Transfer and Apply files via SCP and TFTP

Transfer and Apply files via SCP and TFTP

To transfer files from the Radio to a PC there are several items required.
  1. An SCP server installed on a Laptop if transferring files
  2. Firewall disabled or a firewall rule added to pass port 22
  3. Valid files such as the Encryption Key if this to be uploaded to the RRUT
  4. Permission to tranfer the files over the netwrok if this is the case

Download SCP or TFTP software

Download SCP and TFTP servers. SolarWinds SCP server and TFTPD64 were used in this example. 

In order to transfer the customScript.bfe, first ensure the filename matches exactly customScript.bfe.

SCP Server installation and Transfer

If using SolarWinds SCP, right click and choose Run as Administrator and start the server. Settings are as follows:


      

Bind IP address to Local IP


Created user and password for proper authentication



Place the customScript.bfe file in the root directory of the SCP server. 



Establish an SSH to the radio and run commands:

MMX>scp USERNAME@SERVER_IP:customScript.bfe /tmp/upload

Example:







Via the transfer command syntax:



Once the file has successfully been uploaded, run command execute sys os script to apply the script. Done!

TFTP Server installation and Transfer

In order to upload via TFTP, move the customScript.bfe file to the TFTP root folder:



Establish an SSH session to the unit, and run the below commands:

MMX>transfer sys os tftp script upload SERVER_IP customScript.bfe

Example:



Once the file has successfully been uploaded, run command execute sys os script to apply the script. Done!

Download Radius dictionary

transfer security radius scp dictionary download 172.26.19.58 host

Host '172.26.19.58' is not in the trusted hosts file.
(ssh-rsa fingerprint sha1!! eb:2c:bc:19:fe:1c:0b:20:cb:5f:38:bd:cc:50:c1:b0:4d:6c:59:18)
Do you want to continue connecting? (y/n) y
host@172.26.19.58's password:
dictionary.mwl                                100%  427     0.4KB/s   00:00



Download Encryption key 

To get an encryption key from Pyxis or Tornado you can use scp server installed on the radio. This will connect with an SCP client to download to the Server (laptop) or upload to the Client (radio)
transfer security encryption scp key download 172.26.19.58 host

Host '172.26.19.58' is not in the trusted hosts file.
(ssh-rsa fingerprint sha1!! eb:2c:bc:19:fe:1c:0b:20:cb:5f:38:bd:cc:50:c1:b0:4d:6c:59:18)
Do you want to continue connecting? (y/n) y
host@172.26.19.58's password:
enc_key                                       100%   32     0.0KB/s   00:00



Upload encryption Key

Uploading the encryption key to the host PC or laptop is similar to downloading. If the radio has not connected to the SCP server before, it will be necessary to accept the certificate
transfer security encryption scp key upload 172.26.19.58 host encryption_key

Host '172.26.19.58' is not in the trusted hosts file.
(ssh-rsa fingerprint sha1!! eb:2c:bc:19:fe:1c:0b:20:cb:5f:38:bd:cc:50:c1:b0:4d:6c:59:18)
Do you want to continue connecting? (y/n) y
host@172.26.19.58's password:
encryption_key                                100%   32     0.0KB/s   00:00



Apply the key to the radio

configure security encryption key apply

Applying Key Hash: 75fc7eaa4211b845295bb64b3105d743


Apply a firewall rule if required

Windows may still require a firewall rule to allow the connection to the server. Navigate by pressing the windows key and typing Windows Defender


Go to advanced settings and create a new rule if one does not exist. 

Under Genarl give the rule a name and make the action "Allow the connection"


Under Protocols and Ports specify the protocol as TCP and local port as 22. Press OK to accept.


    • Related Articles

    • Copy firmware from Server via scp.

      Introduction This process is for moving a file from a Server in a customers network to a MMX Radio. Some customers do not allow scp to be initiated by the radios due to security risk of an external attack. These instructions assume you have a ...

    • SCP files from OpManager using configlets

      OpManager can transfer files to MMX radios, this ability to push a file to the radio was added to help with firewall rules that prevented the MMX radio from getting a file. The firewall rule typically allowed SCP from the secure side out to a radio, ...

    • How to apply OpManager PPM Update and com.zip Patches

        Table of Contents Overview.. 2 Prep and file transfer. 2 Release Notes. 2 UpDate Manager for PPM... 2 Central Server upgrade. 4 Update files. 5 Discover Properties. 5 Edit list of Traps for auto-discovery. 7 Hardware Info in inventory. 7 To Enable ...

    • Configuring configlets in OpManager NCM

      Manage Engine has written instruction on using and creating configlets. The link in this KB may be changed if Manage Engine update it, but for now it is a source for other NCM info as well ...

    • Install Expect packages on Ubuntu server

      Introduction Some customers do not permit access to the internet which would allow "apt-get" to download and install applications. The instructions below are used in conjunction with two processes that have been developed Using Expect tool to upload ...