Updating A Sensor With The Update Stored On The Sensor - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Appendix C Troubleshooting
•
•
Try the manual upgrade command before attempting the automatic update. If it works with the upgrade
command and does not work with the automatic update, try the following:
•
•
•
If necessary, run tcpDump on automatic update. You can compare the successful manual update with the
unsuccessful automatic update and troubleshoot from there.

Updating a Sensor with the Update Stored on the Sensor

You can store the update package in the /var directory on the sensor and update the sensor from there if
you need to.
To update the sensor with an update stored on the sensor, follow these steps:
Log in to the service account.
Step 1
Obtain the update package file from Cisco.com.
Step 2
For the procedure, see
Step 3 FTP or SCP the update file to the sensor's /usr/cids/idsRoot/var directory.
Step 4 Set the file permissions:
chmod 644 ips_package_file_name
Exit the service account.
Step 5
Log in to the sensor using an account with administrator privileges.
Step 6
Store the sensor's host key:
Step 7
sensor# configure terminal
sensor(config)# service ssh
sensor(config-ssh)# rsa1-keys sensor_ip_address
Upgrade the sensor:
Step 8
sensor(config)# upgrade scp://service@
Enter password: *****
78-16527-01
Not modifying the prompt only applies to versions before 4.1(4).
Note
You must use the Windows FTP server setup option to emulate UNIX file structure and not MS-DOS
file structure.
If you are using SCP, make sure you have added the SSH host key to the known hosts list.
For the procedure, see Adding Hosts to the Known Hosts List, page
Determine which IPS software version your sensor has (for the procedure, see
Information, page 13-19).
Version 4.0(1) has a known problem with automatic update. Upgrade manually to 4.1(1) before
trying to configure and use automatic update.
Make sure the passwords configured for automatic update. Make sure they match the same
passwords used for manual update.
Make sure that the filenames in the FTP server are exactly what you see on Downloads on
Cisco.com. This includes capitalization.
Some Windows FTP servers allow access to the file with the incorrect capitalization but the sensor
ultimately rejects the file because the name has changed.
Obtaining Cisco IPS Software, page
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Troubleshooting the 4200 Series Appliance
18-1.
s
ensor_ip_address/upgrade/ips_package_file_name
4-31.
Displaying Version
C-33