I tried uploading the Juniper 5GT screenOS file name ns5gt.6.2.0r2.0 via the WebUI interface. But it kept failing with the error message “File too big or empty”. I then had to upgrade the screenOS or firmware through the command line interface of CLI.
I downloaded the TFTP server for Windows from Solar Winds, it is free to use. Copy the new firmware to the default path of the TFTP server, which is c:\TFTP-Root.
Follow the instructions to upgrade via CLI below. This is an excerpt from Junipers knowledge base.
How to upgrade or downgrade ScreenOS using either the WebUI or CLI
Synopsis:
Steps to upgrade or downgrade ScreenOS from the WebUI and CLI
Problem:
Basic steps for upgrading or downgrading ScreenOS
Solution:
Below is the basic guideline for the upgrading or downgrading ScreenOS. For a complete guide, including requirements and restrictions, consult the Migration Procedure section in the ScreenOS release notes (for ScreenOS 5.3 and 5.4) or the ScreenOS Migration Guide (for ScreenOS 5.2 and earlier).
Upgrading / Downgrading from the WebUI
( click here for CLI instructions )
Perform the following steps to upgrade the firmware using the WebUI:
Save Configuration file
Caution! Before upgrading or downgrading a security device, save the existing configuration file to avoid losing any data.
Log in to the security device by opening a Web browser and then entering the Management IP address in the Address field. Log in as the root admin or an admin with read-write privileges.
Save the existing configuration:
Go to Configuration > Update > Config File, and then click Save to File
In the File Download dialog box, click Save.
Navigate to the location where you want to save the configuration file (cfg.txt), and then click Save.
Upgrading or downgrading Firmware
Go to Configuration > Update > ScreenOS/Keys and select Firmware Update.
Click Browse to navigate to the location of the firmware “xxxxx.5.0.0r10’
(where xxxx corresponds to the device model) or type the path to its location in the Load File field.
Click Apply.
Click OK to continue.
The security device restarts automatically. The upgrade or downgrade is complete when the device displays the login page in the browser.
Note: This process takes some time. DO NOT click Cancel or the upgrade /downgrade will fail. If you click Cancel and the upgrade fails, power off the device and then power it on again. Restart the upgrade procedure from step 2.
Log in to the security device. You can verify the version of the security device ScreenOS firmware in the Device Information section of the WebUI Home page.
Upgrading to the New ScreenOS Firmware
Go to Configuration > Update > ScreenOS/Keys and select Firmware Update.
Click Browse to navigate to the location of the new ScreenOS firmware or type the path to its location in the Load File field.
Click Apply.
A message box appears with information.
Click OK to continue.
The security device restarts automatically. The upgrade is complete when the device displays the login page in the browser.
Log in to the security device. You can verify the version of the security device ScreenOS firmware in the Device Information section of the WebUI Home page.
Upgrading/Downgrading from the CLI
Perform the following steps to upgrade or downgrade the firmware using the CLI:
Make sure that you have the ScreenOS firmware “xxxx.5.0.0r10” (where xxxx corresponds to the device model).
Run the TFTP server on your computer by double-clicking on the TFTP server application.
Log in to the security device using an application such as Telnet or Secure Shell (SSH) or Hyper Terminal if directly connected through the console port. Log in as the root admin or an admin with read-write privileges.
Save the existing configuration by executing the command:
save config to { flash | slot1 | tftp }…
On the security device, enter the following command:
save soft from tftp ip_addr filename to flash
where:
ip_addr is the IP address of your computer
filename is the name of the ScreenOS firmware.
When the upgrade or downgrade is complete, you must reset the security device.
Execute the reset command and enter y at the prompt to reset the device.
Wait a few minutes, and then log in to the security device again.
Use the get system command to verify the version of the security device ScreenOS firmware.
Upload the configuration file that you saved in step 3 by executing the command:
save config to { flash | slot1 | tftp }…
Note: when downgrading from major release you might have to run exec downgrade command before reset. Please check the Migration Guide for details.
5 comments for “How to upgrade or downgrade ScreenOS using either the WebUI or CLI”