Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  Help. Can't upgrade a number of SSG devices... Losing what's left of my mind.

    Posted 12-23-2015 10:17

    Am struggling with what's probably a very simple and stupid issue to correct, but so far I'm coming up blank.  I have a number of screenOS devices, ranging from SSG-5 serial up to a couple 300m devices that consistently fail when I attempt to push 6.3.0r21 to them. 

    I have a 140 in my lab that has 6.3.0r20 but I see this across a number of revs, ranging from 6.2.0r5 though 6.3.0r20.  The 140 has  the same symptoms and the output from the cli is as follows:

     

    =~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2015.12.23 12:35:40 =~=~=~=~=~=~=~=~=~=~=~=

    blackdiamond->
    blackdiamond->
    blackdiamond-> get system
    Product Name: SSG-140
    Serial Number: 0185062012xxxxxx, Control Number: ffffffff
    Hardware Version: 1010(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
    Software Version: 6.3.0r20.0, Type: Firewall+VPN
    Feature: AV-K
    BOOT Loader Version: 3.2.4
    Compiled by build_master at: Wed Oct 28 03:06:02 PDT 2015
    Base Mac: ac4b.c87b.2780
    File Name: screenos_image, Checksum: 75497a9d
    , Total Memory: 512MB

    Date 12/23/2015 12:35:52, Daylight Saving Time enabled
    The Network Time Protocol is Enabled
    Up 0 hours 8 minutes 44 seconds Since 23Dec2015:12:27:08
    Total Device Resets: 7, Last Device Reset at: 10/17/2015 22:40:49

    System in NAT/route mode.

    Use interface IP, Config Port: 80
    Manager IP enforced: False
    Manager IPs: 1

    --- more ---              blackdiamond->
    blackdiamond-> platform = 24, cpu = 12, version = 18
     update new flash image (02d90070,12575092)
    platform = 24, cpu = 12, version = 18
    offset = 20, address = 5800000, size = 12575014
    date = 258b, sw_version = 31808000, cksum = 660d75d8
    abort touch count: 0
    Last touch address:0x00000000
    Last touch loop address:0x00000000
    abort loop count: 0
    Last abort address:0x00000000
    ###Crash Time: 23Dec2015:12:37:40###

    System Level:

    Image In Task Level

    Current Task Is:web id = 59


    *********************************************************

        Exception Dump

    *********************************************************

    System up time: 0 hours 10 minutes 32 seconds

    Version 6.3.0r20.0

    Exception(Data Abort Exception code(1001))

    Exception address: 00ed2664

    Registers of Main Processor:
    R0:      00000020   R1:      00000001  R2:      0000002c

    R3:      00000010   R4:      00000000  R5:      00000001

    R6:      00000000   R7:      8bfffae8  R8:      8bfffb34

    R9:      8bfffb90   R10(sl): 8bfffafc  R11(fp): 8bfffae0

    R12(ip): 00000030   R13(sp): 8bfffac0  r14:     00ed266c

    lr:      00ee952c   SPSR:    80000010  CPSR:    80000097

    The registers of control processor 15:

    CR1ARM:  040031FF   CR1XSCALE:  00000000   CR2:     1bc70018

    CR3:     000000E4   CR4:        Reserved   CR5:     00000017

    CR6:     00000000   CR7:        N/A        CR8:     N/A

    CR9:     00000000   CR10:       N/A        CR11:    Reserve

    CR12:    Reserve    CR13:       00000000

    Stack dump:

