[{"data":1,"prerenderedAt":1436},["ShallowReactive",2],{"blog-\u002Fen\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos":3,"blog-\u002Fen\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos-surround":1300,"blog-\u002Fen\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos-certifications":1361},{"id":4,"title":5,"body":6,"categories":1287,"cover":1288,"cover_contain":943,"credly_badge_id":1287,"date":1289,"description":1290,"extension":1291,"meta":1292,"navigation":943,"path":1293,"related_certifications":1294,"seo":1296,"slug":1297,"stem":1298,"__hash__":1299},"blog\u002Fen\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos.md","Updating an SRX 100 Router Running Junos",{"type":7,"value":8,"toc":1279},"minimark",[9,14,18,22,46,51,58,113,130,134,144,190,197,285,288,312,315,894,897,994,997,1094,1108,1116,1119,1268,1271,1275],[10,11,13],"h2",{"id":12},"real-world-use-case","Real-world use case",[15,16,17],"p",{},"Your Juniper SRX 100 router is accumulating overdue security patches: here's how to update it cleanly.",[10,19,21],{"id":20},"updating-an-srx-100-router-running-junos","Updating an SRX 100 router running Junos",[15,23,24,25,29,30,33,34,37,38,45],{},"Sometimes it becomes necessary to update your router in order to close security holes or gain access to new, more or less significant features. My ",[26,27,28],"strong",{},"SRX100 router"," is currently running firmware ",[26,31,32],{},"12.1X46-D50.4",", dated April 2016. I want to update it to ",[26,35,36],{},"12.3X48-D45.6",", dated February 2017. The changes between the two firmware versions are significant and available at the ",[39,40,44],"a",{"href":41,"rel":42},"http:\u002F\u002Fwww.juniper.net\u002Fdocumentation\u002Fen_US\u002Fjunos\u002Finformation-products\u002Ftopic-collections\u002Frelease-notes\u002F12.3x48\u002Fjunos-release-notes-12.3X48.pdf",[43],"nofollow","following link",".",[47,48,50],"h3",{"id":49},"prerequisites","Prerequisites:",[52,53,54],"ul",{},[55,56,57],"li",{},"Back up the router's current configuration:",[59,60,65],"pre",{"className":61,"code":62,"language":63,"meta":64,"style":64},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","save \u002Ftmp\u002Fconf17052017\nWrote 751 lines of configuration to '\u002Ftmp\u002Fconf17052017'\n","bash","",[66,67,68,81],"code",{"__ignoreMap":64},[69,70,73,77],"span",{"class":71,"line":72},"line",1,[69,74,76],{"class":75},"sBMFI","save",[69,78,80],{"class":79},"sfazB"," \u002Ftmp\u002Fconf17052017\n",[69,82,84,87,91,94,97,100,103,107,110],{"class":71,"line":83},2,[69,85,86],{"class":75},"Wrote",[69,88,90],{"class":89},"sbssI"," 751",[69,92,93],{"class":79}," lines",[69,95,96],{"class":79}," of",[69,98,99],{"class":79}," configuration",[69,101,102],{"class":79}," to",[69,104,106],{"class":105},"sMK4o"," '",[69,108,109],{"class":79},"\u002Ftmp\u002Fconf17052017",[69,111,112],{"class":105},"'\n",[52,114,115,124,127],{},[55,116,117,118,123],{},"Have the latest firmware ",[39,119,122],{"href":120,"rel":121},"https:\u002F\u002Fwww.juniper.net\u002Fsupport\u002Fdownloads\u002F?p=srx100#sw",[43],"available on Juniper's website",", accessible from a valid account.",[55,125,126],{},"Have physical access to the router, or an FTP server to upload the firmware.",[55,128,129],{},"Half an hour of free time to carry out the SRX100 update.",[10,131,133],{"id":132},"individual-update","Individual update",[15,135,136,137,45,140,143],{},"There are different types of updates, let's discover together the ",[26,138,139],{},"individual update for the SRX100",[141,142],"br",{},"\nWe start in operational mode and check the router's version:",[59,145,147],{"className":61,"code":146,"language":63,"meta":64,"style":64},"show version\nHostname: junsrx\nModel: srx100h2\nJUNOS Software Release [12.1X46-D50.4]\n",[66,148,149,157,165,174],{"__ignoreMap":64},[69,150,151,154],{"class":71,"line":72},[69,152,153],{"class":75},"show",[69,155,156],{"class":79}," version\n",[69,158,159,162],{"class":71,"line":83},[69,160,161],{"class":75},"Hostname:",[69,163,164],{"class":79}," junsrx\n",[69,166,168,171],{"class":71,"line":167},3,[69,169,170],{"class":75},"Model:",[69,172,173],{"class":79}," srx100h2\n",[69,175,177,180,183,186],{"class":71,"line":176},4,[69,178,179],{"class":75},"JUNOS",[69,181,182],{"class":79}," Software",[69,184,185],{"class":79}," Release",[69,187,189],{"class":188},"sTEyZ"," [12.1X46-D50.4]\n",[15,191,192,193,196],{},"In our case, we get the firmware from Juniper's website. In my case, I uploaded