Re: [j-nsp] How to upgrade junos 5.0.0r8.1
Thanks Guys, atleast that gives a success rate guarantee of around 90%, better than some of those Vaccine drugs in the market. Cheerz On Mon, 2009-07-13 at 15:42 -0500, Tim Eberhard wrote: You configuration will remain after the upgrade/reboot. Downgrading is the same process as upgrading as long as you're going from say 5.2 to 5.0. Just load the 5.0 image and reboot. The 5.0 image is blown away when you load the newer screenOS. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 11:04 AM, George gmb...@cellulant.com wrote: Thanks Guys, Sure I had planned to upgrade to above 5.2 , are these firmwares available for download? So the next question is really about the configs, Once a reboot is done all the previous setting take in effect, is that so? And for a rollback the do I just scroll for the image? Regards George On Mon, 2009-07-13 at 17:39 +0300, Humair Ali wrote: Hi Georges Tim is absolutely correct, and since you are using the 2 netscreens as a standalone, you are bound to have downtime. One other , I believe (needs to verify) you can't go straight from 5.0 to 6.x, you need to upgrade through an intermediary such as 5.4 then upgrade 6.x so that is added downtime since again code needs to be reloaded after upgrade to 5.4 and then to 6.0 HTH 2009/7/13 Tim Eberhard xmi...@gmail.com George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood back. Depending on the size of your network/amount of VPN tunnels it could take a couple of minutes for everything to ramp back up. Downgrading code is possible depending what code version you're going to. It can be a bit problematic if say you go to 6.X code from 5.0 but if you had planned on going from 5.0 to 5.4 going back shouldn't be much of a problem. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 7:12 AM, George gmb...@cellulant.com wrote: Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
Hello again. Just to confirm the steps if they are correct: 1. download the firmware I want to upgrade to ie 5.2.0r2.0 (Do i get the zip file or the bin, or is the bin file contained in the zip file) 2. From the Juniper GUI browse and load the Image to be upgraded. 3. Once loaded reboot the juniper for the changes to take effect. Problem here again, I have been re-tryin to download the zip file from www.gegereka.com even after getting the access code, what and where is the easiet URL to download the update? Regards George On Wed, 2009-07-15 at 09:29 +0300, George wrote: Thanks Guys, atleast that gives a success rate guarantee of around 90%, better than some of those Vaccine drugs in the market. Cheerz On Mon, 2009-07-13 at 15:42 -0500, Tim Eberhard wrote: You configuration will remain after the upgrade/reboot. Downgrading is the same process as upgrading as long as you're going from say 5.2 to 5.0. Just load the 5.0 image and reboot. The 5.0 image is blown away when you load the newer screenOS. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 11:04 AM, George gmb...@cellulant.com wrote: Thanks Guys, Sure I had planned to upgrade to above 5.2 , are these firmwares available for download? So the next question is really about the configs, Once a reboot is done all the previous setting take in effect, is that so? And for a rollback the do I just scroll for the image? Regards George On Mon, 2009-07-13 at 17:39 +0300, Humair Ali wrote: Hi Georges Tim is absolutely correct, and since you are using the 2 netscreens as a standalone, you are bound to have downtime. One other , I believe (needs to verify) you can't go straight from 5.0 to 6.x, you need to upgrade through an intermediary such as 5.4 then upgrade 6.x so that is added downtime since again code needs to be reloaded after upgrade to 5.4 and then to 6.0 HTH 2009/7/13 Tim Eberhard xmi...@gmail.com George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood back. Depending on the size of your network/amount of VPN tunnels it could take a couple of minutes for everything to ramp back up. Downgrading code is possible depending what code version you're going to. It can be a bit problematic if say you go to 6.X code from 5.0 but if you had planned on going from 5.0 to 5.4 going back shouldn't be much of a problem. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 7:12 AM, George gmb...@cellulant.com wrote: Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
The bin file is within the ZIP. You will load the bin to the firewall. I would highly recommend against using anything but juniper.net to download your netscreen software. Never ever get your images from any where but directly from Juniper. The firewall images could contain back doors, root kits or other such harmful things when using an external source such as gegereka. -Tim Eberhard On Wed, Jul 15, 2009 at 3:48 AM, George gmb...@cellulant.com wrote: Hello again. Just to confirm the steps if they are correct: 1. download the firmware I want to upgrade to ie 5.2.0r2.0 (Do i get the zip file or the bin, or is the bin file contained in the zip file) 2. From the Juniper GUI browse and load the Image to be upgraded. 3. Once loaded reboot the juniper for the changes to take effect. Problem here again, I have been re-tryin to download the zip file from www.gegereka.com even after getting the access code, what and where is the easiet URL to download the update? Regards George On Wed, 2009-07-15 at 09:29 +0300, George wrote: Thanks Guys, atleast that gives a success rate guarantee of around 90%, better than some of those Vaccine drugs in the market. Cheerz On Mon, 2009-07-13 at 15:42 -0500, Tim Eberhard wrote: You configuration will remain after the upgrade/reboot. Downgrading is the same process as upgrading as long as you're going from say 5.2 to 5.0. Just load the 5.0 image and reboot. The 5.0 image is blown away when you load the newer screenOS. