Migration, Upgrade, and Downgrade Instructions
This section contains the procedure to upgrade Junos OS, and the upgrade and downgrade policies for Junos OS. Upgrading or downgrading Junos OS can take several hours, depending on the size and configuration of the network.
- Upgrading to a Controlled Version of Junos OS
- Upgrading Software on QFX5100 Standalone Switches
- Performing an In-Service Software Upgrade (ISSU)
- Preparing the Switch for Software Installation
- Upgrading the Software Using ISSU
Upgrading to a Controlled Version of Junos OS
Starting in Junos OS Release 14.1X53-D15, you can install a controlled version of Junos OS software on a QFX Series switch. The controlled version of Junos OS software is required to enable Media Access Control security (MACsec).
If you are upgrading your switch between a domestic version of Junos OS and a controlled version of Junos OS, keep the following issues in mind:
- You cannot use NSSU to upgrade or downgrade from a controlled version of Junos OS to a domestic version of Junos OS.
- In a Virtual Chassis, all member switches must be running the same release of Junos OS. A Virtual Chassis with member switches that are running domestic and export versions of the same Junos OS release does form.
- In a Virtual Chassis, all member switches must be running
the same release of Junos OS.
To support MACsec, however, all member switches in the Virtual Chassis must be running the controlled version of Junos OS.
The upgrade or downgrade procedure from a domestic version of Junos OS to a controlled version of Junos OS is, otherwise, identical to any other Junos OS upgrade. See Upgrading Software for more information.
Upgrading Software on QFX5100 Standalone Switches
When upgrading or downgrading Junos OS, always use the jinstall package. Use other packages (such as the jbundle package) only when so instructed by a Juniper Networks support representative. For information about the contents of the jinstall package and details of the installation process, see the Junos OS Installation and Upgrade Guide and Junos OS Basics in the QFX Series documentation.
![]() | Note: On Junos Release 14.1X53-D35.3, autonegotation is disabled by default. |
![]() | Note: On QFX5100 and EX4600 switches, the Host OS is not upgraded automatically, so you must use the force-host option if you want the Junos OS and Host OS versions to be the same. However, pay attention to these notes regarding Junos OS and Host OS versions:
|
![]() | Note: On QFX5100 and EX4600 switches, you must use the force-host option if you are downgrading from Junos OS Release 14.1X53-D40 to any release earlier than 14.1X53-D40 otherwise the switch will issue core dumps. |
The download and installation process for Junos OS Release 14.1X53-D10 is the same as for previous Junos OS releases.
If you are not familiar with the download and installation process, follow these steps:
- In a browser, go to http://www.juniper.net/support/downloads/junos.html.
The Junos Platforms Download Software page appears.
- In the QFX Series section of the Junos Platforms Download Software page, select the QFX Series platform for which you want to download the software.
- Select 14.1 in the Release pull-down list to the right of the Software tab on the Download Software page.
- In the Install Package section of the Software tab, select
the QFX Series Install Package for the 14.1 release.
An Alert box appears.
- In the Alert box, click the link to the PSN document for
details about the software, and click the link to download it.
A login screen appears.
- Log in to the Juniper Networks authentication system using the username (generally your e-mail address) and password supplied by Juniper Networks representatives.
- Download the software to a local host.
- Copy the software to the device or to your internal software distribution site.
- Install the new jinstall package on the device.
Note: We recommend that you upgrade all software packages out of band using the console, because in-band connections are lost during the upgrade process.
Customers in the United States and Canada use the following command:
user@host> request system software add source/jinstall-qfx-5-14.1X53-D25-domestic-signed.tgz reboot
Replace source with one of the following values:
/pathname
—For a software package that is installed from a local directory on the switch.For software packages that are downloaded and installed from a remote location:
ftp://hostname/pathname
http://hostname/pathname
scp://hostname/pathname
(available only for Canada and U.S. version)
Adding the reboot command reboots the switch after the upgrade is installed. When the reboot is complete, the switch displays the login prompt. The loading process can take 5 to 10 minutes.
Rebooting occurs only if the upgrade is successful.
![]() | Note: After you install a Junos OS Release 14.1 jinstall package, you can issue the request system software rollback command to return to the previously installed software. |
Performing an In-Service Software Upgrade (ISSU)
You can use an in-service software upgrade to upgrade the software running on the switch with minimal traffic disruption during the upgrade.
![]() | Note: ISSU is supported in Junos OS Release 13.2X51-D15 and later. |
Perform the following tasks:
Preparing the Switch for Software Installation
Before you begin software installation using ISSU:
- Ensure that nonstop active routing (NSR), nonstop bridging
(NSB), and graceful Routing Engine switchover (GRES) are enabled.
NSB and GRES enable NSB-supported Layer 2 protocols to synchronize
protocol information between the master and backup Routing Engines.
To verify that nonstop active routing is enabled:
Note: If nonstop active routing is enabled, then graceful Routing Engine switchover is enabled.
user@switch> show task replication Stateful Replication: Enabled RE mode: Master
If nonstop active routing is not enabled (Stateful Replication is Disabled), see Configuring Nonstop Active Routing on Switches for information about how to enable it.
- Enable nonstop bridging (NSB). See Configuring Nonstop Bridging on Switches (CLI Procedure) for information on how to enable it.
- (Optional) Back up the system software—Junos OS, the active configuration, and log files—on the switch to an external storage device with the request system snapshot command.
Upgrading the Software Using ISSU
This procedure describes how to upgrade the software running on a standalone switch.
To upgrade the switch using ISSU:
- Download the software package by following the procedure in the Downloading Software Files with a Browser section in Upgrading Software.
- Copy the software package or packages to the switch. We recommend that you copy the file to the /var/tmp directory.
- Log in to the console connection. Using a console connection allows you to monitor the progress of the upgrade.
- Start the ISSU:
- On the switch, enter:
user@switch> request system software in-service-upgrade /var/tmp/package-name.tgz
where package-name.tgz is, for example, jinstall-132_x51_vjunos.domestic.tgz.
Note: During the upgrade, you will not be able to access the Junos OS CLI.
The switch displays status messages similar to the following messages as the upgrade executes:
warning: Do NOT use /user during ISSU. Changes to /user during ISSU may get lost! ISSU: Validating Image ISSU: Preparing Backup RE Prepare for ISSU ISSU: Backup RE Prepare Done Extracting jinstall-qfx-5-13.2X51-D15.4-domestic ... Install jinstall-qfx-5-13.2X51-D15.4-domestic completed Spawning the backup RE Spawn backup RE, index 0 successful GRES in progress GRES done in 0 seconds Waiting for backup RE switchover ready GRES operational Copying home directories Copying home directories successful Initiating Chassis In-Service-Upgrade Chassis ISSU Started ISSU: Preparing Daemons ISSU: Daemons Ready for ISSU ISSU: Starting Upgrade for FRUs ISSU: FPC Warm Booting ISSU: FPC Warm Booted ISSU: Preparing for Switchover ISSU: Ready for Switchover Checking In-Service-Upgrade status Item Status Reason FPC 0 Online (ISSU) Send ISSU done to chassisd on backup RE Chassis ISSU Completed ISSU: IDLE Initiate em0 device handoff
Note: An ISSU might stop instead of abort if the FPC is at the warm boot stage. Also, any links that go down and up will not be detected during a warm boot of the Packet Forwarding Engine (PFE).
Note: If the ISSU process stops, you can look at the log files to diagnose the problem. The log files are located at /var/log/vjunos-log.tgz.
- On the switch, enter:
- Log in after the reboot of the switch completes. To verify
that the software has been upgraded, enter the following command:user@switch> show version