it via SFTP to the ",[26,194,195],{},"\u002Ftmp"," directory, then retrieved the previously created router configuration: conf17052017. Here's the contents of \u002Ftmp:",[59,198,200],{"className":61,"code":199,"language":63,"meta":64,"style":64},"root@junsrx> start shell\nroot@junsrx% cd \u002Ftmp\u002F\nroot@junsrx% ls\n.clnpkg.LCK                             conf17052017\n.download-manager.LCK                   idpd.pid\n.pkg.REBOOT                             junos-srxsme-12.3X48-D45.6-domestic.tgz\nBSD.var.dist                            libappid_debug.log\nappidd_trace_debug                      lockmgr\nexit\n",[66,201,202,216,227,234,242,251,260,269,278],{"__ignoreMap":64},[69,203,204,207,210,213],{"class":71,"line":72},[69,205,206],{"class":75},"root@junsrx",[69,208,209],{"class":188},"> ",[69,211,212],{"class":79},"start",[69,214,215],{"class":79}," shell\n",[69,217,218,221,224],{"class":71,"line":83},[69,219,220],{"class":75},"root@junsrx%",[69,222,223],{"class":79}," cd",[69,225,226],{"class":79}," \u002Ftmp\u002F\n",[69,228,229,231],{"class":71,"line":167},[69,230,220],{"class":75},[69,232,233],{"class":79}," ls\n",[69,235,236,239],{"class":71,"line":176},[69,237,238],{"class":75},".clnpkg.LCK",[69,240,241],{"class":79},"                             conf17052017\n",[69,243,245,248],{"class":71,"line":244},5,[69,246,247],{"class":75},".download-manager.LCK",[69,249,250],{"class":79},"                   idpd.pid\n",[69,252,254,257],{"class":71,"line":253},6,[69,255,256],{"class":75},".pkg.REBOOT",[69,258,259],{"class":79},"                             junos-srxsme-12.3X48-D45.6-domestic.tgz\n",[69,261,263,266],{"class":71,"line":262},7,[69,264,265],{"class":75},"BSD.var.dist",[69,267,268],{"class":79},"                            libappid_debug.log\n",[69,270,272,275],{"class":71,"line":271},8,[69,273,274],{"class":75},"appidd_trace_debug",[69,276,277],{"class":79},"                      lockmgr\n",[69,279,281],{"class":71,"line":280},9,[69,282,284],{"class":283},"s2Zo4","exit\n",[15,286,287],{},"For users who prefer using the FTP method, here's the basic command:",[59,289,291],{"className":61,"code":290,"language":63,"meta":64,"style":64},"user@host> file copy ftp:\u002F\u002Fusername:prompt@ftp.hostname.net\u002Ffilename  \u002Ftmp\u002F\n",[66,292,293],{"__ignoreMap":64},[69,294,295,298,300,303,306,309],{"class":71,"line":72},[69,296,297],{"class":75},"user@host",[69,299,209],{"class":188},[69,301,302],{"class":79},"file",[69,304,305],{"class":79}," copy",[69,307,308],{"class":79}," ftp:\u002F\u002Fusername:prompt@ftp.hostname.net\u002Ffilename",[69,310,311],{"class":79},"  \u002Ftmp\u002F\n",[15,313,314],{},"We're now ready to update the router:",[59,316,320],{"className":317,"code":318,"language":319,"meta":64,"style":64},"language-yaml shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","root@junsrx> request system sofware add \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz validate                      \nFormatting alternate root (\u002Fdev\u002Fda0s1a)...\n\u002Fdev\u002Fda0s1a: 619.6MB (1268876 sectors) block size 16384, fragment size 2048\n        using 4 cylinder groups of 154.91MB, 9914 blks, 19840 inodes.\nsuper-block backups (for fsck -b #) at:\n 32, 317280, 634528, 951776\nExtracting \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz ...\nsaving package file in \u002Fvar\u002Fsw\u002Fpkg ...\nChecking compatibility with configuration\nInitializing...\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf: Operation not permitted\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc: Directory not empty\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar: Directory not empty\nrm: \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs: Directory not empty\nrm: \u002Fvar\u002Fvalidate\u002Fchroot: Directory not empty\nVerified manifest signed by PackageProductionEc_2016 method ECDSA\nVerified junos-12.1X46-D50.4-domestic signed by PackageProductionEc_2016 method ECDSA\nUsing junos-12.3X48-D45.6-domestic from \u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic\nCopying package ...