[j-nsp] How to upgrade junos 5.0.0r8.1

Tim Eberhard xmin0s at gmail.com
Mon Jul 13 16:42:58 EDT 2009


You configuration will remain after the upgrade/reboot.

Downgrading is the same process as upgrading as long as you're going from
say 5.2 to 5.0. Just load the 5.0 image and reboot. The 5.0 image is blown
away when you load the newer screenOS.

Good luck,
-Tim Eberhard

On Mon, Jul 13, 2009 at 11:04 AM, George <gmburu at cellulant.com> wrote:

>  Thanks Guys,
>
> Sure I had planned to upgrade to above 5.2 , are these firmwares available
> for download?
>
> So the next question is really about the configs, Once a reboot is done all
> the previous setting take in effect, is that so? And for a rollback the do I
> just scroll for the image?
>
> Regards
> George
>
>
>
> On Mon, 2009-07-13 at 17:39 +0300, Humair Ali wrote:
>
> Hi Georges
>
> Tim is absolutely correct, and since you are using the 2 netscreens as a
> standalone, you are bound to have downtime.
>
> One other , I believe (needs to verify) you can't go straight from 5.0 to
> 6.x, you need to upgrade through an intermediary such as 5.4 then upgrade
> 6.x so that is added downtime since again code needs to be reloaded after
> upgrade to 5.4 and then to 6.0
>
> HTH
>
>
>
>  2009/7/13 Tim Eberhard <xmin0s at gmail.com>
>
> George,
>
> It's not possible to preform any kind of hitless upgrade..
>
> The Netscreen must reboot once the new code is loaded. So you must factor
> in
> the time it will take for the firewall to reload in addition to the hit it
> will take when the wall comes back online and the traffic starts to flood
> back. Depending on the size of your network/amount of VPN tunnels it could
> take a couple of minutes for everything to ramp back up.
>
> Downgrading code is possible depending what code version you're going to.
> It
> can be a bit problematic if say you go to 6.X code from 5.0 but if you had
> planned on going from 5.0 to 5.4 going back shouldn't be much of a problem.
>
> Good luck,
>
> -Tim Eberhard
>
>
>
>
> On Mon, Jul 13, 2009 at 7:12 AM, George <gmburu at cellulant.com> wrote:
>
> > Sorry guys,
> >
> > The two firewalls are in completely two different networks and in no way
> > work together. The reason I mentioned the two is because I tried the
> > same VPN on the other Firewall with a higher firmware and it worked
> > within minutes of set-up. So i really want to upgrade this firewall.
> >
> > Thanks
> > George
> >
> > On Mon, 2009-07-13 at 17:17 +0500, masood at nexlinx.net.pk wrote:
> >
> > > Are you using both of the firewalls as n active/active or
> active/passive;
> > > if yes thn you can try upgrading one of them while the other will take
> > > care of your production services.
> > >
> > > Regards,
> > > Masood
> > >
> > > > Hi there,
> > > >
> > > > I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have
> > > > encountered a problem when setting up a VPN on this one due to
> firmware
> > > > version thus I need to upgrade it.
> > > >
> > > > The question is how do I upgrade this firmware, challenge being that
> it
> > > > is running live services and if the upgrade fails how do I roll-back.
> > > > Guess the thing is I have to be 100% sure the upgrade will not affect
> > > > anything.
> > > >
> > > > Cheers.
> > > > George
> > > > _______________________________________________
> > > > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > > > https://puck.nether.net/mailman/listinfo/juniper-nsp
> > > >
> > >
> > >
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
> >
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
>


More information about the juniper-nsp mailing list