Juniper SSG5 利用 USB 昇級程序說明
在Juniper SSG5的背板有一個USB插槽，可以讓你在沒有網路連線能力下直接昇級，以下是詳細的過程說明：
1. 先在你的電腦上把取得的SSG firmware解壓縮，因為從網站上下載的通常是壓縮檔(.zip)，你必須先解壓縮成原始firmware檔案，通常沒有副檔名。
ssg5-serial->
Unigen Corporation PQS1000B1, rev 2.00/11.00, addr 2, SCSI over Bulk-Only
Mount usb device. Please wait...
usb device (usb) ready.
ssg5-serial->
3. 檢查一下原有SSG的版本號碼：
ssg5-serial-> get system
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r9.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Fri Sep 9 04:22:38 PDT 2011
Base Mac: 88e0.f302.5ec0
File Name: screenos_image, Checksum: cd7dfcdf
, Total Memory: 256MB
Date 01/15/2002 03:02:54, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 86 hours 5 minutes 41 seconds Since 11Jan2002:12:57:13
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34
System in NAT/route mode.
4. 檢查一下SSG上的Flash及USB的檔案清單：
ssg5-serial-> get file
flash:/crashdump.dmp 32768
flash:/burnin_log3 20480
flash:/burnin_log2 20480
flash:/burnin_log1 20480
flash:/burnin_log0 20480
flash:/pkidatabase.digest 20
flash:/prngseed.bin 32
flash:/envar.rec 94
flash:/ns_sys_config 1541
flash:/ns_sys_cfg.sig 20
flash:/dhcpservl.txt 68
flash:/$lkg$.cfg 1441
USB flash device :
usb:/ssg5ssg20.6.3.0r10.0 13327280
5. 開始進行昇級動作：
ssg5-serial-> save software from usb ssg5ssg20.6.3.0r10.0 to flash
It will replace current image file with usb image ssg5ssg20.6.3.0r10.0.
Do you want to continue... y/[n] y
Load image from usb to flash: ssg5ssg20.6.3.0r10.0.
Read .........................................
Save to flash. It may take a few minutes ...
platform = 25, cpu = 12, version = 18
update new flash image (029b29e0,13327280)
platform = 25, cpu = 12, version = 18
offset = 20, address = 5800000, size = 13327201
date = 1d84, sw_version = 31808000, cksum = 2deb1e58
Image authenticated!
Program flash (13327280 bytes) ...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done
ssg5-serial-> reset
Configuration modified, save? [y]/n
Save System Configuration ...
Done
System reset, are you sure? y/[n] n
ssg5-serial->
ssg5-serial->
ssg5-serial->
ssg5-serial->
ssg5-serial->
ssg5-serial-> reset
System reset, are you sure? y/[n] y
In reset ...
Juniper Networks SSG5 Boot Loader Version 1.3.2 (Checksum: A1EAB858)
Copyright (c) 1997-2006 Juniper Networks, Inc.
Total physical memory: 256MB
Test - Pass
Initialization - Done
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Loading default system image from on-board flash disk...
Done! (size = 13,336,576 bytes)
Image authenticated!
Start loading...
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................
Done.
Juniper Networks, Inc
SSG5/SSG20 System Software
Copyright, 1997-2008
Version 6.3.0r10.0
Cksum:4d5343a4
Load Manufacture Information ... Done
Initialize FBTL 0........ Done
Load NVRAM Information ... (6.3.0)Done
Install module init vectors
IPv6 is enabled
Changed to l3 mode
Initializing IPv6
Install modules (01264800,01fb4000) ...
PPP IP-POOL initiated, 256 pools
Initializing DI 1.1.0-ns
System config (1555 bytes) loaded
Done.
Load System Configuration .............................................................................modem is not detected
....................................Disabled licensekey auto update
....................Done
system init done..
8. 重新登入SSG，檢查版本號碼是否正確，到此即已大功告成!
login: netscreen
password:
ssg5-serial-> get system
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r10.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Sun Dec 4 19:38:35 PST 2011
Base Mac: 88e0.f302.5ec0
File Name: ssg5ssg20.6.3.0r10.0, Checksum: 4d5343a4
, Total Memory: 256MB
Date 01/15/2002 03:34:45, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 0 hours 1 minutes 43 seconds Since 15Jan2002:03:33:02
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34
System in NAT/route mode.
