At work we have several old SRX100H’s lying around which are not able to boot anymore. I took one home last week to see if I could resurrect the unit and make it operational again. Based on the specs of the device it would make a very nice router/firewall. The problem is that the device will not boot and simply will not start JunOS (the OS on the device). Hooking up the console shows that the device gets a kernel panic as the internal flash disk has filesystem issues. This is a common issue on the SRX100 and mainly occurs when the power is plugged from the device while it’s in operational state. This post will explain what steps needs to be taken to revive the unit.
Specifications:
CPU: Octeon CN5020 dualcore MIPS64 @ 500MHz
RAM: 1GB
LAN: 8x 100Mbit
MGT: 1x serial (RJ45) @ 9600 baud
OTHER: Has USB port for installation and recovery. Also has full UTM functions with appropriate licensing (not default)
The CPU has offloading support for various common used ciphers to speed up encryption tasks.
Requirements:
For the recovery I will use TFTP as I already have this configured on my network. You also need access to the firmware files within the Juniper download center which means you need to be a valid Juniper partner in order to access the firmware. I found a collegue of mine which has access to this area and downloaded the firmware for me. You will also need a serial cable for managing the device, something like a RJ-45 -> DB9 (null modem cable).
Recovery via USB:
Recovery via USB is also possible. For this a USB-stick of at least 256MB is needed and formatted with the FAT32 filesystem. Just copy the firmware file to the USB-stick. You can skip the networking setup and go straight to the Starting installation part. Make sure that you set up the console connection though!
Getting the firmware:
This is the hardest part as you may only download firmware updates for Juniper devices if you have a support plan with Juniper. As I personally don’t have a contract with them I’ve found a colleague of mine who normally manages this for the company and downloaded the latest firmware updates for me. If you don’t have a contract with Juniper it’s not possible to download the firmware. You should contact a network engineer in your company or personal area to see if they can help you further. At the time of writing version “JunOS 12.1X46-D55” was the latest release with a size of approx ~150MB.
A newer release is available as well which starts with JunOS 12.3X… but that is not available for the SRX100H and SRX100B models. So here JunOS 12.1X46-D55 is the latest firmware update that is available for these models.
Connecting the switch via serial:
Now connect the switch to your serial console. 9600 baud 8N1 should do the trick to communicate with the switch. Turn the switch on after you’ve connected the console as you have to halt the 3 second autoboot process!
You should see something like below:
U-Boot 1.1.6-JNPR-2.0 (Build time: Nov 17 2010 - 07:04:52)
SRX_100_HIGHMEM board revision major:0, minor:0, serial #: AT0812AF0793
OCTEON CN5020-SCP pass 1.1, Core clock: 500 MHz, DDR clock: 266 MHz (532 Mhz data rate)
DRAM: 1024 MB
Starting Memory POST...
Checking datalines... OK
Checking address lines... OK
Checking 512K memory for U-Boot... OK.
Running U-Boot CRC Test... OK.
Flash: 4 MB
USB: scanning bus for devices... 3 USB Device(s) found
scanning bus for storage devices... 1 Storage Device(s) found
Clearing DRAM........ done
BIST check passed.
Boot Media: nand-flash usb
Net: pic init done (err = 0)octeth0
POST Passed
Press SPACE to abort autoboot in 1 seconds
=>
Preparing the downloaded firmware:
If you have downloaded the firmware you should end up with a .tgz file. You don’t have to extract it and can copy it directly to servers your TFTP folder! The installer will extract it for you during installation.
Setting network parameters for installation:
Before we can start loading the firmware from the network we need to set the IP parameters in uBoot so the installer can reach your TFTP server. My TFTP server is at 192.168.0.75 and I’ve given the Juniper for this install the IP 192.168.0.210. My gateway is traditionally at 192.168.0.1:
setenv ipaddr 192.168.0.210
setenv serverip 192.168.0.75
setenv gatewayip 192.168.0.1
Save your settings:
saveenv
Saving Environment to Flash...
Un-Protected 1 sectors
Erasing Flash...
