Comments on: Juniper SRX JUNOS Software Upgrade 10.1R1.8 https://blog.michaelfmcnamara.com/2010/04/juniper-srx-junos-software-upgrade-10-1r1-8/ technology, networking, virtualization and IP telephony Wed, 22 Jun 2011 18:37:03 +0000 hourly 1 https://wordpress.org/?v=6.7.2 By: Tom https://blog.michaelfmcnamara.com/2010/04/juniper-srx-junos-software-upgrade-10-1r1-8/comment-page-1/#comment-4419 Wed, 22 Jun 2011 18:37:03 +0000 http://blog.michaelfmcnamara.com/?p=1333#comment-4419 Got a decent setup at a customer with 10.2 on the HighEnd series.
But another customer seems to find most of junipers bugs in Srx :-)

Currently on 10.4R4 and found some bugs, Suppose R5 should fix those.

So 10.4R5 might be the release to go with :-)

]]> By: Michael McNamara https://blog.michaelfmcnamara.com/2010/04/juniper-srx-junos-software-upgrade-10-1r1-8/comment-page-1/#comment-3417 Mon, 10 Jan 2011 22:47:23 +0000 http://blog.michaelfmcnamara.com/?p=1333#comment-3417 Hi Tom,

I just actually started working with the Juniper SRX again… I upgraded a few units to 10.2R3.10 and was going to document that process and some of the clean-up that I needed to undertake before I could upgrade the units (issue with free disk space).

I have an SRX210 running in my testlab connected to an SRX650 at another location over the Internet and it’s been very stable. I’m currently working on setting up another tunnel to a secondary SRX650 and then configuring OSPF routing for redundancy between the branch and main office sites. I’ve been reading about Juniper’s Multipoint VPN Configuration with Next-Hop Tunnel Binding and I’m wondering if I should be using that. In short I have around 25 branch offices (could probably grow no higher than 50) with two geographically disperse (different ISP even) main office sites for redundancy. I need to configure OSPF so there can be a dynamic recovery in the event that one of the main office sites fails.

I will say that I’m impressed with the performance of the SRX650. I had an issue not too long ago with a set of Check Point IP560 appliances that forced me to take them offline. I was quickly able to configure a rule base on the SRX650 and it was able to take the load as a firewall for approximately 50Mbps of Internet traffic.

The learning curve can be a little steep, especially if you’re like me and don’t have the occasion to work with the equipment (or check it) every day. I essentially get up to speed for a few weeks and then some other project and/or issue pulls me away and then it takes me a little bit to get back up to speed again although I will say that taking notes helps greatly. You could say that’s a compliment to Juniper really… you configure the equipment and it just works non-stop so there’s no need to go messing around with it daily.

I’ll let you know how I make out now that I know someone’s interested.

Cheers!

]]> By: Tom https://blog.michaelfmcnamara.com/2010/04/juniper-srx-junos-software-upgrade-10-1r1-8/comment-page-1/#comment-3416 Mon, 10 Jan 2011 15:52:25 +0000 http://blog.michaelfmcnamara.com/?p=1333#comment-3416 So, any news with your SRX for the last 8 months ? :-)
What version are you on now ?

]]> By: Michael McNamara https://blog.michaelfmcnamara.com/2010/04/juniper-srx-junos-software-upgrade-10-1r1-8/comment-page-1/#comment-1932 Wed, 21 Apr 2010 22:28:51 +0000 http://blog.michaelfmcnamara.com/?p=1333#comment-1932 In reply to will.

Thanks for the tip Will!

It took an incredibly long time to upgrade the SRX650… at one point I thought I might have bricked the security gateway.

Cheers!

]]> By: will https://blog.michaelfmcnamara.com/2010/04/juniper-srx-junos-software-upgrade-10-1r1-8/comment-page-1/#comment-1931 Wed, 21 Apr 2010 15:41:52 +0000 http://blog.michaelfmcnamara.com/?p=1333#comment-1931 in the future to speed up upgrades I highly, highly suggest using the no-validate option when you initiate the upgrade, especially if its a new box with the default config on it. It will speed up the upgrade time significantly.

Will

]]>