ON THIS PAGE
Migration, Upgrade, and Downgrade Instructions
This section contains the procedure to upgrade Junos OS, and the upgrade and downgrade policies for Junos OS. Upgrading or downgrading Junos OS can take several hours, depending on the size and configuration of the network.
Starting in Junos OS release 21.2R3, all Junos OS products which were previously running on FreeBSD 11.x based Junos OS are migrated to FreeBSD 12.x based Junos OS.
Upgrading Software on QFX Series Switches
When upgrading or downgrading Junos OS, always use the jinstall package. Use other packages (such as the jbundle package) only when so instructed by a Juniper Networks support representative. For information about the contents of the jinstall package and details of the installation process, see the Installation and Upgrade Guide and Junos OS Basics in the QFX Series documentation.
If you are not familiar with the download and installation process, follow these steps:
-
In a browser, go to https://www.juniper.net/support/downloads/junos.html.
The Junos Platforms Download Software page appears.
-
In the QFX Series section of the Junos Platforms Download Software page, select the QFX Series platform for which you want to download the software.
-
Select 20.3 in the Release pull-down list to the right of the Software tab on the Download Software page.
-
In the Install Package section of the Software tab, select the QFX Series Install Package for the 20.3 release.
An Alert box appears.
-
In the Alert box, click the link to the PSN document for details about the software, and click the link to download it.
A login screen appears.
-
Log in to the Juniper Networks authentication system using the username (generally your e-mail address) and password supplied by Juniper Networks representatives.
-
Download the software to a local host.
-
Copy the software to the device or to your internal software distribution site.
-
Install the new jinstall package on the device.
Note:We recommend that you upgrade all software packages out of band using the console, because in-band connections are lost during the upgrade process.
Customers in the United States and Canada use the following command:
user@host> request system software add source/jinstall-host-qfx-5-x86-64-20.3-R1.n-secure-signed.tgz reboot
Replace
source
with one of the following values:-
/pathname—For a software package that is installed from a local directory on the switch.
-
For software packages that are downloaded and installed from a remote location:
-
ftp://hostname/pathname
-
http://hostname/pathname
-
scp://hostname/pathname (available only for Canada and U.S. version)
-
Adding the
reboot
command reboots the switch after the upgrade is installed. When the reboot is complete, the switch displays the login prompt. The loading process can take 5 to 10 minutes.Rebooting occurs only if the upgrade is successful.
-
After you install a Junos OS Release 20.3 jinstall
package, you can
issue the request system software rollback
command to return to the
previously installed software.
Installing the Software on QFX10002-60C Switches
This section explains how to upgrade the software, which includes both the host OS and the Junos OS. This upgrade requires that you use a VM host package—for example, a junos-vmhost-install-x.tgz .
During a software upgrade, the alternate partition of the SSD is upgraded, which will become primary partition after a reboot .If there is a boot failure on the primary SSD, the switch can boot using the snapshot available on the alternate SSD.
The QFX10002-60C switch supports only the 64-bit version of Junos OS.
If you have important files in directories other than /config and /var, copy the files to a secure location before upgrading. The files under /config and /var (except /var/etc) are preserved after the upgrade.
To upgrade the software, you can use the following methods:
If the installation package resides locally on the switch, execute the request vmhost software add <pathname><source> command.
For example:
user@switch> request vmhost software add /var/tmp/junos-vmhost-install-qfx-x86-64-21.2R3.9.tgz
If the Install Package resides remotely from the switch, execute the request vmhost software add <pathname><source> command.
For example:
user@switch> request vmhost software add ftp://ftpserver/directory/junos-vmhost-install-qfx-x86-64-21.2R3.9.tgz
After the reboot has finished, verify that the new version of software has been properly
installed by executing the show version
command.
user@switch> show version
Installing the Software on QFX10002 Switches
If you are upgrading from a version of software that does not have the FreeBSD 10 kernel (15.1X53-D30, for example), you will need to upgrade from Junos OS Release 15.1X53-D30 to Junos OS Release 15.1X53-D32. After you have installed Junos OS Release 15.1X53-D32, you can upgrade to Junos OS Release 15.1X53-D60 or Junos OS Release 18.3R1.