. done
Erased 1 sectors
Writing to Flash... writing to flash...
done
Protected 1 sectors
Starting the installation:
Now reset the device via uBoot:
reset
And wait until you see the following output with especially the last line:
reset
U-Boot 1.1.6-JNPR-2.0 (Build time: Nov 17 2010 - 07:04:52)
SRX_100_HIGHMEM board revision major:0, minor:0, serial #: AT0812AF0793
OCTEON CN5020-SCP pass 1.1, Core clock: 500 MHz, DDR clock: 266 MHz (532 Mhz data rate)
DRAM: 1024 MB
Starting Memory POST...
Checking datalines... OK
Checking address lines... OK
Checking 512K memory for U-Boot... OK.
Running U-Boot CRC Test... OK.
Flash: 4 MB
USB: scanning bus for devices... 3 USB Device(s) found
scanning bus for storage devices... 1 Storage Device(s) found
Clearing DRAM........ done
BIST check passed.
Boot Media: nand-flash usb
Net: pic init done (err = 0)octeth0
POST Passed
Press SPACE to abort autoboot in 1 seconds
ELF file is 32 bit
Loading .text @ 0x8f000078 (244960 bytes)
Loading .rodata @ 0x8f03bd58 (13940 bytes)
Loading .rodata.str1.4 @ 0x8f03f3cc (16648 bytes)
Loading set_Xcommand_set @ 0x8f0434d4 (100 bytes)
Loading .rodata.cst4 @ 0x8f043538 (20 bytes)
Loading .data @ 0x8f044000 (5608 bytes)
Loading .data.rel.ro @ 0x8f0455e8 (120 bytes)
Loading .data.rel @ 0x8f045660 (136 bytes)
Clearing .bss @ 0x8f0456e8 (11656 bytes)
## Starting application at 0x8f000078 ...
Consoles: U-Boot console
Found compatible API, ver. 2.0
FreeBSD/MIPS U-Boot bootstrap loader, Revision 2.0
(builder@warth.juniper.net, Wed Nov 17 07:07:32 UTC 2010)
Memory: 1024MB
[9]Booting from nand-flash slice 3
Un-Protected 1 sectors
writing to flash...
Protected 1 sectors
\
can't load '/kernel'
can't load '/kernel.old'
Press Enter to stop auto bootsequencing and to enter loader prompt.
Here press the Enter key so you will be dropped at the loader prompt. You should be now left at the following prompt:
Type '?' for a list of commands, 'help' for more detailed help.
loader>
To start the installer via TFTP run the following command:
install tftp://192.168.0.75/junos-srxsme-12.1X46-D55.3-domestic.tgz
Should you want to start the installation from the USB-stick:
install file:///junos-srxsme-12.1X46-D55.3-domestic.tgz
Starting the installer may take several minutes as the archive is being copied to the device and extracted for further installation. Note that the output of the installer will be extremely long and has 2 stages where the 1st stage is the actual installation and the 2nd stage is the first startup of the device in which it will generate it’s host keys etcetera. Overall the installation time may vary from 15 ~ 30 minutes.
The first part looks like (prepare for flood!):
octeth0: Up 1000 Mbps Full duplex (port 0)
/kernel data=0xb16d5c+0x134b2c syms=[0x4+0x8bbd0+0x4+0xcadc3]
Kernel entry at 0x801000e0 ...
init regular console
Primary ICache: Sets 64 Size 128 Asso 4
Primary DCache: Sets 1 Size 128 Asso 64
Secondary DCache: Sets 128 Size 128 Asso 8
GDB: debug ports: uart
GDB: current port: uart
KDB: debugger backends: ddb gdb
KDB: current backend: ddb
kld_map_v: 0x8ff80000, kld_map_p: 0x0
Copyright (c) 1996-2016, Juniper Networks, Inc.
All rights reserved.