\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibslax.so.3: No such file or directory\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_bit.so.3: No such file or directory\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_curl.so.3: No such file or directory\nveriexec: cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_xutil.so.3: No such file or directory\nVerified manifest signed by PackageProductionEc_2017 method ECDSA\nHardware Database regeneration succeeded\nValidating against \u002Fconfig\u002Fjuniper.conf.gz\nUsage: license-check -f \"\u003Cfeatures>\" -m -p -q -M -u -U -V\n  -V verify if release based licenses are present\nConnectivity fault management process: rtslib: ERROR kernel does not support all messages: expected 103 got 102,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg bulkstats: expected 0 got 98,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg ddos: expected 99 got 98,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg notify msg: expected 98 got 0,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg kuack messages: expected 99 got 0,a reboot or software upgrade may be required\nConnectivity fault management process:\nConnectivity fault management process: rtslib: WARNING version mismatch for msg marker ifstate: expected 104 got 0,a reboot or software upgrade may be required\nConnectivity fault management process:\nmgd: commit complete\nValidation succeeded\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf: Operation not permitted\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc: Directory not empty\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar: Directory not empty\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs: Directory not empty\nrm: \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot: Directory not empty\nInstalling package '\u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic' ...\nVerified junos-boot-srxsme-12.3X48-D45.6.tgz signed by PackageProductionEc_2017 method ECDSA\nVerified junos-srxsme-12.3X48-D45.6-domestic signed by PackageProductionEc_2017 method ECDSA\nVerified junos-boot-srxsme-12.3X48-D45.6.tgz signed by PackageProductionEc_2017 method ECDSA\nVerified junos-srxsme-12.3X48-D45.6-domestic signed by PackageProductionEc_2017 method ECDSA\nJUNOS 12.3X48-D45.6 will become active at next reboot\nWARNING: A reboot is required to load this software correctly\nWARNING:     Use the 'request system reboot' command\nWARNING:         when software installation is complete\nSaving state for rollback ...\n","yaml",[66,321,322,330,335,347,352,361,366,371,376,381,387,403,418,432,446,460,466,472,478,484,500,514,528,542,548,554,560,571,577,598,606,625,632,651,658,677,684,703,710,729,736,747,753,767,781,795,809,823,829,835,841,846,851,857,868,878,888],{"__ignoreMap":64},[69,323,324,327],{"class":71,"line":72},[69,325,326],{"class":79},"root@junsrx> request system sofware add \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz validate",[69,328,329],{"class":188},"                      \n",[69,331,332],{"class":71,"line":83},[69,333,334],{"class":79},"Formatting alternate root (\u002Fdev\u002Fda0s1a)...\n",[69,336,337,341,344],{"class":71,"line":167},[69,338,340],{"class":339},"swJcz","\u002Fdev\u002Fda0s1a",[69,342,343],{"class":105},":",[69,345,346],{"class":79}," 619.6MB (1268876 sectors) block size 16384, fragment size 2048\n",[69,348,349],{"class":71,"line":176},[69,350,351],{"class":79},"        using 4 cylinder groups of 154.91MB, 9914 blks, 19840 inodes.\n",[69,353,354,357],{"class":71,"line":244},[69,355,356],{"class":79},"super-block backups (for fsck -b",[69,358,360],{"class":359},"sHwdD"," #) at:\n",[69,362,363],{"class":71,"line":253},[69,364,365],{"class":79}," 32, 317280, 634528, 951776\n",[69,367,368],{"class":71,"line":262},[69,369,370],{"class":79},"Extracting \u002Ftmp\u002Fjunos-srxsme-12.3X48-D45.6-domestic.tgz ...\n",[69,372,373],{"class":71,"line":271},[69,374,375],{"class":79},"saving package file in \u002Fvar\u002Fsw\u002Fpkg ...\n",[69,377,378],{"class":71,"line":280},[69,379,380],{"class":79},"Checking compatibility with configuration\n",[69,382,384],{"class":71,"line":383},10,[69,385,386],{"class":79},"Initializing...