Srx650 Upgrading Junos the switch through USB

1. Upgrading Junos

1.   Procedure to upgrade the switch through USB:

ü  Login with root credentials

• Mount USB

% mount_msdosfs /dev/da1s1 /mnt

• Go to mount directory

% cd /mnt

• Copy junos software package to temp directory

% cp junos-srxsme-11.4R9.4<press tab> /var/tmp

• To verify file, go to /var/tmp directory:

% cd /var/tmp

• To verify the package files

% ls

• Type cli and enter into operational mode

% cli

• Add the software package

> request system software add /var/tmp/ junos-srxsme-11.4R9.4..<press tab>  no-copy partition

• Reboot the device

> request system reboot

Type yes

-------------------------------------------------------------------------------

• After the upgrade check the current version

> show version

• Check the routing-engine utilization

> show chassis routing-engine

Upgrading Junos in MX480 via USB

1. Upgrading Junos

1.   Procedure to upgrade the switch through USB:

2.   There are two routing engines for redundancy.

3.   Master routing-engine is on slot 0 and Backup routing-engine is on slot 1

4.   We have to install junos software package on each routing-engines separately

5.   First upgrade backup routing-engine and then upgrade master routing-engine

Note: Accidently if you upgrade Master first then you will loose communication with backup routing engine due to mismatch of Junos version.

In that case you have to loging to the master routing engine and issue below command to get into to backup routing engine:

> request routing-engine login other-routing-engine

Then apply the same procedure to install Junos on backup routing engine through USB.

ü  Login with root credentials

• Mount USB

% mount_msdosfs /dev/da1s1 /mnt

• Go to mount directory

% cd /mnt

• Copy junos software package to temp directory

% cp jinstall-11.4R7.5-export<press tab> /var/tmp

• To verify file, go to /var/tmp directory:

% cd /var/tmp

• To verify the package files

% ls

• Type cli and enter into operational mode

% cli

• Add the software package

> request system software add set /var/tmp/ jinstall-11.4R7.5-export<press tab>  no-copy

• Reboot the device

> request system reboot

Type yes

-------------------------------------------------------------------------------

• After the upgrade check the current version

> show version

• Check the routing-engine utilization

> show chassis routing-engine

EX 4200 :- Upgrading Junos

1. Upgrading Junos

1.   Procedure to upgrade the switch through USB:

ü  Login with root credentials

• Mount USB

% mount_msdosfs /dev/da1s1 /mnt

/dev/da1s1 :- This path will change according to the USB (Eg:- da1s0/da1s2 ETC.....

• Go to mount directory

% cd /mnt

• Copy jloader & jinstall software package to temp directory

% cp jloader....<press tab> /var/tmp  For XML scrips need to install

% cp jinstall...<press tab> /var/tmp   This for install the IOS

• To verify file, go to /var/tmp directory:

% cd /var/tmp

• To verify the package files

% ls

• Type cli and enter into operational mode

% cli

• Add the software package

> request system software add /var/tmp/jloader...<press tab>  no-opy

> request system software add /var/tmp/jinstall..<press tab>  no-copy

• Reboot the device

> request system reboot

Type yes

-------------------------------------------------------------------------------

• After the upgrade check the current version

> show version

> show system snapshot media internal --> to verify OS on each partition (primary + backup)

• If there is mismatch run below command

> request system snapshot slice alternate

• Check the routing-engine utilization

> show chassis routing-engine

Juniper Hardware/Software diagnostics commands for troubleshooting Part 1

Juniper hardware/Software diagnostics commands

show version | savefilename
show chassishardware | savefilename
show chassisenvironment | savefilename
show systemboot-messages | savefilename
show configuration | savefilename

show chassis hardware

show chassis temperature-thresholds
show chassis hardware detail | display xml | no-more
show version
show system snapshot media internal

To view the configuration file

show | display set | no-more
show | no-more
show interface terse
show route
show interfaces terse | savefilename
show system processes
show interfaces <interface-name> extensive
show log messages


BGP commands 

show bgp neighbor | no-more
show route advertising-protocol bgp 10.200.7.2
show route receive-protocol bgp 10.200.7.2
show bgp summary




Routing protocol commands OSPF/ISIS

show isisadjacencybrief
show ospfneighborbrief | savefilename
show systemstorage | savefilename

STP /switching commands 

show spanning-tree bridge
show spanning-tree bridge detail
show spanning-tree interface
show spanning-tree interface detail
show spanning-tree statistics interface <int>
show spanning-tree statistics interface <int> detail

Switching commands  T&B

show ethernet-switching interfaces
show ethernet-switching table
show interface
show interface extensive

Like show tech support command in cisco

request support information all-member | no-more


Log commands 

show log jsrpd
show log messages
show log chassisd   (will report hardware chassis failures)
show log dcd

show module command in cisco same like it, It will show the module is online or not 

Show chassis fpc 7
Show chassis fpc 8(module in Srx or Mx router module)

L2 Verification & Troubleshooting  

The following commands are helpful for verifying and troubleshooting ethernet switching and VLANs:

user@host> show ethernet-switching mac-learning-log        
(Technical documentation reference:   show ethernet-switching mac-learning-log)

user@host> show ethernet-switching table            
(Technical documentation reference:   show ethernet-switching table)

user@host> show vlans
user@host> show vlans <vlan> extensive

user@host> show ethernet-switching table interface <interface>

user@host> monitor interface <vlan interface>

show interfaces vlan                   /to see the vlan in SRX
show system users                      /to see the user in Mx480

monitor interface traffic
====================================================================
user@host> monitor interface traffic
>monitor interface so-1/0/0.0

====================================================================
show route resolution unresolved

user@host> show route resolution unresolved

Syslog
--------------
set system syslog host 172.19.110.10 any notice

Sources ping commands 

SRXA# run ping 192.168.6.1 interface fe-0/0/1.0 (Sources ping via interface)

#> metacortex@Bazzalan# run ping 4.2.2.2 source 192.168.0.69 count 5 (Sources ping using live ip address in device)





Command                              Description


show version :-                         Software version
show chassis hardware detail:-  Hardware and Serial numbers
show chassis environment:-      Temperatures, Fan and Power Supply
show chassis routing-engine     Temperatures, Memory, CPU Load
show interfaces terse :-            Interface States
show interfaces extensive:-      Interface and Zone Counters
monitor interfac                       Real-time interface statistics
show security flow session:-    Current sessions


show system alarms :-       Alarms
show chassis alarms

Monitoring the interface

> monitor traffic interface <int> layer2-headers
> monitor traffic interface e1-0/0/0.0 no-resolve

JTAC Recommended Junos Software Versions

http://kb.juniper.net/InfoCenter/index?page=content&id=KB21476

Join us Oct 30th for a webcast as we unveil Juniper’s New Data Center Architecture

https://event.on24.com/eventRegistration/EventLobbyServlet?target=registration.jsp&eventid=699850&sessionid=1&key=9C72F79B1BE0D269F53ACA8D673E6586&sourcepage=register

Certification Path for Security in Juniper

It like Firewall Security Specialist in Cisco 

Juniper Services Provider Path (Like Cisco CCIE SP)