Actualizacion Software Junos SRX300 a traves de FTP

Revision de actual version de Software de Router SRX300

SRX300> show version
Hostname: SRX300
Model: srx300
Junos: 17.3R1.10
JUNOS Software Release [17.3R1.10]

Actualizacion de sistema operativo a traves de FTP de una red externa.

SRX300> ftp 192.168.199.9 source 10.10.100.1
Connected to 192.168.199.9.
220-FileZilla Server 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/
Name (192.168.199.9): guliano
331 Password required for guliano
Password:
230 Logged on
Remote system type is UNIX.

ftp> lcd /var/tmp/
Local directory now /cf/var/tmp
ftp> bin
200 Type set to I

ftp> get junos-srxsme-18.1R1.9.tgz
local: junos-srxsme-18.1R1.9.tgz remote: junos-srxsme-18.1R1.9.tgz
200 Port command successful
150 Opening data channel for file download from server of "/junos-srxsme-18.1R1.9.tgz"
100% |***********************************************************************************************************|   307 MB    00:00 ETA
226 Successfully transferred "/junos-srxsme-18.1R1.9.tgz"
322693516 bytes received in 149.89 seconds (2.05 MB/s)

ftp>
ftp> bye
SRX300>

Validacion de nuevo Sistema Operativo

SRX300> request system software add no-copy /var/tmp/junos-srxsme-18.1R1.9.tgz
NOTICE: Validating configuration against junos-srxsme-18.1R1.9.tgz.
NOTICE: Use the 'no-validate' option to skip this if desired.
Formatting alternate root (/dev/da0s1a)...
/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048
        using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
 32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,
 3384608, 3760672, 4136736, 4512800, 4888864
Checking compatibility with configuration
Initializing...
cp: /var/etc/extensions.allow: No such file or directory
cp: /var/db/certs/common/local/*: No such file or directory
cp: /var/db/certs/common/key-pair/*: No such file or directory
Using junos-18.1R1.9 from /altroot/cf/packages/install-tmp/junos-18.1R1.9
Copying package ...
mkdir: /cf/var/validate/c/tmp: No such file or directory
mount_nullfs: /cf/var/validate/c/tmp: No such file or directory
cd: can't cd to /cf/var/validate/c/tmp/junos
/usr/libexec/ui/validate-config: cannot create /cf/var/validate/c/tmp/junos/+INSTALL.x: No such file or directory
chroot: /bin/sh: No such file or directory
ERROR: validate-config: /cf/var/validate/c/tmp/junos/+INSTALL fails
ERROR: Configuration validation failed with /altroot/cf/packages/install-tmp/junos-18.1R1.9

Si el reporte de la configuracion no opera con el nuevo sistema operativo, se puede  realizar el bypass con la opcion "no-validate option".

SRX300> request system software add no-copy no-validate /var/tmp/junos-srxsme-18.1R1.9.tgz
Formatting alternate root (/dev/da0s1a)...
/dev/da0s1a: 2510.1MB (5140780 sectors) block size 16384, fragment size 2048
        using 14 cylinder groups of 183.62MB, 11752 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
 32, 376096, 752160, 1128224, 1504288, 1880352, 2256416, 2632480, 3008544,
 3384608, 3760672, 4136736, 4512800, 4888864
Installing package '/altroot/cf/packages/install-tmp/junos-18.1R1.9' ...
Verified junos-boot-srxsme-18.1R1.9.tgz signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified junos-srxsme-18.1R1.9-domestic signed by PackageProductionEc_2018 method ECDSA256+SHA256
JUNOS 18.1R1.9 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING:     Use the 'request system reboot' command
WARNING:         when software installation is complete
Saving state for rollback ...

Validacion de Sistema Operativo instalado.

SRX300> start shell
% ls -al /var/tmp/

-rw-r--r--   1 2000  wheel  295871546 Oct  4  2017 junos-srxsme-17.3R1.10.tgz
-rw-r--r--   1 nec   wheel  322693516 Sep  1 20:23 junos-srxsme-18.1R1.9.tgz

Reiniciar el Equipo Router

SRX300> request system reboot
Reboot the system ? [yes,no] (no) yes
Shutdown NOW!
[pid 75925]

SRX300>
*** FINAL System shutdown message from SRX300 ***
System going down IMMEDIATELY

Validacion final

login: 
Password:
--- JUNOS 18.1R1.9 built 2018-03-23 20:34:24 UTC

SRX300>
SRX300>show version
Hostname: SRX300
Model: srx300
Junos: 18.1R1.9
JUNOS Software Release [18.1R1.9]

Borrar configuración de AP en modo LWAAP

Este procedimiento, es necesario realizarlo al momento de existir problemas de asociación entre el AP y el WLC.

Se puede borrar la configuración correspondiente a los AP en modo LWAAP a través del comando "clear", pero no esta disponible por defecto.

AP5c83.8f3b.fdac>ena

Password:

AP5c83.8f3b.fdac# clear capwap private-config

                     ^

% Invalid input detected at '^' marker.

Para permitir este comando es necesario habilitar el modo debug, a través del siguiente comando.

AP5c83.8f3b.fdac#debug capwap console cli

This command is meant only for debugging/troubleshooting

Any configuration change may result in different

behavior from centralized configuration.

Paso 1.- Borrar la configuración previamente almacenada en el AP.

CAPWAP console CLI allow/disallow debugging is on

AP5c83.8f3b.fdac# clear capwap private-config

Paso 2.- Reiniciar el AP

AP5c83.8f3b.fdac#reload

System configuration has been modified. Save? [yes/no]: yes

Proceed with reload? [confirm]

Despues del reinicio, este AP podira unirse sin problemas al Controlador.