\n",[69,388,390,393,395,398,400],{"class":71,"line":389},11,[69,391,392],{"class":339},"rm",[69,394,343],{"class":105},[69,396,397],{"class":339}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf",[69,399,343],{"class":105},[69,401,402],{"class":79}," Operation not permitted\n",[69,404,406,408,410,413,415],{"class":71,"line":405},12,[69,407,392],{"class":339},[69,409,343],{"class":105},[69,411,412],{"class":339}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc",[69,414,343],{"class":105},[69,416,417],{"class":79}," Directory not empty\n",[69,419,421,423,425,428,430],{"class":71,"line":420},13,[69,422,392],{"class":339},[69,424,343],{"class":105},[69,426,427],{"class":339}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar",[69,429,343],{"class":105},[69,431,417],{"class":79},[69,433,435,437,439,442,444],{"class":71,"line":434},14,[69,436,392],{"class":339},[69,438,343],{"class":105},[69,440,441],{"class":339}," \u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs",[69,443,343],{"class":105},[69,445,417],{"class":79},[69,447,449,451,453,456,458],{"class":71,"line":448},15,[69,450,392],{"class":339},[69,452,343],{"class":105},[69,454,455],{"class":339}," \u002Fvar\u002Fvalidate\u002Fchroot",[69,457,343],{"class":105},[69,459,417],{"class":79},[69,461,463],{"class":71,"line":462},16,[69,464,465],{"class":79},"Verified manifest signed by PackageProductionEc_2016 method ECDSA\n",[69,467,469],{"class":71,"line":468},17,[69,470,471],{"class":79},"Verified junos-12.1X46-D50.4-domestic signed by PackageProductionEc_2016 method ECDSA\n",[69,473,475],{"class":71,"line":474},18,[69,476,477],{"class":79},"Using junos-12.3X48-D45.6-domestic from \u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic\n",[69,479,481],{"class":71,"line":480},19,[69,482,483],{"class":79},"Copying package ...\n",[69,485,487,490,492,495,497],{"class":71,"line":486},20,[69,488,489],{"class":339},"veriexec",[69,491,343],{"class":105},[69,493,494],{"class":339}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibslax.so.3",[69,496,343],{"class":105},[69,498,499],{"class":79}," No such file or directory\n",[69,501,503,505,507,510,512],{"class":71,"line":502},21,[69,504,489],{"class":339},[69,506,343],{"class":105},[69,508,509],{"class":339}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_bit.so.3",[69,511,343],{"class":105},[69,513,499],{"class":79},[69,515,517,519,521,524,526],{"class":71,"line":516},22,[69,518,489],{"class":339},[69,520,343],{"class":105},[69,522,523],{"class":339}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_curl.so.3",[69,525,343],{"class":105},[69,527,499],{"class":79},[69,529,531,533,535,538,540],{"class":71,"line":530},23,[69,532,489],{"class":339},[69,534,343],{"class":105},[69,536,537],{"class":339}," cannot update veriexec for \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fjunos\u002Fusr\u002Flib\u002Flibext_xutil.so.3",[69,539,343],{"class":105},[69,541,499],{"class":79},[69,543,545],{"class":71,"line":544},24,[69,546,547],{"class":79},"Verified manifest signed by PackageProductionEc_2017 method ECDSA\n",[69,549,551],{"class":71,"line":550},25,[69,552,553],{"class":79},"Hardware Database regeneration succeeded\n",[69,555,557],{"class":71,"line":556},26,[69,558,559],{"class":79},"Validating against \u002Fconfig\u002Fjuniper.conf.gz\n",[69,561,563,566,568],{"class":71,"line":562},27,[69,564,565],{"class":339},"Usage",[69,567,343],{"class":105},[69,569,570],{"class":79}," license-check -f \"\u003Cfeatures>\" -m -p -q -M -u -U -V\n",[69,572,574],{"class":71,"line":573},28,[69,575,576],{"class":79},"  -V verify if release based licenses are present\n",[69,578,580,583,585,588,590,593,595],{"class":71,"line":579},29,[69,581,582],{"class":339},"Connectivity fault management process",[69,584,343],{"class":105},[69,586,587],{"class":339}," rtslib",[69,589,343],{"class":105},[69,591,592],{"class":339}," ERROR kernel does not support all messages",[69,594,343],{"class":105},[69,596,597],{"class":79}," expected 103 got 102,a reboot or software upgrade may be required\n",[69,599,601,603],{"class":71,"line":600},30,[69,602,582],{"class":339},[69,604,605],{"class":105},":\n",[69,607,609,611,613,615,617,620,622],{"class":71,"line":608},31,[69,610,582],{"class":339},[69,612,343],{"class":105},[69,614,587],{"class":339},[69,616,343],{"class":105},[69,618,619],{"class":339}," WARNING version mismatch for msg bulkstats",[69,621,343],{"class":105},[69,623,624],{"class":79}," expected 0 got 98,a reboot or software upgrade may be required\n",[69,626,628,630],{"class":71,"line":627},32,[69,629,582],{"class":339},[69,631,605],{"class":105},[69,633,635,637,639,641,643,646,648],{"class":71,"line":634},33,[69,636,582],{"class":339},[69,638,343],{"class":105},[69,640,587],{"class":339},[69,642,343],{"class":105},[69,644,645],{"class":339}," WARNING version mismatch for msg ddos",[69,647,343],{"class":105},[69,649,650],{"class":79}," expected 99 got 98,a reboot or software upgrade may be required\n",[69,652,654,656],{"class":71,"line":653},34,[69,655,582],{"class":339},[69,657,605],{"class":105},[69,659,661,663,665,667,669,672,674],{"class":71,"line":660},35,[69,662,582],{"class":339},[69,664,343],{"class":105},[69,666,587],{"class":339},[69,668,343],{"class":105},[69,670,671],{"class":339}," WARNING