[cisco-voip] Upgrading firmware on 7961 remotly

[Dixon, Wayne]

Please tell me that they're going to secure this, in order to mitigate
any type of trojan and the like from being uploaded to the phone... but
who knows... the may not...
 
 
Wayne
 

	-----Original Message-----
	From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Jason Aarons
(US)
	Sent: Tuesday, August 15, 2006 8:36 PM
	To: cisco-voip at puck.nether.net
	Subject: Re: [cisco-voip] Upgrading firmware on 7961 remotly
	
	

	I have this feature in computers now, one PC downloads a
virus/worm from the net and passes it among friends.  Isn't this how
Cyberdyne from Rise of the Machines got started?  Are we building
Skynet? Selsius? Skynet? Both started with a S.... <grin>

	 

	http://en.wikipedia.org/wiki/Cyberdyne_Systems_Corporation

	 

	 

	
________________________________


	From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Matt Slaga (US)
	Sent: Tuesday, August 15, 2006 4:13 PM
	To: Wes Sisk; Craig M Staffin
	Cc: cisco-voip at puck.nether.net
	Subject: Re: [cisco-voip] Upgrading firmware on 7961 remotly

	 

	In regards to your comment, "You will greatly benefit from an
upcoming phone feature where 1 remote site phone downloads from TFTP
server, then the phones pass the load among themselves." ,,,where, when,
how?  Any details?

	 

	Thanks!

	Matt

	 

	
________________________________


	From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Wes Sisk
	Sent: Tuesday, August 15, 2006 3:28 PM
	To: Craig M Staffin
	Cc: cisco-voip-bounces at puck.nether.net;
cisco-voip at puck.nether.net
	Subject: Re: [cisco-voip] Upgrading firmware on 7961 remotly

	 

	Craig,
	
	No nerd knobs that I am aware of.  If you are getting all the
ACKs back then it sounds like the packet is getting corrupted in
transit.  I do not believe the phones validate the checksum on every
packet, but only verifies the whole file reassembled.  Can you send me a
packet capture of a phone at the remote location attempting to upgrade?
Or can you access a PC at the remote location and attempt to TFTP
download the phone load from the TFTP server?  Check the md5sum of the
downloaded file against the md5sum (http://www.etree.org) of the
original file.  If you are using a PIX at the remote site you can use
the packet capture feature of it to remotely perform the packet capture.
I can reconstruct the payload from the packet capture and verify if it
is corrupt in transit.
	
	You will greatly benefit from an upcoming phone feature where 1
remote site phone downloads from TFTP server, then the phones pass the
load among themselves.
	
	/Wes
	
	Craig M Staffin wrote: 

	
	Router is definatly an option as I am part of the network group.
However again this would mean that I or someone from my team would need
to manage 350 different TFTP servers.  One across each site.  So not
real scalable. 
	
	Wes maybe you know did cisco monkey with the  TFTP times on the
phones.  The default for TFTP timeout is 1000ms however I have seen some
people change this down to 200 or 300ms. 
	
	Craig
	
	
	

Robert Kulagowski <bob at smalltime.com> <mailto:bob at smalltime.com>  
Sent by: cisco-voip-bounces at puck.nether.net 

08/14/2006 09:56 PM 

To

cisco-voip at puck.nether.net 

cc

 

Subject

Re: [cisco-voip] Upgrading firmware on 7961 remotly

 

 

 

	
	
	
	> Would love to however by the time we are done with our rollout
we will 
	> have about 350 sites across the globe so if we have to setup
seperate 
	> TFTP servers at each location that is  HUGE administration
nightmare.
	
	Well, you can always use the router as a tftp server; is that an
option?
	_______________________________________________
	cisco-voip mailing list
	cisco-voip at puck.nether.net
	https://puck...nether.net/mailman/listinfo/cisco-voip
<https://puck.nether.net/mailman/listinfo/cisco-voip> 
	
	

	 
	 
	 
	
	
	
________________________________



	 
	 
	 
	_______________________________________________
	cisco-voip mailing list
	cisco-voip at puck.nether.net
	https://puck...nether.net/mailman/listinfo/cisco-voip
<https://puck.nether.net/mailman/listinfo/cisco-voip> 
	  

	
________________________________


	


	
	Disclaimer:
	
	This e-mail communication and any attachments may contain
	confidential and privileged information and is for use by the
	designated addressee(s) named above only. If you are not the
	intended addressee, you are hereby notified that you have
received
	this communication in error and that any use or reproduction of
	this email or its contents is strictly prohibited and may be
	unlawful. If you have received this communication in error,
please
	notify us immediately by replying to this message and deleting
it
	from your computer. Thank you.
	

	
________________________________


	


	
	Disclaimer:
	
	This e-mail communication and any attachments may contain
	confidential and privileged information and is for use by the
	designated addressee(s) named above only. If you are not the
	intended addressee, you are hereby notified that you have
received
	this communication in error and that any use or reproduction of
	this email or its contents is strictly prohibited and may be
	unlawful. If you have received this communication in error,
please
	notify us immediately by replying to this message and deleting
it
	from your computer. Thank you.
	

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20060815/4d13e1cf/attachment.html