Juniper SRX – firmware upgrade

Howto easily upgrade your SRX firmware. SRX110 as an example.

Over-the-net method (remote):

In this method you don’t need any physical contact with the device. You can do it remotley over the net.

  1. Download current firmware from Juniper website:
    http://www.juniper.net/support/downloads/?p=srx110
  2. Upload the new firmware to /var/tmp/ folder on your SRX device. You can use any SCP client to do so. For Windows I recommend WinSCP. On GNU/Linux just use „scp” command.
  3. Take a quick look at the description of the request system software add command:
    root@gw> request system software add ?
    Possible completions:
      <package-name>       URL or pathname of package
      best-effort-load     Load succeeds if at least one statement is valid
      delay-restart        Don't restart processes
      no-copy              Don't save copies of package files
      no-validate          Don't check compatibility with current configuration
      partition            Format and re-partition the media before installation
      reboot               Reboot system after adding package
      unlink               Remove the package after successful installation
      validate             Check compatibility with current configuration
  4. Execute the command:
    request system software add unlink no-copy /cf/var/tmp/junos-srxsme-..........tgz
  5. Take a break 🙂 Make yoursef a nice cup of coffee. It takes some time to upgrade SRX device…
  6. Request reboot:
    request system reboot

USB-drive method (local):

This method requires physical access to the device. The advantage is that you don’t need to download anything over the net. You can use this method even when there is no config yet on the device. I like this one during the initial/first config of the device, where I can upgrade the firmware prior to any configuration.

  1. Download current firmware from Juniper website:
    http://www.juniper.net/support/downloads/?p=srx110
  2. Save firmware to a USB drive. Make sure it’s vFAT/FAT32. I haven’t tested it with NTFS.
  3. Put the USB drive into SRX.
  4. Manually mount your USB under Junos system. This process is well described here:
    http://kb.juniper.net/InfoCenter/index?page=content&id=KB12880
    I assume that you mounted your USB drive under /var/tmp/usb
  5. Execute the command:
    request system software add unlink no-copy /cf/var/tmp/usb/junos-srxsme-..........tgz
  6. Unmount your drive.
  7. Request reboot:
request system reboot

 

Enjoy your new software with all the new bugs and features 🙂

Source:
http://www.juniper.net/techpubs/software/junos-security/junos-security10.2/junos-security-admin-guide/topic-installing-software-upgrades-srx-series.html#jd0e32835