第2編
管理運用

SDカードブートの準備

SDカードブートでは、ブートスクリプト、および動作に必要なファイルを、あらかじめSDカードにコピーしておきます。SDカードブートの準備を行うには、backup cloneコマンドを使用します。

backup cloneコマンド実行時にSDカードにコピーされるファイルとファイル名(固定)は、以下のとおりです。なお、元々存在しないファイルはコピーされません。

補 足

ランタイムバージョンテキストファイル(apresia-system-name.txt)には、backup cloneコマンド実行時にSDカードに保存されたブートイメージファイル(apresia-software.had)のバージョン情報が保存されます。

  • ブートスクリプト:apresia-loader.conf
  • ブートイメージファイル:apresia-software.had
  • startup-config:apresia-startup-config.txt
  • ランタイムバージョンテキストファイル:apresia-system-name.txt
  • SSHv2 RSA鍵対ファイル:apresia-rsa-key
  • SSHv2 DSA鍵対ファイル:apresia-dsa-key
  • 以下のWeb認証ページ
    ログイン認証ページ:apresia-login-page
    認証成功ページ:apresia-login-success-page
    認証失敗ページ:apresia-login-failure-page
    ログアウト成功ページ:apresia-logout-success-page
    ログアウト失敗ページ:apresia-logout-failure-page
    リダイレクト失敗ページ:apresia-redirect-error-page
  • AccessDefenderのローカルデータベース:apresia-aaa-local-db
  • SSLサーバー証明書:apresia-https-certificate
  • SSLサーバーの秘密鍵:apresia-https-private-key
  • Webページ画像01~10:apresia-webpage-image01~apresia-webpage-image10
補 足

NP2100の1.09.02以降、NP2000の1.09.01以降では、個別Web認証ページ(180ファイル)、およびWebアクセス拒否通知ページも処理対象になります。

補 足

NP2500の1.10.01以降では、Webアクセス拒否通知ページも処理対象になります。

非スタック装置の場合の動作例

非スタック装置でbackup cloneコマンドを実行した場合の動作例を以下に示します。この動作例の条件は、以下のとおりです。

  • SSHv2 RSA鍵対ファイル、DSA鍵対ファイルは作成済み
  • ユーザーで準備したカスタムWeb認証ページを装置にダウンロード済み
  • ユーザーで準備したSSL証明書/秘密鍵を装置にダウンロード済み
  • ユーザーで準備したWebページ画像01を装置にダウンロード済み
  • AccessDefenderのローカルデータベース、Webページ画像02~10はなし
補 足

backup cloneコマンド実行時に、SDカードにすでに同名のファイルが存在する場合は上書きされます。

  • 装置にSDカードを挿入します。
    sw1# show storage media-info
    
    Unit  Drive  Media-Type  Size      FS-Type  Label
    ----  -----  ----------  --------  -------  -----------
    1     c:     Flash       29 MB     FFS
    1     d:     SD Card     944 MB    FAT16
    
    sw1#
    sw1# dir d:/
    
    Directory of /d:/
    1   d--             0 Nov 21 2018 10:40:04  System Volume Information
    
    990576640 bytes total (990265344 bytes free)
    
    sw1#
  • backup cloneコマンドを実行します。
    sw1# backup clone
    
     Uploading boot information (apresia-loader.conf).......... Done.
     Uploading firmware image file (apresia-software.had).......... Done.
     Uploading start-up configuration file (apresia-startup-config.txt).......... Done.
     Uploading system name file (apresia-system-name.txt).......... Done.
     Uploading SSH RSA key file (apresia-rsa-key).......... Done.
     Uploading SSH DSA key file (apresia-dsa-key).......... Done.
     Uploading web authentication login-page file (apresia-login-page).......... Done.
     Uploading web authentication login-success-page file (apresia-login-success-page).......... Done.
     Uploading web authentication login-failure-page file (apresia-login-failure-page).......... Done.
     Uploading web authentication logout-success-page file (apresia-logout-success-page).......... Done.
     Uploading web authentication logout-failure-page file (apresia-logout-failure-page).......... Done.
     Uploading web authentication redirect-error-page file (apresia-redirect-error-page).......... Done.
     Uploading access defender local database settings file (apresia-aaa-local-db).......... Fail.
     Uploading SSL server certificate file (apresia-https-certificate).......... Done.
     Uploading SSL server private key file (apresia-https-private-key).......... Done.
     Uploading web authentication webpage-image01 file (apresia-webpage-image01).......... Done.
     Uploading web authentication webpage-image02 file (apresia-webpage-image02).......... Fail.
     Uploading web authentication webpage-image03 file (apresia-webpage-image03).......... Fail.
     Uploading web authentication webpage-image04 file (apresia-webpage-image04).......... Fail.
     Uploading web authentication webpage-image05 file (apresia-webpage-image05).......... Fail.
     Uploading web authentication webpage-image06 file (apresia-webpage-image06).......... Fail.
     Uploading web authentication webpage-image07 file (apresia-webpage-image07).......... Fail.
     Uploading web authentication webpage-image08 file (apresia-webpage-image08).......... Fail.
     Uploading web authentication webpage-image09 file (apresia-webpage-image09).......... Fail.
     Uploading web authentication webpage-image10 file (apresia-webpage-image10).......... Fail.
     ERROR: File not found.
    
