Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 318 / 1026

to first verify that the device is properly operating with the uploaded firmware before
managing it from the NSM UI. To enable management, you must reconcile the firmware
that you uploaded on the device with the ADM, as described in “Adjusting the Device OS
Version” on page 269. For more information about the ADM and NSM components, see
“Managing ScreenOS Device Capabilities” on page 307.
For step-by-step instructions on upgrading a device, refer to the Network and Security
Manager Online Help topic, “Upgrading Firmware on Devices.”
Upgrading a Device Software Version from NSM
If upgrading device software from NSM, you can only upgrade to published versions of
the software and not to unpublished versions. You can upgrade the software of
NSM-managed devices to unpublished versions only through the device CLI or Web UI.
You can continue to manage these devices in NSM after the upgrade.
To add a new device running a software version that is either published or unpublished
in the Juniper Update Server, you must first add the device to NSM and then import and
update it as described in “Performing an Update” on page 256.
Upgrading a Device Software Version outside NSM
If the software version of a device is upgraded outside NSM, through the device CLI or
Web UI, NSM behaves differently depending on whether the upgraded software version
is published and whether it is a major release.
To illustrate NSM’s behavior in these various scenarios, let us assume that 6.3R1, 6.3R2,
6.3R3, 6.3R4 and 6.4R1 are officially published releases; and 6.3R5, 6.3R6 and 6.4R2 are
maintenance releases but are not published in the Juniper Update Server. You see the
following behavior:
In a Minor Upgrade
When you upgrade from one version to another version in the same release, you can
upgrade from:
• One published version to another published version (6.3R2 > 6.3R3)
•
One published version to an unpublished version (6.3R2 > 6.3R5)
•
One unpublished version to a published version (6.3R5 >6.3R2)
• One unpublished version to another unpublished version (6.3R5 > 6.3R6)
After any one of the upgrades mentioned above, the device reboots. When the device
reconnects with NSM, its status is
sw inventory out of sync
. NSM does not allow you to
import or update the device. You must:
1.
Run reconcile inventory to synchronize the device software inventory.
2.
Import and update the device.
In a Major Upgrade
When you upgrade from one major release version to another, you can upgrade from:
Copyright © 2010, Juniper Networks, Inc. 268
Network and Security Manager Administration Guide