{"id":639,"date":"2023-10-23T10:48:00","date_gmt":"2023-10-23T09:48:00","guid":{"rendered":"https:\/\/www.shakral.de\/blog\/?p=639"},"modified":"2023-10-23T10:48:00","modified_gmt":"2023-10-23T09:48:00","slug":"brocade-fos-9-x-ftp-update","status":"publish","type":"post","link":"https:\/\/www.shakral.de\/blog\/2023\/10\/23\/brocade-fos-9-x-ftp-update\/","title":{"rendered":"Brocade FOS 9.x \/\/ FTP-Update"},"content":{"rendered":"

In der aktuellen Brocade FabricOS Generation 9.x sind die unsicheren Protokolle deaktiviert worden. F\u00fcr Telnet defintiv wichtig, bei FTP f\u00fcr das Update etwas aufwendiger. Vor allem f\u00fcr einen Dienstleister der oft zwischen den Kundenumgebungen wechselt.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Dieser Securemode ist anders, als in den fr\u00fcheren Versionen. Bedeutet die einfach ergoogelte M\u00f6glichkeit mit „secModeDisable“ funktioniert nicht mehr.<\/p>\n\n\n\n

Die Einstellung hierf\u00fcr versteckt sich im Configure Chassis Men\u00fc<\/p>\n\n\n

\nSWITCHNAME:admin> configurechassis\n\nConfigure...\n\n  cfgload attributes (yes, y, no, n): [no] y\n\n        Enforce secure config Upload\/Download (yes, y, no, n): [yes] no\n        Add Suffix to the uploaded file name (yes, y, no, n): [no]\n        Do you want to enable auto firmwaresync (yes, y, no, n): [no]\n\n  ssl attributes (yes, y, no, n): [no]\n  webtools attributes (yes, y, no, n): [no]\n  Custom attributes (yes, y, no, n): [no]\n  system attributes (yes, y, no, n): [no]\n  fos attributes (yes, y, no, n): [no]\n<\/pre><\/div>\n\n\n
Die Einstellung „Enforce secure config Upload\/Download<\/em>“ auf „NO<\/strong>“ gestellt, schaltet die alten Protokolle f\u00fcr das Firwmare-Update wieder frei.<\/p>\n\n\n
\nfirmwaredownload Usage: [options][&lt;host>,&lt;user>,&lt;path>,&lt;password>]\nOptions:\n -h     Display command usage\n -acceptEULA    Confirms acceptance of EULA.\n            User will be prompted to accept EULA if this option is not specified.\n -showEULA      Display of EULA agreement.\n -U     Download firmware from USB device on active CP (if supported)\n -N     Skip the prompt for confirmation from user.\n -s     Single mode enable\n -b     Auto-reboot after firmware download completes. Use with "-s" option\n -n     Disable auto-commit. Use with "-s" option\n -p     Protocol to use for firmware download. Valid options are &lt;ftp|scp|sftp|http>\n -A     Authentication Method for protocol. Valid options are &lt;cra>. Use with SCP protocol\n -m     Server Port number. Valid only if the protocol is scp or sftp or http.\n -k     Enable SFTP StrictHostKeyChecking. Valid only if the protocol is scp or sftp.\n -r     Download firmware on secondary partition without activation\n -L     Legacy firmware download.\nRun the command without arguments for interactive mode.\n\n<\/pre><\/div>\n\n\n
FTP funktioniert nun wieder f\u00fcr das Firmwareupdate<\/p>\n\n\n
\nSWITCHNAME:admin> firmwaredownload -p ftp &lt;FTP-IP>,&lt;FTP-User>,\/v9.1.1c_LW,&lt;FTP-Password>-acceptEULA\n\nChecking system settings for firmwaredownload...\n\nWARNING: HTTPS client ca-bundle is being updated in the target firmware version. Please check HTTPS client connectivity in the new firmware.\nWARNING: Root account is disabled in the target firmware version.\nWARNING: RTA feature is enabled in the target firmware version. Please check the system time configuration before proceeding.\n\nSystem settings check passed.\n\nYou can run firmwaredownloadstatus to get the status\nof this command.\n\nThis command will cause a warm\/non-disruptive boot but will\nrequire that existing telnet, secure telnet or SSH sessions\nbe restarted.\n\n\n\nDo you want to continue (Y\/N) [Y]: y\nFirmware download in progress, please wait.\n\n<\/pre><\/div>\n\n\n
Da solche Sicherheitseinstellungen sehr wichtig sind, schalten wir sie auch wieder ein, nachdem wir mit den Updates durch sind.<\/p>\n\n\n
\nSWITCHNAME:admin> configurechassis\n\nConfigure...\n\n  cfgload attributes (yes, y, no, n): [no] y\n\n        Enforce secure config Upload\/Download (yes, y, no, n): [no] y\n        Add Suffix to the uploaded file name (yes, y, no, n): [no]\n        Do you want to enable auto firmwaresync (yes, y, no, n): [no]\n\n  ssl attributes (yes, y, no, n): [no]\n  webtools attributes (yes, y, no, n): [no]\n  Custom attributes (yes, y, no, n): [no]\n  system attributes (yes, y, no, n): [no]\n  fos attributes (yes, y, no, n): [no]\n<\/pre><\/div>","protected":false},"excerpt":{"rendered":"
In der aktuellen Brocade FabricOS Generation 9.x sind die unsicheren Protokolle deaktiviert worden. F\u00fcr Telnet defintiv wichtig, bei FTP f\u00fcr das Update etwas aufwendiger. Vor allem f\u00fcr einen Dienstleister der oft zwischen den Kundenumgebungen...<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,115,114,45],"tags":[42,49,116,54,119,117],"class_list":["post-639","post","type-post","status-publish","format-standard","hentry","category-allgemein","category-brocade","category-san-storage","category-storage","tag-brocade","tag-ftp","tag-security","tag-update","tag-verteckteeinstellung","tag-workaround"],"_links":{"self":[{"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/posts\/639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/comments?post=639"}],"version-history":[{"count":3,"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/posts\/639\/revisions"}],"predecessor-version":[{"id":643,"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/posts\/639\/revisions\/643"}],"wp:attachment":[{"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/media?parent=639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/categories?post=639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shakral.de\/blog\/wp-json\/wp\/v2\/tags?post=639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}