Copy firmware from Server via scp.

Copy firmware from Server via scp.

Introduction

This process is for moving a file from a Server in a customers network to a MMX Radio. Some customers do not allow scp to be initiated by the radios due to security risk of an external attack.
These instructions assume you have a user/pass for the Server and can access it. They also assume you are familiar with winSCP or SercureFX applications.

Once we’ve got the pyxis on 2.3.2 we shouldn’t need this again as otap is fixed in 2.3.2, but it may be useful for a bench upgrade if you need to upgrade a radio before installing. In production environments with cNMS servers the cNMS does this.

Copy file to radio via scp,

this could be done from the op manager probe server as it has SCP installed.
1) Copy software to server
I used a secure FX to scp the file to the op manager server, winscp is another application that works when moving files from you laptop to the Server.

2) Copy from server to radio
Command on server uses your username and the pin+RSA Key as a password

scp pyx_software_02.03.02.bz2 j1dowle@10.213.2.129:/tmp/upload

replace 10.213.2.219 with the radios ip address, replace j1dowle with your user name for the radios, replace pyx_software_02.03.02.bz2.

When prompted for a password it is your password for the radio (pin+RSA Key).

 

To slow the rate down add ‘-l’ between the scp and pyx_software -I allows us to set the data rate in kbps, the sample blow sets it to 5kbps. This is for transferring when other traffic is using the system

For example

scp -l 5 pyx_software_02.03.02.bz2 j1dowle@10.213.2.129:/tmp/upload


Runnning SCP in Background

a) If leaving this running unattended due to a slow transfer rates for example add the following commands

Ctrl – z and then type bg  to send to background and then type disown; to disown from your terminal session (this will leave it running when your terminal session ends)

Initiate UpGrade on Radio

Once file is copied to the radio initiate upgrade, Log into the radio via ssh. Run this cli command
execute otap local upgrade



Using Putty to scp files

Here’s a work around to get it on with scp initiated from your PC, this won’t need the radio to get through the security of your PC.

 

  1. Name the key file enc_key on your pc.
  2. Scp fiel from your PC to /tmp/upload, command for putty PSCP below.

pscp -scp C:\{path to file}\enc_key tech@{radio ip}:/tmp/upload

  1. Login to radio with root user
  2. mv /tmp/upload/enc_key  /mmx/db/enc_key
  3. clish -c “configure security encryption key apply”

 

Regards

James