1. 串口参数：
波特率(Baud rate)：115200；
数据位数(Data bits)：8；
停止位数(Stop bits)：1；
奇偶校验(Parity)：无(None)；
流控制(Flow control）：XON/XOFF
就是一般软件的默认值
2. 更改设备默认用户密码
|
1 2 3 4 5 6 |
hostname > enable hostname # configure terminal hostname (config) # username admin password newpassword hostname (config) # write memory Saving configuration file … Done! hostname (config) # |
3. 更改设备默认IP
|
1 2 3 4 5 6 7 8 9 |
hostname > enable hostname # configure terminal hostname (config) # no interface ether1 dhcp hostname (config) # interface ether1 ip address 192.168.88.225 /24 hostname (config) # ip default-gateway 192.168.88.1 ether1 hostname (config) # ip name-server 192.168.88.1 hostname (config) # write memory Saving configuration file … Done! hostname (config) # |
4. 重启
|
1 2 3 4 5 |
hostname > enable hostname # configure terminal hostname (config) # reload Configuration has been modified; save first? [yes] yes hostname (config) # |
5. 关机
|
1 2 3 4 5 |
hostname > enable hostname # configure terminal hostname (config) # reload halt Configuration has been modified; save first? [yes] yes hostname (config) # |
6. 显示当前配置
|
1 2 3 4 |
hostname > enable hostname # configure terminal hostname (config) # show run-config hostname (config) # |
7. metadata 更新
|
1 2 3 4 5 |
hostname (config) # fenet metadata refresh cms.version.latest: check-done: New system image 10.0.1 is available cms.version.latest: check-done: New system image 10.0.1 is available meta data deployed successfully. hostname (config) # |
这个是检查系统镜像 image 是否所有需要更新
8. image 检查和更新
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 |
hostname (config) # show fenet image status Progress of latest action taken: action check initiated Sat Jun 15 01:31:35 2024 applying check for image emps action check completed Sat Jun 15 01:31:36 2024 check-done: New OS-image available: 10.0.1 status hostname (config) # hostname (config) # fenet image fetch Operation initiated in the background. Run 'show fenet image status' for status hostname (config) # hostname (config) # show fenet image status Progress of latest action taken: action fetch initiated Sat Jun 15 01:35:31 2024 applying fetch for image emps fetching requested image 10.0.1 initiated fetching image-emps_10.0.1 0 % completed hostname (config) # hostname (config) # show fenet image status Progress of latest action taken: action fetch initiated Sat Jun 15 01:35:31 2024 applying fetch for image emps fetching image-emps_10.0.1 100 % completed cleaning up disk space done fetching requested image 10.0.1 done action fetch completed Sat Jun 15 01:36:37 2024 fetch-done: OS image downloaded successfully: image-emps_10.0.1.img status hostname (config) # hostname (config) # hostname (config) # fenet image install Operation initiated in the background. Run 'show fenet image status' for status hostname (config) # hostname (config) # show fenet image status Progress of latest action taken: action install initiated Sat Jun 15 01:37:36 2024 applying install for image emps installing image-emps_10.0.1.img initiated hostname (config) # hostname (config) # show fenet image status Progress of latest action taken: action check initiated Sat Jun 15 01:41:21 2024 applying check for image emps install-info: New image installed successfully (Reload required) status hostname (config) # hostname (config) # show images Installed images: Partition 1: emps eMPS (eMPS) 10.0.1.997401 #997401 2024-03-12 10:11:55 x86_64 build@vta934:Trellix/10.0.x-bona Partition 2: emps eMPS (eMPS) 9.1.4.979731 #979731 2022-10-27 00:09:14 x86_64 build@vta948:Trellix/9.1.x-rainier Last boot partition: 2 Next boot partition: 1 Images available to be installed: image-emps_10.0.1.img emps eMPS (eMPS) 10.0.1.997401 #997401 2024-03-12 10:11:55 x86_64 build@vta934:Trellix/10.0.x-bona image-emps_9.1.4.img emps eMPS (eMPS) 9.1.4.979731 #979731 2022-10-27 00:09:14 x86_64 build@vta948:Trellix/9.1.x-rainier No image install currently in progress. Boot manager admin password: undisclosed password set Boot manager tools menu password: undisclosed password set Image signing: trusted signature always required Admin require signed images: no (not active) Settings for next boot only: Fallback reboot on configuration failure: yes (default) hostname (config) # hostname (config) # reload Configuration has been modified; save first? [yes] Configuration changes saved. Rebooting... hostname (config) # System shutdown initiated -- logging off. |
