Configuring the Cisco IOS Auto-Upgrade Manager

The Cisco IOS Auto-Upgrade Manager streamlines the process of upgrading to a new Cisco IOS software image. You can run the Cisco IOS Auto-Upgrade Manager through the command-line interface (CLI). AUM enables the router to connect to the Cisco website (www.cisco.com) and send the cisco.com username and password for authentication. After authentication, the router passes the name of the Cisco IOS software image that is specified by the user to the Cisco server. The Cisco server returns the complete URL of the Cisco IOS software image to the router.

The Cisco IOS Auto-Upgrade Manager configured on the router can then manage the entire process of upgrading to the Cisco IOS software image. AUM upgrades the router with the software image at the time specified by the user by performing the following tasks:

• Locating and downloading the Cisco IOS software image
• Checking all requirements
• Managing secondary storage space
• Validating the Cisco IOS software image
• Scheduling a warm-upgrade

The figure below illustrates the workflow of the Cisco IOS Auto-Upgrade Manager.

Note

If the router fails to load the Cisco IOS software image that you have specified, it displays the error message in the console window and in the syslog buffers indicating the reason for the failure. If the user is not authorized to download encrypted software, an error message is generated requesting the user to register for this service. Similarly, if any CLI configuration statements are not understood by the parser at bootup, it generates an error message and stores the log of the invalid configuration lines in the nvram:invalid-config file. This error message indicates that the Cisco IOS software image that you have specified does not support the same feature set as the old Cisco IOS software image. If the router does not have sufficient secondary storage space to support both the images, but succeeds in the upgrade with the new image, it connects to the Cisco server again and downloads the Cisco IOS software image into a secondary storage. This process erases the existing image.

You can download a specific Cisco IOS software image from www.cisco.com. AUM uses Secure Socket Layer (SSL) for a secure connection, requiring the user to configure the certificate. The router passes the name of the Cisco IOS software image along with your username and password to log in to the www.cisco.com server. The Cisco server returns the complete URL for the specific Cisco IOS software image to the router.

The Cisco IOS Auto-Upgrade Manager can then automatically download the Cisco IOS software image that you have specified from www.cisco.com, verify it, and upgrade the router with the downloaded image.

Note	The Intelligent Download Application (IDA) is the Cisco interface to AUM and is sometimes used interchangeably with the term Cisco server in the context of AUM.

Additionally, the Cisco IOS Auto-Upgrade Manager provides the following optional services:

• Disk clean-up utility
• Scheduling of upgrade

These services are available for download from a Cisco or non-Cisco server, both in the interactive and command line modes.

You can download a Cisco IOS software image that is present on a local or non-Cisco TFTP or FTP server. You can provide an FTP username and password using the ipftpusername and ipftppasswordglobal configuration commands for an FTP download. The Cisco IOS Auto-Upgrade Manager automates the process of downloading the specific Cisco IOS software image from a non-Cisco server and warm upgrade services. It also provides the disk clean-up utility to delete the files if the space required to download the new Cisco IOS software image is not sufficient.

You can download a specific Cisco IOS software image from www.cisco.com using the CLI or through the following user interfaces:

• Interactive Mode
  
• Single Command Line Mode
  

SUMMARY STEPS

1.    enable

2.    configure terminal

3.    crypto pki trustpoint name

4.    enrollment terminal

5.    revocation-check none

6.    exit

7.    crypto ca authenticate name

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. Enter your password if prompted.
Step 2	configure terminal Example: Router# configure terminal	Enters global configuration mode.
Step 3	crypto pki trustpoint name Example: Router(config)# crypto pki trustpoint cisco_ssl_cert	Declares the certification authority (CA) and enters ca-trustpoint configuration mode.
Step 4	enrollment terminal Example: Router(ca-trustpoint)# enrollment terminal	Displays the certificate request on the console terminal and allows you to enter the issued certificate data on the terminal.
Step 5	revocation-check none Example: Router(ca-trustpoint)# revocation-check none	Specifies that certificate checking is not required.
Step 6	exit Example: Router(ca-trustpoint)# exit	Exits ca-trustpoint configuration mode and returns to global configuration mode.
Step 7	crypto ca authenticate name Example: Router(config)# crypto ca authenticate cisco_ssl_cert	Authenticates the CA to your router by obtaining the self-signed certificate of the CA.

SUMMARY STEPS

1.    enable

2.    configure terminal

3.    autoupgrade disk-cleanup {crashinfo | core | image | irrecoverable}

4.    autoupgrade ida url url

5.    autoupgrade status email {recipientemail-address | smtp-servername-address}

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. Enter your password if prompted.
Step 2	configure terminal Example: Router# configure terminal	Enters global configuration mode.
Step 3	autoupgrade disk-cleanup {crashinfo | core | image | irrecoverable} Example: Router(config)# autoupgrade disk-cleanup crashinfo	Configures the Cisco IOS Auto-Upgrade Manager disk cleanup utility.
Step 4	autoupgrade ida url url Example: Router(config)# autoupgrade ida url https://www.cisco.com/cgi-bin/new-ida/locator/ locator.pl	Configures the URL of the Cisco server running on www.cisco.com where the image download requests will be sent by Cisco IOS Auto-Upgrade Manager. Note    This step is required only if the default URL has changed.
Step 5	autoupgrade status email {recipientemail-address | smtp-servername-address} Example: Router(config)# autoupgrade status email smtp-server smtpserver.abc.com	Configures the email address and outgoing email server to which the router sends the status email.

SUMMARY STEPS

1.    enable

2.    upgrade automatic getversion {ciscousernameusernamepasswordpasswordimageimage | url} [athh:mm | now | inhh:mm] [disk-management {auto | confirm | no}]

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. Enter your password if prompted.
Step 2	upgrade automatic getversion {ciscousernameusernamepasswordpasswordimageimage | url} [athh:mm | now | inhh:mm] [disk-management {auto | confirm | no}] Example: Router# upgrade automatic getversion tftp://abc/tom/c3825-adventerprisek9-mz.124-2.XA.bin at now disk-management auto	Downloads the image directly from www.cisco.com or a non-Cisco server.

SUMMARY STEPS

1.    enable

2.    upgrade automatic runversion [athh:mm | now | inhh:mm]

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. Enter your password if prompted.
Step 2	upgrade automatic runversion [athh:mm | now | inhh:mm] Example: Router# upgrade automatic runversion at 7:30	Reloads the router with the new image. Note    You can also use the upgradeautomaticgetversion command to reload the router with the new Cisco IOS software image. But, if you have already downloaded the Cisco IOS software image using the upgradeautomaticgetversion command, you must use the upgradeautomaticrunversion command to reload the router.

SUMMARY STEPS

1.    enable

2.    upgrade automatic abortversion

DETAILED STEPS

	Command or Action	Purpose
Step 1	enable Example: Router> enable	Enables privileged EXEC mode. Enter your password if prompted.
Step 2	upgrade automatic abortversion Example: Router# upgrade automatic abortversion	Cancels the Cisco IOS software image upgrade.