SRX Services Gateway
Highlighted
SRX Services Gateway

Problems upgrading SRX240H2 junos

‎12-03-2015 09:18 AM

I am having trouble upgrading our remote srx240h2 boxes to current junos with the autoinstall.conf process.  For some reason what I thought was a simple upgrade from 11x to 12x does not work.  If there are incremental steps that are needed to bring junos forward bit by bit, I am not sure where the older versions are available for download.

 

I am junior to this process so any help appreciated.  We have a simple config so I cannot imagine that is related.

 

Here are the messages:

 

Checking compatibility with configuration
Initializing...
Verified manifest signed by PackageProduction_11_4_0
Verified junos-11.4R10.3-domestic signed by PackageProduction_11_4_0
Using junos-12.1X46-D10.2-domestic from /altroot/cf/packages/install-tmp/junos-12.1X46-D10.2-domestic
Copying package ...
Verified manifest signed by PackageProduction_12_1_0
Hardware Database regeneration succeeded
Validating against /config/juniper.conf.gz
Connectivity fault management process: rtslib: ERROR kernel does not support all messages: expected 102 got 101,a reboot or software upgrade may be required
Connectivity fault management process:
Connectivity fault management process: rtslib: WARNING version mismatch for msg unknown: expected 98 got 0,a reboot or software upgrade may be required
Connectivity fault management process:
Connectivity fault management process: rtslib: WARNING version mismatch for msg (null): expected 0 got 6,a reboot or software upgrade may be required
Connectivity fault management process:
Validation failed
Validating against /config/rescue.conf.gz
Connectivity fault management process: rtslib: ERROR kernel does not support all messages: expected 102 got 101,a reboot or software upgrade may be required
Connectivity fault management process:
Connectivity fault management process: rtslib: WARNING version mismatch for msg unknown: expected 98 got 0,a reboot or software upgrade may be required
Connectivity fault management process:
Connectivity fault management process: rtslib: WARNING version mismatch for msg (null): expected 0 got 6,a reboot or software upgrade may be required
Connectivity fault management process:
Validation failed
WARNING: Current configuration not compatible with /altroot/cf/packages/install-tmp/junos-12.1X46-D10.2-domestic

 

Any pointers appreciated. 

12 REPLIES 12
Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-03-2015 10:03 AM

• On the SRX240B2 and SRX240H2 models, when you try to upgrade from Junos OS Release 11.4 to Junos OS Release 12.1X44, 12.1X45, 12.1X46, or 12.1X47, the upgrade fails when attempting to validate the configuration. To resolve this, use the no-validate option.

 

http://www.juniper.net/techpubs/en_US/junos12.1x46/information-products/topic-collections/release-no...

 

try :

 

root@SRX-3> request system software add /var/tmp/junos-srxsme-12.1X46-D10.2-domestic.tgz no-validate

 

Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-03-2015 12:55 PM

Thanks, but the use of the autoinstall.conf process with a USB stick is because some of the SRX240 devices are remote with no console access.

 

Is there a way to use the autoinstall.conf process along with the no-validate option?

Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-03-2015 01:10 PM

Hi,

1- Old versions only available at the JTAC suuport . They're no longer available at the software site . So you need to contact JTAC in order to download them .

2- You can directly upgrade or downgrade between any two Junos OS releases that are within three releases of each other.

Example: Direct release upgrade
Release 10.3 → (bypassing Releases 10.4 and 11.1) Release 11.2

 

3- Please create an empty autoinstall.conf file on the USB stick with image

 

If you are planning to upgrade or downgrade the JUNOS image please follow these steps.
1. Create an Auto Install USB key by copying the “two” files below into the USB:
• An “autoinstall.conf” file -This empty file indicates to the system that the USB key is
Auto Install USB key
• JUNOS package to which you want to upgrade/downgrade
2. Once the Key is ready, insert it into the SRX device
3. Wait for LEDs to glow in static Amber and blink, this indicates that JUNOS recognized the Auto Install USB Key

 Refer to this for more info : http://kb.juniper.net/InfoCenter/index?page=content&id=KB23882&actp=search

Regards,
A'bed AL-R.
[JNCSP-SEC JNCDA JNCIS-ENT Ingenious Champion|Sec]
https://srxtech.wordpress.com
Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-03-2015 01:13 PM

Thanks for the reply.