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 11:04 AM, George gmb...@cellulant.com wrote: Thanks Guys, Sure I had planned to upgrade to above 5.2 , are these firmwares available for download? So the next question is really about the configs, Once a reboot is done all the previous setting take in effect, is that so? And for a rollback the do I just scroll for the image? Regards George On Mon, 2009-07-13 at 17:39 +0300, Humair Ali wrote: Hi Georges Tim is absolutely correct, and since you are using the 2 netscreens as a standalone, you are bound to have downtime. One other , I believe (needs to verify) you can't go straight from 5.0 to 6.x, you need to upgrade through an intermediary such as 5.4 then upgrade 6.x so that is added downtime since again code needs to be reloaded after upgrade to 5.4 and then to 6.0 HTH 2009/7/13 Tim Eberhard xmi...@gmail.com George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood back. Depending on the size of your network/amount of VPN tunnels it could take a couple of minutes for everything to ramp back up. Downgrading code is possible depending what code version you're going to. It can be a bit problematic if say you go to 6.X code from 5.0 but if you had planned on going from 5.0 to 5.4 going back shouldn't be much of a problem. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 7:12 AM, George gmb...@cellulant.com wrote: Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] How to upgrade junos 5.0.0r8.1
Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood back. Depending on the size of your network/amount of VPN tunnels it could take a couple of minutes for everything to ramp back up. Downgrading code is possible depending what code version you're going to. It can be a bit problematic if say you go to 6.X code from 5.0 but if you had planned on going from 5.0 to 5.4 going back shouldn't be much of a problem. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 7:12 AM, George gmb...@cellulant.com wrote: Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
Thanks Guys, Sure I had planned to upgrade to above 5.2 , are these firmwares available for download? So the next question is really about the configs, Once a reboot is done all the previous setting take in effect, is that so? And for a rollback the do I just scroll for the image? Regards George On Mon, 2009-07-13 at 17:39 +0300, Humair Ali wrote: Hi Georges Tim is absolutely correct, and since you are using the 2 netscreens as a standalone, you are bound to have downtime. One other , I believe (needs to verify) you can't go straight from 5.0 to 6.x, you need to upgrade through an intermediary such as 5.4 then upgrade 6.x so that is added downtime since again code needs to be reloaded after upgrade to 5.4 and then to 6.0 HTH 2009/7/13 Tim Eberhard xmi...@gmail.com George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood back. Depending on the size of your network/amount of VPN tunnels it could take a couple of minutes for everything to ramp back up. Downgrading code is possible depending what code version you're going to. It can be a bit problematic if say you go to 6.X code from 5.0 but if you had planned on going from 5.0 to 5.4 going back shouldn't be much of a problem. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 7:12 AM, George gmb...@cellulant.com wrote: Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] How to upgrade junos 5.0.0r8.1
You configuration will remain after the upgrade/reboot. Downgrading is the same process as upgrading as long as you're going from say 5.2 to 5.0. Just load the 5.0 image and reboot. The 5.0 image is blown away when you load the newer screenOS. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 11:04 AM, George gmb...@cellulant.com wrote: Thanks Guys, Sure I had planned to upgrade to above 5.2 , are these firmwares available for download? So the next question is really about the configs, Once a reboot is done all the previous setting take in effect, is that so? And for a rollback the do I just scroll for the image? Regards George On Mon, 2009-07-13 at 17:39 +0300, Humair Ali wrote: Hi Georges Tim is absolutely correct, and since you are using the 2 netscreens as a standalone, you are bound to have downtime. One other , I believe (needs to verify) you can't go straight from 5.0 to 6.x, you need to upgrade through an intermediary such as 5.4 then upgrade 6.x so that is added downtime since again code needs to be reloaded after upgrade to 5.4 and then to 6.0 HTH 2009/7/13 Tim Eberhard xmi...@gmail.com George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood back. Depending on the size of your network/amount of VPN tunnels it could take a couple of minutes for everything to ramp back up. Downgrading code is possible depending what code version you're going to. It can be a bit problematic if say you go to 6.X code from 5.0 but if you had planned on going from 5.0 to 5.4 going back shouldn't be much of a problem. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at 7:12 AM, George gmb...@cellulant.com wrote: Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall. Thanks George On Mon, 2009-07-13 at 17:17 +0500, mas...@nexlinx.net.pk wrote: Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the upgrade fails how do I roll-back. Guess the thing is I have to be 100% sure the upgrade will not affect anything. Cheers. George ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