version mismatch for msg notify msg",[69,673,343],{"class":105},[69,675,676],{"class":79}," expected 98 got 0,a reboot or software upgrade may be required\n",[69,678,680,682],{"class":71,"line":679},36,[69,681,582],{"class":339},[69,683,605],{"class":105},[69,685,687,689,691,693,695,698,700],{"class":71,"line":686},37,[69,688,582],{"class":339},[69,690,343],{"class":105},[69,692,587],{"class":339},[69,694,343],{"class":105},[69,696,697],{"class":339}," WARNING version mismatch for msg kuack messages",[69,699,343],{"class":105},[69,701,702],{"class":79}," expected 99 got 0,a reboot or software upgrade may be required\n",[69,704,706,708],{"class":71,"line":705},38,[69,707,582],{"class":339},[69,709,605],{"class":105},[69,711,713,715,717,719,721,724,726],{"class":71,"line":712},39,[69,714,582],{"class":339},[69,716,343],{"class":105},[69,718,587],{"class":339},[69,720,343],{"class":105},[69,722,723],{"class":339}," WARNING version mismatch for msg marker ifstate",[69,725,343],{"class":105},[69,727,728],{"class":79}," expected 104 got 0,a reboot or software upgrade may be required\n",[69,730,732,734],{"class":71,"line":731},40,[69,733,582],{"class":339},[69,735,605],{"class":105},[69,737,739,742,744],{"class":71,"line":738},41,[69,740,741],{"class":339},"mgd",[69,743,343],{"class":105},[69,745,746],{"class":79}," commit complete\n",[69,748,750],{"class":71,"line":749},42,[69,751,752],{"class":79},"Validation succeeded\n",[69,754,756,758,760,763,765],{"class":71,"line":755},43,[69,757,392],{"class":339},[69,759,343],{"class":105},[69,761,762],{"class":339}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc\u002Fpam.conf",[69,764,343],{"class":105},[69,766,402],{"class":79},[69,768,770,772,774,777,779],{"class":71,"line":769},44,[69,771,392],{"class":339},[69,773,343],{"class":105},[69,775,776],{"class":339}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar\u002Fetc",[69,778,343],{"class":105},[69,780,417],{"class":79},[69,782,784,786,788,791,793],{"class":71,"line":783},45,[69,785,392],{"class":339},[69,787,343],{"class":105},[69,789,790],{"class":339}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs\u002Fvar",[69,792,343],{"class":105},[69,794,417],{"class":79},[69,796,798,800,802,805,807],{"class":71,"line":797},46,[69,799,392],{"class":339},[69,801,343],{"class":105},[69,803,804],{"class":339}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot\u002Fmfs",[69,806,343],{"class":105},[69,808,417],{"class":79},[69,810,812,814,816,819,821],{"class":71,"line":811},47,[69,813,392],{"class":339},[69,815,343],{"class":105},[69,817,818],{"class":339}," \u002Fcf\u002Fvar\u002Fvalidate\u002Fchroot",[69,820,343],{"class":105},[69,822,417],{"class":79},[69,824,826],{"class":71,"line":825},48,[69,827,828],{"class":79},"Installing package '\u002Faltroot\u002Fcf\u002Fpackages\u002Finstall-tmp\u002Fjunos-12.3X48-D45.6-domestic' ...\n",[69,830,832],{"class":71,"line":831},49,[69,833,834],{"class":79},"Verified junos-boot-srxsme-12.3X48-D45.6.tgz signed by PackageProductionEc_2017 method ECDSA\n",[69,836,838],{"class":71,"line":837},50,[69,839,840],{"class":79},"Verified junos-srxsme-12.3X48-D45.6-domestic signed by PackageProductionEc_2017 method ECDSA\n",[69,842,844],{"class":71,"line":843},51,[69,845,834],{"class":79},[69,847,849],{"class":71,"line":848},52,[69,850,840],{"class":79},[69,852,854],{"class":71,"line":853},53,[69,855,856],{"class":79},"JUNOS 12.3X48-D45.6 will become active at next reboot\n",[69,858,860,863,865],{"class":71,"line":859},54,[69,861,862],{"class":339},"WARNING",[69,864,343],{"class":105},[69,866,867],{"class":79}," A reboot is required to load this software correctly\n",[69,869,871,873,875],{"class":71,"line":870},55,[69,872,862],{"class":339},[69,874,343],{"class":105},[69,876,877],{"class":79},"     Use the 'request system reboot' command\n",[69,879,881,883,885],{"class":71,"line":880},56,[69,882,862],{"class":339},[69,884,343],{"class":105},[69,886,887],{"class":79},"         when software installation is complete\n",[69,889,891],{"class":71,"line":890},57,[69,892,893],{"class":79},"Saving state for rollback ...\n",[15,895,896],{},"You're asked to reboot the device in order to load the new firmware version:",[59,898,900],{"className":61,"code":899,"language":63,"meta":64,"style":64},"root@junsrx> request system reboot\nReboot the system ? [yes,no] (no) yes\n\nShutdown NOW!