Upload Home License from CLI

RE: Upload Home License from CLI

garpace — Thu, 16 Dec 2021 00:27:30 GMT

Thanks Bob. I didn't have the SSL VPN set up (just sites to site), but I was able to add "Any" temporarily to webadmin allowed_networks, pop in, upload the license file, bring back the site to sites, and get rid of "any". Thank for all your guidance on this and other posts.

RE: Upload Home License from CLI

Alan Brand — Wed, 15 Dec 2021 22:46:51 GMT

[quote userid="31862" url="~/utm-firewall/f/hardware-installation-up2date-licensing/131734/upload-home-license-from-cli"](I have SSH access). The Webadmin is not exposed to the internet, only the LAN and other networks via IPSec tunnels (which are down)[/quote]

One thing that comes to mind is using a ssl port forwarding (aka tunnel) like

ssh -L 4444:127.0.0.1:4444 user@remote

So you can throw https://localhost:4444 into your browser on the local machine which will be forwarded to port 4444 on the UTM box.

Depending on your configuration and firewall settings you might need to replace 127.0.0.1 with the internal (LAN) IP of the UTM,

RE: Upload Home License from CLI

BAlfson — Wed, 15 Dec 2021 21:11:46 GMT

One of the things I always include in Allowed Networks is "BAlfson(User Network)" so that I can connect via remote access from anywhere to access WebAdmin at the IP of the UTM's VPN server - https://10.242.12.1:4444/ for the SSL VPN. You can add this at the command line with:

cc set webadmin allowed_networks 'REF_NetAaaBalfsUserNetwo'

Just substitute the first 5 letters of your username for mine. First letter must be upper case in the REF_ like 'REF_NetAaaGarpaUserNetwo' for user garpace.

I know a command to upload the license at the command line, but I've never tried it even in my lab.

Cheers - Bob

RE: Upload Home License from CLI

Amodin — Wed, 15 Dec 2021 03:22:27 GMT

If you can access WebAdmin, you can upload the license file. I've never known a way to install a license via CLI, but I am not all that great with the CLI for Sophos anyways. ;)

If you had a SUM up and running to manage your UTMs, you could have done it that way.

RE: Upload Home License from CLI

garpace — Wed, 15 Dec 2021 03:03:57 GMT

I was researching some more...maybe I can do this (except make webadmin exposed to the WAN interface)? Web admin no longer accessible - Management, Networking, Logging and Reporting - UTM Firewall - Sophos Community