    sw1#
  • backup cloneコマンド実行後の状態を確認します。
    sw1# dir d:/
    
    Directory of /d:/
    1   -rw          1576 Oct 08 2019 15:55:18  apresia-loader.conf
    2   -rw       7179528 Oct 08 2019 15:56:58  apresia-software.had
    3   -rw          2212 Oct 08 2019 15:57:02  apresia-startup-config.txt
    4   -rw             8 Oct 08 2019 15:56:04  apresia-system-name.txt
    5   -rw          2391 Oct 08 2019 15:56:10  apresia-rsa-key
    6   -rw           905 Oct 08 2019 15:56:14  apresia-dsa-key
    7   -rw          2427 Oct 08 2019 15:56:20  apresia-login-page
    8   -rw          1332 Oct 08 2019 15:56:26  apresia-login-success-page
    9   -rw          1084 Oct 08 2019 15:56:30  apresia-login-failure-page
    10  -rw          1013 Oct 08 2019 15:56:36  apresia-logout-success-page
    11  -rw          1084 Oct 08 2019 15:56:42  apresia-logout-failure-page
    12  -rw          1023 Oct 08 2019 15:56:48  apresia-redirect-error-page
    13  d--             0 Nov 21 2018 10:40:04  System Volume Information
    14  -rw          4474 Oct 08 2019 15:56:54  apresia-https-certificate
    15  -rw          1679 Oct 08 2019 15:57:06  apresia-https-private-key
    16  -rw          5434 Oct 08 2019 15:57:10  apresia-webpage-image01
    
    990576640 bytes total (982843392 bytes free)
    
    sw1#
    sw1# show boot
    
    Unit 1
    *(Configured)
     Primary boot image: /c:/AEOS-NP2000_R10701.had
     Primary boot config: /c:/primary.cfg
     Secondary boot image: /c:/AEOS-NP2000_R10701_sec.had
     Secondary boot config: /c:/secondary.cfg
    (SD Card)
     Primary boot image: /d:/apresia-software.had
     Primary boot config: /d:/apresia-startup-config.txt
    
    
    Note: * indicates the used boot information.
    
    sw1#

スタック構成の場合の動作例

スタック構成でbackup cloneコマンドを実行した場合の動作例を以下に示します。この動作例の条件は、以下のとおりです。

  • ApresiaNP2000-48T4X×3台のスタック構成
  • SSHv2 RSA鍵対ファイル、DSA鍵対ファイルは作成済み
  • ユーザーで準備したカスタムWeb認証ページを装置にダウンロード済み
  • ユーザーで準備したSSL証明書/秘密鍵を装置にダウンロード済み
  • ユーザーで準備したWebページ画像01を装置にダウンロード済み
  • AccessDefenderのローカルデータベース、Webページ画像02~10はなし
補 足

backup cloneコマンド実行時に、SDカードにすでに同名のファイルが存在する場合は上書きされます。

  • スタックを構成するすべての装置にSDカードを挿入します。
    sw1# show storage media-info
    
    Unit  Drive  Media-Type  Size      FS-Type  Label 
    ----  -----  ----------  --------  -------  -----------
    1     c:     Flash       29 MB     FFS 
    1     d:     SD Card     944 MB    FAT16 
    2     c:     Flash       29 MB     FFS 
    2     d:     SD Card     944 MB    FAT16 
    3     c:     Flash       29 MB     FFS 
    3     d:     SD Card     944 MB    FAT16 
    
    sw1# 
    sw1# dir d:/
    
    Directory of /d:/
    1   d--             0 Nov 21 2018 10:40:04  System Volume Information
    
