Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Upgrade Junos OS Package on SRX Series Firewalls

Learn how to install Junos OS upgrade packages on SRX Series Firewalls from Juniper Networks. This topic covers the necessary steps to prepare for the upgrade, execute the installation, and verify the successful update of the Junos OS on your firewall devices.

Requirements

Before you begin:

  • Verify the available space on the device.

  • Download the software package. See Downloads to download the software package for your products.

  • We recommend that you copy the software package to the/var/tmp directory from any local directory on the device where you have saved the package after the download. To copy the software package to the /var/tmp directory, use the following command from the operational

    Example:

Know the Upgrade Path for Junos OS

Knowing the upgrade path helps you to choose the correct Junos OS package or packages to install.

Topic Details
Suggested Releases to Consider Always check the most up-to-date version as recommended in the Knowledge Base article: See Junos Software Versions - Suggested Releases to Consider and Evaluate.
Upgrade Path Reference

For information about upgrade path, see Junos Upgrade Paths for SRX Platforms.
Minimal Downtime Procedure

For SRX300 line of Firewalls, if you are upgrading to Junos OS Release 24.4R1 or from 24.2 or earlier, you must use either the procedures outlined in KB 85650.
ISSU Limitations

Check article on ISSU limitations. See SRX ISSU ICU Upgrade Limitations.

Installation Overview

When you install software on a Junos OS storage device, the system validates the package by default. The request system software add package-name command automatically uses the validate option to check the package against the current configuration. This action ensures the device can reboot successfully after installation.

Starting with Junos OS Release 24.4R1, Juniper has renamed software images as:

  • junos-install-srxsme* for Release 24.4R1 and later.

  • junos-srxsme* for Release 23.4R1 and earlier.

Install Junos OS - Configuration

Procedure

GUI Quick Configuration

Step-By-Step Procedure

Use Feature Explorer to confirm platform and release support for specific features.

Review the Platform-Specific Behavior section for notes related to your platform.

To install Junos OS upgrades on SRX Series Firewalls:

  1. In the J-Web UI, select Device Administration>Software Management>Install Package.

  2. On the Upload Package page, specify the software package to upload. Click Browse to navigate to the software package location and select junos-install-srxsme-mips-24.4R1-domestic.tgz.

  3. Select the Reboot If Required check box to set the device to reboot automatically when the upgrade is complete.

  4. Select the Do not save backup check box to bypass saving the backup copy of the current Junos OS package.

  5. Click Upload Package. The software is activated after the device reboots.

  6. Click OK to save your changes as a candidate configuration. In Junos OS, a candidate configuration is a draft, that is, changes are saved but not yet applied to the running system.

  7. Click Commit Options>Commit. Commit applies the candidate configuration to the device and activates all changes.

Step-by-Step Procedure Using CLI

Follow these steps to install a Junos OS software package using the CLI.

Before You Begin:

If you’re new to Junos OS, see Using the CLI Editor in Configuration Mode to understand how to navigate the configuration hierarchy.

  1. From operational mode, install the software using the request system software add command with the required options:

    • Use the no-copy option to install the software without saving a copy locally.

    • Use the no-validate option only if advised by Juniper Networks Technical Assistance Center (JTAC).

    • reboot – Reboots the device automatically after installation is complete.

  2. After the installation is complete, reboot the device to activate the new software:

    • When the reboot is complete, the device displays the login prompt.

  3. After logging in, enter configuration mode and verify your settings. If the output doesn’t show the intended configuration, repeat the upgrade steps as needed.

  4. From configuration mode, confirm your upgrade by entering the show version command.

    If the output confirms a successful upgrade, enter commit from configuration mode.

Verify Junos OS Upgrade

Purpose

Verify that the Junos OS upgrade package is installed.

Action

From operational mode, enter the show version command.

Sample Output

show version

Meaning

The show version command displays the hostname, model number, and the release information loaded on the device.

Platform-Specific Behavior

Use Feature Explorer to confirm platform and release support for specific features.

Use the following table to review platform-specific behavior for your platform:

Platform

Difference

SRX Series

  • On SRX1600, SRX2300, SRX4120, SRX4700, and SRX5000 with RE3 and later that support request vmhost does not support request software. For example, request vmhost software add /var/tmp/junos-vmhost-install-srx-x86-64-24.2R2.18.tgz no-validate reboot