This example illustrates how to update the ZyWALL/USG’s firmware automatically from a USB storage. With this feature, it is more efficient for the user to upgrade the firmware for numerous devices without Internet or GUI access. The user can also downgrade the firmware by using this feature. Note: This feature does not support Device HA Pro firmware auto upgrade to passive devices. Do not use USB firmware upgrade on the devices with Device HA Pro function activated. This example was tested using the USG210 (Firmware Version: ZLD 4.25).
Flow of Automatic USB Firmware Upgrade
1. Enable the USB firmware upgrade function by CLI command.
2. Save the firmware on the USB.
3. Plug the USB into the device.
4. The device checks the running partition for the model ID and the firmware version.
5. Upgrade the firmware to the standby partition and then the device reboots.
Enable the USB Firmware Upgrade Function by CLI Command
For security concerns, the function is disabled by default. The administrator needs to enable
the function by the following CLI command:
Router(config)# usb-storage update-firmware enable
Save the Firmware on the USB
There are two ways to create the firmware folder on the USB storage.
1. Follow the folder structure to create the firmware folder manually. It does not matter if the letters of the folder name are capitalized or not. For example: D:\usg210_dir\firmware
2. Plug the USB storage to the device and the device will automatically create the folder usg210_dir, which includes the following sub-folders. Save the .bin file to the firmware folder.
Plug the USB into the Device
Once the .bin file in the firmware folder is detected, the device will copy it to the RAM.
The following message shows on the console if the device fails to copy the .bin file.
Router> USB update-firmware failed: firmware copy fail
The Device Checks the Running Partition for the Model ID and the Firmware Version
The device checks the USB firmware with the running partition only. It does not check the standby partition.
1. Check model ID:
If incompatible, the device deletes the firmware in the RAM.
If compatible, the device checks the firmware version.
2. Check firmware version:
If it is the same as the running firmware, the device deletes the firmware in the RAM.
If it is not the same as the running version, the device starts to upgrade to the standby partition.
Check the Firmware Status
The device upgrades the standby partition and then reboots. After been upgraded to the standby partition, the device automatically reboots to switch from running to standby partition. The SYS LED starts to blink when the device begins to upgrade its firmware until the rebooting process is completed.
What Can Go Wrong?
1. The USB storage must use the FAT16, FAT32, EXT2, or EXT3 file system. Otherwise, it may not be detected by the ZyWALL/USG.
2. The device only checks the firmware under the specific folder. Therefore, make sure the firmware is saved in the correct folder under the root directory: \ProductName_dir\firmware. For example: \usg210_dir\firmware
3. If there are multiple firmware files in the firmware folder of one model, the device only checks the first one in order.
4. Make sure the product model ID of the USB firmware is compatible with the device. The device writes logs on the console and device log if the firmware model ID is incompatible.
5. Make sure the version of the USB firmware is different from that of the running partition. The device writes logs on the console and device log if the firmware version is the same as the running firmware.
6. This feature does not support the Device HA Pro firmware auto upgrade to passive devices. Do not use USB firmware upgrade on devices with Device HA Pro function activated. When using USB firmware upgrade on a device HA or in a device HA Pro scenario, make sure you plug the USB storage to the passive device for firmware upgrade first. After the passive device has finished firmware upgrading through the USB, plug the USB storage to the active device for firmware upgrade.