81-17
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter81 Managing Software and Configurations
Configuring Auto Update Support
The source interface keyword and argument specify which interface to use when sending requests to the
Auto Update Server. If you specify the same interface specified by the management-access command,
the Auto Update requests travel over the same IPsec VPN tunnel used for management access.
The verify-certificate keyword verifies the certificate returned by the Auto Update Server.
Step2 (Optional) To identify the device ID to send when communicating with the Auto Update Server, enter
the following command:
hostname(config)# auto-update device-id {hardware-serial | hostname | ipaddress [if-name]
| mac-address [if-name] | string text}
The identifier used is determined by specifying one of the following parameters:
•The hardware- serial argument specifies the ASA serial number.
•The hostname argument specifies the ASA hostname.
•The ipaddress keyword specifies the IP address of the specified interface. If the interface name is
not specified, it uses the IP address of the interface used to communicate with the Auto Update
Server.
•The mac-address keyword specifies the MAC address of the specified interface. If the interface
name is not specified, it uses the MAC address of the interface used to communicate with the Auto
Update Server.
•The string keyword specifies the specified text identifier, which cannot include white space or the
characters ‘, “, , >, & and ?.
Step3 (Optional) To specify how often to poll the Auto Update Server for configuration or image updates, enter
the following command:
hostname(config)# auto-update poll-period poll-period [retry-count [retry-period]]
The poll-period argument specifies how often (in minutes) to check for an update. The default is 720
minutes (12 hours).
The retry-count argument specifies how many times to try reconnecting to the server if the first attempt
fails. The default is zero.
The retry-pe riod argument specifies how long to wait (in minutes) between retries. The default is five
minutes.
Step4 (Optional) To schedule a specific time for the ASA to poll the Auto Update Server, enter the following
command:
hostname(config)# auto-update poll-at days-of-the-week time [randomize minutes]
[retry_count [retry_period]]
The days-of-the-week argument is any single day or combination of days: Monday, Tuesday, Wednesday,
Thursday, Friday, Saturday, and Sunday. Other possible values are daily (Monday through Sunday),
weekdays (Monday through Friday), and weekends (Saturday and Sunday).
The time argument specifies the time in the format HH:MM at which to start the poll. For example, 8:00
is 8:00 a.m. and 20:00 is 8:00 p.m.
The randomize minutes keyword and argument specify the period to randomize the poll time following
the specified start time. The range is from 1 to 1439 minutes.
The retry_count argument specifies how many times to try reconnecting to the Auto Update Server if the
first attempt fails. The default is zero.
The retry_per iod argument specifies how long to wait between connection attempts. The default is five
minutes. The range is from 1 to 35791 minutes.