Note: In a cell environment, the DPOD server mentioned below is the Cell Manager.
In order to use the appliance firmware upgrade feature, some special configuration needs to be done:
Change the "Firmware Upgrade - Repository Path" in the system parameters page to a new dedicated mount point on DPOD server.
Change the "Firmware Upgrade - Local Node IP Address" in the system parameters page to the IP address of the DPOD server that monitored gateways should use to access it via SSH.
Make sure the gateways can access the DPOD server using this IP address and port 22, and that no firewall or routing issues prevent that.Change the "Firmware Upgrade - OS User Name" and "Firmware Upgrade - OS User Password" in the system parameters page to the DPOD server user and password that will be used to access the DPOD server via SSHDuring a firmware upgrade, the DataPower gateway will use SSH to pull the firmware image from DPOD. Use the following steps to configure a new OS user that will be used for that.
The system administrator should create a
non-privileged user in the DPOD server (e.g:
dpodssh
) and set its password:Code Block language bash
productuser1sudo useradd -md /home/
productuser1dpodssh -s /bin/bash
Set the user's password by issuing: "
sudo passwd productuser1
", the maximum password length is 30 characters.Update the system parameters mentioned above.
dpodssh sudo passwd dpodssh
Verify that user and password configured above are valid, and that the password is not expired, by manually logging in to the DPOD server using SSH with the configured user name and password.
Verify that the user
has access to the repository path configured
at item 1. The access to the directory should include
x
(
execute), so the user is able to list the files in the directory.
While connected with the user, try to list (ls
) the repository path and make sure
the user can access it.
Change the "Firmware Upgrade - OS User Name" and "Firmware Upgrade - OS User Password" in the system parameters page to the DPOD server user and password configured above.