NSX Network Detection and Response - How to upgrade appliances to a specific version

Products

• VMware vDefend Network Detection and Response

Issue/Introduction

Customers might need to upgrade to a specific version without going to the latest one for different reasons.

Resolution

Be sure to turn off auto-update. To do so, go to:

Admin > Appliances > Overview > Quick Links > Configuration:



Then > System and turn Auto Update off:



For additional information see our Portal Guide:
https://user.lastline.com/help/appsystem.html

On the manager CLI:

1. llversion_sync.py load manager <VERSION_NUMBER>
Note: The version_number should be the software version, not the appliance version. i.e: 1120.2 not 9.5.2

2. Create a config file for the API client if one does not already exist

• sudo su
• cd ~lastline
• Edit the file config.ini and add the following lines:

[papi]
url = https://127.0.0.1/papi
auth_method = account
username = YOUR UI ACCOUNT (be sure it has admin rights)
password = YOUR PASSWORD
verify_ssl = false
timeout = <SECONDS>

3. papi_shell.py -c ~lastline/config.ini

4. client.appliance_mgmt.configure(appliance_uuid='APPLIANCE_UUID',software_version= 'VERSION_NUMBER')
Note: The version_number should be the software version, not the appliance version. i.e: 1120.2 not 9.5.2

You can get the appliance UUID in one of 3 ways:
a. The UI in the Appliance overview page
b. Running echo 'show' | lastline_setup in the cli
c. Running cat /var/lib/lastline/appliance_uuid

Note: We need to follow the article NSX Network Detection and Response - Update GPG/SSL Key (88232) for any and every update before 9.6 which is the version that includes the fix.

Once the active manager is on the desired version, the child appliances can be upgraded from the UI, by going to:

Admin > Appliances > Overview > Quick Links > Upgrade






 

 

Additional Information

Note: This article is applicable to the standalone NSX Network Detection and Response product (formerly Lastline) and is not intended to be applied to the NSX NDR feature of NSX-T.