On the switch, use the force-host
option to force-install the latest
version of the Host OS. However, by default, if the Host OS version is different from the
one that is already installed on the switch, the latest version is installed without using
the force-host
option.
If the installation package resides locally on the switch, execute the request system software add <pathname><source> reboot command.
For example:
user@switch> request system software add /var/tmp/jinstall-host-qfx-10-f-x86-64-21.2R3.n-secure-signed.tgz reboot
If the Install Package resides remotely from the switch, execute the request system software add <pathname><source> reboot command.
For example:
user@switch> request system software add ftp://ftpserver/directory/jinstall-host-qfx-10-f-x86-64-21.2R3.n-secure-signed.tgz reboot
After the reboot has finished, verify that the new version of software has been properly
installed by executing the show version
command.
user@switch> show version
Upgrading Software from Junos OS Release 15.1X53-D3X to Junos OS Release 15.1X53-D60, 15.1X53-D61.7, 15.1X53-D62, and 15.1X53-D63 on QFX10008 and QFX10016 Switches
Before you install the software, back up any critical files in /var/home. For more information regarding how to back up critical files, contact Customer Support at https://www.juniper.net/support.
The switch contains two Routing Engines, so you will need to install the software on each Routing Engine (re0 and re1).
If the installation package resides locally on the switch, execute the request system software add <pathname><source> command.
To install the software on re0:
user@switch> request system software add /var/tmp/jinstall-host-qfx-10-m-15.1X53-D60.n-secure-domestic-signed.tgz re0
If the Install Package resides remotely from the switch, execute the request system software add <pathname><source> re0 command.
For example:
user@switch> request system software add ftp://ftpserver/directory/jinstall-host-qfx-10-m-15.1X53-D60.n-secure-domestic-signed.tgz re0
To install the software on re1:
user@switch> request system software add /var/tmp/jinstall-host-qfx-10-m-15.1X53-D60.n-secure-domestic-signed.tgz re1
If the Install Package resides remotely from the switch, execute the request system software add <pathname><source> re1 command.
For example:
user@switch> request system software add ftp://ftpserver/directory/jinstall-host-qfx-10-m-15.1X53-D60.n-secure-domestic-signed.tgz re1
Reboot both Routing Engines.
For example:
user@switch> request system reboot both-routing-engines
After the reboot has finished, verify that the new version of software has been properly
installed by executing the show version
command.
user@switch> show version
Installing the Software on QFX10008 and QFX10016 Switches
Because the switch has two Routing Engines, perform a Junos OS installation on each Routing Engine separately to avoid disrupting network operation.
Before you install the software, back up any critical files in /var/home. For more information regarding how to back up critical files, contact Customer Support at https://www.juniper.net/support.
If graceful Routing Engine switchover (GRES), nonstop bridging (NSB), or nonstop active
routing (NSR) is enabled when you initiate a software installation, the software does not
install properly. Make sure you issue the CLI delete chassis redundancy
command when prompted. If GRES is enabled, it will be removed with the
redundancy
command. By default, NSR is disabled. If NSR is enabled,
remove the nonstop-routing statement from the [edit routing-options]
hierarchy level to disable it.
-
Log in to the master Routing Engine’s console.
For more information about logging in to the Routing Engine through the console port, see the specific hardware guide for your switch.
-
From the command line, enter configuration mode:
user@switch> configure
-
Disable Routing Engine redundancy:
user@switch# delete chassis redundancy
-
Disable nonstop-bridging:
user@switch# delete protocols layer2-control nonstop-bridging
-
Save the configuration change on both Routing Engines:
user@switch# commit synchronize
-
Exit the CLI configuration mode:
user@switch# exit
After the switch has been prepared, you first install the new Junos OS release on the backup Routing Engine, while keeping the currently running software version on the master Routing Engine. This enables the master Routing Engine to continue operations, minimizing disruption to your network.
After making sure that the new software version is running correctly on the backup Routing Engine, you are ready to switch routing control to the backup Routing Engine, and then upgrade or downgrade the software version on the other Routing Engine.
-
Log in to the console port on the other Routing Engine (currently the backup).
For more information about logging in to the Routing Engine through the console port, see the specific hardware guide for your switch.