\nroot@junsrx> *** FINAL System shutdown message from root@junsrx *** System going down IMMEDIATELY\n",[66,901,902,917,939,945,953],{"__ignoreMap":64},[69,903,904,906,908,911,914],{"class":71,"line":72},[69,905,206],{"class":75},[69,907,209],{"class":188},[69,909,910],{"class":79},"request",[69,912,913],{"class":79}," system",[69,915,916],{"class":79}," reboot\n",[69,918,919,922,925,927,930,933,936],{"class":71,"line":83},[69,920,921],{"class":75},"Reboot",[69,923,924],{"class":79}," the",[69,926,913],{"class":79},[69,928,929],{"class":79}," ?",[69,931,932],{"class":188}," [yes,no] (",[69,934,935],{"class":75},"no",[69,937,938],{"class":188},") yes\n",[69,940,941],{"class":71,"line":167},[69,942,944],{"emptyLinePlaceholder":943},true,"\n",[69,946,947,950],{"class":71,"line":176},[69,948,949],{"class":75},"Shutdown",[69,951,952],{"class":79}," NOW!\n",[69,954,955,957,959,962,965,968,971,974,977,980,983,985,988,991],{"class":71,"line":244},[69,956,206],{"class":75},[69,958,209],{"class":188},[69,960,961],{"class":188},"***",[69,963,964],{"class":79}," FINAL",[69,966,967],{"class":79}," System",[69,969,970],{"class":79}," shutdown",[69,972,973],{"class":79}," message",[69,975,976],{"class":79}," from",[69,978,979],{"class":79}," root@junsrx",[69,981,982],{"class":188}," ***",[69,984,967],{"class":79},[69,986,987],{"class":79}," going",[69,989,990],{"class":79}," down",[69,992,993],{"class":79}," IMMEDIATELY\n",[15,995,996],{},"Once the device reboots, a message appears before we log in:",[59,998,1000],{"className":61,"code":999,"language":63,"meta":64,"style":64},"WARNING: JUNOS versions running on dual partitions are not same\n** \u002Fdev\u002Fda0s2a\nFILE SYSTEM CLEAN; SKIPPING CHECKS\nclean, 240844 free (44 frags, 30100 blocks, 0.0% fragmentation)\n",[66,1001,1002,1034,1042,1062],{"__ignoreMap":64},[69,1003,1004,1007,1010,1013,1016,1019,1022,1025,1028,1031],{"class":71,"line":72},[69,1005,1006],{"class":75},"WARNING:",[69,1008,1009],{"class":79}," JUNOS",[69,1011,1012],{"class":79}," versions",[69,1014,1015],{"class":79}," running",[69,1017,1018],{"class":79}," on",[69,1020,1021],{"class":79}," dual",[69,1023,1024],{"class":79}," partitions",[69,1026,1027],{"class":79}," are",[69,1029,1030],{"class":79}," not",[69,1032,1033],{"class":79}," same\n",[69,1035,1036,1039],{"class":71,"line":83},[69,1037,1038],{"class":105},"**",[69,1040,1041],{"class":188}," \u002Fdev\u002Fda0s2a\n",[69,1043,1044,1047,1050,1053,1056,1059],{"class":71,"line":167},[69,1045,1046],{"class":75},"FILE",[69,1048,1049],{"class":79}," SYSTEM",[69,1051,1052],{"class":79}," CLEAN",[69,1054,1055],{"class":105},";",[69,1057,1058],{"class":75}," SKIPPING",[69,1060,1061],{"class":79}," CHECKS\n",[69,1063,1064,1067,1070,1073,1076,1079,1082,1085,1088,1091],{"class":71,"line":176},[69,1065,1066],{"class":75},"clean,",[69,1068,1069],{"class":89}," 240844",[69,1071,1072],{"class":79}," free",[69,1074,1075],{"class":188}," (44 ",[69,1077,1078],{"class":79},"frags,",[69,1080,1081],{"class":89}," 30100",[69,1083,1084],{"class":79}," blocks,",[69,1086,1087],{"class":79}," 0.0%",[69,1089,1090],{"class":79}," fragmentation",[69,1092,1093],{"class":188},")\n",[15,1095,1096,1097,1100,1101,1104,1105,1107],{},"Junos uses two partitions: ",[26,1098,1099],{},"da0s1a"," and ",[26,1102,1103],{},"da0s2a",", which still contain our old firmware.",[141,1106],{},"\nTo fix the problem, we'll copy our firmware from partition da0s1a to da0s2a like this:",[59,1109,1114],{"className":1110,"code":1112,"language":1113},[1111],"language-text","root@junsrx> request system snapshot slice alternate\nFormatting alternate root (\u002Fdev\u002Fda0s2a)...\nCopying '\u002Fdev\u002Fda0s1a' to '\u002Fdev\u002Fda0s2a' .. (this may take a few minutes)\nThe following filesystems were archived: \u002F\n","text",[66,1115,1112],{"__ignoreMap":64},[15,1117,1118],{},"To check the update fully completed:",[59,1120,1122],{"className":61,"code":1121,"language":63,"meta":64,"style":64},"root@junsrx> show system snapshot media internal slice alternate\nInformation for snapshot on       internal (\u002Fdev\u002Fda0s1a) (primary)\nCreation date: May 17 19:12:57 2017\nJUNOS version on snapshot:\n  junos  : 12.3X48-D45.6-domestic\nInformation for snapshot on       internal (\u002Fdev\u002Fda0s2a) (backup)\nCreation date: May 17 19:24:28 2017\nJUNOS version on snapshot:\n  junos  : 