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
JUNOS 12.1X46-D55.3 #0: 2016-07-08 18:46:54 UTC
builder@quoarth.juniper.net:/volume/build/junos/12.1/service/12.1X46-D55.3/obj-octeon/junos/bsd/kernels/JSRXNLE/kernel
JUNOS 12.1X46-D55.3 #0: 2016-07-08 18:46:54 UTC
builder@quoarth.juniper.net:/volume/build/junos/12.1/service/12.1X46-D55.3/obj-octeon/junos/bsd/kernels/JSRXNLE/kernel
real memory = 1073741824 (1024MB)
avail memory = 559992832 (534MB)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
Security policy loaded: JUNOS MAC/pcap (mac_pcap)
Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
cpu0 on motherboard
: CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
L2 Cache: Size 128kb, 8 way
obio0 on motherboard
uart0:
uart0: console (9600,n,8,1)
twsi0 on obio0
dwc0:
usb0:
usb0: USB revision 2.0
uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 1 port with 1 removable, self powered
uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
uhub1: single transaction translator
uhub1: 2 ports with 1 removable, self powered
umass0: STMicroelectronics ST72682 High Speed Mode, rev 2.00/2.10, addr 3
cpld0 on obio0
pcib0:
Disabling Octeon big bar support
PCI Status: PCI 32-bit: 0xc041b
pcib0: Initialized controller
pci0:
pci0:
pci0:
pci0:
gblmem0 on obio0
octpkt0:
cfi0:
octpkt_attach: Initializing octpkt0 interface
Timecounter "mips" frequency 500000000 Hz quality 0
###PCB Group initialized for udppcbgroup
###PCB Group initialized for tcppcbgroup
md0: Preloaded image 10022912 bytes at 0x80ea2224
da0 at umass-sim0 bus 0 target 0 lun 0
da0:
da0: 40.000MB/s transfers
da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
Trying to mount root from cd9660:/dev/md0
WARNING: preposterous time in file system
WARNING: clock 10662 days greater than file system time
tty: not found
Starting JUNOS installation:
Source Package: net0:/junos-srxsme-12.1X46-D55.3-domestic.tgz
Target Media : internal
Product : srx100h
add default: gateway 192.168.0.1
PING 192.168.0.75 (192.168.0.75): 56 data bytes
64 bytes from 192.168.0.75: icmp_seq=0 ttl=64 time=1.493 ms
--- 192.168.0.75 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.493/1.493/1.493/0.000 ms
Computing slice and partition sizes for /dev/da0 ...
Media check on da0
Attempting to save existing configuration...
** /dev/da0s3e
Cannot find file system superblock
LOOK FOR ALTERNATE SUPERBLOCKS? yes
32 is not a file system superblock
USING ALTERNATE SUPERBLOCK AT 12768
** Last Mounted on
** Phase 1 - Check Blocks and Sizes
UNKNOWN FILE TYPE I=2
CLEAR? yes
Here you can see that the internal filesystem is corrupt. In my case this CLEAR message happens around 500 times which has to be displayed over a 9600 baud connection :). Once this is done it will resume with:
** Phase 2 - Check Pathnames
ROOT INODE UNALLOCATED
ALLOCATE? yes
CG 0: BAD MAGIC NUMBER
CG 0: BAD MAGIC NUMBER
** Phase 3 - Check Connectivity
UNREF DIR I=1792 OWNER=0 MODE=40755
SIZE=512 MTIME=Nov 2 13:43 2012
RECONNECT? yes
NO lost+found DIRECTORY
CREATE? yes
CG 0: BAD MAGIC NUMBER
CG 0: BAD MAGIC NUMBER
DIR I=1792 CONNECTED. PARENT WAS I=2
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
CG 0: BAD MAGIC NUMBER
FREE BLK COUNT(S) WRONG IN SUPERBLK
SALVAGE? yes
SUMMARY INFORMATION BAD
SALVAGE? yes
BLK(S) MISSING IN BIT MAPS
SALVAGE? yes
8 files, 8 used, 12430 free (14 frags, 1552 blocks, 0.1% fragmentation)
UPDATE CORRUPTED DUPLICATE SUPERBLOCKS? yes
UPDATE STANDARD SUPERBLOCK? yes
***** FILE SYSTEM WAS MODIFIED *****
Could not find any existing configuration.
Formatting target media /dev/da0 ...
