HP Switch Services Modules - H3C SecBladeII-CMW520-F3171P11 Release Notes

H3C SecBladeII-CMW520-F3171P11
Release Notes
Hangzhou H3C Technologies Co., Ltd.
13
Operation Changes in F3170
First release.
Open Problems and Workarounds
HSTB09465
First found-in version: F3171P07
Description: In this version of code, the password encryption within configuration files
has been enhanced and cannot be interpreted by earlier revisions of the agent code.
This means that if a unit is downgraded to earlier code, it may no longer be possible to
login and manage the device.
Workarounds:
Before upgrading to the new code, it is necessary to ensure password control is disabled.
Execute the undo password-control enable and then save this configuration file as a
backup in case you need to downgrade the software again. If it is later necessary to
downgrade to earlier software, force the switch to use this backup configuration file by
executing a startup saved-configuration (filename) command before rebooting to the
old code. Then, after the code has been downgraded, the device can be logged in from
the console or by Telnet, but not SSH. The SSH authentication details will need to be reset.
If no backup configuration has been saved but it is still possible to access the device
management via some method while running the old code (e.g. Console, Telnet or SSH),
then you can redefine all the device management passwords as required.
If after a downgrade it is impossible to login to the device via any method, then there are
two ways to recover the switch:
From the BOOT menu, set the new code to run again and reboot the device. Disable Telnet
authentication:
User-interface vty 0 4
Authentication mode none
Then save the configuration and downgrade the code again, login via Telnet and reset all
the passwords as required.
From the BOOT menu. On boot-up, use Ctrl+B to enter the Boot menu and then force the
unit to use the factory default configuration (bypassing the user configuration). The unit will
then need to be fully reconfigured.