Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
external-header-nav
keyboard_arrow_up
close
keyboard_arrow_left
SRX4600 Firewall Hardware Guide
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Maintaining the SRX4600 SSD

date_range 31-Jul-23

Replacing an SRX4600 Firewall SSD

This topic explains how to replace an Solid State-Drive (SSD) if RAID (Redundant Array of Independent Disks) is not configured on your SRX4600 Firewall.

The two SSDs installed in the SRX4600 Firewall are field-replaceable unit (FRUs). You need to power off the SRX4600 Firewall to replace a SSD from the firewall.

When you are replacing a faulty SSD with a new SSD that has no Junos OS installed on it or if you have to reinstall the corrupted Junos OS image on the SSD, you should use a USB flash drive to install the Junos OS.

Removing an SSD from an SRX4600 Firewall

Ensure that you have the following equipment available:

  • Electrostatic discharge (ESD) grounding strap

  • An antistatic bag or an antistatic mat

  • SSD to replace

You need to power off the SRX4600 Firewall to remove a SSD from the firewall.

To remove an SSD, see (Figure 1):

  1. Attach an ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis.
  2. Place the antistatic bag or the antistatic mat on a flat, stable surface.
  3. Place your thumb on the SSD handle and press the tab below the SSD handle with one finger to unlock the SSD from its slot.
  4. Pull the SSD firmly to slide it out of its slot.
  5. Place the SSD in the antistatic bag or on the antistatic mat placed on a flat, stable surface.
Figure 1: Removing an SSDRemoving an SSD

Installing an SSD in an SRX4600 Firewall

Ensure that you have the following equipment available:

  • ESD grounding strap

You need to power off the SRX4600 Firewall to install a SSD into the firewall.

To install an SSD, see (Figure 2):

  1. Attach an ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis.
  2. Hold the SSD by its handle and slide it gently into its slot until the tab below the handle locks into the SSD slot.
  3. Follow the procedure in Creating a Bootable USB Flash Drive to Install Junos OS on an SRX4600 Firewall if the new SSD has no Junos OS installed on it.
Figure 2: Installing the SSDInstalling the SSD

Creating a Bootable USB Flash Drive to Install Junos OS on an SRX4600 Firewall

If Junos OS on the SRX4600 Firewall is damaged or if you are replacing a solid state-drive (SSD) that has no Junos OS installed on it, you can use a bootable USB flash drive to install Junos OS on the SSD.

This topic provides information on how to create a bootable USB flash drive and install Junos OS image on an SRX4600 Firewall.

Creating a Bootable USB Flash-Drive

You can create a bootable disk using any procedure listed below:

Before creating a bootable USB flash-drive, you must have the following items:

  • 3 GB (or larger) USB flash-drive (formatted with a FAT 32 file system)

  • Junos OS image file

    Example of the Install media:

    content_copy zoom_out_map
    junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img.gz
    Note:

    As the Junos OS image for USB flash-drive is in .gz compressed format, you must decompress the file before writing it onto the USB flash-drive.

Warning:

When you create a bootable USB flash-drive, the contents of the USB flash-drive are deleted.

Creating a Bootable USB Flash Drive using an SRX High-end Device

To create a bootable USB flash-drive using an SRX High-end device:

  1. Connect to any SRX High-end device that has enough storage (approx. 3GB), through a console.

  2. Copy the Junos OS image to the /var/tmp directory of the SRX High-end device.

    In the example below, the junos install media is copied onto an SRX5800 Firewall:

    content_copy zoom_out_map
    user@srx5800% cd /var/tmp/
    user@srx5800% ls -lrt *srxhe*
    -rw-r--r--  1 root  wheel  2147483648 Jan  8 16:56 junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img
    
  3. Insert a USB flash drive into the USB port of the SRX High-end device and check if the USB flash drive is recognized.

    For Example:

    content_copy zoom_out_map
    user@srx5800% umass0: Generic Mass Storage, rev 2.00/1.00, addr 3
    da0 at umass-sim0 bus 0 target 0 lun 0
    da0: Generic Flash Disk 8.07 Removable Direct Access SCSI-4 device
    da0: 40.000MB/s transfers
    da0: 15200MB (31129600 512 byte sectors: 255H 63S/T 1937C)
    
