Downgrade IPS on AIP-SSM to 6.0.2 from 6.1.1

Answered Question
May 18th, 2008
User Badges:

Need instructions on how to return to v602 after an upgrade to v611 was performed.

The recovery partition is also at v611.

Correct Answer by scothrel about 8 years 10 months ago

Two methods and one comment. The comment is that you'll want to go back to 6.0(4), not 6.0(2), for operational use.


[edit]The following works generically on the standalone sensors... I missed that this was a question for the AIP-SSM. It should still work on the AIP-SSM with adjustments for the "alien in the box" I/O.


To recover, a reimage using one of the tftp-able images (or a boot CD if you have a 4235/4250 sensor) is the gold standard for going backwards. You'll lose your configuration when you do so and need to run setup again.

The other way, and officially this is unsupported for "downgrades" but it works 98% of the time, is to load the -r- recovery image (IPS-K9-r-1.1-a-6.0-4-E1.pkg) and then do a "recover application partition" from the "conf t" level. This will reimage your sensor and preserve the basic network setup. You'll still lose signature customizations and passwords will be reset to factory default, but the network setup is preserved, so you can do this remotely.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Correct Answer
scothrel Mon, 05/19/2008 - 06:23
User Badges:
  • Cisco Employee,

Two methods and one comment. The comment is that you'll want to go back to 6.0(4), not 6.0(2), for operational use.


[edit]The following works generically on the standalone sensors... I missed that this was a question for the AIP-SSM. It should still work on the AIP-SSM with adjustments for the "alien in the box" I/O.


To recover, a reimage using one of the tftp-able images (or a boot CD if you have a 4235/4250 sensor) is the gold standard for going backwards. You'll lose your configuration when you do so and need to run setup again.

The other way, and officially this is unsupported for "downgrades" but it works 98% of the time, is to load the -r- recovery image (IPS-K9-r-1.1-a-6.0-4-E1.pkg) and then do a "recover application partition" from the "conf t" level. This will reimage your sensor and preserve the basic network setup. You'll still lose signature customizations and passwords will be reset to factory default, but the network setup is preserved, so you can do this remotely.


Actions

This Discussion