Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Install Junos OS on SRX300 Line of Firewalls Using a USB Flash Drive

Learn about installing Junos OS on SRX Series Firewalls using a USB flash drive. This process includes upgrade prerequisites, boot loader updates, and step-by-step installation procedures.

Prerequisites Before Installation

When you upgrade or downgrade SRX300 Line of Firewalls to Junos OS Release 24.4R1 using a USB flash drive, the device reboots and comes up in amnesiac state. Therefore, before you install, make sure you have saved the configuration file so that you can more easily reconfigure the device using the console port.

Before you upgrade from either Junos OS Release 23.4R2-S3 or from Release 24.2R2 to Junos OS Release 24.4R1 for SRX300 Line of Firewalls, complete the following:

  • Upgrade the U-Boot software to at least version 3.15.

  • Upgrade the loader to a build from the year 2023 or later. During the boot process, the loader reveals the build date. For example, this loader was built on May 23, 2023

Once you have installed either Junos OS Release 23.4R2-S3 or Release 24.2R2, the Junos OS image contains the latest boot loader binaries in these paths: /boot/uboot and /boot/veloader. You can upgrade the U-Boot software and veloader as follows:

  • From the CLI prompt, enter the start shell command.

  • From the shell prompt, update the U-Boot software with the bootupgrade -u /boot/uboot command.

  • From the shell prompt, update the veloader with the bootupgrade -l /boot/veloader -x command.

  • Reboot the device. Once the device is up, you can use a USB flash drive to upgrade to Junos OS Release 24.4R1.

Install Junos OS on a Flash Drive

To install the Junos OS image on an SRX Series Firewall using a USB flash drive, follow the below steps:

  1. Insert the USB flash drive into the USB port of the SRX Series Firewall and observe the LEDs.

    The LEDs will initially blink amber and then steadily turn amber, indicating that the SRX Series device has detected the Junos OS image.

  2. Press the Reset Config button on the SRX Series Firewall to initiate the installation process.

    The LEDs glow steadily amber during installation.

  3. Remove the USB flash drive after pressing the Reset Config button.

    Frequent plugging and unplugging of USB storage device is not supported. Always wait for device recognition before removing the drive.

  4. Wait for the device to complete the installation.

    • The SRX Series Firewall restarts automatically after installation.

    • When the LEDs glow green, the new Junos OS version has been installed successfully.

If the LEDs do not change to amber:

  • Press the Power button or restart the device.

  • Wait for the LEDs to blink amber before attempting again.

During installation, if an error occurs, the LEDs turn red. Common reasons are:

Error Cause Description
Corrupted Junos OS image The image file on the USB flash drive is corrupted.
Configuration incompatibility The existing configuration is incompatible with the new OS version.
Insufficient storage Not enough space on the device to install the image.

In case of errors, console access is required to troubleshoot.

Additional Behavior During Installation

  • When a USB storage device is inserted, the Reset Config button functions only for image upgrade.

  • Other Reset Config button operations are overridden until the USB storage drive is removed.

  • You do not need to wait for LEDs to turn steadily amber before pressing Reset Config; press it once the LEDs blink amber to avoid unnecessary delays.

You can use the set system autoinstallation usb disable command to prevent the automatic installation from the USB storage device. After using this command, if you insert the USB storage device into the USB port of the SRX Series Firewall, the installation process does not work.

Use Feature Explorer to confirm platform and release support for specific features.

Review the Platform-Specific USB Flash Drive Behavior section for notes related to your platform.

Platform-Specific USB Flash Drive Behavior

Use Feature Explorer to confirm platform and release support for specific features.

Use the following table to review platform-specific behavior for your platform:

Platform

Difference

SRX Series

  • SRX300 Line of Firewall devices that support USB flash drive do not support frequent plug and play of USB keys. You must wait for the device node creation before removing the USB key.