Migration, Upgrade, and Downgrade Instructions
This section contains information about how to upgrade Junos OS for vSRX using the CLI. Upgrading or downgrading Junos OS can take several hours, depending on the size and configuration of the network.
Direct upgrade of vSRX from Junos OS 15.1X49 Releases to Junos OS Releases 17.4, 18.1, 18.2, 18.3, 18.4, 19.1, or 19.2 is supported.
The following limitations apply:
Direct upgrade of vSRX from Junos OS 15.1X49 Releases to Junos OS Release 19.3 and higher is not supported. For upgrade between other combinations of Junos OS Releases in vSRX and vSRX 3.0, the general Junos upgrade policy applies.
The file system mounted on /var usage must be below 14% of capacity.
Check this using the following command:
show system storage | match " /var$" /dev/vtbd1s1f
2.7G 82M 2.4G 3% /var
Using the request system storage cleanup command might help reach that percentage.
The Junos upgrade image must be placed in the directory /var/host-mnt/var/tmp/. Use the request system software add /var/host-mnt/var/tmp/<upgrade_image>
We recommended you deploy a new vSRX VM instead of performing a Junos upgrade. That also gives you the option to move from vSRX to the newer and more recommended vSRX 3.0.
Ensure to backup valuable items such as configurations, license-keys, certificates, and other files that you would like to keep.
Upgrading Software Packages
To upgrade to Junos OS 15.1X49-D240 using the CLI:
- Verify that Junos OS Release 15.1X49-D15 or later for
vSRX is deployed.
root@vsrx> show version Hostname: vsrx Model: vSRX Junos: 15.1X49-D240.1 JUNOS Software Release [15.1X49-D240.1]
- Download the Junos OS Release 15.1X49-D240 for vSRX .tgz file from the Juniper Networks website. Note the size of the software image.
- Verify that you have enough free disk space on the vSRX
to upload the new software image.
root@vsrx> show system storage detail Filesystem 1024-blocks Used Avail Capacity Mounted on /dev/vtbd0s1a 512622 335984 135630 71% / devfs 1 1 0 100% /dev /dev/md0 976542 976542 0 100% /junos /cf 512622 335984 135630 71% /junos/cf devfs 1 1 0 100% /junos/dev/ procfs 4 4 0 100% /proc /dev/vtbd1s1e 1650908 28 1518808 0% /config /dev/vtbd1s1f 14858326 746128 12923532 5% /var /dev/vtbd3s2 93552 714 92838 1% /var/host /dev/md1 328084 1184 300654 0% /mfs /var/jail 14858326 746128 12923532 5% /jail/var /var/log 14858326 746128 12923532 5% /jail/var/log devfs 1 1 0 100% /jail/dev 192.168.1.1:/var/tmp/corefiles 4661548 1367504 3034204 31% /var/crash/corefiles 192.168.1.1:/var/volatile 8210130 8 8210112 0% /var/log/host 192.168.1.1:/var/log 4661548 1367504 3034204 31% /var/log/hostlogs 192.168.1.1:/var/local 4661548 1367504 3034204 31% /var/db/host 192.168.1.1:/var/db/aamwd 4661548 1367504 3034204 31% /var/db/aamwd 192.168.1.1:/var/db/secinteld 4661548 1367504 3034204 31% /var/db/secinteld 192.168.1.1:/app_disk 1335984 2040 1248032 0% /var/install_disk
- Optionally, free up more disk space if needed to upload
root@vsrx> request system storage cleanup List of files to delete: Size Date Name 11B Feb 7 23:21 /var/jail/tmp/alarmd.ts 3631B Feb 11 01:02 /var/jail/tmp/events-table.txt 173.3K Feb 9 15:49 /var/jail/tmp/httpd.core.0.gz 46B Mar 8 01:31 /var/jail/tmp/jweb-users.xml 96.6K Apr 14 10:21 /var/log/chassisd.0.gz 99.8K Apr 13 18:10 /var/log/chassisd.1.gz 101.9K Apr 13 02:19 /var/log/chassisd.2.gz 101.3K Apr 12 10:43 /var/log/chassisd.3.gz 91.6K Apr 13 20:45 /var/log/hostlogs/auth.log.1.gz 91.7K Apr 10 22:15 /var/log/hostlogs/auth.log.2.gz 92.0K Apr 7 23:45 /var/log/hostlogs/auth.log.3.gz 91.8K Apr 5 01:00 /var/log/hostlogs/auth.log.4.gz <output omitted>
If this command does not free up enough disk space, see [SRX] Common and safe files to remove in order to increase available system storage for details on safe files you can manually remove from vSRX to free up disk space.
- Use FTP, SCP, or a similar utility to upload the Junos
OS Release 15.1X49-D240 for vSRX .tgz file to
/var/tmpon the local file system of your vSRX VM. For example:
root@vsrx> file copy ftp://username:email@example.com/pathname/
- From operational mode, install the software upgrade package:
root@vsrx> request system software add /var/tmp/junos-vsrx-15.1X49-D240.2-domestic.tgz no-copy no-validate reboot Installing package ’/var/tmp/junos—vsrx—15.1X49D240.2-domestic.tgz’ ... Verified junos—boot—vsrx—15.1X49D240.2.tgz signed by PackageProduction_15_1_0 Verified junos-vsrx—15.1X49D240.2—domestic signed by PackageProduction_15_1_0 Available space: 849286 require: 4714 Saving boot file package in /var/sw/pkg/junos—boot—vsrx—15.1X49D240.2.tgz JUNOS 15.1X49D240.2 will become active at next reboot Saving package file in /var/sw/pkg/junos—15.1X49D240.2.tgz ... Saving state for rollback ... Rebooting ... shutdown: [pid 2535] Shutdown NOW!
*** FINAL System shutdown Message from root@vsrx ***
System going down IMMEDIATELY
If no errors occur, Junos OS reboots automatically to complete the upgrade process.
- You have successfully upgraded to Junos OS Release 15.1X49-D240
for vSRX. Now log in and use the
show versioncommand to verify the upgrade.
login: root password: —— JUNOS 15.1X49D240.2 built 2020-06-03 23:57:11 UTC root@vsrx> root@vsrx> cli root@vsrx>
root@vsrx> show version Hostname: vsrx Model: vSRX JUNOS Software Release [15.1X49D240.2]
Validating the OVA Image
If you have downloaded a vSRX .ova image and need to validate it, see Validating the vSRX .ova File for VMware.
Note that only .ova (VMware platform) vSRX images can be validated. The .qcow2 vSRX images for use with KVM cannot be validated the same way. File checksums for all software images are, however, available on the download page.
Migrating from Firefly Perimeter
For Firefly Perimeter users, it is not possible to upgrade directly from Firefly Perimeter to vSRX.
For anyone currently using a version of Firefly Perimeter or vSRX based on Junos OS Release 12.1X46 or 12.1X47, you must start with a completely new install of Junos OS Release 15.1X49-D15 for vSRX.