-
Install the new software package using the
request system software add
command:user@switch> request system software add validate /var/tmp/jinstall-host-qfx-10-f-x86-64-21.2R3.n-secure-signed.tgz
For more information about the
request system software add
command, see the CLI Explorer. -
Reboot the switch to start the new software using the
request system reboot
command:user@switch> request system reboot
Note:You must reboot the switch to load the new installation of Junos OS on the switch.
To abort the installation, do not reboot your switch. Instead, finish the installation and then issue the
request system software delete <package-name>
command. This is your last chance to stop the installation.All the software is loaded when you reboot the switch. Installation can take between 5 and 10 minutes. The switch then reboots from the boot device on which the software was just installed. When the reboot is complete, the switch displays the login prompt.
While the software is being upgraded, the Routing Engine on which you are performing the installation is not sending traffic.
-
Log in and issue the
show version
command to verify the version of the software installed.user@switch> show version
Once the software is installed on the backup Routing Engine, you are ready to switch routing control to the backup Routing Engine, and then upgrade or downgrade the master Routing Engine software.
-
Log in to the master Routing Engine console port.
For more information about logging in to the Routing Engine through the console port, see the specific hardware guide for your switch.
-
Transfer routing control to the backup Routing Engine:
user@switch> request chassis routing-engine master switch
For more information about the
request chassis routing-engine master
command, see the CLI Explorer. -
Verify that the backup Routing Engine (slot 1) is the master Routing Engine:
user@switch> show chassis routing-engine Routing Engine status: Slot 0: Current state Backup Election priority Master (default) Routing Engine status: Slot 1: Current state Master Election priority Backup (default)
-
Install the new software package using the
request system software add
command:user@switch> request system software add validate /var/tmp/jinstall-host-qfx-10-f-x86-64-21.2R3.n-secure-signed.tgz
For more information about the
request system software add
command, see the CLI Explorer. -
Reboot the Routing Engine using the
request system reboot
command:user@switch> request system reboot
Note:You must reboot to load the new installation of Junos OS on the switch.
To abort the installation, do not reboot your system. Instead, finish the installation and then issue the
request system software delete jinstall <package-name>
command. This is your last chance to stop the installation.The software is loaded when you reboot the system. Installation can take between 5 and 10 minutes. The switch then reboots from the boot device on which the software was just installed. When the reboot is complete, the switch displays the login prompt.
While the software is being upgraded, the Routing Engine on which you are performing the installation does not send traffic.
-
Log in and issue the
show version
command to verify the version of the software installed. -
Transfer routing control back to the master Routing Engine:
user@switch> request chassis routing-engine master switch
For more information about the
request chassis routing-engine master
command, see the CLI Explorer. -
Verify that the master Routing Engine (slot 0) is indeed the master Routing Engine:
user@switch> show chassis routing-engine Routing Engine status: Slot 0: Current state Master Election priority Master (default) outing Engine status: Slot 1: Current state Backup Election priority Backup (default)
Performing a Unified ISSU
You can use unified ISSU to upgrade the software running on the switch with minimal traffic disruption during the upgrade.
Unified ISSU is supported in Junos OS Release 13.2X51-D15 and later.
Perform the following tasks:
Preparing the Switch for Software Installation
Before you begin software installation using unified ISSU:
-
Ensure that nonstop active routing (NSR), nonstop bridging (NSB), and graceful Routing Engine switchover (GRES) are enabled. NSB and GRES enable NSB-supported Layer 2 protocols to synchronize protocol information between the master and backup Routing Engines.
To verify that nonstop active routing is enabled:
Note:If nonstop active routing is enabled, then graceful Routing Engine switchover is enabled.
user@switch> show task replication Stateful Replication: Enabled RE mode: Master
If nonstop active routing is not enabled (
Stateful Replication
isDisabled
), see Configuring Nonstop Active Routing on Switches for information about how to enable it. -
Enable nonstop bridging (NSB). See Configuring Nonstop Bridging on Switches (CLI Procedure) for information on how to enable it.
-
(Optional) Back up the system software—Junos OS, the active configuration, and log files—on the switch to an external storage device with the
request system snapshot
command.
Upgrading the Software Using Unified ISSU
This procedure describes how to upgrade the software running on a standalone switch.
