[{"data":1,"prerenderedAt":1444},["ShallowReactive",2],{"blog-\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos":3,"blog-\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos-surround":1302,"blog-\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos-certifications":1363},{"id":4,"title":5,"body":6,"categories":1289,"cover":1290,"cover_contain":942,"credly_badge_id":1289,"date":1291,"description":1292,"extension":1293,"meta":1294,"navigation":942,"path":1295,"related_certifications":1296,"seo":1298,"slug":1299,"stem":1300,"__hash__":1301},"blog\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos.md","Mise à jour du routeur SRX 100 sous Junos",{"type":7,"value":8,"toc":1281},"minimark",[9,14,18,21,45,50,57,112,129,133,143,189,196,284,287,311,314,893,896,993,996,1093,1107,1115,1118,1267,1270,1274,1277],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Votre routeur Juniper SRX 100 accumule les correctifs de sécurité en retard : voici comment réaliser sa mise à jour proprement.",[10,19,5],{"id":20},"mise-à-jour-du-routeur-srx-100-sous-junos",[15,22,23,24,28,29,32,33,36,37,44],{},"Il s’avère parfois nécessaire de mettre à jour son routeur afin de combler des failles de sécurité ou encore disposer de nouvelles fonctionnalités plus ou moins importantes. Actuellement mon ",[25,26,27],"strong",{},"routeur SRX100"," fonctionne sous le firmware : ",[25,30,31],{},"12.1X46-D50.4"," datant de Avril 2016. Je souhaite faire le mise à jour vers ",[25,34,35],{},"12.3X48-D45.6"," datant de Février 2017. Les nouveautés entre les deux firmwares sont significatives et accessibles au ",[38,39,43],"a",{"href":40,"rel":41},"http:\u002F\u002Fwww.juniper.net\u002Fdocumentation\u002Fen_US\u002Fjunos\u002Finformation-products\u002Ftopic-collections\u002Frelease-notes\u002F12.3x48\u002Fjunos-release-notes-12.3X48.pdf",[42],"nofollow","lien suivant",".",[46,47,49],"h3",{"id":48},"pré-requis","Pré-requis :",[51,52,53],"ul",{},[54,55,56],"li",{},"Sauvegarder la configuration actuelle du routeur :",[58,59,64],"pre",{"className":60,"code":61,"language":62,"meta":63,"style":63},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","save \u002Ftmp\u002Fconf17052017\nWrote 751 lines of configuration to '\u002Ftmp\u002Fconf17052017'\n","bash","",[65,66,67,80],"code",{"__ignoreMap":63},[68,69,72,76],"span",{"class":70,"line":71},"line",1,[68,73,75],{"class":74},"sBMFI","save",[68,77,79],{"class":78},"sfazB"," \u002Ftmp\u002Fconf17052017\n",[68,81,83,86,90,93,96,99,102,106,109],{"class":70,"line":82},2,[68,84,85],{"class":74},"Wrote",[68,87,89],{"class":88},"sbssI"," 751",[68,91,92],{"class":78}," lines",[68,94,95],{"class":78}," of",[68,97,98],{"class":78}," configuration",[68,100,101],{"class":78}," to",[68,103,105],{"class":104},"sMK4o"," '",[68,107,108],{"class":78},"\u002Ftmp\u002Fconf17052017",[68,110,111],{"class":104},"'\n",[51,113,114,123,126],{},[54,115,116,117,122],{},"Posséder le firmware le plus récent ",[38,118,121],{"href":119,"rel":120},"https:\u002F\u002Fwww.juniper.net\u002Fsupport\u002Fdownloads\u002F?p=srx100#sw",[42],"disponible sur le site de Juniper"," et accessible depuis un compte valide.",[54,124,125],{},"Disposer d’un accès physique au routeur ou bien d’un serveur FTP pour uploader le firmware.",[54,127,128],{},"Une demi-heure devant soi afin de réaliser la mise à jour du SRX100.",[10,130,132],{"id":131},"mise-à-jour-individuelle","Mise à jour individuelle",[15,134,135,136,44,139,142],{},"Il existe différentes catégories de mises à jour, découvrons ensemble la ",[25,137,138],{},"mise à jour individuelle pour le SRX100",[140,141],"br",{},"\nNous commençons dans le mode dit de fonctionnement et nous vérifions la version du routeur :",[58,144,146],{"className":60,"code":145,"language":62,"meta":63,"style":63},"show version\nHostname: junsrx\nModel: srx100h2\nJUNOS Software Release [12.1X46-D50.4]\n",[65,147,148,156,164,173],{"__ignoreMap":63},[68,149,150,153],{"class":70,"line":71},[68,151,152],{"class":74},"show",[68,154,155],{"class":78}," version\n",[68,157,158,161],{"class":70,"line":82},[68,159,160],{"class":74},"Hostname:",[68,162,163],{"class":78}," junsrx\n",[68,165,167,170],{"class":70,"line":166},3,[68,168,169],{"class":74},"Model:",[68,171,172],{"class":78}," srx100h2\n",[68,174,176,179,182,185],{"class":70,"line":175},4,[68,177,178],{"class":74},"JUNOS",[68,180,181],{"class":78}," Software",[68,183,184],{"class":78}," Release",[68,186,188],{"class":187},"sTEyZ"," [12.1X46-D50.4]\n",[15,190,191,192,195],{},"Dans notre cas nous récupérons le firmware depuis le site de Juniper. Dans mon cas