close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Overview of Junos OS Evolved
- play_arrow Junos OS Evolved Overview
- play_arrow Directories for Junos OS Evolved File Storage
  - Default Directories for Junos OS Evolved File Storage
  - Writable Directories for Junos OS Evolved
play_arrow Install, Upgrade, and Downgrade Software
- play_arrow Software Installation and Upgrade Overview
  - Software Installation and Upgrade Overview (Junos OS Evolved)
- play_arrow Junos OS Evolved Installation Packages
  - Junos OS Evolved Installation Packages
- play_arrow Prepare to Install and Upgrade Software
- play_arrow Upgrade and Downgrade Software
- play_arrow Install Third-Party Software
  - How to Install Third-Party Software on Devices Running Junos OS Evolved
- play_arrow Install the Paragon Active Assurance (PAA) Test Agent
  - Install the Paragon Active Assurance (PAA) Test Agent
play_arrow System Backup and Recovery
- play_arrow Boot Junos OS Evolved from a USB Drive
  - Boot Junos OS Evolved by Using a Bootable USB Drive
- play_arrow Back Up an Installation with Snapshots
  - Back Up and Recover Software with Snapshots
- play_arrow Roll Back the Software to a Previous Version
  - Roll Back the Software to a Previous Version
- play_arrow Backup and Recover the Configuration File
  - Back Up and Recover the Configuration
play_arrow Storage Media and Routing Engines
- play_arrow Storage Media and Routing Engines
  - Storage Media and Routing Engines
play_arrow Zero Touch Provisioning and Secure Zero Touch Provisioning
play_arrow Configuration Statements and Operational Commands
- show chassis usb storage
- Junos CLI Reference Overview

list Table of Contents

English

Unified ISSU for Junos OS Evolved

date_range 20-Dec-24

arrow_backward

arrow_forward

(QFX5220-32CD switches only) Unified in-service software upgrade (ISSU) is a feature that minimizes traffic loss during the software upgrade process.

Understanding Unified ISSU for Junos OS Evolved

The unified in-service software upgrade (unified ISSU) feature enables you to upgrade to a more recent release of Junos OS Evolved with no disruption on the control plane and minimal loss of traffic.

During a unified ISSU, the system restarts the upgraded software (kernel and applications) without reinitializing the underlying hardware. This process is faster than rebooting the complete system. The restarted software restores its previous state and runs the new version.

Unified ISSU provides the following benefits:

Eliminates network downtime during software image upgrades.
Reduces operating costs while delivering higher service levels.
Enables you to implement new features quickly.

Unified ISSU Process on Junos OS Evolved
Upgrade Scenarios During a Unified ISSU
Validation During a Unified ISSU

Unified ISSU Process on Junos OS Evolved

When you perform a software upgrade using a unified ISSU, the following process occurs:

The system downloads the new software package and performs checks to validate the existing configuration against the new package. This step includes application configuration checks and software development kit (SDK) checks to ensure that you can perform the upgrade by using a unified ISSU.
The software is installed on the system and becomes the next-boot version.
The upgrade software lists the applications that have been changed and that need to be restarted. The upgrade is performed using a restart or a reboot, which the validation process determines.
The system starts to run the new version of software, and the unified ISSU is complete.

Upgrade Scenarios During a Unified ISSU

When you perform a unified ISSU on a Junos OS Evolved device, the validation process determines which of the following methods is required to perform the upgrade:

Application restart
In-service kernel warm restart
System reboot

Application restart involves a simple restart of the upgraded applications. The restarted applications run the new software version. This type of upgrade is hitless and results in zero traffic loss.

In-service kernel warm restart involves loading a new kernel directly into the memory and executing it, without initializing the hardware. This process reduces network downtime and minimizes traffic loss during the upgrade.

System reboot involves a complete reboot of the device, including reinitializing the hardware components. This process is the same as performing an upgrade without using unified ISSU.

The unified ISSU is performed using an in-service kernel warm restart if:

The changed components or applications require the device to be restarted.
The changed components or applications cannot be upgraded using an application restart.
The kernel changed.

You are prompted to confirm the in-service kernel warm restart if changes are made in an application that does not support an application restart. If a major version change is made in the application, then you are prompted to reboot the system to complete the unified ISSU.

In other scenarios, unified ISSU is performed using an application restart.

Validation During a Unified ISSU

Before you perform a unified ISSU, you must validate the new software package against the existing configuration.

The system checks the existing system configuration against the new software package to determine if the two are compatible. It also checks the application configurations and Software Development Kit (SDK) versions to determine whether a hitless upgrade is possible. Note that validation does not actually install the new software package.

The system performs validation by default before you upgrade the device using a unified ISSU. When you add a package with a different release number, the system automatically performs the application configuration validation check and SDK validation check.

If the existing configuration validation fails, the unified ISSU aborts, and an error message provides more information about the failure. If the application configuration validation or the SDK version validation fails, you are prompted to confirm if you want to continue with the ISSU. An error message provides more information about the failure.

