topic erased all from IPS in Network Security

erased all from IPS

seanbakers — Sun, 10 Mar 2019 12:33:07 GMT

i have by mistake issued the remove all from rommon & not my ips has no image.

My question is, i have another IPS that i wish to copy the image from. I cannot work out how to do this?

I dont think copy flash tftp works.

The IPS is a 4240, i do have a conpact flash card (128mb) which i could copy the image onto & put into the no working ips.

what cmds do i issue to do this?

please help!!

erased all from IPS

andrey.dugin — Tue, 29 Nov 2011 16:13:39 GMT

It may help you:

http://www.cisco.com/en/US/docs/security/ips/5.0/configuration/guide/cli/cliimage.html#wp1060091

erased all from IPS

seanbakers — Tue, 29 Nov 2011 17:10:23 GMT

thanks for the link, does not look like you can tftp the image from an existing IPS to a tftp server. Do you know if once in rommon i can copy the image to compact flash?

erased all from IPS

andrey.dugin — Wed, 30 Nov 2011 08:12:12 GMT

According to this document you can use tftp for image downloading with rommon.

I don't know if you can use compact flash to copy the image.

erased all from IPS

seanbakers — Wed, 30 Nov 2011 13:43:35 GMT

im getting a error when trying the tftp, its saying it cannot find the file.

i have connected my laptop to the management port 0/0#

ips = 192.168.1.1

laptop = 192.168.1.2

can ping between these.

im using TFTPD32 as my TFTP server.

i have put the image in the TFTP root folder (c:\program files\TFTPD32) & set the IP to this directory:

romon> IMAGE\c:\program files\TFTPD32\IPS-K9-sys.x.x.x.x

am i doing something wrong?

erased all from IPS

andrey.dugin — Wed, 30 Nov 2011 13:53:02 GMT

i have put the image in the TFTP root folder (c:\program files\TFTPD32) & set the IP to this directory:

romon> IMAGE\c:\program files\TFTPD32\IPS-K9-sys.x.x.x.x

am i doing something wrong?

I think that syntax is wrong.

You must type

rommon> IMAGE=C:\path\filename

but you type wrong symbol ("\" instead of "=").

erased all from IPS

seanbakers — Wed, 30 Nov 2011 15:06:36 GMT

i have managed to tftp the file over but when i boot it does not see the file.

could it be that im using a PKG file & not a IMG file?

im using IPS-K9-6.2-2-E4.PKG.

erased all from IPS

andrey.dugin — Mon, 12 Dec 2011 15:31:32 GMT

You must use .img file from "System software" downloads section but not "System upgrades".

PKG files are used by Cisco IPS Linux OS to install upgrades on working sensor (as rpm -U command).

IMG file is file used by Cisco rommon to load from.