Hi Mike,
Below are the upgrade steps for signature & service pack upgrade that I keep as reference when I first upgrade my IDS4215 & 4235. Hope it can help.
********************* START ************************
How to Upgrade/Update IDS Service Pack and New Signature Update
---------------------------------------------------------------
1. Disable sensing interface (intf0)
2. Make sure FTP Server and IDS FTP user account are created
3. Make sure the home directory for the FTP account has the signature file inside.
4. Service Pack
- Login to IDS using web browser
- Go to "Administration - Update"
- Key-in the following:
a. URL: ftp://@/IDS-K9-sp-4.1-4-S91.rpm.pkg
b. Password:
example:
ftp://amrih@10.100.10.101/IDS-K9-sp-4.1-4-S91.rpm.pkg
5. Signature Update
- Login to IDS using web browser
- Go to "Administration - Update"
- Key-in the following:
a. URL: ftp://@/IDS-K9-sp-4.1-4-S91.rpm.pkg
b. Password:
example:
ftp://amrih@10.100.10.101/IDS-sig-4.1-4-S152.rpm.pkg
If CLI is used, follow this steps:
IDS4215# conf t
IDS4215(config)# upgrade ftp://amrih@10.10.10.101/IDS-sig-4.1-4-S152.rpm.pkg
Password: *******
Warning: Executing this command will apply a signature update to the application partition.
Continue with upgrade? : yes
Broadcast message from root (Tue May 24 16:19:03 2005):
Applying update IDS-sig-4.1-4-S152. This may take several minutes.
Please do not reboot the sensor during this update.
*Console Message during signature update:
"ids-sensor01#
Broadcast message from root (Wed Mar 23 15:17:25 2005):
Applying update IDS-sig-4.1-4-S152. This may take several minutes.
Please do not reboot the sensor during this update.
*Do not try to execute any command during upgrade process. IDS will give Warning message, as follow:
ids-sensor01# sh ver
Error: Control transaction cannot be completed at this time
ids-sensor01#
*Console message once upgrade is completed and IDS will reboot automatically
ids-sensor01#
Broadcast message from root (Wed Mar 23 15:26:33 2005):
Update complete.
sensorApp is restarting. This may take several minutes.
6. FTP Server is a MUST for this FTP-based upgrade
- create special FTP account for the IDS to copy the file
Note for any error, e.g as follow, that must be done first before upgrading the file
"This update requires that version IDS-K9-sp-4.1-4-S91 be installed prior to update..."
Show version before upgrade
---------------------------
ids-sensor01# sh ver
Application Partition:
Cisco Systems Intrusion Detection Sensor, Version 4.1(4)S91
OS Version 2.4.18-5smpbigphys
Platform: IDS-4235
Using 899780608 out of 921522176 bytes of available memory (97% usage)
Using 3.9G out of 15G bytes of available disk space (27% usage)
MainApp 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
AnalysisEngine 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
Authentication 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
Logger 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
NetworkAccess 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
TransactionSource 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
WebServer 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running
CLI 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500
Upgrade History:
* IDS-K9-min-4.1-1-S47 12:00:00 UTC Thu Jun 30 2005
IDS-K9-sp-4.1-4-S91.rpm.pkg 15:05:29 UTC Wed Mar 23 2005
Recovery Partition Version 1.2 - 4.1(1)S47
ids-sensor01#
Cheers!
AK