je l’ai uploadé en SFTP dans le répertoire ",[25,193,194],{},"\u002Ftmp"," puis récupéré la configuration du routeur précédemment créé : conf17052017. Voici le contenu \u002Ftmp :",[58,197,199],{"className":60,"code":198,"language":62,"meta":63,"style":63},"root@junsrx> start shell\nroot@junsrx% cd \u002Ftmp\u002F\nroot@junsrx% ls\n.clnpkg.LCK                             conf17052017\n.download-manager.LCK                   idpd.pid\n.pkg.REBOOT                             junos-srxsme-12.3X48-D45.6-domestic.tgz\nBSD.var.dist                            libappid_debug.log\nappidd_trace_debug                      lockmgr\nexit\n",[65,200,201,215,226,233,241,250,259,268,277],{"__ignoreMap":63},[68,202,203,206,209,212],{"class":70,"line":71},[68,204,205],{"class":74},"root@junsrx",[68,207,208],{"class":187},"> ",[68,210,211],{"class":78},"start",[68,213,214],{"class":78}," shell\n",[68,216,217,220,223],{"class":70,"line":82},[68,218,219],{"class":74},"root@junsrx%",[68,221,222],{"class":78}," cd",[68,224,225],{"class":78}," \u002Ftmp\u002F\n",[68,227,228,230],{"class":70,"line":166},[68,229,219],{"class":74},[68,231,232],{"class":78}," ls\n",[68,234,235,238],{"class":70,"line":175},[68,236,237],{"class":74},".clnpkg.LCK",[68,239,240],{"class":78},"                             conf17052017\n",[68,242,244,247],{"class":70,"line":243},5,[68,245,246],{"class":74},".download-manager.LCK",[68,248,249],{"class":78},"                   idpd.pid\n",[68,251,253,256],{"class":70,"line":252},6,[68,254,255],{"class":74},".pkg.REBOOT",[68,257,258],{"class":78},"                             junos-srxsme-12.3X48-D45.6-domestic.tgz\n",[68,260,262,265],{"class":70,"line":261},7,[68,263,264],{"class":74},"BSD.var.dist",[68,266,267],{"class":78},"                            libappid_debug.log\n",[68,269,271,274],{"class":70,"line":270},8,[68,272,273],{"class":74},"appidd_trace_debug",[68,275,276],{"class":78},"                      lockmgr\n",[68,278,280],{"class":70,"line":279},9,[68,281,283],{"class":282},"s2Zo4","exit\n",[15,285,286],{},"Pour les utilisateurs qui préfèrent utiliser la méthode via ftp voici la commande de base :",[58,288,290],{"className":60,"code":289,"language":62,"meta":63,"style":63},"user@host> file copy ftp:\u002F\u002Fusername:prompt@ftp.hostname.net\u002Ffilename  \u002Ftmp\u002F\n",[65,291,292],{"__ignoreMap":63},[68,293,294,297,299,302,305,308],{"class":70,"line":71},[68,295,296],{"class":74},"user@host",[68,298,208],{"class":187},[68,300,301],{"class":78},"file",[68,303,304],{"class":78}," copy",[68,306,307],{"class":78}," ftp:\u002F\u002Fusername:prompt@ftp.hostname.net\u002Ffilename",[68,309,310],{"class":78},"  \u002Ftmp\u002F\n",[15,312,313],{},"Nous sommes désormais prêts pour réaliser la mise à jour du routeur :",[58,315,319],{"className":316,"code":317,"language":318,"meta":63,"style":63},"language-yaml shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","root@junsrx> request system sofware add \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz validate                      \nFormatting alternate root (\u002Fdev\u002Fda0s1a)...\n\u002Fdev\u002Fda0s1a: 619.6MB (1268876 sectors) block size 16384, fragment size 2048\n        using 4 cylinder groups of 154.91MB, 9914 blks, 19840 inodes.\nsuper-block backups (for fsck -b #) at:\n 32, 317280, 634528, 951776\nExtracting \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz ...\nsaving package file in \u002Fvar\u002Fsw\u002Fpkg ...\nChecking compatibility with configuration\nInitializing...\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf: Operation not permitted\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc: Directory not empty\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar: Directory not empty\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs: Directory not empty\nrm: \u002Fvar\u002Fvalidate\u002Fchroot: Directory not empty\nVerified manifest signed by PackageProductionEc_2016 method ECDSA\nVerified junos-12.1X46-D50.4-domestic signed by PackageProductionEc_2016 method ECDSA\nUsing junos-12.3X48-D45.6-domestic from \u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic\nCopying package ...