Find and install updates through the CLI on Security Network IPS sensors
How do you find and install available updates through the CLI on a Security Network IPS (GX) appliance?
In most scenarios, updating the GX appliance should be done through the designated process as documented in Updates and licensing administration. There might be circumstances where this method of updating is not available. Use the information in this article to find and apply updates by using the command line interface (CLI).
Important: When performing administration tasks via ssh or local console, configuration changes made to your IBM appliance by any user other than admin could degrade appliance performance. Installing or activating other services or applications may also impact appliance performance or security. IBM Infrastructure Security Support will not support configuration changes made using the root user account unless specifically directed by a support engineer or IBM documentation. The following DCF Technote content is supported. Any further changes made that are not included in this document will place your product into an unsupported state and IBM product support may require you to reimage your appliance to restore it to a supported state.
Go through the information below to find and install updates on the GX appliance through the CLI:
- SSH to the device and login with the root credentials.
- Remove any previously downloaded files by using the command below:
rm -f /var/spool/updates/*.pkg
- Restart the update service by using the following command:
service iss-lum restart
- Run the following command to search for available updates:
lumCtrl --discover -w
Note: This might take a few minutes to complete.
- To see if any available updates are available, run the following command:
lumCtrl --updavail ipm
lumCtrl --updavail fw
falseis returned, there are no updates for this type. If
trueis returned, there are available updates.
- To install any available updates, run the following command:
lumCtrl --install ipm
lumCtrl --install fw
Note: If you are several firmware versions behind, it attempts to download and install all available versions up to the current. If you want to install a version before the current, use the
-vflag to specify the firmware to stop at. For example, if you only want to install firmware versions up to 4.6.1 but not 4.6.2, use the following command:
lumCtrl --install fw -v 4.6.1
- To see when the last update was installed, run the following command:
lumCtrl --lastupdate ipm
lumCtrl --lastupdate fw
lumCtrl --helpfor a comprehensive list of all the available commands.
More support for:
IBM Security Network Intrusion Prevention System
Software version: 4.6.1, 4.6.2
Operating system(s): Firmware
Reference #: 1964050
Modified date: 29 August 2016