User manual JUNIPER NETWORKS JUNOS SOFTWARE 10.2 SOFTWARE INSTALLATION AND UPGRADE GUIDE 4-28-2010

[. . . ] JUNOS® Software Software Installation and Upgrade Guide Release 10. 2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www. juniper. net Published: 2010-04-28 This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. This program and its documentation were developed at private expense, and no part of them is in the public domain. This product includes memory allocation software developed by Mark Moraes, copyright © 1988, 1989, 1993, University of Toronto. This product includes FreeBSD software developed by the University of California, Berkeley, and its contributors. [. . . ] The standard installation is the standard method of upgrading and downgrading the software. Use a category change installation when you are moving from one software category to another; for example, if you are changing the router from using the standard JUNOS Software to the JUNOS-FIPS category. Perform a recovery installation when the software on the router is damaged or otherwise unable to accommodate a software upgrade or downgrade. Standard Installation A standard installation is the typical method used to upgrade or downgrade software on the server. This method uses the installation package that matches the installation package already installed on the system. For example, you might upgrade an M120 router running the JUNOS Software installed using the jinstall* installation package. If you upgrade the router from the 9. 0R2. 10 release to the 9. 1R1. 8 release, you use the jinstall-9. 1R1. 8­domestic-signed. tgz installation package. For information on the different installation packages available, see "JUNOS Installation Packages" on page 6. Installation Type Overview 25 JUNOS Release 10. 2 Software Installation and Upgrade Guide Category Change Installation The category change installation process is used to move from one category of the JUNOS Software to another on the same router; for example, moving from a JUNOS standard installation on an M Series, MX Series, or T Series router to a JUNOS FIPS installation. When moving from one installation category to another, you need to be aware of the restrictions regarding this change. NOTE: Juniper Networks does not support using the request system software rollback command to restore a different installation category on the router. When installing a different JUNOS Software category on a router, once the installation is complete, you should execute a request system snapshot command to delete the backup installation from the system. Recovery Installation A recovery installation is performed to repair a router with damaged software or a condition that prevents the upgrade, downgrade, or change in installation category of the software. For example, you may need to perform a recovery installation to change a router's software category from JUNOS-FIPS to standard JUNOS. Installation Categories on the M Series, MX Series, T Series, TX Matrix, and TX Matrix Plus Routers The following installation categories are available with the M Series, MX Series, T Series, TX Matrix, and TX Matrix Plus routers: Standard JUNOS Software, domestic--jinstall-<release>-domestic-signed. tgz This software includes high-encryption capabilities for data leaving the router. government export restrictions, this software can only be installed on systems within the United States and Canada. or Canada without the domestic edition first being overwritten by the export edition. There are no current system-enforced restrictions when you install this software category. Standard JUNOS Software, export--jinstall-<release>-export-signed. tgz This software does not include high-encryption capabilities. There are no current system-enforced restrictions when you install this software category. JUNOS-FIPS--junos-juniper-<release>-domestic-signed. tgz and junos-juniper-<release>-fips-signed. tgz The JUNOS-FIPS Software base provides customers with the software tools to configure the router for use within a Federal Information Processing Standards (FIPS) environment. Once you have installed this software category onto a router, you cannot install a different software category on the router using the request 26 Installation Categories on the M Series, MX Series, T Series, TX Matrix, and TX Matrix Plus Routers Chapter 3: Installation Overview system software add command. When attempting to install a different JUNOS Software category package on the router, you receive the following warning message: WARNING: Package jinstall-<release>-<edition>-signed is not compatible with this system. WARNING: Please install a supported package (junos-juniper-*. tgz). To return to a standard JUNOS Software category installation, you must perform a system recovery installation of the software. All configuration files, logs, and other data files on the server are overwritten during a recovery installation. For more information about the JUNOS-FIPS Software base, see "FIPS 140-2 Security Compliance" on page 5. NOTE: When you install a JUNOS Software installation package, the previous installation is maintained as a backup installation. You should issue a request system software snapshot command to overwrite the backup files any time you change software categories on a router. This is mandatory if the router is to be shipped outside of the United States or Canada after the Export edition of the JUNOS Software has been installed. There are no current system-enforced restrictions when you install this software category, Installation Categories on the J Series Routers The following installation categories are available with the J Series routers: JUNOS Software, domestic--junos-jsr-<release>-domestic. tgz This software includes high-encryption capabilities for data leaving the router. [. . . ] A license key consists of two parts: License ID--Alphanumeric string that uniquely identifies the license key. License data--Block of binary data that defines and stores all license key objects. For example, in the following typical license key, the string li29183743 is the license ID, and the trailing block of data is the license data: li29183743 4ky27y acasck 82fsj6 jzsn4q ix8i8d adj7kr 8uq38t ix8i8d jzsn4q ix8i8d 4ky27y acasck 82fsj6 ii8i7e adj7kr 8uq38t ks2923 a9382e The license data defines the device ID for which the license is valid and the version of the license. License Key Components 63 JUNOS Release 10. 2 Software Installation and Upgrade Guide 64 License Key Components Chapter 7 Managing JUNOS Software Licenses Adding New Licenses on page 65 Deleting a License on page 66 Saving License Keys on page 66 Verifying JUNOS Licenses on page 66 Adding New Licenses Before adding new licenses, complete the following tasks: Purchase the required licenses. For instructions on establishing basic connectivity, see the Getting Started Guide for your router. To add a new license key to the router with the CLI: 1. Enter one of the following CLI commands: To add a license key from a file or URL, enter the following command, specifying the filename or the URL where the key is located: user@host> request system license add filename | url To add a license key from the terminal, enter the following command: user@host> request system license add terminal 3. When prompted, enter the license key, separating multiple license keys with a blank line. [. . . ]