  4. Configure the USB flash drive as a boot disk using the dd commands:

    1. To check if the system can read and write the USB flash drive, erase the initial sectors of the USB flash drive using the command dd if=/dev/zero of=/dev/<Device Name> count=<n> . For example: Device Name= the device name given to the USB flsh drive (da0) and n = number of blocks.

      content_copy zoom_out_map
      user@srx5800% dd if=/dev/zero of=/dev/da0 count=20
      20+0 records in
      20+0 records out
      10240 bytes transferred in 0.016966 secs (603556 bytes/sec)
      
    2. Copy the install-media image to the USB flash drive using the command dd if=<LOCATION>/<junos-install-media> of=/dev/<Device Name> bs=<n>m . For example: LOCATION = Locally where Junos OS image is stored (/var/tmp/), junos-install-media = Junos OS install media image, Device Name = the device name given to the USB flsh drive (da0), bs = block size, and n = number of blocks.

      content_copy zoom_out_map
      user@srx5800% dd if=/var/tmp/junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img
      of=/dev/da0 bs=16m
      128+0 records in
      128+0 records out
      2147483648 bytes transferred in 271.689162 secs (7904193 bytes/sec)
      
  5. Remove the USB flash drive.

    content_copy zoom_out_map
    user@srx5800% umass0: at uhub1 port 1 (addr 3) disconnected
    (da0:umass-sim0:0:0:0): lost device
    (da0:umass-sim0:0:0:0): removing device entry
    umass0: detached
    

The USB flash-drive is now ready to use as a bootable disk.

Creating a Bootable USB Flash Drive using an SRX4600 Firewall

To create a bootable USB flash-drive using an SRX4600 Firewall:

  1. Connect to any SRX4600 Firewall that has enough storage (approx. 3GB), through a console and login with root credentials.

  2. Copy the Junos OS install image to the /var/tmp directory of the SRX4600 Firewall.

  3. Copy the install-media to hypervisor using the statement scp

    Example:

    content_copy zoom_out_map
    root@SRX4600:~ # scp -JU __juniper_private4__
    /var/tmp/junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img root@192.168.1.1:/var/tmp
  4. Insert a USB flash drive into the USB port of SRX4600 Firewall.

  5. Enter hypervisor using the command vhclient -s and check the image under /var/tmp/

    content_copy zoom_out_map
    root@ SRX4600:~ # vhclient -s
    Last login: Sat Feb  3 01:32:07 UTC 2018 from summit1ru-vpnqa05 on pts/0
    You have new mail.
    
    root@ SRX4600:/var/tmp# ls -lrt *usb*
    -rw-r--r-- 1 root root 2147483648 Feb  3 01:31 junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img
  6. Check if the USB flash drive is recognized.

    content_copy zoom_out_map
    root@ SRX4600:/var/tmp# lsscsi
    [4:0:0:0]    disk    ATA      TS960GV8MD1YTJM  O122  /dev/sda 
    [5:0:0:0]    disk    ATA      TS960GV8MD1YTJM  O122  /dev/sdb 
    [6:0:0:0]    disk             USB DISK 2.0     PMAP  /dev/sdc
    

    The USB flash drive name is sdc

  7. Configure the USB flash drive as a boot disk using the dd commands:

    1. To check if the system can read and write the USB flash drive, erase the initial sectors of the USB flash drive using the command dd if=/dev/zero of=/dev/<Device Name> count=<n> . For example: Device Name = the device name given to the USB flsh drive (sdc) and n = number of blocks.

      content_copy zoom_out_map
      root@ SRX4600-node -node: /var/tmp# dd if=/dev/zero
      of=/dev/sdc count=20
      20+0 records in
      20+0 records out
      10240 bytes (10 kB) copied, 0.0156234 s, 655 kB/s
      
    2. Copy the install-media image to the USB flash drive using the command dd if=<LOCATION>/<junos-install-media> of=/dev/<Device Name> bs=<n>m . For example: LOCATION = Locally where Junos OS image is stored (/var/tmp/), junos-install-media = Junos OS install media image, Device Name = the node name given to the USB flsh drive (da0), bs = block size and n = number of blocks.

      content_copy zoom_out_map
      root@ SRX4600-node: /var/tmp# dd if=junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img
      of=/dev/sdc bs=16M
      128+0 records in
      128+0 records out
      2147483648 bytes (2.1 GB) copied, 618.131 s, 3.5 MB/s
      
    3. Exit from the hypervisor.

      content_copy zoom_out_map
      root@ SRX4600-node:/var/tmp# exit
      logout
      rlogin: connection closed
      
      root@ SRX4600:~ #
  8. Remove the USB flash drive.

