Security

last person joined: 10 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Upgrade clearpass directly to 6.5.5 from 6.5.0

This thread has been viewed 1 times
  • 1.  Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Feb 08, 2016 06:37 AM

    HI,
    is possible to Upgrade clearpass directly to 6.5.5 from 6.5.0 ?
    In software update i don't see patches 6.5.1, 6.5.2 and ecc. but only 6.5.5.
    So i can directly update to it?

     

    Regards

    Amdrea



  • 2.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0
    Best Answer

    Posted Feb 08, 2016 08:06 AM
    Yes you can

    Sent from Outlook Mobile


  • 3.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 07, 2016 10:57 AM

    Hi,

     

    I need to downgrade version 6.5.5 to 6.5.0 it is possible?

     

    That I had made a backup on 6.5.0 and 6.5.5 installation have a error.

     

    Thanks.



  • 4.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 07, 2016 11:21 AM

    Hi,
    Personally i never done a downgrade of clearpass.
    In your case you have to do a downgrade of an appliance that now have dirty installation.

    If it is virtual you can try to restore a snapshot, if you have it.

    With hardware you can perforom a switch of boot partition:

    ---------------------------------------------------
    In the CLI you can change the boot partition back to the older version. It behaves similar to the controllers.

    system boot-image -l
    (displays version info for the partitions)

    system boot-image -a <imagever>
    (sets the active boot partition to the version specified)

    Tim Cappalli | Aruba Global Enablement
    @timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
    ---------------------------------------------------
    Link of disucssion related to version 6.2 and 6.3:
    http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Roll-back-on-Clearpass-Hardware-Appliance/td-p/95286
    ---------------------------------------------------

    On my test appliance where I upgrade by 6.5.0 to 6.5.5:
    ---------------------------------------------------
    [appadmin@CP-500]# system boot-image -l

    ClearPass Platform 6.5.5.78974 [Active] on SCSI (0:1)
    ---------------------------------------------------
    I don't see any other partition.... maybe rollback is not longer supported, or is support only for major releases.

     

    I in your cloths would do a fresh install of 6.5.0 and use the backup for restore configuration.
    For test maybe is better to use an eval appliance.

    the other way can be, open a case with the tac, to verify if there is any suggestions.

    Regards
    Andrea



  • 5.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 07, 2016 11:29 AM

    Hi,

     

    Thanks for your response.

     

    I need to probe this command on the appliance of the client, in my VM i have only one HDD.

     

    [appadmin@clearpass1]# system boot-image -l

    ClearPass Platform 6.5.5.78974 [Active] on SCSI (0:1)

     

    Someone can me check if appliance have two hdd?



  • 6.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 07, 2016 11:37 AM

    HI,

    I know that the second disk is dedicated to database and not to configuration.
    I'm in your same situation, i have the same result.

    is too long replicate manually configuration?

     

    I'm still of idea that install the backup on a 6.5.0 fresh install is the best way.

    can you try to put the customer backup on you vm appliance? (performing a snapshot before the test)

     

    Regards
    Andrea



  • 7.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 07, 2016 03:23 PM

    Let me get the facts correct firstly.

     

    Disk SCSI 0:1 is partitioned into a separate volumes by CPPM. The fact you see only a single CPPM install tells me that this box was delivered with 6.5.3 [most likely] as this is the shipping OS at the current time and it has been upgraded to 6.5.5.

     

    No disk is reserved for DB or config each of the two disk volumes is a complete copy of a CPPM running instance. IF you REALLY need to get to 6.5.0 then this will be a complicated process. We don't have a way to install 6.5.0 on the second partition or downgrade currently. 

     

    Please can we understand what the issue with 6.5.5 and see if we can resolve this?

     

     



  • 8.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 08, 2016 03:16 AM

    Hi,


    At this moment, we don't have any issues.
    But we need to prepare documentation for a migration from 6.5.0 to 6.5.5 for a client.
    And we need to put in the document the possible restoration

     

    So there arent any procedure to restore the version 6.5.0 when we have update on 6.5.5?



  • 9.  RE: Upgrade clearpass directly to 6.5.5 from 6.5.0

    Posted Mar 08, 2016 12:04 PM

    If its a VM then you can snapshot the VM to regress, as this is a point patch upgrade you can't role back. We looking at adding the ability to regress from a point install but nothing at this time.