\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibslax.so.3: No such file or directory\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_bit.so.3: No such file or directory\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_curl.so.3: No such file or directory\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_xutil.so.3: No such file or directory\nVerified manifest signed by PackageProductionEc_2017 method ECDSA\nHardware Database regeneration succeeded\nValidating against \u002Fconfig\u002Fjuniper.conf.gz\nUsage: license-check -f \"\u003Cfeatures>\" -m -p -q -M -u -U -V\n  -V verify if release based licenses are present\nConnectivity fault management process: rtslib: ERROR kernel does not support all messages: expected 103 got 102,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg bulkstats: expected 0 got 98,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg ddos: expected 99 got 98,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg notify msg: expected 98 got 0,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg kuack messages: expected 99 got 0,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg marker ifstate: expected 104 got 0,a reboot or software upgrade may be required\nConnectivity fault management process:\nmgd: commit complete\nValidation succeeded\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf: Operation not permitted\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc: Directory not empty\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar: Directory not empty\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs: Directory not empty\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot: Directory not empty\nInstalling package '\u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic' ...\nVerified junos-boot-srxsme-12.3X48-D45.6.tgz signed by PackageProductionEc_2017 method ECDSA\nVerified junos-srxsme-12.3X48-D45.6-domestic signed by PackageProductionEc_2017 method ECDSA\nVerified junos-boot-srxsme-12.3X48-D45.6.tgz signed by PackageProductionEc_2017 method ECDSA\nVerified junos-srxsme-12.3X48-D45.6-domestic signed by PackageProductionEc_2017 method ECDSA\nJUNOS 12.3X48-D45.6 will become active at next reboot\nWARNING: A reboot is required to load this software correctly\nWARNING:     Use the 'request system reboot' command\nWARNING:         when software installation is complete\nSaving state for rollback ...\n","yaml",[65,320,321,329,334,346,351,360,365,370,375,380,386,402,417,431,445,459,465,471,477,483,499,513,527,541,547,553,559,570,576,597,605,624,631,650,657,676,683,702,709,728,735,746,752,766,780,794,808,822,828,834,840,845,850,856,867,877,887],{"__ignoreMap":63},[68,322,323,326],{"class":70,"line":71},[68,324,325],{"class":78},"root@junsrx> request system sofware add \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz validate",[68,327,328],{"class":187},"                      \n",[68,330,331],{"class":70,"line":82},[68,332,333],{"class":78},"Formatting alternate root (\u002Fdev\u002Fda0s1a)...\n",[68,335,336,340,343],{"class":70,"line":166},[68,337,339],{"class":338},"swJcz","\u002Fdev\u002Fda0s1a",[68,341,342],{"class":104},":",[68,344,345],{"class":78}," 619.6MB (1268876 sectors) block size 16384, fragment size 2048\n",[68,347,348],{"class":70,"line":175},[68,349,350],{"class":78},"        using 4 cylinder groups of 154.91MB, 9914 blks, 19840 inodes.\n",[68,352,353,356],{"class":70,"line":243},[68,354,355],{"class":78},"super-block backups (for fsck -b",[68,357,359],{"class":358},"sHwdD"," #) at:\n",[68,361,362],{"class":70,"line":252},[68,363,364],{"class":78}," 32, 317280, 634528, 951776\n",[68,366,367],{"class":70,"line":261},[68,368,369],{"class":78},"Extracting \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz ...\n",[68,371,372],{"class":70,"line":270},[68,373,374],{"class":78},"saving package file in \u002Fvar\u002Fsw\u002Fpkg ...\n",[68,376,377],{"class":70,"line":279},[68,378,379],{"class":78},"Checking compatibility with configuration\n",[68,381,383],{"class":70,"line":382},10,[68,384,385],{"class":78},"Initializing...\n",[68,387,389,392,394,397,399],{"class":70,"line":388},11,[68,390,391],{"class":338},"rm",[68,393,342],{"class":104},[68,395,396],{"class":338}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf",[68,398,342],{"class":104},[68,400,401],{"class":78}," Operation not permitted\n",[68,403,405,407,409,412,414],{"class":70,"line":404},12,[68,406,391],{"class":338},[68,408,342],{"class":104},[68,410,411],{"class":338}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc",[68,413,342],{"class":104},[68,415,416],{"class":78}," Directory not