Preparing to create slices on /dev/da0
/dev/da0: 2048000 sectors [C:1000 H:64 S:32 SS:512]
Shrinking slice 1 by 256 blocks for alignment
1+0 records in
1+0 records out
512 bytes transferred in 0.000671 secs (763143 bytes/sec)
Creating slices:
g c1000 h64 s32
p 1 0xA5 256 610048
p 2 0xA5 610304 610304
p 3 0xA5 1220608 763904
p 4 0xA5 1984512 63488
a 1
******* Working on device /dev/da0 *******
Computing layout of partitions in /dev/da0s1...
Shrinking partition a by 1792 blocks for alignment
Labeling /dev/da0s1:
bsdlabel: write to disk label supressed - label was as follows:
# /dev/da0s1:
8 partitions:
# size offset fstype [fsize bsize bps/cpg]
a: 608000 256 unused 0 0
c: 610048 0 unused 0 0 # "raw" part, don't edit
/dev/da0s1a: 296.9MB (607996 sectors) block size 16384, fragment size 2048
using 4 cylinder groups of 74.22MB, 4750 blks, 9600 inodes.
super-block backups (for fsck -b #) at:
32, 152032, 304032, 456032
Computing layout of partitions in /dev/da0s2...
Labeling /dev/da0s2:
bsdlabel: write to disk label supressed - label was as follows:
# /dev/da0s2:
8 partitions:
# size offset fstype [fsize bsize bps/cpg]
a: 610048 256 unused 0 0
c: 610304 0 unused 0 0 # "raw" part, don't edit
/dev/da0s2a: 297.9MB (610044 sectors) block size 16384, fragment size 2048
using 4 cylinder groups of 74.47MB, 4766 blks, 9600 inodes.
super-block backups (for fsck -b #) at:
32, 152544, 305056, 457568
Computing layout of partitions in /dev/da0s3...
Shrinking partition e by 256 blocks for alignment
Labeling /dev/da0s3:
bsdlabel: write to disk label supressed - label was as follows:
# /dev/da0s3:
8 partitions:
# size offset fstype [fsize bsize bps/cpg]
c: 763904 0 unused 0 0 # "raw" part, don't edit
e: 50944 256 unused 0 0
f: 712704 51200 unused 0 0
/dev/da0s3e: 24.9MB (50940 sectors) block size 16384, fragment size 2048
using 4 cylinder groups of 6.22MB, 398 blks, 896 inodes.
super-block backups (for fsck -b #) at:
32, 12768, 25504, 38240
/dev/da0s3f: 348.0MB (712700 sectors) block size 16384, fragment size 2048
using 4 cylinder groups of 87.00MB, 5568 blks, 11136 inodes.
super-block backups (for fsck -b #) at:
32, 178208, 356384, 534560
Computing layout of partitions in /dev/da0s4...
Shrinking partition e by 256 blocks for alignment
Labeling /dev/da0s4:
bsdlabel: write to disk label supressed - label was as follows:
# /dev/da0s4:
8 partitions:
# size offset fstype [fsize bsize bps/cpg]
a: 57344 6144 unused 0 0
c: 63488 0 unused 0 0 # "raw" part, don't edit
e: 5888 256 unused 0 0
/dev/da0s4a: 28.0MB (57340 sectors) block size 16384, fragment size 2048
using 4 cylinder groups of 7.00MB, 448 blks, 896 inodes.
super-block backups (for fsck -b #) at:
32, 14368, 28704, 43040
/dev/da0s4e: 2.9MB (5884 sectors) block size 16384, fragment size 2048
using 3 cylinder groups of 1.00MB, 64 blks, 128 inodes.
super-block backups (for fsck -b #) at:
32, 2080, 4128
Creating root filesystem layout ...
Downloading /junos-srxsme-12.1X46-D55.3-domestic.tgz from 192.168.0.75 ...
Time and ticks drifted too much, resetting synchronization...
Verified SHA1 checksum of /a/cf/install/junos-boot-srxsme-12.1X46-D55.3.tgz
Verified SHA1 checksum of /a/cf/install/junos-srxsme-12.1X46-D55.3-domestic
Creating var filesystem layout ...
Creating bsdlabel recovery information ...
