Guys, being a partner and working in a region where internet far slow and very uneffcient , we are facing upgrades breaking up in the middle due to comm. problems , how can we download updates offline and then do it via local server , what should we do ...
AsyncOS has a feature that may allow you to pre-fetch AsyncOS from the Internet and then upgrade your appliances over the LAN. The feature is officially supported beginning with AsyncOS release 4.5, and in later releases. Earlier releases such as 3.8.3 and 4.0 include the CLI version of the feature, but without official support from IronPort. The feature is fully documented in the IronPort AsyncOS 4.5 Basic User Guide, System Administration, Upgrading AsyncOS.
Local Upgrades are useful if your WAN link is low speed, or if it is highly congested. Either of these problems can manifest itself in upgrade errors. Sometimes upgrades fail with upgrade messages that appear to have nothing to do with bandwidth issues, but the problem resolves itself when Local Upgrades are performed, or if upgraded after hours.
Local Upgrades are also useful if you must upgrade AsyncOS at secure sites which prevent HTTP access to IronPort upgrade servers, even through a web proxy.
Local Upgrades can also be a time-saver. If the IronPort has only low-speed HTTP access to the Internet, being able to upgrade it locally can reduce the amount of time the IronPort channel partner or other technician must wait for the upgrade to complete. Using this technique a complete AsyncOS upgrade may take less than one minute, even on a C10.
It is assumed that in most cases the engineer reading this document will prepare a web server on his/her own laptop computer, and use that to “transport” AsyncOS nearer to the customers’ appliances.
Getting the image
The first step to upgrading your system is retrieving the image from IronPort. If you are on a dial, wireless, VPN, PPPoE or other network connection where your Maximum Transmission Unit (MTU) size is restricted, you may need to use Procedure B below. If Procedure A displays the correct list of images, you do not need to follow Procedure B.
Visit the http://downloads.ironport.com/form.html upgrade site. Enter one or more serial numbers (MAC address hyphen serial-code), separated by commas, into the form. Hit the List upgrades button. You should see a list of images similar to the following:
Replace the serial number (after the equals sign) with the actual serial number of the appliance you will be upgrading. Save as above.
Multiple Appliance Upgrades
When prompted to save the file, remember that this file is unique to the appliance or appliances that you specified at download time. If you downloaded your machine-specific images separately, you will have to rename them and keep track of which one belongs to which appliance. For the appliance to retrieve them from your web server, you will have to rename it back to asyncos-4-5-0.ipup, for example. Note that “phoebe” is trimmed – and if you are using AsyncOS 4.5 and later you can use any filename with the ipup extension. You will have to rename the files one at a time, and upgrade the IronPorts one at a time. Alternatively, create a unique subdirectory on your web server for each appliance, and save the appropriate image there.
If you listed multiple comma separated serial numbers in the download form, headers in your image will allow it to be installed to those specific appliances. You can also use a URL in this form:
In this example we will use Microsoft Internet Information Server 6.0 or later. The ipup file should be copied to c:\inetpub\wwwroot\asyncos or other similar directory.
Enable directory browsing for this directory. (In IIS Manager, right-click the directory you created, choose properties, tick Directory browsing.)
Enable ipup MIME types. From the HTTP Headers tab, choose MIME Map File Types, add a new type for the extension .ipup, and enter this string as the type: application/octect-stream. You may prefer to make this change on your Default Web Site, so the AsyncOS images can be served from any directories you create in the future. If you are upgrading multiple appliances, you could use this feature to create one directory per appliance, and use a custom URL below for each appliance.
You do not have to restart you web server.
Placing The Image On An Apache Web Server
In this example we will use Apache Web Server 2.0.54 on Windows XP SP2. The ipup file should be copied to C:\Apache\Apache2\htdocs\asyncos or other similar directory.
By default, Apache supports directory browsing for directories without a default page. This is set by the
Options Indexes FollowSymLinks
directive under the section of the httpd.conf file.
To specify a MIME-type for ipup files, edit the \conf\mime-type file and add ipup to the line:
application/octet-stream bin dms lha lzh exe class so dll dmg
As with the IIS configuration above, you can configure separate directories for different appliances.
You do not have to restart your web server.
Configuring the IronPort – CLI
Enter the upgradeconfig command, and follow this sequence of steps. Your input is marked in blue.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :