Cisco 500 Series, Configuration Manual

Page: 933 / 1140

41-21
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 41 Managing Software, Licenses, and Configurations
Configuring Auto Update Support
Step 3
(Optional) To specify how often to poll the AUS for configuration or image updates, enter the following
command:
hostname(config)# auto-update poll-period poll-period [ retry-count [ retry-period ]]
The poll-period argument specifies how often (in minutes) to check for an update. The default is 720
minutes (12 hours).
The retry-count argument specifies how many times to try reconnecting to the server if the first attempt
fails. The default is 0.
The retry-period argument specifies how long to wait (in minutes) between retries. The default is 5.
Step 4
(Optional) To schedule a specific time for the security appliance to poll the Auto Update server, use the
following command:
hostname(config)#
auto-update poll-at
days-of-the-week time
[
randomize
minutes
] [
retry_count
[
retry_period
]]
days-of-the-week
is any single day or combination of days: Monday, Tuesday, Wednesday, Thursday,
Friday, Saturday and Sunday. Other possible values are daily (Monday through Sunday), weekdays
(Monday through Friday) and weekend (Saturday and Sunday).
time specifies the time in the format HH:MM at which to start the poll. For example, 8:00 is 8:00 AM
and 20:00 is 8:00 PM
randomize
minutes
specifies the period to randomize the poll time following the specified start time.
The range is from 1 to 1439 minutes.
retry_count specifies how many times to try reconnecting to the Auto Update Server if the first attempt
fails. The default is 0.
retry_period specifies how long to wait between connection attempts. The default is 5 minutes. The
range is from 1 and 35791 minutes.
Step 5
(Optional) If the Auto Update Server has not been contacted for a certain period of time, the following
command will cause it to cease passing traffic:
hostname(config)#
auto-update timeout
period
Where period specifies the timeout period in minutes between 1 and 35791. The default is to never time
out (0). To restore the default, enter the no form of this command.
Use this command to ensure that the security appliance has the most recent image and configuration.
This condition is reported with system log message 201008.
In the following example, a security appliance is configured to poll an AUS with IP address
209.165.200.224, at port number 1742, from the outside interface, with certificate verification.
It is also configured to use the hostname of the security appliance as the device ID. It is configured to
poll every Friday and Saturday night at a random time between 10:00 p.m. and 11:00 p.m. On a failed
polling attempt, it will try to reconnect to the AUS 10 times, and wait 3 minutes between attempts at
reconnecting.
hostname(config)# auto-update server
https://jcrichton:farscape@209.165.200.224:1742/management source outside
verify-certificate
hostname(config)# auto-update device-id hostname
hostname(config)# auto-update poll-at Friday Saturday 22:00 randomize 60 2 10