Kaspersky SD-WAN

Scheduling firmware updates on selected CPE devices

To create a scheduled firmware update task on selected CPE devices:

  1. In the menu, go to the SD-WAN → CPE section.

    A table of CPE devices is displayed.

  2. Proceed with the scheduled firmware update in one of the following ways:
    • If you want to perform a scheduled firmware update on an individual CPE device, click the CPE device to open its device properties window, and in that window, open the action menu by clicking the icon in the upper right corner, then select Update firmware.
    • If you want to perform a scheduled firmware update on multiple CPE devices, select the check boxes next to relevant CPE devices and in the upper part of the table, click Actions  Update firmware.

    Obsolete firmware is highlighted in orange in the SW version column of the table of CPE devices. You can also find CPE devices with outdated firmware versions using the Need update filter in the upper part of the table.

  3. This opens a window; in that window, in the Task name field, enter the name of the scheduled task.
  4. Use the Switch type toggle switch to select the software switch type for the new firmware (OVS or SWOS).

    If you are updating firmware on multiple CPE devices at the same time, you must select the software switch type to match the firmware of all selected devices. If the firmware type on at least one device does not match the selected software switch type, the CPE can be updated only with firmware of the same switch type message is displayed in the firmware update task creation window, and the task cannot be created. If you are updating the firmware on an individual device, the The switch type you have selected does not match the switch type of the CPE. This may cause the device to become inaccessible after the firmware update due to potential configuration inconsistencies warning is displayed when you select a mismatched switch type, but creating the task is possible.

    We do not recommend updating the firmware to a version based on a different software switch type.

  5. In the Version drop-down list, select the version of your uploaded firmware. The list displays firmware versions matching the software switch type selected in Switch type setting. If you do not know which firmware version you need to install on the CPE device, use the table of correspondence of CPE device models with firmware versions.

    If the list contains no matching firmware versions (no versions have been found to match the selected software switch type, or no versions have been uploaded to the orchestrator), then the No firmware available for the selected CPEs. You can upload new firmware message is displayed in the upper part of the window with a link to the SD-WAN → Firmware section.

  6. In the Scheduled task execution date field, enter the date and time when you want to run the task. By default, the date and time specified is the date and time when you started creating the task.
  7. If you want to reset the CPE device to factory settings after updating the firmware, clear the Save CPE settings check box. If the check box is selected, your existing CPE device settings are not modified after a firmware update. This check box is selected by default.

    When a CPE device is reset to factory settings, it is disconnected from the orchestrator. To reconnect the CPE device to the orchestrator, you need to automatically register (ZTP) the CPE device.

  8. The Force update check box lets you force the firmware update, even if the CPE's internal check shows that the new firmware is incompatible with the old one. This check box is cleared by default.
  9. Click Next.

    Two tables of CPE devices are displayed. Firmware of CPE devices in the upper table is updated. Firmware of CPE devices in the lower table is not updated. Information about CPE devices is displayed in the following columns of the table:

    • DPID is the DPID of the CPE device.
    • Model is the model of the CPE device.
    • Switch type is the software switch type of the CPE device firmware (OVS or SWOS).
    • Name is the name of the CPE device.
    • SW version is the firmware version of the CPE device.
    • Tenant is the tenant to which the CPE device has been added.
    • Reason is the reason why the firmware cannot be updated. This column is displayed only in the lower table.

    If the upper table contains CPE devices on which you do not want to update the firmware, you can move these CPE devices to the lower table.

  10. Click Schedule.

The firmware update task is created and displayed in the task table. The status of the tasks is displayed in the Status column. If the firmware update task finishes successfully, its status changes to Done.