12.3X48-D45.6-domestic\n",[66,1123,1124,1149,1172,1192,1204,1215,1235,1250,1260],{"__ignoreMap":64},[69,1125,1126,1128,1130,1132,1134,1137,1140,1143,1146],{"class":71,"line":72},[69,1127,206],{"class":75},[69,1129,209],{"class":188},[69,1131,153],{"class":79},[69,1133,913],{"class":79},[69,1135,1136],{"class":79}," snapshot",[69,1138,1139],{"class":79}," media",[69,1141,1142],{"class":79}," internal",[69,1144,1145],{"class":79}," slice",[69,1147,1148],{"class":79}," alternate\n",[69,1150,1151,1154,1157,1159,1161,1164,1167,1170],{"class":71,"line":83},[69,1152,1153],{"class":75},"Information",[69,1155,1156],{"class":79}," for",[69,1158,1136],{"class":79},[69,1160,1018],{"class":79},[69,1162,1163],{"class":79},"       internal",[69,1165,1166],{"class":188}," (\u002Fdev\u002Fda0s1a) (",[69,1168,1169],{"class":75},"primary",[69,1171,1093],{"class":188},[69,1173,1174,1177,1180,1183,1186,1189],{"class":71,"line":167},[69,1175,1176],{"class":75},"Creation",[69,1178,1179],{"class":79}," date:",[69,1181,1182],{"class":79}," May",[69,1184,1185],{"class":89}," 17",[69,1187,1188],{"class":79}," 19:12:57",[69,1190,1191],{"class":89}," 2017\n",[69,1193,1194,1196,1199,1201],{"class":71,"line":176},[69,1195,179],{"class":75},[69,1197,1198],{"class":79}," version",[69,1200,1018],{"class":79},[69,1202,1203],{"class":79}," snapshot:\n",[69,1205,1206,1209,1212],{"class":71,"line":244},[69,1207,1208],{"class":75},"  junos",[69,1210,1211],{"class":79},"  :",[69,1213,1214],{"class":79}," 12.3X48-D45.6-domestic\n",[69,1216,1217,1219,1221,1223,1225,1227,1230,1233],{"class":71,"line":253},[69,1218,1153],{"class":75},[69,1220,1156],{"class":79},[69,1222,1136],{"class":79},[69,1224,1018],{"class":79},[69,1226,1163],{"class":79},[69,1228,1229],{"class":188}," (\u002Fdev\u002Fda0s2a) (",[69,1231,1232],{"class":75},"backup",[69,1234,1093],{"class":188},[69,1236,1237,1239,1241,1243,1245,1248],{"class":71,"line":262},[69,1238,1176],{"class":75},[69,1240,1179],{"class":79},[69,1242,1182],{"class":79},[69,1244,1185],{"class":89},[69,1246,1247],{"class":79}," 19:24:28",[69,1249,1191],{"class":89},[69,1251,1252,1254,1256,1258],{"class":71,"line":271},[69,1253,179],{"class":75},[69,1255,1198],{"class":79},[69,1257,1018],{"class":79},[69,1259,1203],{"class":79},[69,1261,1262,1264,1266],{"class":71,"line":280},[69,1263,1208],{"class":75},[69,1265,1211],{"class":79},[69,1267,1214],{"class":79},[15,1269,1270],{},"Finally, a reboot is needed for the message to disappear and for our router to become operational.",[10,1272,1274],{"id":1273},"conclusion","Conclusion",[1276,1277,1278],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":64,"searchDepth":83,"depth":83,"links":1280},[1281,1282,1285,1286],{"id":12,"depth":83,"text":13},{"id":20,"depth":83,"text":21,"children":1283},[1284],{"id":49,"depth":167,"text":50},{"id":132,"depth":83,"text":133},{"id":1273,"depth":83,"text":1274},null,"\u002Fimages\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos\u002F1b4814003c.jpg","2017-05-17","Discover how to update a Juniper SRX router. Update from 12.1X46-D50.4 to 12.3X48-D45.6 in just a few minutes.","md",{},"\u002Fen\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos",[1295],"certificat-junos-associe-jncia-junos",{"title":5,"description":1290},"mise-jour-routeur-srx-100-sous-junos","en\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos","nRMMcxRIT_z6APOPD5JTKmbyKG8_k98wGPbscwMXNxI",[1301,1309,1317,1324,1332,1340,1347,1354],{"title":1302,"path":1303,"stem":1304,"date":1305,"cover":1306,"categories":1307,"children":-1},"Installing and Configuring Zextras Suite","\u002Fen\u002Fblog\u002Finstallation-configuration-zextras-suite","en\u002Fblog\u002Finstallation-configuration-zextras-suite","2017-10-07","\u002Fimages\u002Fblog\u002Finstallation-configuration-zextras-suite\u002F3cc0db9e57.png",[1308],"Linux",{"title":1310,"path":1311,"stem":1312,"date":1313,"cover":1314,"categories":1315,"children":-1},"A Night at the Oasis Bellecombe Eco-Site","\u002Fen\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe","en\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe","2017-09-09","\u002Fimages\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe\u002Ff6ac468e74.jpg",[1316],"Évènement",{"title":1318,"path":1319,"stem":1320,"date":1321,"cover":1322,"categories":1323,"children":-1},"Backing Up My KVM\u002FQEMU Machines with Veeam for Linux","\u002Fen\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux","en\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux","2017-07-09","\u002Fimages\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux\u002Fdb83b58b53.png",[1308],{"title":1325,"path":1326,"stem":1327,"date":1328,"cover":1329,"categories":1330,"children":-1},"ESET