JPS6346468B2 - - Google Patents

Description

[Detailed Description of the Invention] [Technical Field of the Invention] The present invention relates to a control system having a dual configuration in which the central control unit has an act side (operating side) and a standby side (standby side), such as in an electronic switching system, for example. In particular, the present invention relates to a method for starting an initial setting program for a standby central control unit that has returned to operation during online operation without adversely affecting the operating central control unit.

[Conventional technology and problems]

For example, as shown in Fig. 1, it consists of call processors 2...3 that control one network of an electronic exchange system, and a management processor 1 that comprehensively controls each call processor. , CC1, one central controller operates as an active side and the other central controller stands by as a standby side.

In such a conventional redundant control system, there was no function for starting an initial setting program loading (hereinafter referred to as IPL) from the central control unit on the active side to the central control unit on the standby side.
Therefore, for example, when a failure occurs in the central control unit CC1, system switching is performed immediately, the normal central control unit CC0 becomes active, and the failed central control unit CC1 becomes standby, and the failure is repaired. Then, it is necessary to perform an operation check using a failure repair confirmation program to confirm that the device operates normally after the failure is repaired. At this time,
A central control unit to which an operator manually inputs commands from an input/output device 4 such as a teletype or maintenance console to repair the program.
It was necessary to start the IPL to load it to CC1. Therefore, when the operator inputs the above-mentioned loading command via this input/output device 4, if there is an operational error, the program may run out of control due to an erroneous operation even though it is disconnected, and the central control unit CC0 on the active side may have an adverse effect on the In FIG. 1, the input/output device 5 is used to input commands and the like to the central control device CC0.

[Purpose of the invention]

An object of the present invention is to improve this problem by inputting a command to the active central control device when performing online repair confirmation on the standby central control device in a redundant control device. To provide a forced IPL method for a standby control unit that improves operational reliability by automatically starting IPL for a central control unit whose fault has been repaired using online software.

[Structure of the invention]

In order to achieve this objective, the standby system controller forced IPL method of the present invention uses an instruction holding means, an instruction decoding means, and the operating state of the control device in a data processing system having an active system control device and a standby system control device. A control section having a display means for displaying is provided, and when confirming the repair of the standby system control device, a repair confirmation program loading command is inputted via the actuation system control device and is read by the above-mentioned command decoding means. After decoding and loading the repair confirmation program into the standby system control device, the verification operation is performed, and if the operation result is normal, this is displayed on the display means, and the act system control device initializes the standby system control device. It is characterized by program loading.

[Embodiments of the invention]

An embodiment of the present invention will be described based on FIG.

In Figure 2, 10 is a management processor (MPR) that controls the entire system.
This corresponds to the management processor 1 shown in the figure, and includes central controllers CC0, CC1 and an MPR system controller MSC. This MSC has a control circuit 11 for decoding instructions and controlling processing, a register 12 in which instructions are set, and an ESR register 13 in which an offline completion signal is written. In addition, a program disk 15 in which a fault recovery confirmation program for each control device is stored;
16 are provided.

Reference numeral 17 denotes an input/output device capable of transmitting data to each of the central control units CC0 and CC1 of the management processor, such as a keyboard/display such as a maintenance console.

20 is a call processor (CPR),
It controls call processing for each network and corresponds to call processor 2 in FIG.
Central controller CC0, CC1 and CPR system
It has controllers 21 and 22.

30 is also a call processor, and like the call processor 20, the central controller CC0, CC
1 and CPR system controller 31, 32
has. and all call processors 20
... 30 is under the management of the management processor 10.

Next, the operation of the present invention will be explained with reference to FIG. 2, which constitutes a duplex system for controlling an electronic exchange. Although FIG. 2 is used in an electronic exchange, the operation described here has nothing to do with the exchange operation, so it will be omitted from the explanation.

(1) When the central control unit of the management processor 10 recovers from a fault.

