Juniper SRX100H Questions

Forums › IT Pro and developers › Juniper SRX100H Questions

networkn

Networkn
32864 posts

Uber Geek
+1 received by user: 15454

ID Verified

Trusted

Lifetime subscriber

#194961 31-Mar-2016 22:59

Hi There!

We unfortunately have a customer with one of these boxes. Most horrible firewall UI I've ever seen!

It's not under maintenance, do Juniper require this to be able to get the latest firmware? I think this box is on 10x4R9.2 and if I am reading correctly, 12.1X46-D45 is the latest for it.

If I upgrade, is it a non destructive upgrade? (Obviously I need to backup config before).

michaelmurfy

meow
13580 posts

Uber Geek
+1 received by user: 10911

Moderator

ID Verified

Trusted

Lifetime subscriber

#1523638 1-Apr-2016 00:11

I used to manage one of these and yes - the interface is terrible if you're using the WebUI as these are really supposed to be managed via the CLI. With Juniper products (running JunOS) the upgrade is non-destructive however you always want to ensure you back up. Personally, I would grab another CF card and do a fresh install and import the configuration so if there was any problems I could simply put the old CF card in to revert quickly.

I've only done a handful of firmware upgrades on these and most were on a brand new CF card with a config import (to play it safe more than anything) however the ones I did directly worked no problems after the reboot.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

networkn

Networkn
32864 posts

Uber Geek
+1 received by user: 15454

ID Verified

Trusted

Lifetime subscriber

#1523641 1-Apr-2016 00:13

michaelmurfy:

I used to manage one of these and yes - the interface is terrible if you're using the WebUI as these are really supposed to be managed via the CLI. With Juniper products (running JunOS) the upgrade is non-destructive however you always want to ensure you back up. Personally, I would grab another CF card and do a fresh install and import the configuration so if there was any problems I could simply put the old CF card in to revert quickly.

I've only done a handful of firmware upgrades on these and most were on a brand new CF card with a config import (to play it safe more than anything) however the ones I did directly worked no problems after the reboot.

Thanks.

Whilst support with Sonicwall is awful, they have class leading UI Design, very easy and straight forward to understand.

It's on my list of items to be rid of as quickly as I can.

michaelmurfy

meow
13580 posts

Uber Geek
+1 received by user: 10911

Moderator

ID Verified

Trusted

Lifetime subscriber

#1523655 1-Apr-2016 01:54

networkn:

michaelmurfy:

I used to manage one of these and yes - the interface is terrible if you're using the WebUI as these are really supposed to be managed via the CLI. With Juniper products (running JunOS) the upgrade is non-destructive however you always want to ensure you back up. Personally, I would grab another CF card and do a fresh install and import the configuration so if there was any problems I could simply put the old CF card in to revert quickly.

I've only done a handful of firmware upgrades on these and most were on a brand new CF card with a config import (to play it safe more than anything) however the ones I did directly worked no problems after the reboot.

Thanks.

Whilst support with Sonicwall is awful, they have class leading UI Design, very easy and straight forward to understand.

It's on my list of items to be rid of as quickly as I can.

I've actually replaced a few Juniper / Sonicwall / Cisco routers with Edgerouters (the higher end models) - they make excellent routers especially with the last update since they now support this badboy:

They're rock solid, do their task well and are futureproofed + can handle a hell of a lot of traffic without bogging down. Plus, cost! Many people with the older SRX routers may not have the money to replace it with something like a Sonicwall or Meraki so this is a viable alternative now.

My home Edgerouter has once gone for 4 months without a reboot, has had a heck of a lot of configuration changes during that time with me generally messing around with it. Honestly, rock solid.

myfullflavour

896 posts

Ultimate Geek
+1 received by user: 382

Trusted

Full Flavour

#1523681 1-Apr-2016 08:03

To further answer your questions:

1) We've got a bunch of these deployed and none of them have J-Web (gui) enabled. They are designed to be managed by those with Junos experience, with Junos being one of the best CLIs in the business.

2) You need a valid support subscription to access the latest firmware available. If you can twist someone's arm and you manage to obtain a copy, you are not prompted to enter a license or go through any other hoops when doing your software upgrade.

networkn

Networkn
32864 posts

Uber Geek
+1 received by user: 15454

ID Verified

Trusted

Lifetime subscriber

#1523727 1-Apr-2016 08:58

Heh anyone feeling generous ? :)