How to upgrade or downgrade ScreenOS using either the WebUI or CLI

I tried uploading the Juniper 5GT screenOS file name ns5gt.6.2.0r2.0 via the WebUI interface. But it kept failing with the error message “File too big or empty”. I then had to upgrade the screenOS or firmware through the command line interface of CLI.

I downloaded the TFTP server for Windows from Solar Winds, it is free to use. Copy the new firmware to the default path of the TFTP server, which is c:\TFTP-Root.

Follow the instructions to upgrade via CLI below. This is an excerpt from Junipers knowledge base.

How to upgrade or downgrade ScreenOS using either the WebUI or CLI

Synopsis:

Steps to upgrade or downgrade ScreenOS from the WebUI and CLI

Problem:

Basic steps for upgrading or downgrading ScreenOS

Solution:

Below is the basic guideline for the upgrading or downgrading ScreenOS. For a complete guide, including requirements and restrictions, consult the Migration Procedure section in the ScreenOS release notes (for ScreenOS 5.3 and 5.4) or the ScreenOS Migration Guide (for ScreenOS 5.2 and earlier).

Upgrading / Downgrading from the WebUI
( click here for CLI instructions )

Perform the following steps to upgrade the firmware using the WebUI:

Save Configuration file

Caution! Before upgrading or downgrading a security device, save the existing configuration file to avoid losing any data.

Log in to the security device by opening a Web browser and then entering the Management IP address in the Address field. Log in as the root admin or an admin with read-write privileges.

Save the existing configuration:
Go to Configuration > Update > Config File, and then click Save to File
In the File Download dialog box, click Save.
Navigate to the location where you want to save the configuration file (cfg.txt), and then click Save.
Upgrading or downgrading Firmware

Go to Configuration > Update > ScreenOS/Keys and select Firmware Update.

Click Browse to navigate to the location of the firmware “xxxxx.5.0.0r10’
(where xxxx corresponds to the device model) or type the path to its location in the Load File field.

Click Apply.

Click OK to continue.
The security device restarts automatically. The upgrade or downgrade is complete when the device displays the login page in the browser.
Note: This process takes some time. DO NOT click Cancel or the upgrade /downgrade will fail. If you click Cancel and the upgrade fails, power off the device and then power it on again. Restart the upgrade procedure from step 2.

Log in to the security device. You can verify the version of the security device ScreenOS firmware in the Device Information section of the WebUI Home page.
Upgrading to the New ScreenOS Firmware

Go to Configuration > Update > ScreenOS/Keys and select Firmware Update.

Click Browse to navigate to the location of the new ScreenOS firmware or type the path to its location in the Load File field.

Click Apply.
A message box appears with information.

Click OK to continue.
The security device restarts automatically. The upgrade is complete when the device displays the login page in the browser.

Log in to the security device. You can verify the version of the security device ScreenOS firmware in the Device Information section of the WebUI Home page.

Upgrading/Downgrading from the CLI
Perform the following steps to upgrade or downgrade the firmware using the CLI:

Make sure that you have the ScreenOS firmware “xxxx.5.0.0r10” (where xxxx corresponds to the device model).

Run the TFTP server on your computer by double-clicking on the TFTP server application.

Log in to the security device using an application such as Telnet or Secure Shell (SSH) or Hyper Terminal if directly connected through the console port. Log in as the root admin or an admin with read-write privileges.

Save the existing configuration by executing the command:
save config to { flash | slot1 | tftp }…

On the security device, enter the following command:
save soft from tftp ip_addr filename to flash
where:
ip_addr is the IP address of your computer
filename is the name of the ScreenOS firmware.

When the upgrade or downgrade is complete, you must reset the security device.
Execute the reset command and enter y at the prompt to reset the device.

Wait a few minutes, and then log in to the security device again.

Use the get system command to verify the version of the security device ScreenOS firmware.

Upload the configuration file that you saved in step 3 by executing the command:
save config to { flash | slot1 | tftp }…
Note: when downgrading from major release you might have to run exec downgrade command before reset. Please check the Migration Guide for details.

About Andrew Lin

Hi, I have always wanted to creat a blog site but never had the time. I have been working in Information Technology for over 15 years. I specialize mainly in networks and server technologies and dabble a little with the programming aspects. Andrew Lin

View all posts by Andrew Lin →

5 Comments on “How to upgrade or downgrade ScreenOS using either the WebUI or CLI”

  1. Don’t use SolarWinds, that a malicious app. Let me know if you need a better tftp app, like Cisco or 3Com.
    Here’s how to upgrade:
    kb.juniper.net/index?page=content&id=KB13672&pmv=print

    save software from tftp 172.16.10.10 ns5gt.6.2.0r2.0 to flash

Leave a Reply

Your email address will not be published. Required fields are marked *