empty\n",[68,418,420,422,424,427,429],{"class":70,"line":419},13,[68,421,391],{"class":338},[68,423,342],{"class":104},[68,425,426],{"class":338}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar",[68,428,342],{"class":104},[68,430,416],{"class":78},[68,432,434,436,438,441,443],{"class":70,"line":433},14,[68,435,391],{"class":338},[68,437,342],{"class":104},[68,439,440],{"class":338}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs",[68,442,342],{"class":104},[68,444,416],{"class":78},[68,446,448,450,452,455,457],{"class":70,"line":447},15,[68,449,391],{"class":338},[68,451,342],{"class":104},[68,453,454],{"class":338}," \u002Fvar\u002Fvalidate\u002Fchroot",[68,456,342],{"class":104},[68,458,416],{"class":78},[68,460,462],{"class":70,"line":461},16,[68,463,464],{"class":78},"Verified manifest signed by PackageProductionEc_2016 method ECDSA\n",[68,466,468],{"class":70,"line":467},17,[68,469,470],{"class":78},"Verified junos-12.1X46-D50.4-domestic signed by PackageProductionEc_2016 method ECDSA\n",[68,472,474],{"class":70,"line":473},18,[68,475,476],{"class":78},"Using junos-12.3X48-D45.6-domestic from \u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic\n",[68,478,480],{"class":70,"line":479},19,[68,481,482],{"class":78},"Copying package ...\n",[68,484,486,489,491,494,496],{"class":70,"line":485},20,[68,487,488],{"class":338},"veriexec",[68,490,342],{"class":104},[68,492,493],{"class":338}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibslax.so.3",[68,495,342],{"class":104},[68,497,498],{"class":78}," No such file or directory\n",[68,500,502,504,506,509,511],{"class":70,"line":501},21,[68,503,488],{"class":338},[68,505,342],{"class":104},[68,507,508],{"class":338}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_bit.so.3",[68,510,342],{"class":104},[68,512,498],{"class":78},[68,514,516,518,520,523,525],{"class":70,"line":515},22,[68,517,488],{"class":338},[68,519,342],{"class":104},[68,521,522],{"class":338}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_curl.so.3",[68,524,342],{"class":104},[68,526,498],{"class":78},[68,528,530,532,534,537,539],{"class":70,"line":529},23,[68,531,488],{"class":338},[68,533,342],{"class":104},[68,535,536],{"class":338}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_xutil.so.3",[68,538,342],{"class":104},[68,540,498],{"class":78},[68,542,544],{"class":70,"line":543},24,[68,545,546],{"class":78},"Verified manifest signed by PackageProductionEc_2017 method ECDSA\n",[68,548,550],{"class":70,"line":549},25,[68,551,552],{"class":78},"Hardware Database regeneration succeeded\n",[68,554,556],{"class":70,"line":555},26,[68,557,558],{"class":78},"Validating against \u002Fconfig\u002Fjuniper.conf.gz\n",[68,560,562,565,567],{"class":70,"line":561},27,[68,563,564],{"class":338},"Usage",[68,566,342],{"class":104},[68,568,569],{"class":78}," license-check -f \"\u003Cfeatures>\" -m -p -q -M -u -U -V\n",[68,571,573],{"class":70,"line":572},28,[68,574,575],{"class":78},"  -V verify if release based licenses are present\n",[68,577,579,582,584,587,589,592,594],{"class":70,"line":578},29,[68,580,581],{"class":338},"Connectivity fault management process",[68,583,342],{"class":104},[68,585,586],{"class":338}," rtslib",[68,588,342],{"class":104},[68,590,591],{"class":338}," ERROR kernel does not support all messages",[68,593,342],{"class":104},[68,595,596],{"class":78}," expected 103 got 102,a reboot or software upgrade may be required\n",[68,598,600,602],{"class":70,"line":599},30,[68,601,581],{"class":338},[68,603,604],{"class":104},":\n",[68,606,608,610,612,614,616,619,621],{"class":70,"line":607},31,[68,609,581],{"class":338},[68,611,342],{"class":104},[68,613,586],{"class":338},[68,615,342],{"class":104},[68,617,618],{"class":338}," WARNING version mismatch for msg bulkstats",[68,620,342],{"class":104},[68,622,623],{"class":78}," expected 0 got 98,a reboot or software upgrade may be required\n",[68,625,627,629],{"class":70,"line":626},32,[68,628,581],{"class":338},[68,630,604],{"class":104},[68,632,634,636,638,640,642,645,647],{"class":70,"line":633},33,[68,635,581],{"class":338},[68,637,342],{"class":104},[68,639,586],{"class":338},[68,641,342],{"class":104},[68,643,644],{"class":338}," WARNING version mismatch for msg ddos",[68,646,342],{"class":104},[68,648,649],{"class":78}," expected 99 got 98,a reboot or software upgrade may be required\n",[68,651,653,655],{"class":70,"line":652},34,[68,654,581],{"class":338},[68,656,604],{"class":104},[68,658,660,662,664,666,668,671,673],{"class":70,"line":659},35,[68,661,581],{"class":338},[68,663,342],{"class":104},[68,665,586],{"class":338},[68,667,342],{"class":104},[68,669,670],{"class":338}," WARNING version mismatch for msg notify msg",[68,672,342],{"class":104},[68,674,675],{"class":78}," expected 98 got 0,a reboot or software upgrade may be