.194 (10.194.52.194), port 69
getting from 10.194.52.194:PanOS_3200-11.0.0 to /opt/pancfg/tmp/sw-images/cli.tmp.c7mEye [octet]
Received 522190848 bytes in 308.2 seconds [1694324 bit/s]
- 通过命令“请求软件安装版本 <版本 #>”安装维护版本。
admin@PA-3260> request system software install version
10.2.0 10.2.0
.....(output omitted)...
11.0.0 11.0.0
11.0.2. 11.0.2
<value> Upgrade to a software package by version
admin@PA-3260> request system software install version 11.0.2
Executing this command will install a new version of software. It will not take effect until system is restarted. Do you want to continue? (y or n)
Software install job enqueued with jobid 1296. Run 'show jobs id 1296' to monitor its status. Please reboot the device after the installation is done.
1296
注意：类似的导入和安装软件文章可以在“如何从 CLI 导入和安装 PAN-OS”中找到，该文章仅涵盖主要或次要版本。