Remote Administrator: getting started with the web console","\u002Fen\u002Fblog\u002Feset-remote-administrator-prise-main-web-console","en\u002Fblog\u002Feset-remote-administrator-prise-main-web-console","2017-05-30","\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F15dab17188.jpg",[1331],"Sécurité",{"title":1333,"path":1334,"stem":1335,"date":1336,"cover":1337,"categories":1338,"children":-1},"ESET Remote Administrator: Installation on Windows","\u002Fen\u002Fblog\u002Feset-remote-administrator-installation-sous-windows","en\u002Fblog\u002Feset-remote-administrator-installation-sous-windows","2017-04-30","\u002Fimages\u002Fblog\u002Feset-remote-administrator-installation-sous-windows\u002F15dab17188.jpg",[1339],"Microsoft",{"title":1341,"path":1342,"stem":1343,"date":1344,"cover":1345,"categories":1346,"children":-1},"Hack In Paris and Nuit du Hack, June 19-25, 2017","\u002Fen\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017","en\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017","2017-04-25","\u002Fimages\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017\u002F4cd713ef6f.png",[1316],{"title":1348,"path":1349,"stem":1350,"date":1351,"cover":1352,"categories":1353,"children":-1},"Installing and Configuring OwnCloud","\u002Fen\u002Fblog\u002Finstallation-configuration-owncloud","en\u002Fblog\u002Finstallation-configuration-owncloud","2017-03-09","\u002Fimages\u002Fblog\u002Finstallation-configuration-owncloud\u002F5625a922b3.jpg",[1308],{"title":1355,"path":1356,"stem":1357,"date":1358,"cover":1359,"categories":1360,"children":-1},"Installing and Configuring Icinga2 and Icinga2web","\u002Fen\u002Fblog\u002Finstallation-configuration-icinga2-icinga2web","en\u002Fblog\u002Finstallation-configuration-icinga2-icinga2web","2017-03-05","\u002Fimages\u002Fblog\u002Finstallation-configuration-icinga2-icinga2web\u002F443c55fb6e.png",[1308],[1362],{"id":1363,"title":1364,"body":1365,"categories":1424,"cover":1427,"cover_contain":943,"credly_badge_id":1428,"date":1429,"description":1430,"extension":1291,"meta":1431,"navigation":943,"path":1432,"related_certifications":1287,"seo":1433,"slug":1295,"stem":1434,"__hash__":1435},"blog\u002Fen\u002Fblog\u002Fcertificat-junos-associe-jncia-junos.md","Junos Associate (JNCIA-Junos)",{"type":7,"value":1366,"toc":1420},[1367,1369,1372,1375,1412,1415,1417],[10,1368,13],{"id":12},[15,1370,1371],{},"To confidently work on Juniper equipment for clients, I completed this Arrow course and obtained the JNCIA-Junos certification.",[15,1373,1374],{},"The \"Junos Associate (JNCIA-Junos)\" training path is designed for IT professionals in charge of computer networks.\nThe course catalog covers the following modules:",[52,1376,1377,1382,1387,1392,1397,1402,1407],{},[55,1378,1379],{},[26,1380,1381],{},"Networking fundamentals",[55,1383,1384],{},[26,1385,1386],{},"Junos OS fundamentals",[55,1388,1389],{},[26,1390,1391],{},"User interfaces",[55,1393,1394],{},[26,1395,1396],{},"Configuration basics",[55,1398,1399],{},[26,1400,1401],{},"Monitoring and maintaining operations",[55,1403,1404],{},[26,1405,1406],{},"Routing fundamentals",[55,1408,1409],{},[26,1410,1411],{},"Routing policy and firewall filters",[15,1413,1414],{},"The training takes about 3 days.\nYou should then allow around 1h30 for the certification exam itself: Junos Associate (JNCIA-Junos).",[10,1416,1274],{"id":1273},[15,1418,1419],{},"This Arrow course covers networking fundamentals and the Junos OS, from basic configuration to routing and firewall filters. It validates a solid understanding of Juniper network equipment, useful for any professional in charge of network infrastructure administration. A certification that complements skills already acquired on other environments.",{"title":64,"searchDepth":83,"depth":83,"links":1421},[1422,1423],{"id":12,"depth":83,"text":13},{"id":1273,"depth":83,"text":1274},[1425,1426],"Certifications","Réseau","\u002Fimages\u002Fblog\u002Fcertificat-junos-associe-jncia-junos\u002F773018337d.png","907dbe59-515c-4d6b-9ce1-e40082c63c2e","2023-01-17","Junos Associate (JNCIA-Junos): Arrow course, completed as part of my professional watch in cybersecurity and IT.",{},"\u002Fen\u002Fblog\u002Fcertificat-junos-associe-jncia-junos",{"title":1364,"description":1430},"en\u002Fblog\u002Fcertificat-junos-associe-jncia-junos","xYQ66vuN9RwTPB6jnNJm-LxGXEEPDQ3Buj_X9Dx3_pg",1786644886270]