required\n",[68,677,679,681],{"class":70,"line":678},36,[68,680,581],{"class":338},[68,682,604],{"class":104},[68,684,686,688,690,692,694,697,699],{"class":70,"line":685},37,[68,687,581],{"class":338},[68,689,342],{"class":104},[68,691,586],{"class":338},[68,693,342],{"class":104},[68,695,696],{"class":338}," WARNING version mismatch for msg kuack messages",[68,698,342],{"class":104},[68,700,701],{"class":78}," expected 99 got 0,a reboot or software upgrade may be required\n",[68,703,705,707],{"class":70,"line":704},38,[68,706,581],{"class":338},[68,708,604],{"class":104},[68,710,712,714,716,718,720,723,725],{"class":70,"line":711},39,[68,713,581],{"class":338},[68,715,342],{"class":104},[68,717,586],{"class":338},[68,719,342],{"class":104},[68,721,722],{"class":338}," WARNING version mismatch for msg marker ifstate",[68,724,342],{"class":104},[68,726,727],{"class":78}," expected 104 got 0,a reboot or software upgrade may be required\n",[68,729,731,733],{"class":70,"line":730},40,[68,732,581],{"class":338},[68,734,604],{"class":104},[68,736,738,741,743],{"class":70,"line":737},41,[68,739,740],{"class":338},"mgd",[68,742,342],{"class":104},[68,744,745],{"class":78}," commit complete\n",[68,747,749],{"class":70,"line":748},42,[68,750,751],{"class":78},"Validation succeeded\n",[68,753,755,757,759,762,764],{"class":70,"line":754},43,[68,756,391],{"class":338},[68,758,342],{"class":104},[68,760,761],{"class":338}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf",[68,763,342],{"class":104},[68,765,401],{"class":78},[68,767,769,771,773,776,778],{"class":70,"line":768},44,[68,770,391],{"class":338},[68,772,342],{"class":104},[68,774,775],{"class":338}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc",[68,777,342],{"class":104},[68,779,416],{"class":78},[68,781,783,785,787,790,792],{"class":70,"line":782},45,[68,784,391],{"class":338},[68,786,342],{"class":104},[68,788,789],{"class":338}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar",[68,791,342],{"class":104},[68,793,416],{"class":78},[68,795,797,799,801,804,806],{"class":70,"line":796},46,[68,798,391],{"class":338},[68,800,342],{"class":104},[68,802,803],{"class":338}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs",[68,805,342],{"class":104},[68,807,416],{"class":78},[68,809,811,813,815,818,820],{"class":70,"line":810},47,[68,812,391],{"class":338},[68,814,342],{"class":104},[68,816,817],{"class":338}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot",[68,819,342],{"class":104},[68,821,416],{"class":78},[68,823,825],{"class":70,"line":824},48,[68,826,827],{"class":78},"Installing package '\u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic' ...\n",[68,829,831],{"class":70,"line":830},49,[68,832,833],{"class":78},"Verified junos-boot-srxsme-12.3X48-D45.6.tgz signed by PackageProductionEc_2017 method ECDSA\n",[68,835,837],{"class":70,"line":836},50,[68,838,839],{"class":78},"Verified junos-srxsme-12.3X48-D45.6-domestic signed by PackageProductionEc_2017 method ECDSA\n",[68,841,843],{"class":70,"line":842},51,[68,844,833],{"class":78},[68,846,848],{"class":70,"line":847},52,[68,849,839],{"class":78},[68,851,853],{"class":70,"line":852},53,[68,854,855],{"class":78},"JUNOS 12.3X48-D45.6 will become active at next reboot\n",[68,857,859,862,864],{"class":70,"line":858},54,[68,860,861],{"class":338},"WARNING",[68,863,342],{"class":104},[68,865,866],{"class":78}," A reboot is required to load this software correctly\n",[68,868,870,872,874],{"class":70,"line":869},55,[68,871,861],{"class":338},[68,873,342],{"class":104},[68,875,876],{"class":78},"     Use the 'request system reboot' command\n",[68,878,880,882,884],{"class":70,"line":879},56,[68,881,861],{"class":338},[68,883,342],{"class":104},[68,885,886],{"class":78},"         when software installation is complete\n",[68,888,890],{"class":70,"line":889},57,[68,891,892],{"class":78},"Saving state for rollback ...\n",[15,894,895],{},"Il est demandé de réaliser un redémarrage de l’appareil afin de disposer de la nouvelle version du firmware :",[58,897,899],{"className":60,"code":898,"language":62,"meta":63,"style":63},"root@junsrx> request system reboot\nReboot the system ? [yes,no] (no) yes\n\nShutdown NOW!\nroot@junsrx> *** FINAL System shutdown message from root@junsrx *** System going down IMMEDIATELY\n",[65,900,901,916,938,944,952],{"__ignoreMap":63},[68,902,903,905,907,910,913],{"class":70,"line":71},[68,904,205],{"class":74},[68,906,208],{"class":187},[68,908,909],{"class":78},"request",[68,911,912],{"class":78}," system",[68,914,915],{"class":78}," reboot\n",[68,917,918,921,924,926,929,932,935],{"class":70,"line":82},[68,919,920],{"class":74},"Reboot",[68,922,923],{"class":78}," the",[68,925,912],{"class":78},[68,927,928],{"class":78}," ?",[68,930,931],{"class":187}," [yes,no] (",[68,933,934],{"class":74},"no",[68,936,937],{"class":187},") yes\n",[68,939,940],{"class":70,"line":166},[68,941,943],{"emptyLinePlaceholder":942},true,"\n",[68,945,946,949],{"class":70,"line":175},[68,947,948],{"class":74},"Shutdown",[68,950,951],{"class":78}," NOW!