    990576640 bytes total (990265344 bytes free)
    
    sw1#
    sw1# dir unit2:/d:/
    
    Directory of /unit2:/d:/
    1   d--             0 Dec 14 2017 13:58:28  System Volume Information
    
    990560256 bytes total (990248960 bytes free)
    
    sw1# 
    sw1# dir unit3:/d:/
    
    Directory of /unit3:/d:/
    1   d--             0 Oct 08 2019 17:05:12  System Volume Information
    
    990560256 bytes total (990265344 bytes free)
    
    sw1#
  • backup cloneコマンドを実行します。
    sw1# backup clone 
    
    Master (Unit 1)
     Uploading boot information (apresia-loader.conf).......... Done.
     Uploading firmware image file (apresia-software.had).......... Done.
     Uploading start-up configuration file (apresia-startup-config.txt).......... Done.
     Uploading system name file (apresia-system-name.txt).......... Done.
     Uploading SSH RSA key file (apresia-rsa-key).......... Done.
     Uploading SSH DSA key file (apresia-dsa-key).......... Done.
     Uploading web authentication login-page file (apresia-login-page).......... Done.
     Uploading web authentication login-success-page file (apresia-login-success-page).......... Done.
     Uploading web authentication login-failure-page file (apresia-login-failure-page).......... Done.
     Uploading web authentication logout-success-page file (apresia-logout-success-page).......... Done.
     Uploading web authentication logout-failure-page file (apresia-logout-failure-page).......... Done.
     Uploading web authentication redirect-error-page file (apresia-redirect-error-page).......... Done.
     Uploading access defender local database settings file (apresia-aaa-local-db).......... Fail.
     Uploading SSL server certificate file (apresia-https-certificate).......... Done.
     Uploading SSL server private key file (apresia-https-private-key).......... Done.
     Uploading web authentication webpage-image01 file (apresia-webpage-image01).......... Done.
     Uploading web authentication webpage-image02 file (apresia-webpage-image02).......... Fail.
     Uploading web authentication webpage-image03 file (apresia-webpage-image03).......... Fail.
     Uploading web authentication webpage-image04 file (apresia-webpage-image04).......... Fail.
     Uploading web authentication webpage-image05 file (apresia-webpage-image05).......... Fail.
     Uploading web authentication webpage-image06 file (apresia-webpage-image06).......... Fail.
     Uploading web authentication webpage-image07 file (apresia-webpage-image07).......... Fail.
     Uploading web authentication webpage-image08 file (apresia-webpage-image08).......... Fail.
     Uploading web authentication webpage-image09 file (apresia-webpage-image09).......... Fail.
     Uploading web authentication webpage-image10 file (apresia-webpage-image10).......... Fail.
     ERROR: File not found.
    
    Unit 2
     Uploading boot information (apresia-loader.conf).......... Done.
     Uploading firmware image file (apresia-software.had).......... Done.
     Uploading start-up configuration file (apresia-startup-config.txt).......... Done.
     Uploading system name file (apresia-system-name.txt).......... Done.
     Uploading SSH RSA key file (apresia-rsa-key).......... Done.
     Uploading SSH DSA key file (apresia-dsa-key).......... Done.
     Uploading web authentication login-page file (apresia-login-page).......... Done.
     Uploading web authentication login-success-page file (apresia-login-success-page).......... Done.
     Uploading web authentication login-failure-page file (apresia-login-failure-page).......... Done.
     Uploading web authentication logout-success-page file (apresia-logout-success-page).......... Done.
     Uploading web authentication logout-failure-page file (apresia-logout-failure-page).......... Done.
     Uploading web authentication redirect-error-page file (apresia-redirect-error-page).......... Done.
     Uploading access defender local database settings file (apresia-aaa-local-db).......... Fail.
     Uploading SSL server certificate file (apresia-https-certificate).......... Done.
     Uploading SSL server private key file (apresia-https-private-key).......... Done.
     Uploading web authentication webpage-image01 file (apresia-webpage-image01).......... Done.
     Uploading web authentication webpage-image02 file (apresia-webpage-image02).......... Fail.
     Uploading web authentication webpage-image03 file (apresia-webpage-image03).......... Fail.
     Uploading web authentication webpage-image04 file (apresia-webpage-image04).......... Fail.
     Uploading web authentication webpage-image05 file (apresia-webpage-image05).......... Fail.
     Uploading web authentication webpage-image06 file (apresia-webpage-image06).......... Fail.
     Uploading web authentication webpage-image07 file (apresia-webpage-image07).......... Fail.
     Uploading web authentication webpage-image08 file (apresia-webpage-image08).......... Fail.
     Uploading web authentication webpage-image09 file (apresia-webpage-image09).......... Fail.
     Uploading web authentication webpage-image10 file (apresia-webpage-image10).......... Fail.
     ERROR: File not found.
    
