How can i re-image ver 5.X to 4.X on ips 4240?

[johnyoon75]

Hello.

I have a ips 4240 with ver 5.X.

I want to downgrade 5.X to 4.X.

How can i do?

Please, let me know...

Regard,

John.

[rwassom]

John,

The only way to downgrade from 5.x to 4.x is to load the 4.1(4) system image using TFTP. You will lose all configuration settings when you do this. Due to the nature of the changes necessary to upgrade from 4.x to 5.x, you can not perform a simple downgrade to back out the 5.x update.

Instructions for loading the system image can be found in the readme file for the image. The correct file name on CCO is 'IPS-4240-K9-sys-4.1-4-S91.img'. Let me know if you have any problems.

Regards,

Rusty

[johnyoon75]

Thank you for your response.

Actually, I tried to upgrade from 5.x to 4.X by using TFTP with rommon mode.

But, I couldn't success it.

It took about 5 hours loading 4.X image using TFTP.

I'm curious about this.

Anyway, Here is log file during upgrade.

--- omit ----

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Received 2144337920 bytes

Bad magic number (0x-6cfaf90a)

rommon #8>

Booting system, please wait...

CISCO SYSTEMS

Embedded BIOS Version 1.0(5)0 09/14/04 12:23:35.90

------- omit ----------

IPS-4240# sh ver

Application Partition:

Cisco Intrusion Prevention System, Version 5.0(0.29)S135.0

OS Version 2.4.26-IDS-smp-bigphys

Platform: IPS-4240-K9

Serial Number: XXXXXX

No license present

Sensor up-time is 0 min.

Using 348336128 out of 1984704512 bytes of available memory (17% usage)

system is using 17.3M out of 29.0M bytes of available disk space (59% usage)

application-data is using 36.3M out of 166.8M bytes of available disk space (23% usage)

boot is using 39.4M out of 68.6M bytes of available disk space (61% usage)

MainApp 2005_Feb_18_03.00 (Release) 2005-02-18T03:13:47-0600 Running

AnalysisEngine 2005_Feb_18_03.00 (Release) 2005-02-18T03:13:47-0600 Running

CLI 2005_Feb_18_03.00 (Release) 2005-02-18T03:13:47-0600

Upgrade History:

IDS-K9-maj-5.0-0.29-S91-0.29-.pkg 03:00:00 UTC Mon Feb 16 2004

Recovery Partition Version 1.1 - 5.0(0.29)S91(0.29)

IPS-4240#

[rwassom · Accepted solution]

John,

What type of TFTP server are you using? Make sure it does not have a file size limitation bug. We recommend a couple servers in the readme file for the image that have been tested and can handle the large image size. Also, verify the checksum for the file on your server against what is posted on CCO to make sure the file downloaded to that location correctly. The MD5 sum should be: d5c54dc3f704bfefdf8ae862d2ca9ca1

The file is only 58MB, so it shouldn't take too long to download unless you have a bad connection to the TFTP server.

Let me know what you find out.

-Rusty

[rwassom]

John,

Are you sure you specified the right file? If you did, it must be corrupt. Here is the output I get when I TFTP boot the 4.1(4) image:

[omit]

!!!!!!!!!!!!!!!!!

Received 58071400 bytes

Launching TFTP Image...

[STUB]

bziBegin=0x204F08

found kernel header (boot protocol ver 0x203)

2.4.22-recovery (stbaker@stbaker-lnx4.cisco.com) #2 Wed Nov 19 18:51:45 CST 2003

Notice the size of the file received? It is much less than what your output was showing. Be sure to use the following file from CCO: IDS-4240-K9-sys-4.1-4-S91.img

Make sure the file name does not get changed when the file gets saved locally. Some operating systems will add extensions to downloaded files without your permission.

-Rusty

[johnyoon75]

Thank you for your response.

Actually, I used to uploade isd image by using Pumkin TFTP software.

I changed aonther TFTP software,tftpd32e, which is recommend by cisco.

I can downgrade by using this program.

Thank you very much.

Regrad,

John.