\n",[68,953,954,956,958,961,964,967,970,973,976,979,982,984,987,990],{"class":70,"line":243},[68,955,205],{"class":74},[68,957,208],{"class":187},[68,959,960],{"class":187},"***",[68,962,963],{"class":78}," FINAL",[68,965,966],{"class":78}," System",[68,968,969],{"class":78}," shutdown",[68,971,972],{"class":78}," message",[68,974,975],{"class":78}," from",[68,977,978],{"class":78}," root@junsrx",[68,980,981],{"class":187}," ***",[68,983,966],{"class":78},[68,985,986],{"class":78}," going",[68,988,989],{"class":78}," down",[68,991,992],{"class":78}," IMMEDIATELY\n",[15,994,995],{},"Une fois l’appareil redémarré un message apparaît avant de nous authentifier :",[58,997,999],{"className":60,"code":998,"language":62,"meta":63,"style":63},"WARNING: JUNOS versions running on dual partitions are not same\n** \u002Fdev\u002Fda0s2a\nFILE SYSTEM CLEAN; SKIPPING CHECKS\nclean, 240844 free (44 frags, 30100 blocks, 0.0% fragmentation)\n",[65,1000,1001,1033,1041,1061],{"__ignoreMap":63},[68,1002,1003,1006,1009,1012,1015,1018,1021,1024,1027,1030],{"class":70,"line":71},[68,1004,1005],{"class":74},"WARNING:",[68,1007,1008],{"class":78}," JUNOS",[68,1010,1011],{"class":78}," versions",[68,1013,1014],{"class":78}," running",[68,1016,1017],{"class":78}," on",[68,1019,1020],{"class":78}," dual",[68,1022,1023],{"class":78}," partitions",[68,1025,1026],{"class":78}," are",[68,1028,1029],{"class":78}," not",[68,1031,1032],{"class":78}," same\n",[68,1034,1035,1038],{"class":70,"line":82},[68,1036,1037],{"class":104},"**",[68,1039,1040],{"class":187}," \u002Fdev\u002Fda0s2a\n",[68,1042,1043,1046,1049,1052,1055,1058],{"class":70,"line":166},[68,1044,1045],{"class":74},"FILE",[68,1047,1048],{"class":78}," SYSTEM",[68,1050,1051],{"class":78}," CLEAN",[68,1053,1054],{"class":104},";",[68,1056,1057],{"class":74}," SKIPPING",[68,1059,1060],{"class":78}," CHECKS\n",[68,1062,1063,1066,1069,1072,1075,1078,1081,1084,1087,1090],{"class":70,"line":175},[68,1064,1065],{"class":74},"clean,",[68,1067,1068],{"class":88}," 240844",[68,1070,1071],{"class":78}," free",[68,1073,1074],{"class":187}," (44 ",[68,1076,1077],{"class":78},"frags,",[68,1079,1080],{"class":88}," 30100",[68,1082,1083],{"class":78}," blocks,",[68,1085,1086],{"class":78}," 0.0%",[68,1088,1089],{"class":78}," fragmentation",[68,1091,1092],{"class":187},")\n",[15,1094,1095,1096,1099,1100,1103,1104,1106],{},"Junos utilise deux partitions : ",[25,1097,1098],{},"da0s1a"," et ",[25,1101,1102],{},"da0s2a"," qui contiennent encore notre ancien firmware.",[140,1105],{},"\nPour résoudre le problème nous allons lui copier notre firmware de la partition da0s1a vers da0s2a comme ceci :",[58,1108,1113],{"className":1109,"code":1111,"language":1112},[1110],"language-text","root@junsrx> request system snapshot slice alternate\nFormatting alternate root (\u002Fdev\u002Fda0s2a)...\nCopying '\u002Fdev\u002Fda0s1a' to '\u002Fdev\u002Fda0s2a' .. (this may take a few minutes)\nThe following filesystems were archived: \u002F\n","text",[65,1114,1111],{"__ignoreMap":63},[15,1116,1117],{},"Pour vérifier l’intégralité de notre mise à jour :",[58,1119,1121],{"className":60,"code":1120,"language":62,"meta":63,"style":63},"root@junsrx> show system snapshot media internal slice alternate\nInformation for snapshot on       internal (\u002Fdev\u002Fda0s1a) (primary)\nCreation date: May 17 19:12:57 2017\nJUNOS version on snapshot:\n  junos  : 12.3X48-D45.6-domestic\nInformation for snapshot on       internal (\u002Fdev\u002Fda0s2a) (backup)\nCreation date: May 17 19:24:28 2017\nJUNOS version on snapshot:\n  junos  : 12.3X48-D45.6-domestic\n",[65,1122,1123,1148,1171,1191,1203,1214,1234,1249,1259],{"__ignoreMap":63},[68,1124,1125,1127,1129,1131,1133,1136,1139,1142,1145],{"class":70,"line":71},[68,1126,205],{"class":74},[68,1128,208],{"class":187},[68,1130,152],{"class":78},[68,1132,912],{"class":78},[68,1134,1135],{"class":78}," snapshot",[68,1137,1138],{"class":78}," media",[68,1140,1141],{"class":78}," internal",[68,1143,1144],{"class":78}," slice",[68,1146,1147],{"class":78}," alternate\n",[68,1149,1150,1153,1156,1158,1160,1163,1166,1169],{"class":70,"line":82},[68,1151,1152],{"class":74},"Information",[68,1154,1155],{"class":78}," for",[68,1157,1135],{"class":78},[68,1159,1017],{"class":78},[68,1161,1162],{"class":78},"       