Copy firmware from Server via scp.

Copy firmware from Server via scp.

Introduction

This process is for moving a file from a Server in a customers network to a MMX Radio. Some customers do not allow scp to be initiated by the radios due to security risk of an external attack.
These instructions assume you have a user/pass for the Server and can access it. They also assume you are familiar with winSCP or SercureFX applications.

Once we’ve got the pyxis on 2.3.2 we shouldn’t need this again as otap is fixed in 2.3.2, but it may be useful for a bench upgrade if you need to upgrade a radio before installing. In production environments with cNMS servers the cNMS does this.

Copy file to radio via scp,

this could be done from the op manager probe server as it has SCP installed.
1) Copy software to server
I used a secure FX to scp the file to the op manager server, winscp is another application that works when moving files from you laptop to the Server.

2) Copy from server to radio
Command on server uses your username and the pin+RSA Key as a password

scp pyx_software_02.03.02.bz2 j1dowle@10.213.2.129:/tmp/upload

replace 10.213.2.219 with the radios ip address, replace j1dowle with your user name for the radios, replace pyx_software_02.03.02.bz2.

When prompted for a password it is your password for the radio (pin+RSA Key).

 

To slow the rate down add ‘-l’ between the scp and pyx_software -I allows us to set the data rate in kbps, the sample blow sets it to 5kbps. This is for transferring when other traffic is using the system

For example

scp -l 5 pyx_software_02.03.02.bz2 j1dowle@10.213.2.129:/tmp/upload


Runnning SCP in Background

a) If leaving this running unattended due to a slow transfer rates for example add the following commands

Ctrl – z and then type bg  to send to background and then type disown; to disown from your terminal session (this will leave it running when your terminal session ends)

Initiate UpGrade on Radio

Once file is copied to the radio initiate upgrade, Log into the radio via ssh. Run this cli command
execute otap local upgrade



Using Putty to scp files

Here’s a work around to get it on with scp initiated from your PC, this won’t need the radio to get through the security of your PC.

 

  1. Name the key file enc_key on your pc.
  2. Scp fiel from your PC to /tmp/upload, command for putty PSCP below.

pscp -scp C:\{path to file}\enc_key tech@{radio ip}:/tmp/upload

  1. Login to radio with root user
  2. mv /tmp/upload/enc_key  /mmx/db/enc_key
  3. clish -c “configure security encryption key apply”

 

Regards

James




    • Related Articles

    • Transfer and Apply files via SCP and TFTP

      To transfer files from the Radio to a PC there are several items required. An SCP server installed on a Laptop if transferring files Firewall disabled or a firewall rule added to pass port 22 Valid files such as the Encryption Key if this to be ...

    • SCP files from OpManager using configlets

      OpManager can transfer files to MMX radios, this ability to push a file to the radio was added to help with firewall rules that prevented the MMX radio from getting a file. The firewall rule typically allowed SCP from the secure side out to a radio, ...

    • Configuring a Terminal Server Session

      Setting up a Terminal Server Session between a BRUT and RRUT on 4.05.01 Configure one of the Serial ports from each unit as a Terminal Server, setting the BRUT as the Master: BRUT CCMS, (Serial IP must be in a different subnet than Eth IP, and Serial ...

    • Install Expect packages on Ubuntu server

      Introduction Some customers do not permit access to the internet which would allow "apt-get" to download and install applications. The instructions below are used in conjunction with two processes that have been developed Using Expect tool to upload ...

    • How to apply OpManager PPM Update and com.zip Patches

        Table of Contents Overview.. 2 Prep and file transfer. 2 Release Notes. 2 UpDate Manager for PPM... 2 Central Server upgrade. 4 Update files. 5 Discover Properties. 5 Edit list of Traps for auto-discovery. 7 Hardware Info in inventory. 7 To Enable ...