    Unit 3
     Uploading boot information (apresia-loader.conf).......... Done.
     Uploading firmware image file (apresia-software.had).......... Done.
     Uploading start-up configuration file (apresia-startup-config.txt).......... Done.
     Uploading system name file (apresia-system-name.txt).......... Done.
     Uploading SSH RSA key file (apresia-rsa-key).......... Done.
     Uploading SSH DSA key file (apresia-dsa-key).......... Done.
     Uploading web authentication login-page file (apresia-login-page).......... Done.
     Uploading web authentication login-success-page file (apresia-login-success-page).......... Done.
     Uploading web authentication login-failure-page file (apresia-login-failure-page).......... Done.
     Uploading web authentication logout-success-page file (apresia-logout-success-page).......... Done.
     Uploading web authentication logout-failure-page file (apresia-logout-failure-page).......... Done.
     Uploading web authentication redirect-error-page file (apresia-redirect-error-page).......... Done.
     Uploading access defender local database settings file (apresia-aaa-local-db).......... Fail.
     Uploading SSL server certificate file (apresia-https-certificate).......... Done.
     Uploading SSL server private key file (apresia-https-private-key).......... Done.
     Uploading web authentication webpage-image01 file (apresia-webpage-image01).......... Done.
     Uploading web authentication webpage-image02 file (apresia-webpage-image02).......... Fail.
     Uploading web authentication webpage-image03 file (apresia-webpage-image03).......... Fail.
     Uploading web authentication webpage-image04 file (apresia-webpage-image04).......... Fail.
     Uploading web authentication webpage-image05 file (apresia-webpage-image05).......... Fail.
     Uploading web authentication webpage-image06 file (apresia-webpage-image06).......... Fail.
     Uploading web authentication webpage-image07 file (apresia-webpage-image07).......... Fail.
     Uploading web authentication webpage-image08 file (apresia-webpage-image08).......... Fail.
     Uploading web authentication webpage-image09 file (apresia-webpage-image09).......... Fail.
     Uploading web authentication webpage-image10 file (apresia-webpage-image10).......... Fail.
     ERROR: File not found.
    
    sw1#
  • backup cloneコマンド実行後の状態を確認します。
    sw1# dir d:/
    
    Directory of /d:/
    1   -rw          1576 Oct 08 2019 17:06:38  apresia-loader.conf
    2   -rw       7179528 Oct 08 2019 17:07:28  apresia-software.had
    3   -rw          5771 Oct 08 2019 17:07:34  apresia-startup-config.txt
    4   -rw             8 Oct 08 2019 17:07:40  apresia-system-name.txt
    5   -rw          2391 Oct 08 2019 17:07:46  apresia-rsa-key
    6   -rw           905 Oct 08 2019 17:07:54  apresia-dsa-key
    7   -rw          2427 Oct 08 2019 17:08:00  apresia-login-page
    8   -rw          1332 Oct 08 2019 17:07:02  apresia-login-success-page
    9   -rw          1011 Oct 08 2019 17:07:08  apresia-login-failure-page
    10  -rw          1013 Oct 08 2019 17:07:16  apresia-logout-success-page
    11  -rw          1084 Oct 08 2019 17:07:22  apresia-logout-failure-page
    12  -rw          1023 Oct 08 2019 17:07:28  apresia-redirect-error-page
    13  d--             0 Nov 21 2018 10:40:04  System Volume Information
    14  -rw          4474 Oct 08 2019 17:07:38  apresia-https-certificate
    15  -rw          1679 Oct 08 2019 17:07:46  apresia-https-private-key
    16  -rw          5434 Oct 08 2019 17:07:52  apresia-webpage-image01
    
