SRX Services Gateway
Highlighted
SRX Services Gateway

SRX300 firmware upgrade error

‎10-20-2019 08:16 PM

Hi SRX users,

 

I just upgrade from junos-15.1X49-D150 to junos-18.2R3.  after upgrade & boot.  I get this boot error message:

 

Mounted junos package on /dev/md1...

O

Automatic reboot in progress...

Verified jboot signed by PackageProductionEc_2019 method ECDSA256+SHA256

Verified junos signed by PackageProductionEc_2019 method ECDSA256+SHA256

veriexec: cannot update veriexec for /var/jailetc/php_mod.ini: No such file or directory

veriexec: cannot update veriexec for /var/jailetc/mime.types: No such file or directory

veriexec: cannot update veriexec for /usr/lib/libpsu.so.3: Too many links

veriexec: cannot update veriexec for /usr/lib/libyaml.so.3: Too many links

veriexec: cannot update veriexec for /usr/lib/libext_db.so.3: Too many links

veriexec: cannot update veriexec for /usr/telemetry/na-mqttd/na-mqtt.conf: No such file or directory

Verified junos-18.2R3-S1.7 signed by PackageProductionEc_2019 method ECDSA256+SHA256

And the SRX300 have a lot of the configure issue.  Any idea how to fix it !?

2 REPLIES 2
Highlighted
SRX Services Gateway

Re: SRX300 firmware upgrade error

‎10-20-2019 08:20 PM

Thereafter I found out that the error message,   I would like to downgrade, here are the error message during the downgrade.

 

root> ... add no-copy /var/tmp/junos-srxsme-15.1X49-D190.2-domestic.tgz       

NOTICE: Validating configuration against junos-srxsme-15.1X49-D190.2-domestic.tgz.

NOTICE: Use the 'no-validate' option to skip this if desired.

Formatting alternate root (/dev/da0s1a)...

/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048

        using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.

super-block backups (for fsck -b #) at:

 32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,

 3384608, 3760672, 4136736, 4512800, 4888864

Checking compatibility with configuration

Initializing...

cp: /var/etc/extensions.allow: No such file or directory

cp: /var/db/certs/common/local/*: No such file or directory

cp: /var/db/certs/common/key-pair/*: No such file or directory

veriexec: cannot update veriexec for /var/v/c/junos/var/jailetc/php_mod.ini: No such file or directory

veriexec: cannot update veriexec for /var/v/c/junos/var/jailetc/mime.types: No such file or directory

veriexec: cannot update veriexec for /var/v/c/junos/usr/lib/libpsu.so.3: Too many links

veriexec: cannot update veriexec for /var/v/c/junos/usr/lib/libyaml.so.3: Too many links

veriexec: cannot update veriexec for /var/v/c/junos/usr/lib/libext_db.so.3: Too many links

veriexec: cannot update veriexec for /var/v/c/junos/usr/telemetry/na-mqttd/na-mqtt.conf: No such file or directory

Verified manifest signed by PackageProductionEc_2019 method ECDSA256+SHA256

Using junos-15.1X49-D190.2-domestic from /altroot/cf/packages/install-tmp/junos-15.1X49-D190.2-domestic

Copying package ...

Verified manifest signed by PackageProductionEc_2019 method ECDSA256+SHA256

Hardware Database regeneration succeeded

Validating against /config/juniper.conf.gz

/config/juniper.conf:57:(21) syntax error at 'rfc-compliant'

  [edit system phone-home]

    'rfc-compliant;'

      syntax error

Validation failed

ERROR: Current configuration not compatible with /altroot/cf/packages/install-tmp/junos-15.1X49-D190.2-domestic

ERROR: Configuration validation failed with /altroot/cf/packages/install-tmp/junos-15.1X49-D190.2-domestic

Any idea how to fix it !? 

Highlighted
SRX Services Gateway

Re: SRX300 firmware upgrade error

[ Edited ]
‎10-20-2019 10:09 PM

Hello,

 


@ika9q wrote:

Thereafter I found out that the error message,  

/config/juniper.conf:57:(21) syntax error at 'rfc-compliant'

  [edit system phone-home]

    'rfc-compliant;'

      syntax error

Validation failed

ERROR: Current configuration not compatible with /altroot/cf/packages/install-tmp/junos-15.1X49-D190.2-domestic

ERROR: Configuration validation failed with /altroot/cf/packages/install-tmp/junos-15.1X49-D190.2-domestic

Any idea how to fix it !? 


 

 

edit
delete system phone-home rfc-compliant
commit

 

 

- should fix that particular error but please re-run "request system software add..." command with "validate" option to catch more possible errors like that.

For the historical record, the root cause is that "rfc-compliant" knob is not supported in the SW release You are trying to load. There could be more knobs like that hence reading JUNOS release notes and testing in the lab is highly recommended.

HTH

Thx

Alex

 

 

 

 

_____________________________________________________________________

Please ask Your Juniper account team about Juniper Professional Services offerings.
Juniper PS can design, test & build the network/part of the network as per Your requirements

+++++++++++++++++++++++++++++++++++++++++++++

Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !
Feedback