Wired Intelligent Edge

 View Only
last person joined: 17 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Expand all | Collapse all

AOS-CX allow-unsafe-updates via REST API?

This thread has been viewed 45 times
  • 1.  AOS-CX allow-unsafe-updates via REST API?

    Posted Dec 13, 2023 01:51 PM

    Hello everyone,

    is it possible to allow unsafe updates via API?

    Couldn't find anything in the documentation so far.



  • 2.  RE: AOS-CX allow-unsafe-updates via REST API?

    Posted Feb 16, 2024 05:33 AM

    Doesn't seem possible right now. I asked the same question here:
    https://community.arubanetworks.com/discussion/is-it-possible-to-allow-unsafe-updates-via-api-or-ansible




  • 3.  RE: AOS-CX allow-unsafe-updates via REST API?

    Posted Feb 17, 2024 05:54 AM

    I have a Expect script which may be used during staging. 

    As you can see it is a reboot after enable the allow-unsafe-updates. I use it as part of ZTP so new firmware is automaticly downloaded and I need to reboot with allow-unsafe-updates if needed.

    If you want to use this as part of a upgrade of switches in production, remove the reboot. And perform the firmware upgrade using your standard tools.

    #!/usr/bin/expect
    
    #Usage  allow-unsafe-upgrade.expect <host> <ssh user> <ssh password>
    
    set timeout 60
    
    spawn ssh [lindex $argv 1]@[lindex $argv 0]
    
    expect "yes/no" {
            send "yes\r"
            expect "*?assword" { send "[lindex $argv 2]\r" }
            } "*?assword" { send "[lindex $argv 2]\r" }
    
    expect "# " { send "configure\r" }
    expect "fig)# " { send "allow-unsafe-updates 20\r" }
    expect "(y/n)? " { send "y\r" }
    expect "fig)# " { send "boot system\r" }
    expect "(y/n)? " {
            send "y\r"
            expect "(y/n)? " { send "y\r" }
            } "(y/n)? " { send "y\r" }
    
    expect eof


    ------------------------------
    Arne Opdal
    ------------------------------



  • 4.  RE: AOS-CX allow-unsafe-updates via REST API?

    Posted Feb 19, 2024 03:23 AM

    Thanks alot :) 




  • 5.  RE: AOS-CX allow-unsafe-updates via REST API?

    Posted Feb 23, 2024 08:42 AM

    Thanks Arne for the script, that looks like a good workaround.


    But my understanding is that the AOS-CX operating system is a fully API featured one, isn't it?

    Then it should also be possible to implement this function on the API.

    @jonlar, @ArneO: Have you already contacted TAC support about this?

    Otherwise I will create a request for this.




  • 6.  RE: AOS-CX allow-unsafe-updates via REST API?

    Posted Feb 28, 2024 09:04 AM

    I know other stuff that doesn't work with the API as well, so they probably have a feature backlog with the API. 

    I have not contacted TAC.




  • 7.  RE: AOS-CX allow-unsafe-updates via REST API?

    Posted Mar 18, 2024 02:47 AM

    I have opened a TAC case.

    There it could be determined that the function is not implemented.

    I was advised to create a feature request at https://innovate.arubanetworks.com/, which I did.

    The request can be found at https://innovate.arubanetworks.com/ideas/SWITCH-I-916

    Upvotes are appreciated :)