Initializing alternate root ...
machdep.bootsuccess: 0 -> 1
machdep.nextbootdev: usb -> nand-flash
JUNOS requires BIOS version upgrade from 2.0 to 2.8
Upgrading to BIOS 2.8 ...
boot.upgrade.uboot="0xbfc00000"
boot.upgrade.loader="0xbfe00000"
Upgrading Loader...
#####################################
Verifying the loader image... OK
Upgrading U-Boot...
###############################################################################
Verifying the new U-Boot image... OK
WARNING: The new boot firmware will take effect when the system is rebooted.
Installation completed successfully, rebooting ...
Waiting (max 60 seconds) for system process `vnlru_mem' to stop...done
Waiting (max 60 seconds) for system process `vnlru' to stop...done
Waiting (max 60 seconds) for system process `bufdaemon' to stop...done
Waiting (max 60 seconds) for system process `syncer' to stop...
Syncing disks, vnodes remaining...0 done
syncing disks... All buffers synced.
Uptime: 9m9s
Rebooting...
cpu_reset: Stopping other CPUs
This was the first phase. The device will now reboot and start booting the fresh installed image and prepare itself for use:
U-Boot 1.1.6-JNPR-2.8 (Build time: Feb 10 2015 - 01:03:41)
Initializing memory this may take some time...
Measured DDR clock 266.62 MHz
SRX_100_HIGHMEM board revision major:0, minor:0, serial #: AT0812AF0793
OCTEON CN5020-SCP pass 1.1, Core clock: 500 MHz, DDR clock: 266 MHz (532 Mhz data rate)
DRAM: 1024 MB
Starting Memory POST...
Checking datalines... OK
Checking address lines... OK
Checking 512K memory for U-Boot... OK.
Running U-Boot CRC Test... OK.
Flash: 4 MB
USB: scanning bus for devices... 3 USB Device(s) found
scanning bus for storage devices... 1 Storage Device(s) found
Clearing DRAM........ done
BIST check passed.
Boot Media: nand-flash usb
Net: pic init done (err = 0)octeth0
POST Passed
Press SPACE to abort autoboot in 1 seconds
ELF file is 32 bit
Loading .text @ 0x8f0000a0 (246560 bytes)
Loading .rodata @ 0x8f03c3c0 (14144 bytes)
Loading .reginfo @ 0x8f03fb00 (24 bytes)
Loading .rodata.str1.4 @ 0x8f03fb18 (16516 bytes)
Loading set_Xcommand_set @ 0x8f043b9c (96 bytes)
Loading .rodata.cst4 @ 0x8f043bfc (20 bytes)
Loading .data @ 0x8f044000 (5760 bytes)
Loading .data.rel.ro @ 0x8f045680 (120 bytes)
Loading .data.rel @ 0x8f0456f8 (136 bytes)
Clearing .bss @ 0x8f045780 (11600 bytes)
## Starting application at 0x8f0000a0 ...
Consoles: U-Boot console
Found compatible API, ver. 2.8
FreeBSD/MIPS U-Boot bootstrap loader, Revision 2.8
(slt-builder@svl-ssd-build-vm06.juniper.net, Tue Feb 10 00:32:30 PST 2015)
Memory: 1024MB
[0]Booting from nand-flash slice 1
Un-Protected 1 sectors
writing to flash...
Protected 1 sectors
Loading /boot/defaults/loader.conf
/kernel data=0xb16d5c+0x134b2c syms=[0x4+0x8bbd0+0x4+0xcadc3]
Hit [Enter] to boot immediately, or space bar for command prompt.
Booting [/kernel]...
Kernel entry at 0x801000e0 ...
init regular console
Primary ICache: Sets 64 Size 128 Asso 4
Primary DCache: Sets 1 Size 128 Asso 64
Secondary DCache: Sets 128 Size 128 Asso 8
GDB: debug ports: uart
GDB: current port: uart
KDB: debugger backends: ddb gdb
KDB: current backend: ddb
kld_map_v: 0x8ff80000, kld_map_p: 0x0
Copyright (c) 1996-2016, Juniper Networks, Inc.
All rights reserved.