这是一个 EX 设备完成的更新操作过程，其他比如HX,NX,FX,AX 等类似
9. guest-images 检查和更新
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 |
hostname (config) # hostname (config) # show fenet guest-images status DTI Guest-images Server Settings: Dynamic Threat Intelligence Service Update source : <online> Enabled : yes Address : 192.168.88.88 : singleport Username : fev-xxxxxxxx Guest-images Automatic actions Enabled : yes Action : update Email Notify : no Scheduled : daily during off-peak at 0:53 Fenet Guest-images Metadata: Guest-images Package Info Status ok : no Supported versions : - Installed version : 21.0302 Available version : 23.1202 hostname (config) # hostname (config) # guest-images download-and-install The following new profiles will be downloaded and installed: centos-7.2 - 17.0107 osx-10.11.3 - 16.1201 osx-10.8.2 - 16.1201 win10x64m - 23.1202 win7-sp1m - 23.1202 win7x64-sp1m - 23.1202 winxp-sp3m - 23.1202 Downloading guest-images Run 'show guest-images download' to check status. hostname (config) # hostname (config) # show guest-images download A guest-image download is in progress. Overall progress: (12.36 % completed) system is now downloading image osx-10.11.3.img for profile osx-10.11.3 time elapsed since start of download: 46m 44s Run 'guest-images download cancel' to cancel. Default download limit-rate: None Status of most recent guest-images operation: Download-Progress: Guest images are being downloaded. Fenet source: CMS (192.168.88.8 : single-port) Download speed: 12.93 MBps hostname (config) # show guest-images download Found New Guest-images Downloaded but NOT installed! Downloaded Time: 2024-06-15 11:19:28 The following downloaded Guest-image profiles are available for install: centos-7.2 (Version 17.0107): Linux OS centos-7.2. osx-10.11.3 (Version 16.1201): Mac OS X 10.11.3 English 64-bit. osx-10.8.2 (Version 16.1201): Mac OS X 10.8.2 English 64-bit. win10x64m (Version 23.1202): Windows 10 English 64-bit (Intel). win7-sp1m (Version 23.1202): Windows 7 SP1 English 32-bit (Intel). win7x64-sp1m (Version 23.1202): Windows 7 sp1 English 64-bit (Intel). winxp-sp3m (Version 23.1202): Windows XP sp3 English 32-bit (Intel). Run 'guest-images install' to install Guest-image downloads. Run 'guest-images download delete' to delete downloads. Status of most recent guest-images operation: Download-Done: Guest images have been downloaded. Fenet source: CMS (192.168.88.8 : single-port) hostname (config) # guest-images install Found guest-images that can be installed Installing guest-images Terminating running workorders and virtual analysis subsystem ............ Installation complete! hostname (config) # hostname (config) # show guest-images Release(bundle) version: 23.1202 Name ID Disabled Version Type centos-7.2 30 - 17.0107 Analysis osx-10.11.3 93 - 16.1201 Analysis osx-10.8.2 90 - 16.1201 Analysis win10x64m 68 - 23.0102 Analysis win7-sp1m 65 - 23.0102 Analysis win7x64-sp1m 66 - 23.0102 Analysis winxp-sp3m 43 - 23.0102 Analysis Installed at : 2024-06-16 02:54:45 A guest-image manifest download is in progress. Status of most recent guest-images operation: Install-Done: operation is complete Fenet source: CMS (192.168.88.8 : single-port) hostname (config) # |
10. CMS 上查看security-content、image 和 guest-images 缓存情况
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 |
hostname (config) # show fenet dti proxy cached-content Size Type File 2776496 SC-Delta sc-stable_1479.254_6ff9e8822a5c876e6c6af1c9baca8100734f726c_1479.256.img 1078344063 SysImage image-emps_10.0.1.img 19842362556 GI win7x64-sp1m.23.0102.img 2556297 SC-Delta sc-stable_1479.252_8510ecdd289a872e330413bc8e8d5dcd35066cd8_1479.254.img 2564056 SC-Delta sc-stable_1479.248_9dc78117ad8c847f280dd3cf8e57225b382a0be1_1479.250.img 7115302012 GI winxp-sp3m.23.0102.img 18060450158 GI win7-sp1m.23.0102.img 2701752 SC-Delta sc-stable_1479.250_ffb9fc87525664e5ed0b9459fb6650f9f9c2d08e_1479.252.img 3443554927 GI centos-7.2.17.0107.img 13033986812 GI osx-10.8.2.16.1201.img 12399030239 GI win10x64m.23.0102.img hostname (config) # |
使用CMS(CM) 的好处是，有些内容会缓存，比如沙箱类的 NX,EX,AX,FX,VX 产品，使用的同样的 guest-images 和 security-content。一次更新，其他都会用到。