Although a failure has now occurred in the central control unit CC1 of the management processor 10, when this is repaired, the operator can
Enter the IPL boot command. This IPL start command is sent via the act system central controller CC0.
communicated to the MPR system controller MSC,
It is set in that register 12. Control circuit 11
decodes this startup command and sends it to the central controller CC.
Load the fault repair confirmation program for 1.
Output MIPL signal. This allows the central controller
The CC 1 loads a fault repair confirmation program from the floppy disk 15, and performs a fault repair confirmation operation based on this program. The operation result is then reported to the MPR system controller MSC as a MIPL signal. If the operation result is normal at this time, this is the ESR register 13.
will be filled out and displayed. By the way, the central control unit CC0 of the act system reads the display state of the ESR register 13 at this time and determines that the central control unit CC1 has completely repaired the failure. and central control unit CC0
transfers the program and data stored in its own main memory to CC1 and ends the IPL operation. Central control unit CC whose fault has been repaired in this way
1 will be on standby as a standby system. Note that ACT shown in FIG. 2 is a signal indicating that the own CC is active or standby.

(2) When the central control unit of the call processor recovers from a fault.

Central control unit CC1 of call processor 20
An example of repairing a problem will be explained below.

CPR system controller 11, 22...31, 32 for each call processor 20...30
has almost the same structure (registers, control circuits, ESR registers, etc.) as the MPR system controller MSC in the main processor 10, but
Furthermore, it is provided with a machine number register 14 shown by dotted lines, in which the machine numbers of each call processor 20...30 are set. Therefore, the operator can control the central controller CC1 of the call processor 20.
When the repair is completed, the input/output device 17 sends the machine number and call processor 20 to confirm the repair.
Input the IPL start signal. Main processor 10
When the act system central controller CC0 sends the machine number from the MPR system controller MSC, the standby CPR system controller 22 of the call processor CPR0 receives it in the register, compares it in the control circuit, and finds that it matches its own machine number. This is detected and the activation signal is held. Then, the central control unit CC0 of the main processor 10 reads out the troubleshooting confirmation program from the floppy disk 16 and sends it out because the machine numbers match.
Central controller CC of the call processor 20
1 and CIPL is performed. Then, failure repair confirmation is performed, and if the result is normal, the CPR system controller 22
A normal display is displayed in the ESR register. When the act system central controller CC0 of the main processor 10 determines this and confirms that the fault repair has been performed normally, it instructs the act system central controller CC0 of the call processor 20 to perform an IPL to CC1. Output instructions. As a result, the act system central control unit CC0 of the call processor 20 transfers the program and various data stored in its own main memory to CC1, and the IPL ends.

As described above, according to the present invention, a startup command is set in the register of the system controller, and the system is configured such that the active central controller in online operation activates the standby central controller. Therefore, repair confirmation can be performed with high reliability during online operation without requiring an operator to perform complicated operations as in the past. The central control unit that receives this startup command can forcibly perform IPL after confirming that the fault has been repaired.

〔Effect of the invention〕

According to the present invention, fault repair can be confirmed with extremely simple input operations, which not only prevents unnecessary troubles from occurring, but also allows IPL control to be automatically performed subsequent to fault repair. Therefore, the reliability of the system can be greatly increased.

[Brief explanation of drawings]

FIG. 1 is a configuration diagram of a conventional duplex system, and FIG. 2 is a configuration diagram of an embodiment of the present invention. In the figure, 10 is a management processor, 11
is a control device, 12 is a register, 13 is an ESR register, 14 is a machine number register, 15 and 16 are floppy disks, 17 is an input/output device, 20 is a call processor, and 21 and 22 are CPR system controllers.
controller, 30 is a call processor, 3
1, 32 are CPR system controllers, CC0,
CC1 is the central control unit, MSC is the MPR system
It is a controller.

Claims (1)

[Claims] 1. In a data processing system having an active type control device and a standby type control device, a control section having an instruction holding means, an instruction decoding means, and a display means for displaying the operating status of the control device is provided, and the standby type control device is When performing repair confirmation, a repair confirmation program loading command is input via the act system control device, this is decoded by the above-mentioned command decoding means, the repair confirmation program is loaded into the standby system control device, and then the confirmation operation is performed. and when the operation result is normal, the result is displayed on the display means, thereby causing the act system control device to perform initial program loading on the standby system control device. IPL method.