The USB flash-drive is now ready to use as a bootable disk.

Creating a Bootable USB Flash Drive using a using a Windows Device

To create a bootable USB flash-drive using using a Windows Device:

  1. Install Win32 Disk Imager on your laptop or computer. You can download it from https://sourceforge.net/projects/win32diskimager/ .

  2. Download the required Junos OS image from the Downloads page to the Documents directory of your laptop or computer.

  3. Insert a USB flash drive into the USB port of your laptop or computer.

  4. Open the win32diskimager application and in the Image File box type the path to the Documents directory or click the folder icon to navigate to the Documents directory and select the install media image.

  5. Under Device, select the USB flash-drive and click Write and Confirm.

  6. The Progress box shows the progress. Remove the USB flash drive once it is complete.

The USB flash-drive is now ready to use as a bootable disk.

Creating a Bootable USB Flash Drive using a MAC OS X Device

To create a bootable USB flash-drive using a MAC OS X device:

  1. Copy the install media (.img format) to the /var/tmp/ directory of the MAC OS X device using the statement scp .

  2. Run the diskutil list command to get the list of devices on the MAC OS X device.

  3. Insert the USB flash-drive into the USB port of the MAC OS X device.

  4. Run the diskutil list command again to determine the device node assigned to USB flash-drive (e.g. /dev/disk2).

  5. Run the diskutil unmountDisk /dev/diskN command (replace N with the disk number from the last command - in the previous example, N would be 2)

  6. Execute sudo dd if=/var/tmp/junos-install-media-usb-srxhe-x86-64-17.4R1-S1.9.img of=/dev/rdiskN bs=1m

    Note:

    Using /dev/rdisk instead of /dev/disk may be faster.

    Note:

    If you see the error dd: Invalid number '1m', you are using GNU dd. Use the same command but replace bs=1m with bs=1M.

    Note:

    If you see the error dd: /dev/diskN: Resource busy, make sure the disk is not in use. Start the 'Disk Utility.app' and unmount (don't eject) the USB flash-drive.

  7. Run the command diskutil eject /dev/diskN.

Installing Junos OS on SRX4600 Firewall Using the Bootable USB Flash-Drive

Before installing Junos OS using a bootable USB flash-drive, you must first complete the steps in Creating a Bootable USB Flash-Drive .

  1. Insert the USB flash drive into the USB port of the SRX4600 Firewall.

  2. Connect to the SRX4600 Firewall through a console.

  3. Power cycle (off/on) the SRX4600 Firewall and Press Esc for boot options.

  4. Select Boot Manager and press Enter key.

  5. From the Boot Option Menu, select USB flash drive and press Enter key.

  6. In the GRUB Menu select “Install Juniper Linux with secure boot support” and press Enter key.

  7. Once prompted “Remove the USB and press [Entre] key to Reboot...”, remove the USB flash drive and press Enter key. SRX4600 Firewall will reboot with new software.

Copying Files From or To an SRX4600 Firewall Using an USB Flash-Drive

This topic explains how to copy files from or to an SRX4600 Firewall using an USB flash-drive.

Copying Files From an SRX4600 Firewall Using an USB Flash-Drive

This procedure explains how to copy files from an SRX4600 Firewall to an USB flash-drive.

  1. Connect to SRX4600 Firewall through a console and login with root credentials.

  2. Insert the USB flash drive (Formatted with FAT32 file system) into the SRX4600 USB port.

  3. Enter into hypervisor by using the vhclient –s command.

    content_copy zoom_out_map
    root@srx4600:/var/tmp # vhclient -s
    Last login: Wed Nov  1 16:49:41 UTC 2017 from srx4600 on pts/0
    You have new mail.
    
    root@srx4600-node:~#
  4. Using the lsscsi command check if the USB flash-drive is being recognized.

    content_copy zoom_out_map
    root@srx4600-node:~# lsscsi
    [4:0:0:0]    disk    ATA      TS960GV8MD1YTJM  O122  /dev/sda 
    [5:0:0:0]    disk    ATA      TS960GV8MD1YTJM  O122  /dev/sdb 
    [6:0:0:0]    disk    UFD 3.0  Silicon-Power8G  1100  /dev/sdc
    
