SRX Services Gateway
SRX Services Gateway

SRX340 Firmware upgrade

‎10-14-2019 11:45 AM

Hello I am pretty new to managing SRX 340 and 300.  I was assigned by my manager to upgrade the SRX 300/340 firmware.  I have a couple questions on upgrading.

 

Do I need to upgrade the main office first (SRX 340), then upgrade the remote branch (SRX 300)?

Or can I upgrade the remote branch first?  Also, If i upgrade the remote branch SRX will the site to site vpn tunnel still work even though the main office SRX is still on the old firmware. 

 

Can anyone please help me on where to start and also point me to any documentation on best practice for this? 

4 REPLIES 4
SRX Services Gateway

Re: SRX340 Firmware upgrade

‎10-14-2019 12:22 PM

Hello Ryan,

 

I would suggest to start with branch device upgrading first before the main office later, site to site VPN should work absloutely fine as long as there is no modification of configuration.

Please find the below document that list step by step procedure of upgrade and preapartion.

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/install-software-on-srx.html

SRX Services Gateway
Solution
Accepted by topic author ryan.simeon@vrfa.org
‎10-14-2019 01:11 PM

Re: SRX340 Firmware upgrade

[ Edited ]
‎10-14-2019 12:40 PM

Hi Ryan

 

The VPN configuration is independent from the Junos version running on the boxes hence upgrading the software should not break the VPN. I would suggest upgrading the branch SRX first and you could follow this document that takes in account the downloading of the package, some preparations steps and finally differents upgrade methods:

 

     https://kb.juniper.net/InfoCenter/index?page=content&id=KB16652&actp=METADATA

 

You can also confirm the recommended Junos version for your devices here, which is Junos 18.2R3-S1:

 

     https://kb.juniper.net/InfoCenter/index?page=content&id=KB21476&actp=METADATA

 

Also make sure to check the "Migration, Upgrade, and Downgrade Instructions" section of the Release Notes of the code you are moving to, looking for any special intructions for upgrading to that version. For instance for 18.2R3:

 

     https://www.juniper.net/documentation/en_US/junos/information-products/topic-collections/release-not...

 

Hope this helps.

 

Pura Vida from Costa Rica - Mark as Resolved if it applies.
Kudos are appreciated too!
SRX Services Gateway

Re: SRX340 Firmware upgrade

‎10-14-2019 01:01 PM

Thanks you for the suggestion and the links.

SRX Services Gateway

Re: SRX340 Firmware upgrade

‎10-14-2019 01:04 PM

Your are very welcome; please mark the post as Resolved if you consider that it applies as such.

 

Pura Vida from Costa Rica - Mark as Resolved if it applies.
Kudos are appreciated too!