To upgrade the switch using unified ISSU:
-
Download the software package by following the procedure in the Downloading Software Files with a Browser section in Installing Software Packages on QFX Series Devices.
-
Copy the software package or packages to the switch. We recommend that you copy the file to the
/var/tmp
directory. -
Log in to the console connection. Using a console connection allows you to monitor the progress of the upgrade.
-
Start the ISSU:
-
On the switch, enter:
user@switch> request system software in-service-upgrade /var/tmp/package-name.tgz
where
package-name.tgz
is, for example,jinstall-host-qfx-10-f-x86-64-20.4R1.n-secure-signed.tgz
.
Note:During the upgrade, you cannot access the Junos OS CLI.
The switch displays status messages similar to the following messages as the upgrade executes:
warning: Do NOT use /user during ISSU. Changes to /user during ISSU may get lost! ISSU: Validating Image ISSU: Preparing Backup RE Prepare for ISSU ISSU: Backup RE Prepare Done Extracting jinstall-host-qfx-5-f-x86-64-18.3R1.n-secure-signed.tgz ... Install jinstall-host-qfx-5-f-x86-64-19.2R1.n-secure-signed.tgz completed Spawning the backup RE Spawn backup RE, index 0 successful GRES in progress GRES done in 0 seconds Waiting for backup RE switchover ready GRES operational Copying home directories Copying home directories successful Initiating Chassis In-Service-Upgrade Chassis ISSU Started ISSU: Preparing Daemons ISSU: Daemons Ready for ISSU ISSU: Starting Upgrade for FRUs ISSU: FPC Warm Booting ISSU: FPC Warm Booted ISSU: Preparing for Switchover ISSU: Ready for Switchover Checking In-Service-Upgrade status Item Status Reason FPC 0 Online (ISSU) Send ISSU done to chassisd on backup RE Chassis ISSU Completed ISSU: IDLE Initiate em0 device handoff
Note:A unified ISSU might stop, instead of abort, if the FPC is at the warm boot stage. Also, any links that go down and up will not be detected during a warm boot of the Packet Forwarding Engine (PFE).
Note:If the unified ISSU process stops, you can look at the log files to diagnose the problem. The log files are located at
/var/log/vjunos-log.tgz
. -
-
Log in after the reboot of the switch completes. To verify that the software has been upgraded, enter the following command:
user@switch>
show version
-
Ensure that the resilient dual-root partitions feature operates correctly, by copying the new Junos OS image into the alternate root partitions of all of the switches:
user@switch>
request system snapshot slice alternate
Resilient dual-root partitions allow the switch to boot transparently from the alternate root partition if the system fails to boot from the primary root partition.
Upgrade and Downgrade Support Policy for Junos OS Releases
We have two types of releases, EOL and EEOL:
-
End of Life (EOL) releases have engineering support for twenty four months after the first general availability date and customer support for an additional six more months.
Extended End of Life (EEOL) releases have engineering support for thirty six months after the first general availability date and customer support for an additional six more months.
For both EOL and EEOL releases, you can upgrade to the next three subsequent releases or downgrade to the previous three releases. For example, you can upgrade from 20.4 to the next three releases – 21.1, 21.2 and 21.3 or downgrade to the previous three releases – 20.3, 20.2 and 20.1.
For EEOL releases only, you have an additional option - you can upgrade directly from one EEOL release to the next two subsequent EEOL releases, even if the target release is beyond the next three releases. Likewise, you can downgrade directly from one EEOL release to the previous two EEOL releases, even if the target release is beyond the previous three releases. For example, 20.4 is an EEOL release. Hence, you can upgrade from 20.4 to the next two EEOL releases – 21.2 and 21.4 or downgrade to the previous two EEOL releases – 20.2 and 19.4.
Release Type | End of Engineering (EOE) | End of Support (EOS) | Upgrade/Downgrade to subsequent 3 releases | Upgrade/Downgrade to subsequent 2 EEOL releases |
---|---|---|---|---|
End of Life (EOL) | 24 months | End of Engineering + 6 months | Yes | No |
Extended End of Life (EEOL) | 36 months | End of Engineering + 6 months | Yes | Yes |
For more information about EOL and EEOL releases, see https://www.juniper.net/support/eol/junos.html.
For information about software installation and upgrade, see the Installation and Upgrade Guide.