Table Of Contents

Software Update

Administration | Software Update

Software Update | Concentrator

Screen Elements

Software Update Progress

Software Update Success

Software Update Error

Software Update | Clients

Screen Elements

Software Update

---

Administration | Software Update

This section of the Manager lets you update the VPN Concentrator executable system software and the VPN Client software.

Figure 3-1 Administration | Software Update Screen

•Software Update | Concentrator: Uploads the executable system software (the software image) to the VPN Concentrator

•Software Update | Clients: Updates the VPN Client and VPN 3002 Hardware Client software

Software Update | Concentrator

This process uploads the executable system software to the VPN Concentrator, which then verifies the integrity of the software image.

The new image file must be accessible by the workstation you are using to manage the VPN Concentrator. Software image files ship on the Cisco VPN 3000 Concentrator CD-ROM. Updated or patched versions are available from the Cisco website, www.cisco.com, under Service & Support > Software Center.

It takes a few minutes to upload and verify the software, and the system displays the progress. Please wait for the operation to finish.

To run the new software image, you must reboot the VPN Concentrator. The system prompts you to reboot when the update is finished.

We also recommend that you clear your browser's cache after you update the software image: delete all the browser's temporary internet files, history files, and location bar references.

---

Note The VPN Concentrator has two locations for storing image files: the active location, which stores the image currently running on the system; and the backup location. Updating the image overwrites the stored image file in the backup location and makes it the active location for the next reboot. Updating twice, therefore, overwrites the image file in the active location; and the current image file is lost. The Manager displays a warning on this screen if you have already updated the image without rebooting.

---

---

Caution You can update the software image while the system is still operating as a VPN device. Rebooting the system, however, terminates all active sessions.

---

---

Note While the system is updating the image, do not perform any other operations that affect Flash memory (listing, viewing, copying, deleting, or writing files.) Doing so might corrupt memory.

---

Updating the software image also makes available any new Cisco-supplied configurable selections for filter rules, Security Associations, IKE proposals, base-group attributes, etc. When you reboot with the new image, the system updates the active configuration in memory with these new selections, but it does not write them to the CONFIG file until you click the Save Needed icon in the Manager window. See Administration | File Management for ways to manage CONFIG files.

Figure 3-2 Administration | Software Update | Concentrator Screen

Screen Elements

•Current Software Revision — The name, version number, and date of the software image currently running on the system.

•Browse — Enter the complete pathname of the new image file, or click Browse to find and select the file from your workstation or network. Cisco-supplied VPN 3000 Concentrator software image files are named:

–For model 3005 = vpn3005-<Major Version>.<Minor Version>.<Sustaining Version>.<Patch Version>-k9.bin. (For example, vpn3005-3.0.Rel-k9.bin.)

–For models 3015, 3020, 3030, 3060, and 3080 = vpn3000-<Major Version>.<Minor Version>.<Sustaining Version>.<Patch Version>-k9.bin. (For example, vpn3000-3.0.1-k9.bin.)

The Major and Minor Version numbers are always present; the initial Patch version is Rel; the Sustaining Version number is present only if needed.

The correct file must be selected for your VPN Concentrator model; otherwise the update will fail.

•Upload — Click to upload the new image file to the VPN Concentrator.

•Cancel — Click to cancel your entries on this screen, or to stop a file upload that is in progress. The Manager returns to the main Administration screen. If you then return to the Administration | Software Update screen, you might see a message that a file upload is in progress. Click the highlighted link to stop it and clear the message.

Software Update Progress

This window shows the progress of the software upload. It refreshes the number of bytes transferred at 10-second intervals.

Figure 3-3 Administration | Software Update Progress Window

When the upload is finished, or if the upload is cancelled, the progress window closes.

Software Update Success

The Manager displays this screen when it completes the software upload and verifies the integrity of the software. To go to the Administration | System Reboot screen, click the highlighted link.

We strongly recommend that you clear the cache of your browser after you update the software image: delete all the browser's temporary internet files, history files, and location bar references.

Figure 3-4 Administration | Software Update Success Screen

Software Update Error

This screen appears if there was an error in uploading or verifying the image file. You might have selected the wrong file. Click the highlighted link to return to the Administration | Software Update screen and try the update again, or contact Cisco support.

Figure 3-5 Administration | Software Update Error Screen

Software Update | Clients

Figure 3-6 Administration| Software Update | Clients Screen

Screen Elements

•Group — Lets you select the VPN 3002 Hardware Client group for this update (the automatic update feature works on a group basis). The default is --All--, which lets you update the software for all groups. The Concentrator updates clients by group, in batches of ten, at 5-minute intervals.

•Upgrade Clients Now — Click to update the VPN 3002 hardware Client software for the group you have selected.

•Cancel — Click if you decide not to update client software now. The Manager returns to the Administration | Software Update screen, without updating software for any client(s).