  5. Mount the USB flash-drive.

    content_copy zoom_out_map
    root@srx4600-node:~# mkdir /var/tmp/usb
    root@srx4600-node:~# mount /dev/sdc1 /var/tmp/usb
  6. Go back to Junos prompt by using the exit command.

    content_copy zoom_out_map
    root@srx4600-node:~# exit
     root@srx4600:/var/tmp #
  7. Use the command ls -lrt to list the files located at /var/tmp.

    content_copy zoom_out_map
    root@srx4600:/var/tmp # ls -lrt
    -rw-r--r--  1 root  wheel  1226057800 Nov  1 14:20 File1.txt

    File1.txt is the file located in /var/tmp

  8. Copy the required file to the USB flash-drive as shown in the example below.

    In the example below File1.txt is copied to the USB flash-drive:

    content_copy zoom_out_map
    root@srx4600:/var/tmp # scp -JU __juniper_private4__
    File1.txt root@192.168.1.1:/var/tmp/usb/
    File1.txt  100% 1169MB  30.0MB/s   00:39
    root@srx4600:/var/tmp #
  9. Go back to hypervisor.

    content_copy zoom_out_map
    root@srx4600:/var/tmp # vhclient -s
    Last login: Wed Nov  1 16:56:32 UTC 2017 from srx4600 on pts/0
           You have new mail.
    
    root@srx4600-node:~#
  10. Unmount the USB flash-drive and exit hypervisor.

    content_copy zoom_out_map
    root@srx4600-node:~# umount /var/tmp/usb
    root@srx4600-node:~# exit
    root@srx4600-node:~#
  11. Remove the USB flash-drive.

Copying Files To an SRX4600 Firewall Using an USB Flash-Drive

This procedure explains how to copy files from USB flash drive to a SRX4600 firewall /var/tmp/ folder.

  1. Connect to SRX4600 Firewall through a console and login with root credentials.

  2. Insert the USB flash drive (Formatted with FAT32 file system) into the SRX4600 USB port.

  3. Enter into hypervisor by using the vhclient –s command.

    content_copy zoom_out_map
    root@srx4600:/var/tmp # vhclient -s
    Last login: Wed Nov  1 16:49:41 UTC 2017 from srx4600 on pts/0
    You have new mail.
    
    root@srx4600-node:~#
  4. Using the lsscsi command check if the USB flash-drive is being recognized.

    content_copy zoom_out_map
    root@srx4600-node:~# lsscsi
    [4:0:0:0]    disk    ATA      TS960GV8MD1YTJM  O122  /dev/sda 
    [5:0:0:0]    disk    ATA      TS960GV8MD1YTJM  O122  /dev/sdb 
    [6:0:0:0]    disk    UFD 3.0  Silicon-Power8G  1100  /dev/sdc
    
  5. Mount the USB flash-drive.

    content_copy zoom_out_map
    root@srx4600-node:~# mkdir /var/tmp/usb
    root@srx4600-node:~# mount /dev/sdc1 /var/tmp/usb
  6. Go back to Junos prompt by using the exit command.

    content_copy zoom_out_map
    root@srx4600-node:~# exit
     root@srx4600:/var/tmp #
  7. Copy the required file from USB flash drive to SRX4600 Firewall as shown in the example below.

    In the example below File2.txt is copied to the SRX4600 Firewall /var/tmp/ folder:

    content_copy zoom_out_map
    root@srx4600:/var/tmp # scp -JU __juniper_private4__
    root@192.168.1.1:/var/tmp/usb/File2.txt /var/tmp/
  8. Go back to hypervisor.

    content_copy zoom_out_map
    root@srx4600:/var/tmp # vhclient -s
    Last login: Wed Nov  1 16:56:32 UTC 2017 from srx4600 on pts/0
           You have new mail.
    
    root@srx4600-node:~#
  9. Unmount the USB flash-drive and exit hypervisor.

    content_copy zoom_out_map
    root@srx4600-node:~# umount /var/tmp/usb
    root@srx4600-node:~# exit
    root@srx4600-node:~#
  10. Remove the USB flash-drive.

external-footer-nav