Applies To:

Show Versions Show Versions

Manual Chapter: FirePass® Controller version 5.5 Getting Started Guide: Maintaining the FirePass Controller Configuration
Manual Chapter
Table of Contents   |   << Previous Chapter


4

Maintaining the FirePass Controller Configuration


Updating FirePass controller software

The FirePass controller can be quickly and easily updated either by using the online update feature, or offline by downloading an update file from F5 Networks.

By using the online update you can easily check to see if there is a newer version of the FirePass software with the latest feature set available.

This chapter describes how you can upgrade to the latest maintenance or feature version, how to revert back to an earlier software version using the snapshot and backup tools, and how to restore the factory default settings.

Important

Before upgrading the software, back up the FirePass controller configuration. Use the Snapshot tool to back up the entire controller configuration. For more information, refer to Using the snapshot tool .
Note

Before starting the upgrade process, refer to the release notes associated with this release.

User Session Lockout

The system administrator can set up a feature called User Session Lockout, which displays a message to users to alert them that maintenance is occurring. For more information, refer to other FirePass controller documentation and the online help.

Online updates

The FirePass controller provides one-click software upgrades.

If a new version is available, the Online Update page indicates the version's availability. To obtain the new version, follow the instructions provided in the Online Update page.

To access the Online Update page, from the Administrative Console, navigate to the Device Management : Maintenance : Online Update screen, and select a file from the list of available updates.

The FirePass controller downloads the update package and restarts the controller.

Warning

Be sure to separately update all cluster and failover units. All units must be running the same version for clustering and failover to work properly.

Offline updates

To update the software offline, you either need to get the update image from your local F5 representative, or your support contract might entitle you to obtain local update images directly from the F5 Web site.

To update the FirePass controller from a local file

  1. On the navigation pane, click Device Management, expand Maintenance, and click Local Update.
    The Local Update screen opens.
  2. Click the Browse button, select the file you want, and click Open.
  3. Type in the password corresponding to the file. (Obtain this password from F5 Networks customer support.)
  4. Click Submit.
  5. Wait for the update to complete. Three status bars indicate download status, install status, and rebooting status.

    When the update completes, the system automatically reboots.

  6. Log in again with administrative privileges. Verify that the new version was installed by navigating to the Device Management : Current Settings screen. The Current Settings screen displays the version and build number, and all hotfixes that have been applied.

Shutting down and restarting the controller

It is important that you know how to safely shut down and restart the FirePass controller.

To shut down the FirePass controller

  1. From the Administrative Console navigation pane, click Device Management, expand Maintenance, and click Restart Services.
    The Restart Services screen opens.
  2. Click the link for Shutdown Controller to shut down the FirePass controller.
    The Shutdown Controller screen opens.
  3. Click the Shutdown button to initiate the shutdown.
Important

When you click Shutdown, all active sessions for any user who is currently logged in, are terminated without warning.
Important

Use the Shutdown option before turning off the power on the FirePass controller. On the FirePass 1000, you hear three successively-lower-pitched tones. After you hear the three tones, it is safe to power down the controller.

FirePass 4100 controller
When you shut down the FirePass 4100 controller, the LCD displays Press the X key to power off. The X key is located on the keypad on the front panel of the controller. Press the X key and hold it for approximately five seconds until the lights on the front panel of the controller go out. At this point, the LCD displays the message: F5 Power standby mode. Press Enter to command power on. The FirePass 4100 keypad is shown in Figure 3.3, on page 3-5 .

You can now open the front panel door and turn the power switch off.

To restart the FirePass controller

  1. On the navigation pane of the Administrative Console, click Device Management, and expand Maintenance.
  2. Click Restart Services to restart the FirePass controller.
    The Restart Services option restarts all FirePass software components without rebooting the hardware.
  3. The Restart Controller option is used to reboot the hardware when the controller is in an abnormal state.

Important

Restarting services could disrupt active sessions.

Using the Maintenance Console

This section describes how to reset the FirePass controller to the factory default settings, and how to use the snapshot tool to create and restore a snapshot of your configuration settings on the FirePass controller.

Important

To use the features described in this section, you must use a null-modem cable to access the Maintenance Console.

Restoring factory default settings

Sometimes, when implementing and testing new configurations, it is necessary to revert back to the factory default settings. Follow the procedures listed here to restore the factory default configuration settings.

To reset the FirePass configuration to the factory default settings

  1. Connect a PC to the serial port of the FirePass controller using a null-modem cable.
  2. Configure a communications program, such as HyperTerminal, using the following settings:
    • Baud rate: 19200
    • Data bits: 8
    • Parity: none
    • Stop bits: 1
    • Flow control: hardware
  3. Start the serial connection.
    A login prompt is displayed.
  4. Type maintenance at the login prompt.
  5. When prompted, review the conditions for using the Maintenance Console.
    If you agree with the conditions, press Enter.
  6. Using the arrow keys, navigate to Reset Settings and admin password.
    At the bottom of the next screen, you see the prompt: Reset FirePass to default values (full reset)?
  7. Type yes and press Enter.
  8. You see the prompt: Change default FirePass IP settings?
    Type yes and press Enter if you want to supply the network settings that you collected and entered previously, or just press Enter to use the factory default settings.

Using the snapshot tool

You can use the snapshot feature to create an image of the current system software and configuration. You can then use this image to restore the system to a previous version or to the version that was installed at the factory.

