Huawei Switch Firmware Upgrade Now

Upgrading firmware on Huawei Enterprise switches (like the S5700 or S6700 series) is a robust process, but it requires careful preparation to avoid downtime. The Upgrade Process

The workflow is generally reliable if you follow the official documentation from Huawei Technical Support Preparation : Download the correct software package and patch files from the Huawei Enterprise Portal File Transfer

: Use FTP or TFTP to move the files to the switch’s flash memory. Configuration : Set the new file as the startup image using the command: startup system-software .cc Verification & Reboot display startup to confirm the next boot file is correct, then the device. Huawei Technical Support Key Considerations Permissions : Accessing firmware files often requires a Huawei Enterprise account with valid product permissions. : Always backup your current configuration ( command) and the existing firmware before starting.

: If you are upgrading a stack (iStk), ensure you understand the "smooth upgrade" process to minimize impact on traffic. Review Summary

: Huawei releases are generally stable once they hit the "General Availability" (GA) stage. Complexity

: CLI-based upgrades can be daunting for beginners compared to GUI-based consumer routers. Documentation : Highly detailed step-by-step guides are available on the Support Site

: Downloading firmware often requires an active service contract or registered device. for a particular switch model or help verifying a checksum for your downloaded file? Upgrading a Switch - Huawei Technical Support 7 Mar 2026 —

Upgrading the firmware (system software) on a Huawei S-series switch typically involves preparing the environment, uploading the new software file (usually with a extension), and configuring the switch to boot from it. 1. Preparation Check Current Version display version to see your current VRP software version. Download Firmware : Log in to the Huawei Enterprise Support portal to download the correct system software ( ) and patch files ( ) for your specific model.

: Always save and back up your current configuration using the command before starting. Verify Storage

to ensure there is enough free space on the flash memory for the new software package. 2. Upgrade Methods Method A: Command Line Interface (CLI) Huawei Switch Firmware Upgrade

This is the standard manual method used by network administrators. Transfer Files : Use FTP or TFTP to upload the files to the switch's flash memory. ftp [ftp] get S5700-V200R021C00.cc Use code with caution. Copied to clipboard Specify Startup Files

: Set the new software and patch as the files for the next startup.

startup system-software S5700-V200R021C00.cc startup patch S5700-V200R021SPH001.pat Use code with caution. Copied to clipboard Verify Startup Info : Confirm the switch is set to use the new files. display startup Use code with caution. Copied to clipboard : Restart the switch to apply the upgrade. reboot Use code with caution. Copied to clipboard Method B: Web Interface (GUI)

For switches with a web management platform, the process is more visual.

Upgrading firmware on a Huawei switch involves obtaining the correct system software ( file) and patch (

file), transferring them to the device, and configuring the switch to boot from the new version. Prerequisites & Preparation

Identify Your Model: Use the command display version to check your exact model and current software version.

Download Software: Visit the Huawei Enterprise Support Website to download the target version and the specific Upgrade Guide for your series (e.g., S5700).

Backup Config: Always backup your current configuration, license files, and current system software using FTP or TFTP before starting. Upgrading firmware on Huawei Enterprise switches (like the

Check Storage Space: Ensure the flash memory has enough space for the new files; delete unnecessary files if needed. Standard CLI Upgrade Method This is the most common method for operational switches. Transfer Files: Upload the new firmware ( ) and patch ( ) to the switch using FTP, TFTP, or SCP.

Set Startup Software: Tell the switch to use the new file for the next boot: startup system-software [filename].cc Specify Patches (Optional): If you have a patch file: startup patch [filename].pat

Reboot: Execute the reboot command and confirm when prompted.

Verify: After restart, run display version to confirm the target version is active. Alternative Upgrade Features Upgrading a Switch - Huawei Technical Support

The Silence of the Lab

The alert didn’t come as a scream; it came as a whisper.

It was 2:00 AM on a Sunday. Outside, the city of Shenzhen was a wash of neon and rain, but inside the "Black Box" server room of Apex Logistics, the air was stale and freezing. Chen, a senior network engineer, stared at the screen. The core switch—Cluster Node B—had just dropped a packet loss spike. It lasted only three milliseconds, barely enough to trigger a low-level alarm.

But Chen knew the history. Node B was an aging Huawei S7700, a warhorse that had routed petabytes of data for the last six years. It was reliable, but it was running firmware version V200R001. Ancient history.

"Install the patch," the memo had said. "Upgrade to V200R019." Reboot and press Ctrl+B to enter BootROM menu

It sounded simple. It was anything but.

6. Rollback Plan

If issues arise:

  1. Reboot and press Ctrl+B to enter BootROM menu.
  2. Select option to boot from previous firmware.
  3. Restore config from backup.

Note: Always test rollback in lab first.

Part 8: Security Hardening Post-Upgrade

After a successful upgrade, new default settings might be insecure. Enforce these:

  1. Disable insecure protocols:
    [Huawei] undo telnet server enable
    [Huawei] ssh server enable
    [Huawei] stelnet server enable
    
  2. Update SNMP to v3:
    [Huawei] snmp-agent sys-info version v3
    [Huawei] snmp-agent group v3 netadmin privacy
    
  3. Enable BootROM password: By default, Ctrl+B has no password. Set it via:
    [Huawei] bootrom password change
    

Before You Begin – Critical Prerequisites

| Item | Details | |------|---------| | Backup current configuration | display current-configuration | | Verify hardware model | display device | | Check current firmware version | display version | | Confirm storage space | display flash: – ensure at least 2x the new firmware size free | | Download correct firmware | From Huawei Enterprise support portal (requires contract) | | TFTP/FTP/SFTP server ready | Prefer SFTP for security | | Out‑of‑band management access | Console or dedicated management port | | Change window | Schedule during maintenance window |

Step 1: Prepare the Upgrade File

2. Pre-Upgrade Checklist

| Task | Details | |------|---------| | Identify current version | display version | | Check hardware model | display device → confirm exact model (e.g., S5720-28P-PWR-LI-AC) | | Download correct firmware | From Huawei Enterprise Support portal (requires support contract) | | Read release notes | Verify upgrade path, minimum memory requirements, and potential impact | | Backup configuration | display current-configuration → save to TFTP/FTP server | | Backup license files | display license → save license file | | Check storage space | dir → ensure sufficient flash memory (at least 2x firmware size) | | Inform stakeholders | Plan a maintenance window (upgrades often cause reboot) | | Prepare rollback plan | Keep previous firmware file and configuration backup |

⚠️ Critical: Some Huawei switches require intermediate versions (e.g., V200R010 → V200R019 requires first upgrading to V200R016). Always follow the upgrade path in the release notes.

1. Introduction

Huawei’s Versatile Routing Platform (VRP) powers enterprise switches. Regular firmware upgrades address vulnerabilities (e.g., CVEs) and improve performance. However, incorrect procedures can lead to boot loops, configuration loss, or extended outages. This paper provides a step-by-step guide based on real-world best practices.

Method C: USB (For remote/out-of-band sites)

  1. Format USB as FAT32.
  2. Copy firmware to d:/update.cc.
  3. Insert into switch. The system auto-mounts to usb0:
    <Huawei> copy usb0:/update.cc flash:/