Challenge 35 Security Begins & Never Ends with Updates: Networking Edition - korzynski/NICE-Challenge GitHub Wiki
Task list
- Update VyOS router (172.16.0.1)
- ISO is on Fileshare (172.16.30.32) at /home/samba/dasShare
- Update pfSense Firewall (172.16.30.2)
- Keep downtime minimal
pfSense
From Security-Desk
- Log onto web interface at http://172.16.30.2
- In Version section under System information, click next to Update Available
- Installed version is 2.1.2-RELEASE
- New version is 2.3.5-RELEASE
- Enable Perform full backup prior to upgrade
- click Invoke auto upgrade
- Wait for reboot. Log in and verify version 2.3.5-RELEASE
VyOS
From Security-Desk
- SFTP to 172.16.30.32
- navigate to /home/samba/dasShare
get vyos-1.1.8-amd64.iso
- SFTP to 172.16.0.1
put vyos-1.1.8-amd64.iso
- SSH to 172.16.0.1
$ show system image
1: 1.1.7 (default boot) (running image)
2: old-non-image-installation
$ add system image ./vyos-1.1.8-amd64.iso - show system image to verify the new image is default boot
$ reboot- show system image to verify the new image is running image