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
JUNOS 12.1X46-D55.3 #0: 2016-07-08 18:46:54 UTC
builder@quoarth.juniper.net:/volume/build/junos/12.1/service/12.1X46-D55.3/obj-octeon/junos/bsd/kernels/JSRXNLE/kernel
JUNOS 12.1X46-D55.3 #0: 2016-07-08 18:46:54 UTC
builder@quoarth.juniper.net:/volume/build/junos/12.1/service/12.1X46-D55.3/obj-octeon/junos/bsd/kernels/JSRXNLE/kernel
real memory = 1073741824 (1024MB)
avail memory = 509661184 (486MB)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
Security policy loaded: JUNOS MAC/pcap (mac_pcap)
Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
cpu0 on motherboard
: CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
L2 Cache: Size 128kb, 8 way
obio0 on motherboard
uart0:
uart0: console (9600,n,8,1)
twsi0 on obio0
dwc0:
usb0:
usb0: USB revision 2.0
uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 1 port with 1 removable, self powered
uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
uhub1: single transaction translator
uhub1: 2 ports with 1 removable, self powered
umass0: STMicroelectronics ST72682 High Speed Mode, rev 2.00/2.10, addr 3
cpld0 on obio0
pcib0:
Disabling Octeon big bar support
PCI Status: PCI 32-bit: 0xc041b
pcib0: Initialized controller
pci0:
pci0:
pci0:
pci0:
gblmem0 on obio0
octpkt0:
cfi0:
Timecounter "mips" frequency 500000000 Hz quality 0
###PCB Group initialized for udppcbgroup
###PCB Group initialized for tcppcbgroup
da0 at umass-sim0 bus 0 target 0 lun 0
da0:
da0: 40.000MB/s transfers
da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
Trying to mount root from ufs:/dev/da0s1a
MFSINIT: Initialising MFSROOT
Process-1 beginning MFSROOT initialization...
Creating MFSROOT...
/dev/md0: 20.0MB (40956 sectors) block size 16384, fragment size 2048
using 4 cylinder groups of 5.00MB, 320 blks, 640 inodes.
super-block backups (for fsck -b #) at:
32, 10272, 20512, 30752
Populating MFSROOT...
Creating symlinks...
Setting up mounts...
Continuing boot from MFSROOT...
Attaching /cf/packages/junos via /dev/mdctl...
Mounted junos package on /dev/md1...
S
chflags: /var/packages/*: No such file or directory
Media check on da0
Automatic reboot in progress...
** /dev/da0s1a (NO WRITE)
** Last Mounted on /
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
FREE BLK COUNT(S) WRONG IN SUPERBLK
SALVAGE? no
SUMMARY INFORMATION BAD
SALVAGE? no
BLK(S) MISSING IN BIT MAPS
SALVAGE? no
161 files, 75562 used, 73964 free (44 frags, 9240 blocks, 0.0% fragmentation)
mount reload of '/' failed: Operation not supported
Verified junos signed by PackageProductionEc_2016 method ECDSA
Verified jboot signed by PackageProductionEc_2016 method ECDSA
Verified junos-12.1X46-D55.3-domestic signed by PackageProductionEc_2016 method ECDSA
Checking integrity of BSD labels:
s1: Passed
s2: Passed
s3: Passed
s4: Passed
** /dev/bo0s3e
FILE SYSTEM CLEAN; SKIPPING CHECKS
clean, 12436 free (28 frags, 1551 blocks, 0.2% fragmentation)
** /dev/bo0s3f
FILE SYSTEM CLEAN; SKIPPING CHECKS
clean, 175282 free (34 frags, 21906 blocks, 0.0% fragmentation)
Checking integrity of licenses:
Checking integrity of configuration:
rescue.conf.gz: No recovery data
Loading configuration ...
Time and ticks drifted too much, resetting synchronization...
mgd: error: Cannot open configuration file: /config/juniper.conf
mgd: warning: activating factory configuration
Interface control process: [edit interfaces fe-0/0/1 unit 0]
Interface control process: 'family'
Interface control process: Ethernet-switching family not supported in HA mode for srx100h platform
mgd: error: configuration check-out failed
Warning: Commit failed, activating partial configuration.
Warning: Edit the router configuration to fix these errors.
Setting initial options: .
Starting optional daemons: usbd.
