Upgrade Juniper SSG 5 from the command line CLI

UPGRADE and DOWNGRADE using the CLI

I upgraded my SSG5 from ScreenOS 5.4.0r6 to 6.2.0r4.0

Note:  I did try the Web interface but couldn't get it to work.

To upgrade and downgrade ScreenOS via the CLI, perform the following steps:

You can download firmware updates from the Juniper website. For more information on downloading firmware updates from the website, go to Downloading NetScreen Firmware Updates from the Web.

1. Log in to the security device using an application such as Telnet or Secure Shell (SSH) or Hyper Terminal, if directly connected through the console port. Log in as the root admin or an admin with read-write privileges.
2. Before upgrading or downgrading a security device, save the existing configuration file to avoid losing any data:

save config to tftp <ip_addr> <filename.cfg>
For example:  save config to tftp 1.1.1.1 ssg5_date.cfg

where:
ip_addr is the IP address tftp server
filename.cfg is the name of the Config File.

3. For simplicity, copy the ScreenOS firmware file to the TFTP server root folder.

Important note:  Make sure that that the ScreenOS has been extracted from the ZIP folder.

4. Start the TFTP server, by double-clicking on the TFTP server application.
5. Save the ScreenOS firmware to flash by entering the command:

save soft from tftp [ip_addr] [filename] to flash

where:
* ip_addr is the IP address of your computer
* filename is the name of the ScreenOS firmware.

Following output is seen when the file is downloaded:

ssg5-> save software from tftp 172.16.10.10 SSG5SSG20.5.4.0r10.0 to flash
Load software from TFTP 172.16.10.10 (file: SSG5SSG20.5.4.0r10.0).
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
tftp received octets = 12427198
tftp success!

TFTP Succeeded
Save to flash. It may take a few minutes ...platform = 20, cpu = 1, version = 18
update new flash image (04aa4020,12427198)
platform = 20, cpu = 1, version = 18
offset = 20, address = 8000000, size = 12427120
date = 71e0f038, sw_version = 71e0f03c, cksum = 41d65212
software major version is not same, accept this firmware? y/[n] y <==== Enter Y here
Program flash (12427198 bytes) ...
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++done
Done
ssg5->

6. When the upgrade or downgrade is complete, you must reset the security device.

Execute the reset command and enter y at the prompt to reset the device

ssg5-> reset <<=========Reboot the firewall using 'reset' command
System reset, are you sure? y/[n] y <<===Enter Y here
In reset ...

7. Wait a few minutes, and then log in to the security device again.
8. Use the command 'get system' to verify the version of the security device ScreenOS firmware.
9. Use the command 'get config' to review the configuation. 
10. (Not required) If the existing configuration is incorrect, which can happen on a downgrade, upload the configuration file that you saved in step 3 by executing the command:

save config to flash from tftp <ip_addr> <filename>


Then execute the reset command and enter n at the prompt to save the config:

ssg20-> reset <<=========Reboot the firewall using 'reset' command
ssg20> Configuration modified, save? [y]/n n   <<=========Enter 'n'; otherwise you will overwrite the configuration you just copied to flash
System reset, are you sure? y/[n] y <<===Enter Y here
ssg5-> reset


Wait a few minutes, and then log in to the security device again.
Note:  If you inadvertantly entered y at the 'Configuration modified, save?' prompt, then simply repeat step 10 and enter n.