Lab — Update Switch Firmware

Northbridge NOS Device Manager · access-layer switch image management

N10-009 · 4.3 (hardening) N10-007 · 4.5 AP NET · 2.5.B

Northbridge NOS MLO-IDF2-SW3 https://10.40.12.8/ · signed in: netadmin

Image Banks & Running Version

1 · Import Firmware Image

Image file (repository: \\fileserver01\firmware\)

A new image is written to the inactive bank. The running image is never overwritten in place.

2 · Select Boot Image

3 · Restart to Activate

The selected boot image only becomes the running firmware after a restart.

System Log

Ready. Last boot: NB-OS 4.10.3 (Bank 1).

Your Objective

Get MLO-IDF2-SW3 onto the patched firmware, then answer the review questions.

You're the network technician for Marsh & Linden Outfitters. The access-layer switch MLO-IDF2-SW3 in the second-floor IDF is running NB-OS 4.10.3, which has a published advisory. Northbridge released the patched image NB-OS 4.12.7 (NB-OS-4.12.7-secure.nbf). Bring the switch up to date without taking the running image offline mid-import.

Task Checklist

Import NB-OS-4.12.7-secure.nbf into the inactive image bank.
Set the bank holding 4.12.7 as the boot image.
Restart the switch and confirm it is running 4.12.7.

Q1. Until the switch restarts, where does the newly imported image live?

In the active bank, replacing the running image immediately. In the inactive (backup) bank, waiting to be chosen as the boot image. In volatile RAM, and it is lost on any power cycle. Nowhere — import and run are a single combined step.

Q2. Updating a switch to the vendor's latest image is an example of which hardening practice?

Disabling unused physical ports. Changing default administrative credentials. Patching to remediate known vulnerabilities. Segmenting the network with VLANs.

Q3. After selecting the new image as the boot image, what final action makes it run?

Saving the running configuration. Restarting / reloading the switch. Re-importing the same file a second time. Clearing the ARP table.

Callsign (a pseudonym — do not enter your real name)

0 / 6

Self-check scores are computed in your browser and are inspectable; this is formative work. A screenshot of your lab and a server-side timestamp are recorded on submit. No real names, emails, or IDs are collected.