Aug 17, 2012

Juniper SSG5 利用 USB 昇級程序說明

在Juniper SSG5的背板有一個USB插槽,可以讓你在沒有網路連線能力下直接昇級,以下是詳細的過程說明:


1. 先在你的電腦上把取得的SSG firmware解壓縮,因為從網站上下載的通常是壓縮檔(.zip),你必須先解壓縮成原始firmware檔案,通常沒有副檔名。
EX: 我從網站上下載的檔案名稱是 "ssg5ssg20.6.3.0r10.0.zip",解壓縮之後的檔名是 "ssg5ssg20.6.3.0r10.0"
2. 然後直接把它複製到USB隨身碟中,再插到SSG5背板的USB插槽中。在SSG console畫面中會看到相關的提示如下:


ssg5-serial-> 
Unigen Corporation PQS1000B1, rev 2.00/11.00, addr 2, SCSI over Bulk-Only

Mount usb device. Please wait...
usb device (usb) ready.

ssg5-serial-> 


3. 檢查一下原有SSG的版本號碼:


ssg5-serial-> get system
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r9.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Fri Sep 9 04:22:38 PDT 2011
Base Mac: 88e0.f302.5ec0
File Name: screenos_image, Checksum: cd7dfcdf
, Total Memory: 256MB

Date 01/15/2002 03:02:54, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 86 hours 5 minutes 41 seconds Since 11Jan2002:12:57:13
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34

System in NAT/route mode.
ssg5-serial-> get syste
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r9.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Fri Sep 9 04:22:38 PDT 2011
Base Mac: 88e0.f302.5ec0
File Name: screenos_image, Checksum: cd7dfcdf
, Total Memory: 256MB

Date 01/15/2002 03:02:54, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 86 hours 5 minutes 41 seconds Since 11Jan2002:12:57:13
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34

System in NAT/route mode.


4. 檢查一下SSG上的Flash及USB的檔案清單:


ssg5-serial-> get file 
    flash:/crashdump.dmp                32768
    flash:/burnin_log3                  20480
    flash:/burnin_log2                  20480
    flash:/burnin_log1                  20480
    flash:/burnin_log0                  20480
    flash:/pkidatabase.digest              20
    flash:/prngseed.bin                    32
    flash:/envar.rec                       94
    flash:/ns_sys_config                 1541
    flash:/ns_sys_cfg.sig                  20
    flash:/dhcpservl.txt                   68
    flash:/$lkg$.cfg                     1441

USB flash device :
    usb:/ssg5ssg20.6.3.0r10.0        13327280

5. 開始進行昇級動作:

ssg5-serial-> save software from usb ssg5ssg20.6.3.0r10.0 to flash
It will replace current image file with usb image ssg5ssg20.6.3.0r10.0.
Do you want to continue... y/[n] y
Load image from usb to flash: ssg5ssg20.6.3.0r10.0.

Read .........................................
Save to flash. It may take a few minutes ...
platform = 25, cpu = 12, version = 18
 update new flash image (029b29e0,13327280)
platform = 25, cpu = 12, version = 18
offset = 20, address = 5800000, size = 13327201
date = 1d84, sw_version = 31808000, cksum = 2deb1e58
Image authenticated!
Program flash (13327280 bytes) ...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done



6. 昇級完成之後,將USB安全移除:

ssg5-serial-> exec usb-device stop
The "USB Mass Storage Device"can now be safely removed from system

7. 將SSG5重置:

ssg5-serial-> reset
Configuration modified, save? [y]/n 
Save System Configuration  ... 
Done
System reset, are you sure? y/[n] n
ssg5-serial-> 
ssg5-serial-> 
ssg5-serial-> 
ssg5-serial-> 
ssg5-serial-> 
ssg5-serial-> reset
System reset, are you sure? y/[n] y
In reset ...


Juniper Networks SSG5 Boot Loader Version 1.3.2 (Checksum: A1EAB858)
Copyright (c) 1997-2006 Juniper Networks, Inc.

Total physical memory: 256MB
    Test - Pass
    Initialization - Done

Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader

Loading default system image from on-board flash disk...
Done! (size = 13,336,576 bytes)

Image authenticated!

Start loading...
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................
Done.



Juniper Networks, Inc
SSG5/SSG20 System Software
Copyright, 1997-2008

Version 6.3.0r10.0
Cksum:4d5343a4
Load Manufacture Information ... Done

Initialize FBTL 0........ Done
Load NVRAM Information ... (6.3.0)Done
Install module init vectors
IPv6 is enabled
Changed to l3 mode
Initializing IPv6
Install modules (01264800,01fb4000) ... 
PPP IP-POOL initiated, 256 pools

Initializing DI 1.1.0-ns

System config (1555 bytes) loaded

Done.
Load System Configuration .............................................................................modem is not detected
....................................Disabled licensekey auto update
....................Done
system init done..


8. 重新登入SSG,檢查版本號碼是否正確,到此即已大功告成!

login: netscreen
password: 
ssg5-serial-> get system 
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r10.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Sun Dec 4 19:38:35 PST 2011
Base Mac: 88e0.f302.5ec0
File Name: ssg5ssg20.6.3.0r10.0, Checksum: 4d5343a4
, Total Memory: 256MB

Date 01/15/2002 03:34:45, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 0 hours 1 minutes 43 seconds Since 15Jan2002:03:33:02
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34

System in NAT/route mode.
Post a Comment