jbits.se

 SNX R71 HFA1 files can be downloaded from:

• SSL Network Extender R71 HFA1 for Windows (msi)
• SSL Network Extender R71 HFA1, Security Gateway package
• SSL Network Extender R71 HFA1, Connectra Gateway package

VPN-1 R65 Gateway and up

1. Backup the $FWDIR/conf/extender/CSHELL directory:
tar -czvf CSHELL-Backup-`/bin/date +%F`.tgz CSHELL/*
2. Download the SNX_for_VPN1_Win7.tgz file.
3. Extract the file to the $FWDIR/conf/extender/CSHELL directory.
4. Move the files cashell_ver.txt and slim_ver.txt to $FWDIR/conf/extender
5. Install a policy on the gateway.

Connectra Gateway

1. Backup the $CVPNDIR/htdocs/SNX/CSHELL directory.
2. Download the SNX_for_Connectra_Win7.tgz file.
3. Extract the file to the $CVPNDIR/htdocs/SNX/CSHELL directory.
4. Install a policy on the gateway.

Restoring the original SNX version

To revert back to the original SNX version, restore the files you backed
up in step 1 of the above procedures.

Preparations

Allow HP SMH (TCP2381) and SNMP to the modules from selected stations

Log in and create a temporary directory (e.g. /var/HPAgents)

Download the following packages from www.hp.com for your hardware / RHEL3

• hpasm (System Health Application and Insight Management Agents)
  201002, latest version: hpasm-7.8.1-116.rhel3.i386.rpm
• cmanic (HP NIC agent), and the optional
  201002, latest version: cmanic-7.7.0-5.rhel3.linux.rpm
• hpsmh (System Management Homepage)
  201002, latest version: hpsmh-2.1.8-177.linux.i386.rpm

Download the splat_hpasm_support_files.tgz support files
http://www.opsec.com/solutions/partners/hpasm.html

Installing System Management Homepage (optional)

Login as expert on SPLAT and create the following file:
    echo "Red Hat Enterprise Linux ES release 3 (Taroon)" > /etc/redhat-release

Install the hpsmh package:
    rpm -ivh hpsmh-2.1.8-177.linux.i386.rpm

Install support files for HPASM

Extract the Splat hpasm supportfiles:
    tar xzvf splat_hpasm_support_files.tgz splat_hpasm

Copy the IPMI sysconfig file (If your system has an iLO2 Mgmt Controller)
    cp splat_hpasm/init_scripts/sysconfig_ipmi /etc/sysconfig/ipmi

Copy the IPMI init script for your kernel version (Check with uname –r)
    cp splat_hpasm/init_scripts/2.4_init_ipmi /etc/init.d/ipmi

Copy the libstdc++-3-libc6.2-2-2.10.0.so file to /usr/lib and set up a link
    cp splat_hpasm/libstdc++-3-libc6.2-2-2.10.0.so /usr/lib
    ln -s /usr/lib/libstdc++-3-libc6.2-2-2.10.0.so /usr/lib/libstdc++-libc6.2-2.so.3
    chmod 755 /usr/lib/libstdc++-3-libc6.2-2-2.10.0.so

Enable SNMP

Snmp service enable

Install HPASM

Remove any previous versions if present:
    rpm -e hponcfg
    rpm -e cmanic
    rpm -e hprsm
    rpm -e hpasm

Install the HPASM package
    rpm -ivh hpasm-7.8.1-116.rhel3.i386.rpm

Install the NIC Agents
    rpm -ivh cmanic-7.7.0-5.rhel3.linux.rpm

Configuration

Backup your snmp config files
    cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf-pre-`/bin/date +%Y%m%d`
    cp /etc/snmp/snmpd.users.conf /etc/snmp/snmpd.users.conf-pre-`/bin/date +%Y%m%d`

For first time configuration run:
    hpasm activate

To reconfigure run:
    /etc/init.d/hpasm configure or /etc/init.d/hpasm reconfigure

Do you wish to continue? <y/n> (blank is y) y
Do you want to load the hp modules even though they may "taint" your kernel? <y/n> (Blank is y) n
Do you wish to use an existing snmpd.conf (y/n) (Blank is n): n

Do you require SNMP agents (y/n) ? (Blank is y): y
Do you require Storage Agent support (y/n) ? (Blank is y): y
Do you require performance agent support (y/n) ? (Blank is y): y

Enter the localhost SNMP Read/Write community string
(one word, required, no default): ********
Re-enter the same input to confirm:********

Enter localhost SNMP Read Only community string
(one word, Blank to skip): ********
Re-enter the same input to confirm: ********

Enter Read/Write Authorized Management Station IP or DNS name
(Blank to skip): [Blank]

Enter Read Only Authorized Management Station IP or DNS name
(Blank to skip): [Blank]

Enter default SNMP trap community string
(One word; Blank to skip): [Blank]

Enter SNMP trap destination IP or DNS name
(One word; Blank to skip): [Blank]

Enter system contact information
(Name, phone, room, etc; Blank to skip): [Blank]

Enter system location information
Building, room, etc; Blank to skip): [Blank]

Do you wish to disable hpsmh support (y/n) (Blank is n):n

Do you wish to keep CCISS device handle open (y/n): y

Restore snmpd.users.conf:
    mv /etc/snmp/snmpd.users.conf.bak /etc/snmp/snmpd.users.conf

Restart SNMP Daemon
    service snmpd restart

* Make sure module 1 is active
* Run cphaconf set_ccp boradcast on both modules
* Upgrade module 2
* Install a policy (Will install on 2 and fail on 1)
* Run cphaprob stat and make sure module 1 is active and module 2 is ready
* Run cphastop on Module 1, Module 2 becomes active
* Upgrader Module 1
* Run cphaconf set_ccp multicast on both modules
* Run cphastart on all modules and make sure operation is back to normal