Install Junos Software onto NFX from USB Port
This section details how to install Junos OS software version 15.1X53-D496.0 onto an NFX250 from a USB drive. Doing this sets the device to the factory default state. We also perform some confirmation steps and obtain the device’s serial number. This procedure is for an NFX250 device.
Before You Begin
In order for this procedure to succeed, you must have the following
Physical access to the USB port of the NFX device
A USB drive of at least 4GB containing the Junos OS Software image, 15.1X53-D496.0, inserted into the USB port of the NFX
Access to the console port of the NFX device (This can be physical access or access over a terminal server.)
A DHCP server that is reachable from the ge-0/0/11 interface of the NFX250. This DHCP server must be able to provide IP address, name server, and default gateway to the NFX upon request.
The following procedures contain comments that are added to clarify the steps that are discussed.
- Ensure that the USB drive containing the Junos OS software
image is inserted in the USB port of the NFX device.
This allows you to boot the NFX from the USB drive.
- Access the NFX console either directly or using a terminal
You do not need to login; just ensure that you are actively connected.
- Power off the NFX device.
- Power on the NFX device.
- Immediately return to the session that you have open to
the console port of the nfx1 device.
From the console of the nfx1 device, press the ESC key every second until the following message appears: Esc is pressed. Go to boot options.
If you do not see this message in the console and the NFX appears to be booting normally, you need to wait for the boot to complete and then go back to step 1.
- A menu appears after a brief time. Use the down arrow key to select Boot Manager, then press Enter.
- When the Boot Manager menu appears, press Enter to boot from the USB00 drive.
- When the GNU GRUB menu appears, use the up or down arrow keys to select Install Juniper Linux with secure boot support and then press Enter.
At this point, the NFX will install the software contained on the USB drive. Installation takes some time. You can keep your console connection active to watch the installation process.
The NFX is made up of multiple components that load and boot in a specific order. See NFX 250 Overview for details. The PFE of the NFX may take a few minutes to complete the boot and allow the jsxe0 interface to obtain its address from DHCP.
You can login to the console of the NFX as root and confirm that the jsxe0 interface has received its address using the following procedure:
- Press Enter to refresh the login prompt
- At the jdm login prompt, type root and press Enter.
There is no password assigned to the root user at this point. For the purposes of this deployment exercise, do not set a root password at this time.
- At the root@jdm:~# prompt, type cli and press Enter.
- Type show interfaces jsxe0 and press Enter.
The jsxe0 interface has a number of logical interfaces used internally by the NFX for different purposes. You are looking for the jsxe0.0 logical interface. Confirm that the DHCP server has provided an address in the proper range before continuing.
root@jdm:~# show interfaces jsxe0 Logical interface jsxe0.1 (Index 4) Flags: Up Input packets : 0 Output packets: 252 Protocol inet, MTU: 1500 Logical interface jsxe0.2 (Index 5) Flags: Up Input packets : 3 Output packets: 274 Protocol inet, MTU: 1500 Logical interface jsxe0.0 (Index 3) Flags: Up Input packets : 7097 Output packets: 8722 Protocol inet, MTU: 1500 Destination: 172.26.133.0/24, Local: 172.26.133.106, Broadcast: 172.26.133.255
At this point, you can confirm that the DNS name server and default gateway are working by issuing the ping command to some host on the Internet.
root@jdm:~ # cli
root@jdm:~ > ping www.juniper.net count 1
PING e1824.dscb.akamaiedge.net (220.127.116.11) 56(84) bytes of data. 64 bytes from a23-223-165-73.deploy.static.akamaitechnologies.com (18.104.22.168): icmp_seq=1 ttl=56 time=2.67 ms --- e1824.dscb.akamaiedge.net ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 2.670/2.670/2.670/0.000 ms
The last part of this procedure is to login to the Junos Control Plane (jcp) in order to obtain the device serial number which will be used later in the SD-WAN deployment.
root@jdm:~ > ssh vjunos0
Last login: Tue Jan 22 06:28:51 2019 --- JUNOS 15.1X53-D40.3 Kernel 32-bit FLEX JNPR-10.1-20160217.114153_fbsd-builder_stable_10 At least one package installed on this device has limited support. Run 'file show /etc/notices/unsupported.txt' for details.
root> show chassis hardware
Hardware inventory: Item Version Part number Serial number Description Chassis DXXXXXXXXXX3 Pseudo CB 0 Routing Engine 0 BUILTIN BUILTIN RE-NFX250-S2 FPC 0 REV 04 650-066113 DXXXXXXXXXX3 CPU BUILTIN BUILTIN FPC CPU PIC 0 REV 04 BUILTIN BUILTIN 10x10/100/1000 Base-T-2x1G SFP- Power Supply 0 Fan Tray 0 fan-ctrl-0 0, Front to Back Airflow - AFO Fan Tray 1 fan-ctrl-0 1, Front to Back Airflow - AFO
The device serial number is listed on the Chassis line of the output. In this example, it is partly obscured for security purposes. Make note of the serial number for later use.