Recovery Using A Bootp Server - McAfee SG310 Administration Manual

Upgrading firmware
Recovering from a failed upgrade
To recover with Netflash
Use the following procedure to perform a recovery boot using the Netflash program on a Windows PC:
Attach the UTM Firewall appliance's LAN port or switch directly to your PC using a straight cable.
1
Login to your PC with administrator privileges (2000/XP/NT4 only).
2
Ensure there are no DHCP server programs or services (Start > Run > Open: services.msc) running on
3
your PC.
Disable the built-in Windows firewall (Control Panel > Windows Firewall > Off), and any third party
4
firewall or antivirus software.
Power off the appliance. Press and hold the erase button while powering the appliance on again; keep the
5
erase button held in for 5-10 seconds.
Note: If you are recovering an SG560U, the LED lights on the unit will turn on in sequence while the erase
button is being held, starting with the power LED. Continue to hold the erase button until the sequence is
complete to proceed with the Netflash recovery. If the erase button is released at any time prior to the
completion of the 10 second LED sequence, the UTM Firewall device will reboot into the boot recovery image
(see Recovery using the boot recovery
Double-click the Netflash icon to launch it.
6
Click Recover > Network Recovery.
7
Click Start Recovery.
8
Enter a free IP address in the same network range as your PC.
9
When prompted, select the appropriate recovery image file (.sgr) for your model.
10
If the recovery procedure fails at or after the Assigning IP address step, but the Heart Beat/H/B light is
11
flashing, the appliance may have become unreachable due to bad configuration. If this is the case, hit the
erase button twice within 3 seconds, 1 second apart to restore factory default configuration, power off the
appliance, and restart the recovery procedure from the beginning.
When prompted, select the appropriate final firmware image file (.sgu). Each .sgu filename designates
12
the model for which it is intended.
You may be prompted to enter further information, such as your UTM Firewall appliance's Web
13
administration port or password.
Wait for the recovery procedure to complete and the appliance to finish reprogramming. It may take up
14
to 15 minutes for your appliance to finish reprogramming. After it has finished, it reboots automatically
with its old configuration intact. If it is unreachable after rebooting, press the erase button twice within 3
seconds to restore factory default configuration, then follow the instructions in the Quick Install Guide to
begin reconfiguring your appliance.

Recovery using a BOOTP server

To recover your UTM Firewall appliance using a BOOTP server, two files are required. These are the
recovery image (.sgr) and final firmware image (.sgu) appropriate for your appliance. The image files are
available in the \images directory of the UTM Firewall CD that shipped with your appliance.
The following is a brief guide to performing a recovery boot when you are unable to access either Netflash
or a Windows PC on which to run it. More comprehensive instructions are not given, as they vary depending
on your operating system and server software packages.
The recovery procedure involves network booting the appliance using a BOOTP server with a recovery
image file (.sgr), then upgrading with a final firmware image file (.sgu) as per a normal HTTP or TFTP flash
upgrade to reprogram its flash to a usable state.
To perform the recovery boot, you must have a firmware image for your appliance. The firmware that
shipped with your appliance is located in the \firmware directory on the UTM Firewall CD. The latest
firmware for your appliance can be obtained from my.securecomputing.com.
380 McAfee UTM Firewall 4.0.4 Administration Guide
image).