Upgrade Manual de lightweight Access Point

Se puede realizar la actualización de firmware de Access Point (AP) en forma manual. Para esto es necesario descargar el firmware desde Cisco.com.

Una vez descargado el archivo, este debe ser almacenado en un servidor TFTP que debe ser alcanzado desde el AP.

Para descargar, extraer e instalar el nuevo firmware es necesario utilizar el comando "archive", pero este no esta disponible por defecto.

AP5c83.8f3b.fdac#arch?
% Unrecognized command

Para permitir este comando es necesario habilitar el modo debug.

AP5c83.8f3b.fdac#debug capwap console cli
This command is meant only for debugging/troubleshooting
Any configuration change may result in different
behavior from centralized configuration.

CAPWAP console CLI allow/disallow debugging is on

En estos momentos es posible seguri con el procedimiendo de actualizacion de firmware, debido que es posible contar con el comando "archive"

Paso 1.-  Revision de IOS instalada en AP

AP5c83.8f3b.fdac#show flash: 

Directory of flash:/

    2  -rwx        1048  Mar 04 2002 17:42:43 +00:00  private-multiple-fs
    4  -rwx         209  Mar 01 2002 00:00:08 +00:00  env_vars
    5  -rwx        3318  Mar 04 2002 17:42:43 +00:00  config.txt
    6  drwx         512  Jan 31 2009 04:53:24 +00:00  c1200-k9w7-mx.123-8.JEB
  158  -rwx           5  Mar 04 2002 17:42:43 +00:00  private-config

7741440 bytes total (2740736 bytes free)


Paso 2.-  Respaldar IOS Actual

AP5c83.8f3b.fdac#cd c1200-k9w7-mx.123-8.JEB

AP5c83.8f3b.fdac#pwd
flash:/c1200-k9w7-mx.123-8.JEB/

AP5c83.8f3b.fdac#copy flash: tftp:         
Source filename [/c1200-k9w7-mx.123-8.JEB/c1200-k9w7-mx.123-8.JEB]? 
Address or name of remote host []? 10.3.64.5                 
Destination filename [c1200-k9w7-mx.123-8.JEB]? 
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
3668650 bytes copied in 9.726 secs (377200 bytes/sec)


Paso 3.- Borrar IOS Actual

AP5c83.8f3b.fdac#delete /force /recursive flash:/c1200-k9w7-mx.123-8.JEB
Delete filename [c1200-k9w7-mx.123-8.JEB]? 

AP5c83.8f3b.fdac#dir
Directory of flash:/

    2  -rwx        1048  Mar 04 2002 17:42:43 +00:00  private-multiple-fs
    4  -rwx         209  Mar 01 2002 00:00:08 +00:00  env_vars
    5  -rwx        3318  Mar 04 2002 17:42:43 +00:00  config.txt
  158  -rwx           5  Mar 04 2002 17:42:43 +00:00  private-config

7741440 bytes total (7734272 bytes free)


Paso 4.- Upgrade IOS 

AP5c83.8f3b.fdac#archive download-sw tftp://10.3.64.5/c1200-k9w7-tar.123-8.JEE.tar
examining image...Loading c1200-k9w7-tar.123-8.JEE.tar from 172.16.4.61 (via BVI1): !
extracting info (274 bytes)
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

this completes ok.

[OK - 4522496 bytes]

Actualización de IOS AP - CCNA Wireless

A continuación se detallan los pasos a seguir en la actualización de AP de Cisco;

Paso 1  Revisión de IOS instalada en AP

AP#show flash:

Directory of flash:/

2  -rwx        1048  Mar 04 2002 17:42:43 +00:00  private-multiple-fs

4  -rwx         209  Mar 01 2002 00:00:08 +00:00  env_vars

5  -rwx        3318  Mar 04 2002 17:42:43 +00:00  config.txt

6  drwx         512  Jan 31 2009 04:53:24 +00:00  c1200-k9w7-mx.123-8.JEB

158  -rwx           5  Mar 04 2002 17:42:43 +00:00  private-config

   7741440 bytes total (2740736 bytes free)

Paso 2  Respaldar IOS Actual

AP#cd c1200-k9w7-mx.123-8.JEB

AP#pwd

flash:/c1200-k9w7-mx.123-8.JEB/

AP#copy flash: tftp:        

Source filename [/c1200-k9w7-mx.123-8.JEB/c1200-k9w7-mx.123-8.JEB]?

Address or name of remote host []? 10.3.64.5                 

Destination filename [c1200-k9w7-mx.123-8.JEB]?

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

3668650 bytes copied in 9.726 secs (377200 bytes/sec)

Paso 3  Borrar IOS Actual

AP#delete /force /recursive flash:/c1200-k9w7-mx.123-8.JEB

Delete filename [c1200-k9w7-mx.123-8.JEB]?

AP#dir

Directory of flash:/

2  -rwx        1048  Mar 04 2002 17:42:43 +00:00  private-multiple-fs

4  -rwx         209  Mar 01 2002 00:00:08 +00:00  env_vars

5  -rwx        3318  Mar 04 2002 17:42:43 +00:00  config.txt

158  -rwx           5  Mar 04 2002 17:42:43 +00:00  private-config

  7741440 bytes total (7734272 bytes free)

Paso 4 Upgrade IOS

AP#archive download-sw tftp://10.3.64.5/c1200-k9w7-tar.123-8.JEE.tar

examining image...

Loading c1200-k9w7-tar.123-8.JEE.tar from 172.16.4.61 (via BVI1): !

extracting info (274bytes)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

this completes ok.

[OK - 4522496 bytes]