 

The remaining question is:

 

Is there a way to use the no-validate option that is required in this case  with the usb autoinstall.conf method?  

 

The no-validate option is aparently required to get the update to stick and some of these devices have no console access.

Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-03-2015 01:58 PM
Hi,

I'm affraid there is no way to use the no-validate with the autoinstall.conf . Why ? Because the autoinstall.conf file is nothing more than a placeholder so that the SRX recognizes this USB drive as a bootable device. It is an empty file that simply has the name autoinstall.conf . Source: Junos Enterprise Routing book , page 713
The only supported thing I know is recovering an older configuration using USB beside upgrade the software with the autoinstallation ... but nothing about mentioning specific commands .. unless an expert in the forum has another idea
Regards,
A'bed AL-R.
[JNCSP-SEC JNCDA JNCIS-ENT Ingenious Champion|Sec]
https://srxtech.wordpress.com
Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 12:10 AM
So you have no remote access at all to some of these devices?
Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 06:53 AM

Yes, just like the autoinstall.conf procedure was designed for:

 

http://kb.juniper.net/InfoCenter/index?page=content&id=KB23882&actp=search

 

We have devices in locations where the autoinstall.conf procedure is needed and no admins.

Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 09:22 AM

Hi,

 

If you have remote access to the devices , why you need USB ?

You can upload the image to the device remotly via WinSCP to the var\tmp . Then just run the command :

request system software add no-copy no-validate \var\tmp\<srx image>

Or , alternatively , you can upload the image to an ftp server and run this command :

request system software add no-copy no-validate ftp:\\USER:PASSWORD@FTPIP\<srx image>

 

Anyway , there is no way to run the no-validate command simultaneously with the autoinstall.conf procedure .

Regards,
A'bed AL-R.
[JNCSP-SEC JNCDA JNCIS-ENT Ingenious Champion|Sec]
https://srxtech.wordpress.com
Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 10:16 AM

One of the autoinstall.conf process is documented to be to allow non-technical people to upgrade without administrative or console access.  This process apparently cannot deal with the no-validate reqirement of this upgrade  At least as far as anyone is aware so far.  This would be very handy for our remote locations.

 

I understand now how to manually handle the upgrade with an administative login.  But that is not the question now at hand.

Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 12:23 PM

Hello,

It seems all Your issues are with CFM, please deactivate it/remove it from config, You can add it later on after upgrade complete.

If this does not help, disable the cfm process as well and repeat the attempt.

HTH

Thx

Alex

 

_____________________________________________________________________

Please ask Your Juniper account team about Juniper Professional Services offerings.
Juniper PS can design, test & build the network/part of the network as per Your requirements

+++++++++++++++++++++++++++++++++++++++++++++

Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !
Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 12:39 PM

No cfm on these devices.  They are all stand-alone.

Highlighted
SRX Services Gateway

Re: Problems upgrading SRX240H2 junos

‎12-04-2015 01:18 PM

Hello,

CFM is configured under [edit protocols oam ethernet].

Please post the printout:

 

show configuration protocols oam

If this stanza is empty, please disable CFM process and related ones:

 

set system processes cfm disable
set system processes ethernet-connectivity-fault-management disable
set system processes ethernet-link-fault-management disable 

- then try the upgrade again.

HTH

Thx

Alex

_____________________________________________________________________

Please ask Your Juniper account team about Juniper Professional Services offerings.
Juniper PS can design, test & build the network/part of the network as per Your requirements

+++++++++++++++++++++++++++++++++++++++++++++

Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !
Feedback