    990576640 bytes total (982843392 bytes free)
    
    sw1# 
    sw1# dir unit2:/d:/
    
    Directory of /unit2:/d:/
    1   -rw          1576 Oct 08 2019 17:06:34  apresia-loader.conf
    2   -rw       7179528 Oct 08 2019 17:07:18  apresia-software.had
    3   -rw          5771 Oct 08 2019 17:07:22  apresia-startup-config.txt
    4   -rw             8 Oct 08 2019 17:07:26  apresia-system-name.txt
    5   -rw          2391 Oct 08 2019 17:07:28  apresia-rsa-key
    6   -rw           905 Oct 08 2019 17:07:32  apresia-dsa-key
    7   -rw          2427 Oct 08 2019 17:07:36  apresia-login-page
    8   -rw          1332 Oct 08 2019 17:07:38  apresia-login-success-page
    9   -rw          1011 Oct 08 2019 17:07:42  apresia-login-failure-page
    10  -rw          1013 Oct 08 2019 17:07:46  apresia-logout-success-page
    11  -rw          1084 Oct 08 2019 17:07:48  apresia-logout-failure-page
    12  -rw          1023 Oct 08 2019 17:07:52  apresia-redirect-error-page
    13  -rw          4474 Oct 08 2019 17:07:56  apresia-https-certificate
    14  -rw          1679 Oct 08 2019 17:08:00  apresia-https-private-key
    15  -rw          5434 Oct 08 2019 17:07:00  apresia-webpage-image01
    16  d--             0 Dec 14 2017 13:58:28  System Volume Information
    
    990560256 bytes total (982827008 bytes free)
    
    sw1# 
    sw1# dir unit3:/d:/
    
    Directory of /unit3:/d:/
    1   d--             0 Oct 08 2019 17:05:12  System Volume Information
    2   -rw          1576 Oct 08 2019 17:06:34  apresia-loader.conf
    3   -rw       7179528 Oct 08 2019 17:07:18  apresia-software.had
    4   -rw          5771 Oct 08 2019 17:07:20  apresia-startup-config.txt
    5   -rw             8 Oct 08 2019 17:07:22  apresia-system-name.txt
    6   -rw          2391 Oct 08 2019 17:07:24  apresia-rsa-key
    7   -rw           905 Oct 08 2019 17:07:26  apresia-dsa-key
    8   -rw          2427 Oct 08 2019 17:07:28  apresia-login-page
    9   -rw          1332 Oct 08 2019 17:07:28  apresia-login-success-page
    10  -rw          1011 Oct 08 2019 17:07:30  apresia-login-failure-page
    11  -rw          1013 Oct 08 2019 17:07:32  apresia-logout-success-page
    12  -rw          1084 Oct 08 2019 17:07:36  apresia-logout-failure-page
    13  -rw          1023 Oct 08 2019 17:07:38  apresia-redirect-error-page
    14  -rw          4474 Oct 08 2019 17:07:40  apresia-https-certificate
    15  -rw          1679 Oct 08 2019 17:07:44  apresia-https-private-key
    16  -rw          5434 Oct 08 2019 17:07:46  apresia-webpage-image01
    
    990560256 bytes total (982843392 bytes free)
    
    sw1# 
    sw1# show boot 
    
    Unit 1
    *(Configured) 
     Primary boot image: /c:/AEOS-NP2000_R10701.had
     Primary boot config: /c:/primary.cfg
     Secondary boot image: /c:/AEOS-NP2000_R10701_sec.had
     Secondary boot config: /c:/secondary.cfg
    (SD Card) 
     Primary boot image: /d:/apresia-software.had
     Primary boot config: /d:/apresia-startup-config.txt
    
    Unit 2
    *(Configured) 
     Primary boot image: /c:/AEOS-NP2000_R10701.had
     Primary boot config: /c:/primary.cfg
     Secondary boot image: /c:/AEOS-NP2000_R10701_sec.had
     Secondary boot config: /c:/secondary.cfg
    (SD Card) 
     Primary boot image: /d:/apresia-software.had
     Primary boot config: /d:/apresia-startup-config.txt
    
    Unit 3
    *(Configured) 
     Primary boot image: /c:/AEOS-NP2000_R10701.had
     Primary boot config: /c:/primary.cfg
     Secondary boot image: /c:/AEOS-NP2000_R10701_sec.had
     Secondary boot config: /c:/secondary.cfg
    (SD Card) 
     Primary boot image: /d:/apresia-software.had
     Primary boot config: /d:/apresia-startup-config.txt
    
    
    Note: * indicates the used boot information.
    
    sw1#

ページトップへ