internal",[68,1164,1165],{"class":187}," (\u002Fdev\u002Fda0s1a) (",[68,1167,1168],{"class":74},"primary",[68,1170,1092],{"class":187},[68,1172,1173,1176,1179,1182,1185,1188],{"class":70,"line":166},[68,1174,1175],{"class":74},"Creation",[68,1177,1178],{"class":78}," date:",[68,1180,1181],{"class":78}," May",[68,1183,1184],{"class":88}," 17",[68,1186,1187],{"class":78}," 19:12:57",[68,1189,1190],{"class":88}," 2017\n",[68,1192,1193,1195,1198,1200],{"class":70,"line":175},[68,1194,178],{"class":74},[68,1196,1197],{"class":78}," version",[68,1199,1017],{"class":78},[68,1201,1202],{"class":78}," snapshot:\n",[68,1204,1205,1208,1211],{"class":70,"line":243},[68,1206,1207],{"class":74},"  junos",[68,1209,1210],{"class":78},"  :",[68,1212,1213],{"class":78}," 12.3X48-D45.6-domestic\n",[68,1215,1216,1218,1220,1222,1224,1226,1229,1232],{"class":70,"line":252},[68,1217,1152],{"class":74},[68,1219,1155],{"class":78},[68,1221,1135],{"class":78},[68,1223,1017],{"class":78},[68,1225,1162],{"class":78},[68,1227,1228],{"class":187}," (\u002Fdev\u002Fda0s2a) (",[68,1230,1231],{"class":74},"backup",[68,1233,1092],{"class":187},[68,1235,1236,1238,1240,1242,1244,1247],{"class":70,"line":261},[68,1237,1175],{"class":74},[68,1239,1178],{"class":78},[68,1241,1181],{"class":78},[68,1243,1184],{"class":88},[68,1245,1246],{"class":78}," 19:24:28",[68,1248,1190],{"class":88},[68,1250,1251,1253,1255,1257],{"class":70,"line":270},[68,1252,178],{"class":74},[68,1254,1197],{"class":78},[68,1256,1017],{"class":78},[68,1258,1202],{"class":78},[68,1260,1261,1263,1265],{"class":70,"line":279},[68,1262,1207],{"class":74},[68,1264,1210],{"class":78},[68,1266,1213],{"class":78},[15,1268,1269],{},"Pour terminer, un redémarrage est nécessaire afin que le message disparaisse et que notre routeur soit opérationnel.",[10,1271,1273],{"id":1272},"conclusion","Conclusion",[15,1275,1276],{},"Cet article a détaillé la mise à jour individuelle d’un routeur Juniper SRX100 du firmware 12.1X46-D50.4 vers 12.3X48-D45.6, en passant par la sauvegarde de la configuration, le transfert du firmware, sa validation puis son installation avant un redémarrage de l’équipement. Une étape supplémentaire de synchronisation des deux partitions du routeur (da0s1a et da0s2a) a permis de garantir la cohérence du firmware installé. Cette mise à jour reste une opération à réaliser régulièrement pour combler les failles de sécurité et bénéficier des nouvelles fonctionnalités de Junos.",[1278,1279,1280],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":63,"searchDepth":82,"depth":82,"links":1282},[1283,1284,1287,1288],{"id":12,"depth":82,"text":13},{"id":20,"depth":82,"text":5,"children":1285},[1286],{"id":48,"depth":166,"text":49},{"id":131,"depth":82,"text":132},{"id":1272,"depth":82,"text":1273},null,"\u002Fimages\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos\u002F1b4814003c.jpg","2017-05-17","Découvrez comment réaliser la mise à jour d'un routeur SRX Juniper. Mise à jour 12.1X46-D50.4 vers 12.3X48-D45.6 en quelques minutes.","md",{},"\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos",[1297],"certificat-junos-associe-jncia-junos",{"title":5,"description":1292},"mise-jour-routeur-srx-100-sous-junos","blog\u002Fmise-jour-routeur-srx-100-sous-junos","mawo1sf5Y6uFhD72b9jL455cA5-yemwJMAQX4FhuUYQ",[1303,1311,1319,1326,1334,1342,1349,1356],{"title":1304,"path":1305,"stem":1306,"date":1307,"cover":1308,"categories":1309,"children":-1},"Installation et configuration de Zextras Suite","\u002Fblog\u002Finstallation-configuration-zextras-suite","blog\u002Finstallation-configuration-zextras-suite","2017-10-07","\u002Fimages\u002Fblog\u002Finstallation-configuration-zextras-suite\u002F3cc0db9e57.png",[1310],"Linux",{"title":1312,"path":1313,"stem":1314,"date":1315,"cover":1316,"categories":1317,"children":-1},"Une nuit à l’éco-site Oasis Bellecombe","\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe","blog\u002Fune-nuit-eco-site-oasis-bellecombe","2017-09-09","\u002Fimages\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe\u002Ff6ac468e74.jpg",[1318],"Évènement",{"title":1320,"path":1321,"stem":1322,"date":1323,"cover":1324,"categories":1325,"children":-1},"Les sauvegardes de mes machines KVM\u002FQEMU avec Veeam for Linux","\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux","blog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux","2017-07-09","\u002Fimages\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux\u002Fdb83b58b53.png",[1310],{"title":1327,"path":1328,"stem":1329,"date":1330,"cover":1331,"categories":1332,"children":-1},"ESET