To update the firmware, use any of the following servers: TFTP, FTP, SCP. Router firmware 
files obtained from the manufacturer should be allocated on the server.  
The  router  stores  two  copies  of  the  firmware.  To  ensure  the  reliability  of  the  firmware 
update procedure, only the copy that was not used for the last device startup is available 
for the update. 
To update the firmware for  the  device running the operating  system, follow procedure  described 
below. 
1.  Prepare the selected server for operation. You should know the server address; also firmware 
distributive file should be loaded onto the server.  
2.  The  router  should  be  prepared  for  operation  according  to  the  documentary  requirements. 
Router  configuration  should  allow  for  data  exchange  with  the  server  via  TFTP/FTP/SCP  and 
ICMP  protocols.  At  that,  you  should  take  into  account  the  server  inherence  to  the  router 
security zones.  
3.  Connect to the router locally via Console port or remotely via Telnet or SSH.  
Check the server availability for the router using ping command on the router. If the server is 
not available, check the router settings and the status of the server network interfaces. 
4.  To update the router firmware, enter the following command. Specify IP address of the server 
being used as <server> parameter. For updates that utilize FTP or SCP server, you should enter a 
username  (<user>  parameter)  and  a  password  (<password>  parameter).  Specify  the  name  of 
the  firmware  file  loaded  onto  the  server  as  <file_name>  parameter.  When  the  command  is 
executed, router will copy the file into  its  internal memory,  perform data integrity check  and 
save it into non-volatile memory. 
  TFTP: 
 esr# copy tftp://<server>:/<file_name> system:firmware 
   FTP: 
esr# copy ftp://[<user>[:<password>]@]<server>:/<file_name> 
system:firmware 
  SCP: 
esr# сору scp://[<user>[:<password>]@]<server>://<folder>/<file_name> 
system:firmware 
 
For example, let's update basic firmware via SCP: 
esr# сору scp://adm:password123@192.168.16.168://home/tftp/firmware 
system:firmware 
5.  To start the device with the new firmware version, you have to switch the active image. With 
show bootvar command, locate the image number, containing updated firmware.