1. 先在你的電腦上把取得的SSG firmware解壓縮，因為從網站上下載的通常是壓縮檔(.zip)，你必須先解壓縮成原始firmware檔案，通常沒有副檔名。
EX: 我從網站上下載的檔案名稱是 "ssg5ssg20.6.3.0r10.0.zip"，解壓縮之後的檔名是 "ssg5ssg20.6.3.0r10.0"2. 然後直接把它複製到USB隨身碟中，再插到SSG5背板的USB插槽中。在SSG console畫面中會看到相關的提示如下：
ssg5-serial->
Unigen Corporation PQS1000B1, rev 2.00/11.00, addr 2, SCSI over Bulk-Only
Mount usb device. Please wait...
usb device (usb) ready.
ssg5-serial->
3. 檢查一下原有SSG的版本號碼：
ssg5-serial-> get system
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r9.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Fri Sep 9 04:22:38 PDT 2011
Base Mac: 88e0.f302.5ec0
File Name: screenos_image, Checksum: cd7dfcdf
, Total Memory: 256MB
Date 01/15/2002 03:02:54, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 86 hours 5 minutes 41 seconds Since 11Jan2002:12:57:13
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34
System in NAT/route mode.
ssg5-serial-> get syste
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r9.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Fri Sep 9 04:22:38 PDT 2011
Base Mac: 88e0.f302.5ec0
File Name: screenos_image, Checksum: cd7dfcdf
, Total Memory: 256MB
Date 01/15/2002 03:02:54, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 86 hours 5 minutes 41 seconds Since 11Jan2002:12:57:13
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34
System in NAT/route mode.
4. 檢查一下SSG上的Flash及USB的檔案清單：
ssg5-serial-> get file
flash:/crashdump.dmp 32768
flash:/burnin_log3 20480
flash:/burnin_log2 20480
flash:/burnin_log1 20480
flash:/burnin_log0 20480
flash:/pkidatabase.digest 20
flash:/prngseed.bin 32
flash:/envar.rec 94
flash:/ns_sys_config 1541
flash:/ns_sys_cfg.sig 20
flash:/dhcpservl.txt 68
flash:/$lkg$.cfg 1441
USB flash device :
usb:/ssg5ssg20.6.3.0r10.0 13327280
5. 開始進行昇級動作：
ssg5-serial-> save software from usb ssg5ssg20.6.3.0r10.0 to flash
It will replace current image file with usb image ssg5ssg20.6.3.0r10.0.
Do you want to continue... y/[n] y
Load image from usb to flash: ssg5ssg20.6.3.0r10.0.
Read .........................................
Save to flash. It may take a few minutes ...
platform = 25, cpu = 12, version = 18
update new flash image (029b29e0,13327280)
platform = 25, cpu = 12, version = 18
offset = 20, address = 5800000, size = 13327201
date = 1d84, sw_version = 31808000, cksum = 2deb1e58
Image authenticated!
Program flash (13327280 bytes) ...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done
6. 昇級完成之後，將USB安全移除：
ssg5-serial-> exec usb-device stop
The "USB Mass Storage Device"can now be safely removed from system
7. 將SSG5重置:ssg5-serial-> exec usb-device stop
The "USB Mass Storage Device"can now be safely removed from system
ssg5-serial-> reset
Configuration modified, save? [y]/n
Save System Configuration ...
Done
System reset, are you sure? y/[n] n
ssg5-serial->
ssg5-serial->
ssg5-serial->
ssg5-serial->
ssg5-serial->
ssg5-serial-> reset
System reset, are you sure? y/[n] y
In reset ...
Juniper Networks SSG5 Boot Loader Version 1.3.2 (Checksum: A1EAB858)
Copyright (c) 1997-2006 Juniper Networks, Inc.
Total physical memory: 256MB
Test - Pass
Initialization - Done
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Loading default system image from on-board flash disk...
Done! (size = 13,336,576 bytes)
Image authenticated!
Start loading...
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................................................................
.................
Done.
Juniper Networks, Inc
SSG5/SSG20 System Software
Copyright, 1997-2008
Version 6.3.0r10.0
Cksum:4d5343a4
Load Manufacture Information ... Done
Initialize FBTL 0........ Done
Load NVRAM Information ... (6.3.0)Done
Install module init vectors
IPv6 is enabled
Changed to l3 mode
Initializing IPv6
Install modules (01264800,01fb4000) ...
PPP IP-POOL initiated, 256 pools
Initializing DI 1.1.0-ns
System config (1555 bytes) loaded
Done.
Load System Configuration .............................................................................modem is not detected
....................................Disabled licensekey auto update
....................Done
system init done..
8. 重新登入SSG，檢查版本號碼是否正確，到此即已大功告成!
login: netscreen
password:
ssg5-serial-> get system
Product Name: SSG5-Serial
Serial Number: 0162072011007638, Control Number: 00000000
Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Flash Type: Samsung
Software Version: 6.3.0r10.0, Type: Firewall+VPN
Feature: AV-K
BOOT Loader Version: 1.3.2
Compiled by build_master at: Sun Dec 4 19:38:35 PST 2011
Base Mac: 88e0.f302.5ec0
File Name: ssg5ssg20.6.3.0r10.0, Checksum: 4d5343a4
, Total Memory: 256MB
Date 01/15/2002 03:34:45, Daylight Saving Time enabled
The Network Time Protocol is Disabled
Up 0 hours 1 minutes 43 seconds Since 15Jan2002:03:33:02
Total Device Resets: 1, Last Device Reset at: 10/01/2001 04:04:34
System in NAT/route mode.
Comments