If you perform a unified ISSU without successful validations, incompatibilities in the configuration might cause traffic loss during the upgrade.

For more information about how to perform a validation check, see request system software validate-restart.

Note:

Starting in Junos OS Evolved Release 23.4R1, the request system software validate-restart command output summarizes the method required to perform the indicated upgrade, for example, an application restart, an in-service kernel warm restart, or a system reboot.

Unified ISSU Considerations for Junos OS Evolved

Unified ISSU allows you to upgrade to a more recent version of Junos OS Evolved with minimal disruption of traffic and zero downtime.

On Junos OS Evolved, unified ISSU has the following caveats:

You cannot use unified ISSU to install a version of Junos OS Evolved that is earlier than the version of Junos OS Evolved currently running on the device.
Unified ISSU does not upgrade the firmware as part of the process. You must upgrade the firmware separately.
The unified ISSU process is terminated if the current system configuration is not compatible with the new software version.
Unified ISSU might cause inaccuracy in the values of filter counters, policer counters, and queue counters.
Existing Address Resolution Protocol (ARP) entries will not expire, and new ARP entries will not be added during the ISSU process.
During the ISSU process, the system might not respond to ARP requests from peer nodes. To prevent the peer side entries from getting expired during the ISSU window, the peer nodes should be configured to increase the ARP retry count before triggering ISSU.

Perform a Unified ISSU to Upgrade Junos OS Evolved

When you are planning to perform a unified ISSU, choose a time when your network is as stable as possible. As with a normal upgrade, Telnet sessions, SNMP, and CLI access are briefly interrupted.

We recommend that you read the Unified ISSU Considerations for Junos OS Evolved topic to anticipate any special circumstances that might affect your upgrade.

Prerequisites to Performing a Unified ISSU to Upgrade Junos OS Evolved
Upgrade Junos OS Evolved with a Unified ISSU

Prerequisites to Performing a Unified ISSU to Upgrade Junos OS Evolved

Before you upgrade your device, follow these steps:

Make sure that you have sufficient disk space for the upgrade and that a backup of the system is available. Save the system configuration and the information about how the system is handling traffic.
You can do this by following the procedure at Before You Upgrade or Reinstall Junos OS Evolved.
You will need the information about the system configuration and how the system is handling traffic when you verify that the upgrade was performed correctly.
Download the software package from the Juniper Networks Support website at https://www.juniper.net/support/ and place the package on your local server.
If the BGP protocol is configured on the main routing instance or a specific routing instance, then configure BGP graceful restart and set the restart-time value to greater than or equal to 300 seconds.
To configure BGP graceful restart and the restart-time value on the main routing instance, execute the following commands:
```
[edit]
user@host# set routing-options graceful-restart
[edit]
user@host# set protocols bgp graceful-restart restart-time 300
```
To configure BGP graceful restart and the restart-time value on a specific routing instance, execute the following commands:
```
[edit]
user@host# set routing-instances routing-instance routing-options graceful-restart
[edit]
user@host# set routing-instances routing-instance protocols bgp graceful-restart restart-time 300
```
Note:
Changing the restart-time for BGP graceful restart causes the existing BGP sessions to restart, which might cause disruptions. We recommend that you perform this action during a low network usage time to avoid traffic loss.
If a Spanning Tree Protocol (STP) is configured, then configure the STP-enabled ports as edge ports and enable bridge protocol data unit (BPDU) protection.
Depending on the type of STP configured, execute the following commands:
```
[edit] 
user@host# set protocols (mstp | rstp | vstp) bpdu-block-on-edge
[edit]
user@host# set protocols (mstp | rstp | vstp) interface (interface-name | all) edge
```
Configure the value of the Address Resolution Protocol aging-timer to 240 minutes.
```
[edit]
user@host# set system arp aging-timer 240
```

Validate the existing configuration against the new software image to check whether it supports unified ISSU by using the

request
                                system software validate-restart
                                package-name

command.

content_copy zoom_out_map
user@host> request system software validate-restart /var/tmp/junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso 
Validating software image and getting ISSU services impact /var/tmp/junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso...
Download and Validate in Progress
re0: Starting validation : /var/tmp/junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso
re0: Validating version : junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso
re0: Running pre-checks for 'junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso'
re0: Pre-checks pass successfully, copying files to software area
re0: Running post install commands...
re0: Post install sequence was successful.
re0: Validating existing configs. See /var/log/validation_config.log for config validation logs.
re0: Validation Passed
re0: Validating in-service-upgrade application configs. See /var/log/validation_appconfig.log for in-service-upgrade application configs validation logs.
re0: In-service-upgrade application configs validation Passed
re0: Validating in-service-upgrade SDK compatibility. See /var/log/validation_sdk.log for in-service-upgrade SDK compatibility validation logs.
re0: In-service-upgrade SDK Validation Passed
re0: Generating local impact report...
re0: Installation was successful
Image validation succeeded. ISSU impact report:

*** Restart Apps list ***
distributord

*** Applications that do not support restart upgrade ***
distributord

This platform supports in-service kernel warm restart upgrade.
Validate cleanup succeeded. 
Image validation succeeded. Reboot is needed for this software image upgrade.

