Allied Telesis IE340 Series User Manual

C613-50631-01 Rev A Command Reference for IE340 Series 156
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
FILE AND CONFIGURATION MANAGEMENT COMMANDS
CRYPTO
VERIFY
crypto verify
Overview Use this command to compare the SHA256 checksum of a file with its correct
checksum. This confirms that the file has not been corrupted or interfered with
during download. You can verify any kind of file, but you cannot specify a file path,
so the file must be stored in the top level of the device’s flash memory.
CAUTION: If a file fails to verify and you believe the file may have been interfered with,
we recommend immediately performing a security audit of your network.
Once the device has verified the file, you can use the copy running-config
startup-config command to save the file/hash pair in the running configuration.
If you do this, the device will verify the file every time it boots up and will take
action if the verification fails.
The action taken when verification fails on boot-up depends on the type of file and
whether the device is in Secure Mode:
• If the device is in Secure Mode and the boot-up firmware file fails verification,
the device will not boot. Contact Allied Telesis support if this happens.
• If the device is not in Secure Mode and the boot-up firmware file fails
verification, the device will display the following warning message after
booting: “% Verification Failed”. If this occurs because the saved hash is
incorrect, use this command to replace the hash. If this occurs because the
firmware file is corrupted or may have been interfered with, ensure that your
device is secure, then replace the failed file with a known good file and
reboot.
•If you use the gui parameter and the GUI fails verification, the device will
boot up but the GUI will be disabled (the service http command will be
disabled).
• If any other file fails verification, the device will display the following warning
message after booting: “% Verification Failed”
You can use the show hash command to see the current hash of a file.
Use the no variant of this command to remove a verified filename/hash
combination from the running configuration.
Syntax
crypto verify <filename> <hash-value>
crypto verify gui <hash-value>
no crypto verify <filename>
Parameter Description
<filename> The AlliedWare Plus file that you want to verify
gui Verify the current Device GUI file
<hash-value> The known correct checksum of the file. For firmware and GUI
files, the correct checksum is listed in thesha256sum file that is
available from the Allied Telesis Download Center.

Allied Telesis IE340 Series Specifications

General

Brand	Allied Telesis
Model	IE340 Series
Category	Switch
Language	English