Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
[+] Expand All
[-] Collapse All

Migration, Upgrade, and Downgrade Instructions

This section contains the procedure to upgrade Junos OS, and the upgrade and downgrade policies for Junos OS. Upgrading or downgrading Junos OS can take several hours, depending on the size and configuration of the network.

Upgrading to a Controlled Version of Junos OS

Starting in Junos OS Release 14.1X53-D15, you can install a controlled version of Junos OS software on a QFX Series switch. The controlled version of Junos OS software is required to enable Media Access Control security (MACsec).

If you are upgrading your switch between a domestic version of Junos OS and a controlled version of Junos OS, keep the following issues in mind:

  • You cannot use NSSU to upgrade or downgrade from a controlled version of Junos OS to a domestic version of Junos OS.
  • In a Virtual Chassis, all member switches must be running the same release of Junos OS. A Virtual Chassis with member switches that are running domestic and export versions of the same Junos OS release does form.
  • In a Virtual Chassis, all member switches must be running the same release of Junos OS.

    To support MACsec, however, all member switches in the Virtual Chassis must be running the controlled version of Junos OS.

The upgrade or downgrade procedure from a domestic version of Junos OS to a controlled version of Junos OS is, otherwise, identical to any other Junos OS upgrade. See Upgrading Software for more information.

Upgrading Software on QFX5100 Standalone Switches

When upgrading or downgrading Junos OS, always use the jinstall package. Use other packages (such as the jbundle package) only when so instructed by a Juniper Networks support representative. For information about the contents of the jinstall package and details of the installation process, see the Junos OS Installation and Upgrade Guide and Junos OS Basics in the QFX Series documentation.

Note: On Junos Release 14.1X53-D35.3, autonegotation is disabled by default.

Note: On QFX5100 and EX4600 switches, the Host OS is not upgraded automatically, so you must use the force-host option if you want the Junos OS and Host OS versions to be the same.

However, pay attention to these notes regarding Junos OS and Host OS versions:

  • The Junos OS and Host OS versions do not need to be the same.
  • During an ISSU, the Host OS cannot be upgraded.
  • Upgrading the Host OS is not required for every software upgrade, as noted above.

Note: On QFX5100 and EX4600 switches, you must use the force-host option if you are downgrading from Junos OS Release 14.1X53-D40 to any release earlier than 14.1X53-D40 otherwise the switch will issue core dumps.

The download and installation process for Junos OS Release 14.1X53-D10 is the same as for previous Junos OS releases.

If you are not familiar with the download and installation process, follow these steps:

  1. In a browser, go to

    The Junos Platforms Download Software page appears.

  2. In the QFX Series section of the Junos Platforms Download Software page, select the QFX Series platform for which you want to download the software.
  3. Select 14.1 in the Release pull-down list to the right of the Software tab on the Download Software page.
  4. In the Install Package section of the Software tab, select the QFX Series Install Package for the 14.1 release.

    An Alert box appears.

  5. In the Alert box, click the link to the PSN document for details about the software, and click the link to download it.

    A login screen appears.

  6. Log in to the Juniper Networks authentication system using the username (generally your e-mail address) and password supplied by Juniper Networks representatives.
  7. Download the software to a local host.
  8. Copy the software to the device or to your internal software distribution site.
  9. Install the new jinstall package on the device.

    Note: We recommend that you upgrade all software packages out of band using the console, because in-band connections are lost during the upgrade process.

    Customers in the United States and Canada use the following command:

    user@host> request system software add source/jinstall-qfx-5-14.1X53-D25-domestic-signed.tgz reboot

    Replace source with one of the following values:

    • /pathname—For a software package that is installed from a local directory on the switch.
    • For software packages that are downloaded and installed from a remote location:

      • ftp://hostname/pathname
      • http://hostname/pathname
      • scp://hostname/pathname (available only for Canada and U.S. version)

    Adding the reboot command reboots the switch after the upgrade is installed. When the reboot is complete, the switch displays the login prompt. The loading process can take 5 to 10 minutes.