    8bfffa60: 01 df 73 fc 02 b1 f4 10 8b ff fa c0 00 7f 00 00

    8bfffa70: 00 00 00 00 01 c0 6a 98 02 07 5c f0 01 c0 6a 88

    8bfffa80: 00 00 00 00 00 00 00 01 00 00 00 00 01 df 71 b4

    8bfffa90: 02 b2 96 54 00 00 00 00 00 00 00 00 8b ff fb 90

    8bfffaa0: 00 00 61 46 8b ff fb 00 8b ff fa b4 00 b1 06 04

    8bfffab0: 00 b0 b2 6c 00 00 00 00 07 5a a0 a0 00 00 61 46

    8bfffac0: 8b ff fa b8 00 00 00 01 00 bf 00 00 00 00 80 00

    8bfffad0: 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff

    8bfffae0: 02 b2 96 54 07 5a a0 a0 00 00 00 00 00 00 61 46

    8bfffaf0: 00 00 00 01 8b ff fb 38 8b ff fb 04 00 b1 06 f0

    8bfffb00: 00 b1 05 8c 00 00 61 46 ff ff ff ff 00 00 00 00

    8bfffb10: 8b ff fb 14 00 00 80 00 02 d9 00 70 00 00 61 46

    8bfffb20: 00 00 61 46 01 d7 f7 54 07 5a a0 a0 8b ff fb 64

    8bfffb30: 8b ff fb 3c 00 0b 9d 90 00 b1 06 8c 00 00 61 46

    8bfffb40: 00 00 61 46 00 00 61 46 07 5a a0 a0 02 d9 00 70

    8bfffb50: 00 00 00 00 00 bf e1 46 8b ff fc 18 8b ff fb 68

    8bfffb60: 00 f2 cf 2c 00 0b 9c cc 07 5a a0 80 01 c0 6a 88

    8bfffb70: 02 b2 94 34 00 00 00 2e 80 00 06 e1 8b ff fb ac

    8bfffb80: 8b ff fb 8c 07 5e a0 e0 07 5e a0 e0 00 02 00 20

    8bfffb90: b1 9a f7 63 bf af ea e3 c7 c0 3a b1 01 1d 12 a0

    8bfffba0: 78 d4 ed ca 05 fc 00 00 00 00 00 00 93 2c 9d f0

    8bfffbb0: 48 c6 ef a3 dc 49 90 fe ef e1 69 d2 ce 53 3c 4d

    8bfffbc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    8bfffbd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    Trace Dump:
    00ed2664 00ee952c 00ee952c 00eeb1b8 00f2ce74 00985124 0083b95c 00ae275c
    009bb59c 008d9f0c 008e3328 008de93c 008ddcb8 008d50e4 00aef864 00082088

    FP Trace Dump:
    00000000 00000000 8bfffae0 8bfffb30 8bfffb64 8bfffc18 8bfffc4c 8bfffca0
    8bfffcbc 8bfffd6c 8bfffd80 8bfffd9c 8bfffdd4 8bfffe1c 8bfffe3c 8bffffbc

    Crash dump, the system will reboot...

    Crash dump is done.

    -----------
    OS Context:
    -----------
    Died Flow/bootup Module
    Cur Task Context: web


    Juniper Networks SSG-140 Boot Loader Version 3.2.4 (Checksum: 9D76F0F2)
    Copyright (c) 1997-2006 Juniper Networks, Inc.
        Total physical memory: 512MB
        Test -  Pass

        Initialization - Done

     

     

    Hit any key to run loader

    Hit any key to run loader

    Hit any key to run loader

    Hit any key to run loader

     

    Loading system image "$BABOOT$.BIN" from on-board flash disk...


    Done! (size = 12,582,912 bytes)

     

    Image authenticated!


    bss_start:580c000, bss_end:5844464.

    heap_start:6800000, heap_size:400000.
    ret:1
    set_mmu, 418
    set_mmu, 441
    set_mmu, 443

    Start loading...
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    .................................................................
    ......................................
    Done.
    swap to user mode!

     

    Juniper Networks, Inc
    Security Services Gateway System Software
    Copyright, 1996-2008

    min_pfn = 13000, max_pfn = 1c000, mem_size = 1c000000


     bootmap_size = 3800
    Version 6.3.0r20.0
    Load Manufacture Information ... Done

    Initialize FBTL 0.. Done
    Load NVRAM Information ... (6.3.0)Done
    Install module init vectors
    Changed to l3 mode
    IXP23XX XScale Initialing ...
    IXP23XX XScale Initialing ... Successfully!
    Install modules (01324000,02038000) ...
    PPP IP-POOL initiated, 256 pools

    Initializing DI 1.1.0-ns

    System config (3141 bytes) loaded

    Done.
    Load System Configuration .............................................................................................................................................................................................................................................................................Disabled licensekey auto update
    ...................Done
    system init done..
    login:
    login: ethernet0/7 interface change physical state to Up
    ethernet0/8 interface change physical state to Up
    ethernet0/9 interface change physical state to Up
    System change state to Active(1)

    login:



  • 2.  RE: Help. Can't upgrade a number of SSG devices... Losing what's left of my mind.
    Best Answer

    Posted 12-23-2015 10:32

    For devices running 6.3r20, you need to either remove the signing key (delete crypto auth-key) before the upgrade OR upgrade via the bootloader.



  • 3.  RE: Help. Can't upgrade a number of SSG devices... Losing what's left of my mind.

    Posted 12-23-2015 18:47

    Thank you so very, very much!!!