Upgrade Junos OS Evolved with a Unified ISSU

Make sure that you have completed the steps in Prerequisites to Performing a Unified ISSU to Upgrade Junos OS Evolved before you begin the upgrade.

To upgrade Junos OS Evolved with a unified ISSU:

Run the

request system software add
                                    package-name restart

command on the device that you want to upgrade.

content_copy zoom_out_map
user@host> request system software add /var/tmp/junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso restart 
Adding software images. This process can take several minutes. Please be patient...
Download and Validate in Progress
re0: Starting upgrade : /var/tmp/junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso
re0: Upgrade version : junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso
re0: Running pre-checks for 'junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso'
re0: Pre-checks pass successfully, copying files to software area
re0: Running post install commands...
re0: Post install sequence was successful.
re0: Validating existing configs. See /var/log/validation_config.log for config validation logs.
re0: Validation Passed
re0: Validating in-service-upgrade application configs. See /var/log/validation_appconfig.log for in-service-upgrade application configs validation logs.
re0: In-service-upgrade application configs validation Passed
re0: Validating in-service-upgrade SDK compatibility. See /var/log/validation_sdk.log for in-service-upgrade SDK compatibility validation logs.
re0: In-service-upgrade SDK Validation Passed
re0: Going ahead with Installation
re0: Boot version is now 'junos-evo-install-qfx-ms-x86-64-22.1R1-S1.2-EVO.iso'
re0: Generating local impact report...
re0: Installation was successful
Image validation and installation succeeded. Restarting Applications.

*** Restart Apps list ***
distributord

*** Applications that do not support restart upgrade ***
distributord

This platform supports in-service kernel warm restart upgrade.

Enter yes to proceed with in-service kernel warm restart or no to proceed with the reboot upgrade.
Proceed with in-service kernel warm restart upgrade ? [yes,no] (yes) yes 


----- Impact report for kernel warm restart upgrade -----

Actions prior to warm restart:

*** Applications that need prep to upgrade ***
rpdagent

*** Applications that need prep to upgrade final ***
agentd
arpd
evo-pfemand
l2ald-agent
l2cpd-agent
ndp
picd
rpdagent

Actions post warm restart:

*** Applications that need sw sync ***
evo-pfemand

*** Applications that need hw sync ***
evo-pfemand

*** Applications that need unprep to upgrade ***
agentd
arpd
evo-pfemand
ndp
picd
rpdagent

Sending prepare notification to app rpdagent on node re0
Prepare to upgrade succeeded for app rpdagent on node re0
Sending prepare final notification to app agentd on node re0
Sending prepare final notification to app arpd on node re0
Sending prepare final notification to app evo-pfemand on node re0
Sending prepare final notification to app l2ald-agent on node re0
Sending prepare final notification to app l2cpd-agent on node re0
Sending prepare final notification to app ndp on node re0
Sending prepare final notification to app picd on node re0
Sending prepare final notification to app rpdagent on node re0
Prepare to upgrade succeeded for app arpd on node re0
Prepare to upgrade succeeded for app picd on node re0
Prepare to upgrade succeeded for app agentd on node re0
Prepare to upgrade succeeded for app evo-pfemand on node re0
Prepare to upgrade succeeded for app l2cpd-agent on node re0
Prepare to upgrade succeeded for app rpdagent on node re0
Prepare to upgrade succeeded for app ndp on node re0
Prepare to upgrade succeeded for app l2ald-agent on node re0
Saving system snapshot and rebooting. See /var/log/issu.log for ISSU logs

The system restarts or reboots to load the new software image. When the upgrade is complete, the device displays the login prompt.

At the login prompt, log in and verify the release of the installed software, using the show system software list command.
Verify that the system is running properly and correctly handling traffic by repeating the steps in the procedure in Before You Upgrade or Reinstall Junos OS Evolved. Compare the information about the system configuration to what you collected before you installed the software package.
If you need to make any changes to the configuration after the upgrade, remember to back up the software and configuration using the request system snapshot command. See Back Up and Recover Software with Snapshots.
If the unified ISSU fails for some reason, and if the CLI is still working, you can follow the steps in Recover from a Failed Installation Attempt If the CLI Is Working to install the software image.

Change History Table

Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.

Release

Description

23.4R1-EVO

Starting in Junos OS Evolved Release 23.4R1, the

request
                        system software validate-restart

command output summarizes the method required to perform the indicated upgrade, for example, an application restart, an in-service kernel warm restart, or a system reboot.

arrow_backward PREVIOUS Upgrade Firmware on Junos OS Evolved Devices

NEXT arrow_forward How to Install Third-Party Software on Devices Running Junos OS Evolved

Junos® OS Evolved Software Installation and Upgrade Guide

ON THIS PAGE