Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

upgrade command fails on 4215

I am trying to put the IDS-K9-patch-4.1-4g patch on a couple of 4215's and every time I run the upgrade command it times out and fails with a zero length file on teh IDS. I have also tried to manually (from service account) move the patch to the sensors with no luck at all. I get time outs with the ftp job too. I have upped the FTP timeout value to 600 secs (10 mins) and it still fails. Any ideas? Thanks,

-- mike --

3 REPLIES

Re: upgrade command fails on 4215

Hi Mike,

I have uppgraded the IDS 4215 & 4235 before. I did experienced the same problem with upgrade, but managed to successfully doing it via FTP.

What was the specific error message when the FTP failed?

Rgds,

AK

Re: upgrade command fails on 4215

Hi Mike,

Below are the upgrade steps for signature & service pack upgrade that I keep as reference when I first upgrade my IDS4215 & 4235. Hope it can help.

********************* START ************************

How to Upgrade/Update IDS Service Pack and New Signature Update

---------------------------------------------------------------

1. Disable sensing interface (intf0)

2. Make sure FTP Server and IDS FTP user account are created

3. Make sure the home directory for the FTP account has the signature file inside.

4. Service Pack

- Login to IDS using web browser

- Go to "Administration - Update"

- Key-in the following:

a. URL: ftp://@/IDS-K9-sp-4.1-4-S91.rpm.pkg

b. Password:

example:

ftp://amrih@10.100.10.101/IDS-K9-sp-4.1-4-S91.rpm.pkg

5. Signature Update

- Login to IDS using web browser

- Go to "Administration - Update"

- Key-in the following:

a. URL: ftp://@/IDS-K9-sp-4.1-4-S91.rpm.pkg

b. Password:

example:

ftp://amrih@10.100.10.101/IDS-sig-4.1-4-S152.rpm.pkg

If CLI is used, follow this steps:

IDS4215# conf t

IDS4215(config)# upgrade ftp://amrih@10.10.10.101/IDS-sig-4.1-4-S152.rpm.pkg

Password: *******

Warning: Executing this command will apply a signature update to the application partition.

Continue with upgrade? : yes

Broadcast message from root (Tue May 24 16:19:03 2005):

Applying update IDS-sig-4.1-4-S152. This may take several minutes.

Please do not reboot the sensor during this update.

*Console Message during signature update:

"ids-sensor01#

Broadcast message from root (Wed Mar 23 15:17:25 2005):

Applying update IDS-sig-4.1-4-S152. This may take several minutes.

Please do not reboot the sensor during this update.

*Do not try to execute any command during upgrade process. IDS will give Warning message, as follow:

ids-sensor01# sh ver

Error: Control transaction cannot be completed at this time

ids-sensor01#

*Console message once upgrade is completed and IDS will reboot automatically

ids-sensor01#

Broadcast message from root (Wed Mar 23 15:26:33 2005):

Update complete.

sensorApp is restarting. This may take several minutes.

6. FTP Server is a MUST for this FTP-based upgrade

- create special FTP account for the IDS to copy the file

Note for any error, e.g as follow, that must be done first before upgrading the file

"This update requires that version IDS-K9-sp-4.1-4-S91 be installed prior to update..."

Show version before upgrade

---------------------------

ids-sensor01# sh ver

Application Partition:

Cisco Systems Intrusion Detection Sensor, Version 4.1(4)S91

OS Version 2.4.18-5smpbigphys

Platform: IDS-4235

Using 899780608 out of 921522176 bytes of available memory (97% usage)

Using 3.9G out of 15G bytes of available disk space (27% usage)

MainApp 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

AnalysisEngine 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

Authentication 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

Logger 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

NetworkAccess 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

TransactionSource 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

WebServer 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500 Running

CLI 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

Upgrade History:

* IDS-K9-min-4.1-1-S47 12:00:00 UTC Thu Jun 30 2005

IDS-K9-sp-4.1-4-S91.rpm.pkg 15:05:29 UTC Wed Mar 23 2005

Recovery Partition Version 1.2 - 4.1(1)S47

ids-sensor01#

Cheers!

AK

Re: upgrade command fails on 4215

Pls ignore the "Show version before upgrade" as it was for my reference during the upgrade.

Cheers!

AK

146
Views
0
Helpful
3
Replies
CreatePlease to create content