User manual JUNIPER NETWORKS JUNOS SOFTWARE 10.2 SOFTWARE INSTALLATION AND UPGRADE GUIDE 4-28-2010

[. . . ] JUNOS® Software Software Installation and Upgrade Guide Release 10. 2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www. juniper. net Published: 2010-04-28 This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. Copyright © 1986-1997, Epilogue Technology Corporation. This program and its documentation were developed at private expense, and no part of them is in the public domain. This product includes memory allocation software developed by Mark Moraes, copyright © 1988, 1989, 1993, University of Toronto. [. . . ] For information on the different installation packages available, see "JUNOS Installation Packages" on page 6. Installation Type Overview 25 JUNOS Release 10. 2 Software Installation and Upgrade Guide Category Change Installation The category change installation process is used to move from one category of the JUNOS Software to another on the same router; for example, moving from a JUNOS standard installation on an M Series, MX Series, or T Series router to a JUNOS FIPS installation. When moving from one installation category to another, you need to be aware of the restrictions regarding this change. NOTE: Juniper Networks does not support using the request system software rollback command to restore a different installation category on the router. When installing a different JUNOS Software category on a router, once the installation is complete, you should execute a request system snapshot command to delete the backup installation from the system. Recovery Installation A recovery installation is performed to repair a router with damaged software or a condition that prevents the upgrade, downgrade, or change in installation category of the software. For example, you may need to perform a recovery installation to change a router's software category from JUNOS-FIPS to standard JUNOS. Installation Categories on the M Series, MX Series, T Series, TX Matrix, and TX Matrix Plus Routers The following installation categories are available with the M Series, MX Series, T Series, TX Matrix, and TX Matrix Plus routers: Standard JUNOS Software, domestic--jinstall-<release>-domestic-signed. tgz This software includes high-encryption capabilities for data leaving the router. government export restrictions, this software can only be installed on systems within the United States and Canada. Furthermore, no router can be shipped out of the United States. or Canada without the domestic edition first being overwritten by the export edition. There are no current system-enforced restrictions when you install this software category. Standard JUNOS Software, export--jinstall-<release>-export-signed. tgz This software does not include high-encryption capabilities. It can be installed on any system worldwide. There are no current system-enforced restrictions when you install this software category. JUNOS-FIPS--junos-juniper-<release>-domestic-signed. tgz and junos-juniper-<release>-fips-signed. tgz The JUNOS-FIPS Software base provides customers with the software tools to configure the router for use within a Federal Information Processing Standards (FIPS) environment. Once you have installed this software category onto a router, you cannot install a different software category on the router using the request 26 Installation Categories on the M Series, MX Series, T Series, TX Matrix, and TX Matrix Plus Routers Chapter 3: Installation Overview system software add command. When attempting to install a different JUNOS Software category package on the router, you receive the following warning message: WARNING: Package jinstall-<release>-<edition>-signed is not compatible with this system. WARNING: Please install a supported package (junos-juniper-*. tgz). To return to a standard JUNOS Software category installation, you must perform a system recovery installation of the software. All configuration files, logs, and other data files on the server are overwritten during a recovery installation. For more information about the JUNOS-FIPS Software base, see "FIPS 140-2 Security Compliance" on page 5. NOTE: When you install a JUNOS Software installation package, the previous installation is maintained as a backup installation. You should issue a request system software snapshot command to overwrite the backup files any time you change software categories on a router. This is mandatory if the router is to be shipped outside of the United States or Canada after the Export edition of the JUNOS Software has been installed. There are no current system-enforced restrictions when you install this software category, Installation Categories on the J Series Routers The following installation categories are available with the J Series routers: JUNOS Software, domestic--junos-jsr-<release>-domestic. tgz This software includes high-encryption capabilities for data leaving the router. Government export restrictions, this software can only be installed on systems within the United States and Canada. Furthermore, no router can be shipped out of the U. S. or Canada without first overwriting the domestic edition with the worldwide edition. There are no current system-enforced restrictions when you install this software category. JUNOS, export--junos-jsr-<release>-export. tgz This software does not include high-encryption capabilities. [. . . ] To save the installed license keys to a file or URL, enter the following command: user@host> request system license save filename | url For example, the following command saves the installed license keys to a file named license. config: user@host> request system license save ftp://user@host/license. config 3. Go on to "Verifying JUNOS Licenses" on page 66. Verifying JUNOS Licenses To verify JUNOS license management, perform the following tasks: Displaying Installed Licenses on page 66 Displaying License Usage on page 67 Displaying Installed License Keys on page 68 Displaying Installed Licenses Purpose Verify that the expected licenses are installed and active on the router. 66 Deleting a License Chapter 7: Managing JUNOS Software Licenses Action Sample Output From the CLI, enter the show system license command. user@router> show system license License usage: Licenses Licenses Feature name used installed subscriber-acct 0 1 subscriber-auth 0 1 subscriber-addr 0 1 subscriber-vlan 0 1 subscriber-ip 0 1 scale-subscriber 0 1000 scale-l2tp 0 1000 scale-mobile-ip 0 1000 Licenses needed 0 0 0 0 0 0 0 0 Expiry permanent permanent permanent permanent permanent permanent permanent permanent Licenses installed: License identifier: E000185416 License version: 2 Features: subscriber-acct - Per Subscriber Radius Accounting permanent subscriber-auth - Per Subscriber Radius Authentication permanent subscriber-addr - Address Pool Assignment permanent subscriber-vlan - Dynamic Auto-sensed Vlan permanent subscriber-ip - Dynamic and Static IP permanent Meaning The output shows a list of the license usage and a list of the licenses installed on the router. Verify the following information: Each license is present. Licenses are listed in ascending alphanumeric order by license ID. The state of each license is permanent. NOTE: A state of invalid indicates that the license key is not a valid license key. [. . . ]