When you create a snapshot of your configuration settings, the snapshot is stored on the FirePass controller. You can have only one snapshot stored on the FirePass controller at a time. When you create a new snapshot, it overwrites the previous snapshot without warning.

We recommend that you periodically create both a snapshot and a backup of your configuration settings.

Note

You can revert to the factory default settings for the FirePass controller at any time. Refer to Restoring factory default settings for more information.

To create a snapshot of your configuration settings

  1. Connect a PC to the serial port of the FirePass controller using a null-modem cable.
  2. Configure a communications program, such as HyperTerminal, using the following settings:
    • Baud rate: 19200
    • Data bits: 8
    • Parity: none
    • Stop bits: 1
    • Flow control: hardware
  3. Start the serial connection.
    A login prompt is displayed.
  4. Type maintenance at the login prompt.
  5. When prompted, review the conditions for using the Maintenance Console.
    If you agree with the conditions, press Enter.
  6. Using the arrow keys, navigate to Create/restore FirePass snapshot and press Enter.
  7. When prompted to restart the FirePass controller in recovery mode, press Enter.
    The system reboots and the login prompt is displayed.
  8. Type maintenance at the login prompt.
  9. When prompted, review the conditions for using the Maintenance Console.
    If you agree with the conditions, press Enter.
  10. Select Create FirePass snapshot.
  11. Press Enter.
    A status screen displays while the snapshot is created.
  12. When the snapshot creation is complete, select Exit to reboot the FirePass controller and return to normal operating mode.

Restoring a snapshot

When you take a snapshot of your configuration settings, the snapshot is stored on the FirePass controller and can be retrieved by following this procedure.

To restore a snapshot

  1. Connect a PC to the serial port of the FirePass controller using a null-modem cable.
  2. Configure a communications program, such as HyperTerminal, using the following settings:
    • Baud rate: 19200
    • Data bits: 8
    • Parity: none
    • Stop bits: 1
    • Flow control: hardware
  3. Start the serial connection.
    A login prompt is displayed.
  4. Type maintenance at the login prompt.
  5. When prompted, review the conditions for using the Maintenance Console.
    If you agree with the conditions, press Enter.
  6. Using the arrow keys, navigate to Create/restore FirePass snapshot.
  7. When prompted to restart the FirePass controller in recovery mode, press Enter.
    The system reboots.
  8. Type maintenance at the login prompt.
  9. When prompted, review the conditions for using the Maintenance Console.
    If you agree with the conditions, press Enter.
  10. Select one of the following options:
    • Revert FirePass to last working configuration snapshot
      This option restores FirePass controller using the last snapshot you created.
    • Revert FirePass to factory default snapshot
      This option restores FirePass controller using a snapshot of the base operating system at the time the unit was shipped. This snapshot does not contain your current configuration.
  11. Press Enter.
    A status screen displays while the system is restored.
  12. When the restoration is complete, click Exit to reboot the FirePass controller and return to normal operating mode.
Warning

If you choose to use the factory default snapshot, it erases all of your configuration settings and restores the factory default settings.
Note

For more information on the snapshot feature, refer to SOL 3244 on AskF5.

Backing up and restoring configuration settings

Backing up and restoring configuration settings is an easy way to capture them using the Administrative Console.

When you create a backup of your settings, it is stored on the hard drive of your PC. Creating a regular periodic backup of your configuration settings on your PC allows you to create an audit trail of them. You can also set up an FTP server to perform nightly backups.

We recommend that you periodically create both a snapshot and a backup of your configuration settings.

Creating a backup

We recommend that, in addition to regularly taking a snapshot of your configuration settings, you also perform regular backups of your configuration settings using the backup feature. While the snapshot tool stores the configuration file on the FirePass controller, the backup process places the backed up files on your PC, so you can create a backup folder and retain multiple versions of your configuration.

To create a backup

  1. From the Administrative Console, on the navigation pane, click Device Management, expand Maintenance, and click Backup/Restore.
    The Backup / Restore screen opens.
  2. Click the link: Create a backup of your current configuration.
  3. Click Save.
  4. Navigate to the folder on your hard drive where you want to place the backup file. You might want to create a new folder.
  5. Give the file a meaningful name so you can locate it if you want to use it later to restore the configuration.
  6. Click OK.
Note

If you choose the Create a backup of your current configuration and log messages link, all FirePass controller logs are included in the backup.

Restoring backups

You can restore backed up configuration files any time you want to revert to a previously saved version of your configuration.

To restore your configuration settings from a backup

  1. From the Administrative Console, on the navigation pane, click Device Management, expand Maintenance, and click Backup/Restore.
  2. On the Backup / Restore screen click the Browse button and navigate to the file that you want to restore.
  3. Click Open.
  4. Click the Restore your saved configuration link.
    The configuration settings from the file you selected display.
  5. Check the box next to Restore Users and Groups Settings. If you want to restore IP addresses and other network settings too, check the box next to Restore Network Configuration.
  6. To continue, click Restore.
    To cancel the restore operation, click Abort.
Important

When you restore the configuration settings from the backed up network configuration, the configuration you are restoring overwrites all settings, including the IP address, so this should only be used when you are restoring a configuration on the same FirePass controller that the backup was created from.



Table of Contents   |   << Previous Chapter

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)