HP Security Modules Software Upgrade Guide-6PW103

25
NOTE:
• The BootWare pro
g
ram is automatically up
g
raded when applications are up
g
raded, that is, you do no
t
need to upgrade the BootWare program separately.
• The file name, size, and path in the above figures may vary. Check the current BootWare and
application versions before upgrading them.
• If you up
g
raded the extended se
g
ment, you only up
g
rade part of the BootWare pro
g
ram. Once an erro
r
occurs, you can start the BootWare upgrade process again.
Upgrading Applications with TFTP
When application files are large, you can upgrade them using the Trivial File Transfer Protocol (TFTP) to
greatly shorten the upgrade and maintenance time.
TFTP, a protocol in the TCP/IP suite, is used for trivial file transfer between client and server to provide
simple, low-overhead file transfer services. TFTP provides unreliable data transfer services over the User
Datagram Protocol (UDP) and does not provide any access authorization or authentication mechanism.
It employs timeout and retransmission to guarantee data delivery.
The Security module serves as the TFTP client while the file server serves as the TFTP server. You can
upload/download applications to/from the file server by entering a corresponding command on the
configuration terminal.
You can upgrade application files using TFTP in the following two ways:
• On the BootWare menu
• At the CLI
Upgrading Applications with TFTP on the BootWare Menu
Step1 Set up a TFTP upgrade environment.
• The Security module serves as the TFTP client while the PC serves as the TFTP server.
• Use a crossover Ethernet cable to connect default management Ethernet interface GigabitEthernet
0/2 on the Security module to the PC and ensure the connectivity between the Security module and
the PC. Different modules have different default management Ethernet ports. For specific
information, see Table 3.
• Ena
ble the TFTP server on the PC and set the path where the application files are stored.
CAUTION:
• The TFTP server pro
g
ram is not shipped with the Security module and you need to purchase and install
it.
• When you upgrade application files using TFTP on the BootWare menu, use Ethernet interface
GigabitEthernet 0/2 on the Security modules (except the SSL VPN modules).
• For the SSL VPN module, because the module does not provide service ports on its panel, you need to
use a crossover Ethernet cable to connect the service port (such as Gi
g
abitEthernet 3/0/1) of the switch
or router to the PC, and guarantee that the Security SSL VPN module can communicate with the PC.
Step2 Configure Ethernet interface parameters on the BootWare menu.
Select 3 on the main menu to enter the Ethernet submenu, where you can select 5 to enter the Ethernet
parameter setting interface to configure the Ethernet interface parameters.