    Rebooting occurs only if the upgrade is successful.

Note: After you install a Junos OS Release 14.1 jinstall package, you can issue the request system software rollback command to return to the previously installed software.

Performing an In-Service Software Upgrade (ISSU)

You can use an in-service software upgrade to upgrade the software running on the switch with minimal traffic disruption during the upgrade.

Note: ISSU is supported in Junos OS Release 13.2X51-D15 and later.

Perform the following tasks:

Preparing the Switch for Software Installation

Before you begin software installation using ISSU:

  • Ensure that nonstop active routing (NSR), nonstop bridging (NSB), and graceful Routing Engine switchover (GRES) are enabled. NSB and GRES enable NSB-supported Layer 2 protocols to synchronize protocol information between the master and backup Routing Engines.

    To verify that nonstop active routing is enabled:

    Note: If nonstop active routing is enabled, then graceful Routing Engine switchover is enabled.

    user@switch> show task replication
            Stateful Replication: Enabled
            RE mode: Master

    If nonstop active routing is not enabled (Stateful Replication is Disabled), see Configuring Nonstop Active Routing on Switches for information about how to enable it.

  • Enable nonstop bridging (NSB). See Configuring Nonstop Bridging on Switches (CLI Procedure) for information on how to enable it.
  • (Optional) Back up the system software—Junos OS, the active configuration, and log files—on the switch to an external storage device with the request system snapshot command.

Upgrading the Software Using ISSU

This procedure describes how to upgrade the software running on a standalone switch.

To upgrade the switch using ISSU:

  1. Download the software package by following the procedure in the Downloading Software Files with a Browser section in Upgrading Software.
  2. Copy the software package or packages to the switch. We recommend that you copy the file to the /var/tmp directory.
  3. Log in to the console connection. Using a console connection allows you to monitor the progress of the upgrade.
  4. Start the ISSU:
    • On the switch, enter:
      user@switch> request system software in-service-upgrade /var/tmp/package-name.tgz

      where package-name.tgz is, for example, jinstall-132_x51_vjunos.domestic.tgz.

    Note: During the upgrade, you will not be able to access the Junos OS CLI.

    The switch displays status messages similar to the following messages as the upgrade executes:

    warning: Do NOT use /user during ISSU. Changes to /user during ISSU may get lost!
    ISSU: Validating Image
    ISSU: Preparing Backup RE
    Prepare for ISSU
    ISSU: Backup RE Prepare Done
    Extracting jinstall-qfx-5-13.2X51-D15.4-domestic ...
    Install jinstall-qfx-5-13.2X51-D15.4-domestic completed
    Spawning the backup RE
    Spawn backup RE, index 0 successful
    GRES in progress
    GRES done in 0 seconds
    Waiting for backup RE switchover ready
    GRES operational
    Copying home directories
    Copying home directories successful
    Initiating Chassis In-Service-Upgrade
    Chassis ISSU Started
    ISSU: Preparing Daemons
    ISSU: Daemons Ready for ISSU
    ISSU: Starting Upgrade for FRUs
    ISSU: FPC Warm Booting
    ISSU: FPC Warm Booted
    ISSU: Preparing for Switchover
    ISSU: Ready for Switchover
    Checking In-Service-Upgrade status
      Item           Status                  Reason
      FPC 0          Online (ISSU)        
    Send ISSU done to chassisd on backup RE
    Chassis ISSU Completed
    Initiate em0 device handoff

    Note: An ISSU might stop instead of abort if the FPC is at the warm boot stage. Also, any links that go down and up will not be detected during a warm boot of the Packet Forwarding Engine (PFE).

    Note: If the ISSU process stops, you can look at the log files to diagnose the problem. The log files are located at /var/log/vjunos-log.tgz.

  5. Log in after the reboot of the switch completes. To verify that the software has been upgraded, enter the following command:
    user@switch> show version

Modified: 2017-11-29