Screen OS

Hi All,

Ran into a very wierd situation. We are trying to upgrade default OS image from 6.0.3r17 to the IDP version 6.3.0-IDP1.r17.

We have everything setup, including, updated signing key, updated boot loader and SM key. So, when we upload the IDP screenOS image, it uploads upto 100% via GUI, machine restarts, but when when we do a get system, the firmware shows that it's still running on the non-IDP version which is 6.0.3r17.

Spent 4hours with TAC , and no solution in sight. Any suggestions for this?

nsisg2000-> get sys
Product Name: NetScreen-2000
Serial Number: 0079102014002084, Control Number: 00000000
Hardware Version: 3010(0)-(04), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Software Version: 6.3.0r17.0, Type: Firewall+VPN
Options: IDP
BOOT ROM Version: 1.1.1
OS Loader Version: 1.1.7
Compiled by build_master at: Fri Nov 28 10:57:44 PST 2014
Base Mac: f01c.2d65.c480
File Name: default (screenos_image), Checksum: 98642e84
, Total Memory: 2048MB

Date 03/29/2000 19:51:34, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 0 hours 1 minutes 27 seconds Since 29Mar2000:19:50:07
Total Device Resets: 0

System in NAT/route mode.

Use interface IP, Config Port: 80
Manager IP enforced: False
Manager IPs: 0
             
Address                                  Mask                                     Vsys                
---------------------------------------- ---------------------------------------- --------------------
User Name: netscreen
             
IDP files version:
        detector2.so    3.5.140733
        engine  3.4.140783
        pcid    3.4.140783
        scio    3.4.140783
             
Interface mgt:
  description mgt
  number 0, if_info 0, if_index 0
  link up, phy-link up/full-duplex, admin status up
  status change:1, last change:03/29/2000 19:50:07
  vsys Root, zone MGT, vr trust-vr
  *ip 192.168.1.1/24   mac f01c.2d65.c480

I need the RED part to show the IDP image version..as per this KB  http://kb.juniper.net/InfoCenter/index?page=content&id=KB23602

This is just the file name on the flash disk:

File Name: default (screenos_image)

Important is this line:

Options: IDP

So it seems to have loaded the IDP version.

Thorsi is correct.  If you upload the image via the web, it will save it will rename and save it to the onboard flash as "ScreenOS_Image."  If you upload it via TFTP, then it will show the correct filename.

From what I can see, it looks like your IDP blades should be functioning.  You can also check the status using "get chassis."  If they show CPU1 and CPU2 as "Ready" then you are good to go.

Indeed,

It's all Okay. JTAC confirmed that it's the expected output if we loaded the OS via WebGUI.

I hate that we spent so much time on it..trying to get it Right..Yet it was right.  

Thanks Guys.