Support Support Downloads Knowledge Base Service Request Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Unable to upgrade QFX5100 due to 'jinstall-vjunos fails post-install' error

0

0

Article ID: KB31923 KB Last Updated: 13 May 2019Version: 2.0
Summary:

During an upgrade from Junos 14.1X53-D25, 27, 30 and 40 to any Junos of QFX standalone or virtual chassis, the 'vjunos fails to install' error is seen.

Symptoms:

The following error is seen on my device when trying to perform an upgrade on QFX5100:

Error: jinstall-vjunos fails post-install
Error: jinstall-vjunos-14.1X53-D34-domestic-signed fails post-install

This issue occurs if 'tcp-drop-synfin-set' and 'no-tcp-reset drop-tcp-with-syn-only' under Internet-options stanza is configured on the QFX5100 Standalone/Virtual-chassis

Solution:

Step A:

Check the configuration of the system internet stanza prior to the upgrade:

# show system internet-options
tcp-drop-synfin-set;
no-tcp-reset drop-tcp-with-syn-only;

# show |display set |match  internet
set system internet-options tcp-drop-synfin-set
set system internet-options no-tcp-reset drop-tcp-with-syn-only
 
 

Delete this configuration prior to upgrade:

# delete system internet-options
{master:0}[edit]
root# show |compare
[edit system]
  internet-options {
      tcp-drop-synfin-set;
     no-tcp-reset drop-tcp-with-syn-only;
 
{master:0}[edit]
root# commit

 

After deleting this configuration, perform the upgrade on the Standalone/Virtual-chassis without any failure.

Note: Re-configure system internet stanza again after the upgrade to avoid TCP security attacks.

Step B:

If the above configuration is not available in the switch, please enter the command:
   > request system software add <Junos image > force-host no-validate

OR

Format and install the switch. 
CAUTION: Please take a configuration backup before formatting the switch

Modification History:
2019-05-13: Added alternate Step B
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Security Alerts and Vulnerabilities

Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search