Juniper 社の Firewall 製品 SRX 。EOL品ですが junosが動きます。
まずは update 用のファイルを USB に入れます。 USB を入れると以下のようなメッセージがでたりします。
umass1: Kingmax USB2.0 FlashDisk, rev 2.00/11.00, addr 4 da1 at umass-sim1 bus 1 target 0 lun 0 da1: <Kingmax USB2.0 FlashDisk 1100> Removable Direct Access SCSI-4 device da1: 40.000MB/s transfers da1: 31000MB (63488000 512 byte sectors: 255H 63S/T 3951C) Warning: number of clusters (1982465) exceeds FAT capacity (1982464)
次にUSBを mount します。デバイス的に da1 となっています。junosのファイルを/var/tmpとかにおいておきます。da1としか見えないのにmountはmsdosfs(fat)でさらにスライス１
root@chi-labo> show version Hostname: chi-labo Model: srx100b JUNOS Software Release [12.1X46-D55.3] root@chi-labo> start shell root@chi-labo% mkdir /var/tmp/mnt root@chi-labo% mount -t msdosfs /dev/da1s1 /var/tmp/mnt/ root@chi-labo% cd /var/tmp/mnt/ root@chi-labo% cp junos-srxsme-12.3X48-D30.7-domestic.tgz ../ root@chi-labo% cd root@chi-labo% umount /dev/da1s1 root@chi-labo% exit exit
Operationalモードに戻って reqest system software add します。
root@chi-labo> request system software add /var/tmp/junos-srxsme-12.1X46-D72.2domestic.tgz NOTICE: Validating configuration against junos-srxsme-12.1X46-D72.2-domestic.tgz. NOTICE: Use the 'no-validate' option to skip this if desired. Formatting alternate root (/dev/da0s1a)... /dev/da0s1a: 296.9MB (607996 sectors) block size 16384, fragment size 2048 using 4 cylinder groups of 74.22MB, 4750 blks, 9600 inodes. super-block backups (for fsck -b #) at: 32, 152032, 304032, 456032 Extracting /var/tmp/junos-srxsme-12.1X46-D72.2-domestic.tgz ... saving package file in /var/sw/pkg ... Checking compatibility with configuration Initializing... Verified manifest signed by PackageProductionEc_2016 method ECDSA Verified junos-12.1X46-D55.3-domestic signed by PackageProductionEc_2016 method ECDSA Using junos-12.1X46-D72.2-domestic from /altroot/cf/packages/install-tmp/junos-12.1X46D72.2-domestic Copying package ... Verified manifest signed by PackageProductionEc_2017 method ECDSA Hardware Database regeneration succeeded Validating against /config/juniper.conf.gz Usage: license-check -f "<features>" -m -p -q -M -u -U -V -V verify if release based licenses are present mgd: commit complete Validation succeeded rm: /cf/var/validate/chroot/mfs/var/etc/pam.conf: Operation not permitted rm: /cf/var/validate/chroot/mfs/var/etc: Directory not empty rm: /cf/var/validate/chroot/mfs/var: Directory not empty rm: /cf/var/validate/chroot/mfs: Directory not empty rm: /cf/var/validate/chroot: Directory not empty Installing package '/altroot/cf/packages/install-tmp/junos-12.1X46-D72.2-domestic' ... Verified junos-boot-srxsme-12.1X46-D72.2.tgz signed by PackageProductionEc_2017 method ECDSA Verified junos-srxsme-12.1X46-D72.2-domestic signed by PackageProductionEc_2017 method ECDSA Verified junos-boot-srxsme-12.1X46-D72.2.tgz signed by PackageProductionEc_2017 method ECDSA Verified junos-srxsme-12.1X46-D72.2-domestic signed by PackageProductionEc_2017 method ECDSA JUNOS 12.1X46-D72.2 will become active at next reboot WARNING: A reboot is required to load this software correctly WARNING: Use the 'request system reboot' command WARNING: when software installation is complete Saving state for rollback ... root@chi-labo> request system reboot Reboot the system ? [yes,no] (no) yes
いきなりmkfsとかするのでびっくりしますが、普通の動作。rebootしてログインしなおし。
root@chi-labo> show version
Hostname: chi-labo
Model: srx100b
JUNOS Software Release [12.1X46-D72.2]
12.1X47以降については、メモリ容量とか足りないので、このsrx100bはX46までしかあがりません。