Manage security, Manage security -11 – CANOGA PERKINS 1500 Domain Management Module User Manual

Page 23

Advertising
background image

If the firmware for the DMM or other module is outdated, you need to upgrade it. The DMM
firmware file name is similar to

DMM0106.zip

, where "DMM" indicates the module and "0106"

indicates the version. To start the software upgrade, follow these steps:

1. Go to the Host Access Table (see page 3-14) and verify that the entry for the host you will

use for the file transfer allows FTP or SFTP access, depending on the method you plan to use.

2. Log in to the FTP or SFTP server from the account that allows access.

Note: You can run only one FTP or SFTP session at a time.

3. Download the new firmware to your TFTP server; put the firmware in the "

/BURNING

"

directory. For FTP, enable binary transfer mode. When the transfer is complete, the file is
moved automatically to the "

/INACTIVE

" directory if it is DMM firmware, or to the

"

/MODULES

" directory if it is firmware for another module.

4. Go to the System Configuration menu and enter the IP address, subnet Mask, and default

gateway for the DMM.

5. At the Domain Management Module menu, type

4

, Upgrade Software, and press <Enter>.

6. At the Software Upgrade menu, type

3

, Get New File with TFTP, and press <Enter>.

7. Follow the prompts on the screen to enter the IP address for the TFTP server and the file

name for the new firmware, then start the upgrade.

8. If this is new firmware for the DMM, when the file transfer is complete, go to the Software

Upgrade menu, type

2

, Swap Bank, and press <Enter>. The DMM resets and starts using the

new firmware.

9. If this is new firmware for another module in the domain, follow these steps when the file

transfer is complete:

a. At the Software Upgrade menu, type

4

, Copy Software from Source to Destination, and

press <Enter>.

b. At the prompts, press <Space> to cycle through the information for the Source and

Destination, and press <Enter>; the upgrade runs automatically.

c. Go to the Module Menu to swap banks and reset the module.

Manage Security

To effectively provide system security for a variety of network applications, the DMM works
with Radius, SSH, and SNMPv3. For a brief discussion of security options, see page 1-4. To set
up DMM security, first set up the associated server(s); for details, see the documentation for the
server and software.

• To use a Radius server, you must specify the IP address for the DMM and the Shared Secret

that will authenticate communication between the DMM and the Radius server.

• To communicate with an SSH server, you must first download the SSH Client to your PC and

test connectivity.

• To use SNMPv3 security, set up the engine ID for the SNMPv3 agent in the device.
As you set up values for various security parameters on your DMM, see the documentation for
your network security system for details on and values for those security parameters. Typically,
you must have supervisor access to set up security for the DMM.

Model 1500 Domain Management Module

3-11

Advertising