Table of Contents
Advertisement
JUNOS OS 10.4 Release Notes
106
Before you begin the installation, ensure the following prerequisites are met:
Junos OS upgrade image and autoinstall.conf file are copied to the USB device.
Adequate space is available on the SRX Series device to install the software image.
To use a USB flash drive to install the Junos OS image on an SRX Series device:
Insert the USB flash drive into the USB port of the SRX Series device and wait for
1.
the LEDs to blink amber, then steadily light amber, indicating that the SRX Series
device detects the Junos OS image.
If the LEDs do not turn amber, press the Power button or power-cycle the device
and wait for the LEDs to steadily light amber.
Press the Reset Config button on the SRX Series device and wait for the LEDs to
2.
turn green, indicating that the Junos OS upgrade image has successfully installed.
If the USB device is plugged in, the Reset Config button always performs as an
image upgrade button. Any other functionality of this button is overridden until you
remove the USB flash drive.
Remove the USB flash drive. The SRX Series device restarts automatically and
3.
loads the new Junos OS version.
NOTE: If an installation error occurs, the LEDs light red, which might indicate
that the Junos OS image on the USB flash drive is corrupted. An installation
error can also occur if the current configuration on the SRX Series device
is not compatible with the new Junos OS version on the USB. You must
have console access to the SRX Series device to troubleshoot an installation
error.
[Junos OS Administration Guide for Security Devices]
VPNs
IKE and IPsec predefined proposals for dynamic VPN—This feature is supported on
SRX100, SRX210, SRX220, SRX240, and SRX650 devices.
In earlier releases, the administrators had to configure individual Internet Key Exchange
(IKE) and IP Security (IPsec) proposals for all IKE and IPsec policy configurations. This
procedure was tedious and time consuming when the administrators had to configure
many VPN policies because they had to configure custom proposals for all IKE and
IPsec configurations.
Junos OS Release 10.4 supports proposal-set configuration in IKE and IPsec; the
administrator can select basic, compatible, or standard proposal sets for dynamic VPN
clients. Each proposal set consists of two or more predefined proposals. The server
selects one predefined proposal from the set configured and pushes it to the client in
the client configuration. The client uses this proposal in negotiations with the server
to establish the connection.
Copyright © 2011, Juniper Networks, Inc.
Advertisement
Table of Contents
