Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Install Junos OS Upgrade Packages on SRX Series Firewalls

Learn how to install Junos OS upgrade packages on SRX Series Firewalls from Juniper Networks. This topic covers the necessary steps to prepare for the upgrade, execute the installation, and verify the successful update of the Junos OS on your firewall devices.

Requirements

Before you begin:

  • Verify the available space on the device.

  • Download the software package. See Downloads to download the software package for your products.

  • Copy the software package to the device if you are installing the software package from a local directory on the device. We recommend that you copy it to the /var/tmp directory. To copy the software package to the /var/tmp directory, use the following command from the operational mode:

    Example:

Know the Upgrade Path for Junos OS

Knowing the upgrade path helps you to choose the correct Junos OS package or packages to install.

Topic Details
Suggested Releases to Consider Always check the most up-to-date version as recommended in the Knowledge Base article: See Junos Software Versions - Suggested Releases to Consider and Evaluate.
Upgrade Path Reference

For information about upgrade path, see Junos Upgrade Paths for SRX Platforms.
Minimal Downtime Procedure

For SRX300 Line of Firewalls, if you are upgrading to Junos OS Release 24.4R1 or later, you must use either the procedures outlined in KB 85650 or the minimal downtime procedure documented in KB17947 (Minimal_Downtime_Upgrade_Branch_Mid PDF file).
ISSU Limitations

Check article on ISSU limitations. See SRX ISSU ICU Upgrade Limitations.

Install Overview

When you install software on a Junos OS storage device, the system validates the package by default. The request system software add package-name command automatically uses the validate option to check the package against the current configuration. This ensures the device can reboot successfully after installation.

Starting with Junos OS Release 24.4R1, Juniper renamed software images:

  • Use junos-install-srxsme* for Release 24.4R1 and later.

  • Use junos-srxsme* for Release 23.4R1 and earlier.

Configuration

Procedure

GUI Quick Configuration

Step-By-Step Procedure

To install Junos OS upgrades on SRX Series Firewalls:

  1. In the J-Web user interface, select Device Administration>Software Management>Install Package.

  2. On the Upload Package page, specify the software package to upload. Click Browse to navigate to the software package location and select junos-srxsme-24.4R1-domestic.tgz.

  3. Select the Reboot If Required check box to set the device to reboot automatically when the upgrade is complete.

  4. Select the Do not save backup check box to bypass saving the backup copy of the current Junos OS package (SRX Series).

  5. Click Upload Package. The software is activated after the device has rebooted.

  6. Click OK to save your changes as a candidate configuration. In Junos OS, a candidate configuration is a draft. Changes are saved but not yet applied to the running system.

  7. If you are done configuring the device, click Commit Options>Commit. Commit applies the candidate configuration to the device and activates all changes.

Step-by-Step Procedure

Follow these steps to install a Junos OS software package using the CLI.

Before You Begin:

If you’re new to Junos OS, see Using the CLI Editor in Configuration Mode to understand how to navigate the configuration hierarchy.

  1. Install the Software Package: From operational mode, install the software using the request system software add command with the required options:

    • Use the no-copy option to install the software without saving a copy locally.

    • Only use the no-validate option if advised by Juniper Networks Technical Assistance Center (JTAC).

    • reboot – Reboots the device automatically after installation completes.

  2. Reboot the Device: After the installation completes, reboot the device to activate the new software:

    • Once the reboot is complete, the device displays the login prompt.

  3. Verify the Configuration: After logging in, enter configuration mode, then verify your settings. If the output doesn’t show the intended configuration, repeat the configuration steps as needed.

  4. From configuration mode, confirm your configuration by entering the show system command.

    If you are done configuring the device, enter commit from configuration mode.

Verification

Confirm that the configuration is working properly.

Verifying the Junos OS Upgrade Installation

Purpose

Verify that the Junos OS upgrade was installed.

Action

From operational mode, enter the show version command.

Sample Output
show version

Meaning

The show version command displays the hostname, model number, and the release information loaded on the device.