Remote Administrator : prise en main de la web console","\u002Fblog\u002Feset-remote-administrator-prise-main-web-console","blog\u002Feset-remote-administrator-prise-main-web-console","2017-05-30","\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F15dab17188.jpg",[1333],"Sécurité",{"title":1335,"path":1336,"stem":1337,"date":1338,"cover":1339,"categories":1340,"children":-1},"ESET Remote Administrator : installation sous Windows","\u002Fblog\u002Feset-remote-administrator-installation-sous-windows","blog\u002Feset-remote-administrator-installation-sous-windows","2017-04-30","\u002Fimages\u002Fblog\u002Feset-remote-administrator-installation-sous-windows\u002F15dab17188.jpg",[1341],"Microsoft",{"title":1343,"path":1344,"stem":1345,"date":1346,"cover":1347,"categories":1348,"children":-1},"Hack In Paris et Nuit du Hack du 19 au 25 Juin 2017","\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017","blog\u002Fhack-paris-nuit-hack-juin-2017","2017-04-25","\u002Fimages\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017\u002F4cd713ef6f.png",[1318],{"title":1350,"path":1351,"stem":1352,"date":1353,"cover":1354,"categories":1355,"children":-1},"Installation et configuration de Owncloud","\u002Fblog\u002Finstallation-configuration-owncloud","blog\u002Finstallation-configuration-owncloud","2017-03-09","\u002Fimages\u002Fblog\u002Finstallation-configuration-owncloud\u002F5625a922b3.jpg",[1310],{"title":1357,"path":1358,"stem":1359,"date":1360,"cover":1361,"categories":1362,"children":-1},"Installation et configuration de Icinga2 et Icinga2web","\u002Fblog\u002Finstallation-configuration-icinga2-icinga2web","blog\u002Finstallation-configuration-icinga2-icinga2web","2017-03-05","\u002Fimages\u002Fblog\u002Finstallation-configuration-icinga2-icinga2web\u002F443c55fb6e.png",[1310],[1364],{"id":1365,"title":1366,"body":1367,"categories":1432,"cover":1435,"cover_contain":942,"credly_badge_id":1436,"date":1437,"description":1438,"extension":1293,"meta":1439,"navigation":942,"path":1440,"related_certifications":1289,"seo":1441,"slug":1297,"stem":1442,"__hash__":1443},"blog\u002Fblog\u002Fcertificat-junos-associe-jncia-junos.md","Junos Associé (JNCIA-Junos)",{"type":7,"value":1368,"toc":1428},[1369,1371,1374,1380,1417,1423,1425],[10,1370,13],{"id":12},[15,1372,1373],{},"Pour intervenir sereinement sur des équipements Juniper en clientèle, j'ai suivi ce cursus Arrow et obtenu la certification JNCIA-Junos.",[15,1375,1376,1377,1379],{},"Le parcours de formation \"Junos Associé (JNCIA-Junos)\" est dédié aux professionnel IT en charge notamment des réseaux informatiques.",[140,1378],{},"\nLe catalogue de cours aborde les modules suivants :",[51,1381,1382,1387,1392,1397,1402,1407,1412],{},[54,1383,1384],{},[25,1385,1386],{},"Principes fondamentaux de la mise en réseau",[54,1388,1389],{},[25,1390,1391],{},"Principes fondamentaux de Junos OS",[54,1393,1394],{},[25,1395,1396],{},"Interfaces utilisateur",[54,1398,1399],{},[25,1400,1401],{},"Notions de base sur la configuration",[54,1403,1404],{},[25,1405,1406],{},"Surveillance et maintenance des opérations",[54,1408,1409],{},[25,1410,1411],{},"Principes fondamentaux du routage",[54,1413,1414],{},[25,1415,1416],{},"Stratégie de routage et filtres de pare-feu",[15,1418,1419,1420,1422],{},"le temps à accorder à la formation est d'environ 3 jours.",[140,1421],{},"\nIl faut ensuite prévoir environ 1h30 pour le passage de la certification : Junos Associé (JNCIA-Junos).",[10,1424,1273],{"id":1272},[15,1426,1427],{},"Cette formation Arrow couvre les fondamentaux des réseaux et du système Junos OS, de la configuration de base au routage et aux filtres de pare-feu. Elle permet de valider une compréhension solide des équipements réseau Juniper, utile pour tout professionnel en charge de l'administration d'infrastructures réseau. Une certification complémentaire aux compétences déjà acquises sur d'autres environnements.",{"title":63,"searchDepth":82,"depth":82,"links":1429},[1430,1431],{"id":12,"depth":82,"text":13},{"id":1272,"depth":82,"text":1273},[1433,1434],"Certifications","Réseau","\u002Fimages\u002Fblog\u002Fcertificat-junos-associe-jncia-junos\u002F773018337d.png","907dbe59-515c-4d6b-9ce1-e40082c63c2e","2023-01-17","Junos Associé (JNCIA-Junos) : formation Arrow, suivie pour ma veille professionnelle en cybersécurité et informatique.",{},"\u002Fblog\u002Fcertificat-junos-associe-jncia-junos",{"title":1366,"description":1438},"blog\u002Fcertificat-junos-associe-jncia-junos","FyzhACynI7FC3yrB0ozhuw0OlR2KoUUzw6tZ-4iqqZ0",1786644874335]