Doing initial network setup:
.
Initial interface configuration:
additional daemons: eventd.
Generating RSA key /etc/ssh/ssh_host_key
Generating public/private rsa1 key pair.
Your identification has been saved in /etc/ssh/ssh_host_key.
Your public key has been saved in /etc/ssh/ssh_host_key.pub.
The key fingerprint is:
e3:ba:b3:06:65:26:4f:5b:a9:92:02:c5:5c:99:46:e9 root@
The key's randomart image is:
+--[RSA1 2048]----+
| o oo+ |
| + = |
| . o . |
|. E = o |
| . O +S |
| . + +. . |
| . o . |
| o. |
| .++ |
+-----------------+
Generating DSA key /etc/ssh/ssh_host_dsa_key
Generating public/private dsa key pair.
Your identification has been saved in /etc/ssh/ssh_host_dsa_key.
Your public key has been saved in /etc/ssh/ssh_host_dsa_key.pub.
The key fingerprint is:
47:85:2c:5b:fa:a1:b2:bd:ba:fe:ef:51:2d:7b:5d:22 root@
The key's randomart image is:
+--[ DSA 1024]----+
| . .. |
| . +. |
| =. |
| o.. . |
| So..E o .|
| . .... + o.|
| + . . . .|
| . . . . |
| .++o+o |
+-----------------+
Generating RSA2 key /etc/ssh/ssh_host_rsa_key
Generating public/private rsa key pair.
Your identification has been saved in /etc/ssh/ssh_host_rsa_key.
Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub.
The key fingerprint is:
40:7a:16:30:b7:a0:ed:c0:2c:6c:2d:be:5e:00:f0:28 root@
The key's randomart image is:
+--[ RSA 2048]----+
|. +.+ |
|o=.o * o |
|E+*.o = |
|=..o o . |
| o . S |
| o |
| . . |
|. . |
| . |
+-----------------+
Generating ECDSA key /etc/ssh/ssh_host_ecdsa_key
Generating public/private ecdsa key pair.
Your identification has been saved in /etc/ssh/ssh_host_ecdsa_key.
Your public key has been saved in /etc/ssh/ssh_host_ecdsa_key.pub.
The key fingerprint is:
59:8f:da:93:f7:8b:0c:0f:2c:1c:b7:fb:7d:ba:91:d4 root@
The key's randomart image is:
+--[ECDSA 256]---+
| |
| |
| . |
| o o . |
| S o . . E|
| . * o . . |
| + O . o |
| . O + ..|
| ..= *= |
+-----------------+
Generating ED25519 key /etc/ssh/ssh_host_ed25519_key
Generating public/private ed25519 key pair.
Your identification has been saved in /etc/ssh/ssh_host_ed25519_key.
Your public key has been saved in /etc/ssh/ssh_host_ed25519_key.pub.
The key fingerprint is:
75:52:bb:29:4d:06:6d:b9:e4:ce:6f:18:e2:d8:ce:7c root@
The key's randomart image is:
+--[ED25519 256--+
| .... |
| o=. |
| o+=. |
| . *oo |
| S .o+ |
| ..+ |
| + . + |
| .oo E o |
| .+. . |
+-----------------+
Ignoring watchdog timeout during boot/reboot
Additional routing options:kern.module_path: /boot//kernel;/boot/modules -> /boot/modules;/modules/ifpfe_drv;/modules;
kld netpfe drv: ifpfed_dialer ipsec kld.
Doing additional network setup:.
Starting final network daemons:.
setting ldconfig path: /usr/lib /opt/lib
starting standard daemons: cron.
Initial rc.mips initialization:.
Local package initialization:.
starting local daemons:set cores for group access
.
kern.securelevel: -1 -> 1
Creating JAIL MFS partition...
JAIL MFS partition created
boot.upgrade.uboot="0xBFC00000"
boot.upgrade.loader="0xBFE00000"
JUNOS requires backup BIOS version upgrade from 2.0 to 2.8
Upgrading to BIOS 2.8 ...
Upgrading Secondary U-Boot...
###############################################################################
Verifying the new U-Boot image... OK
Boot media /dev/da0 has dual root support
** /dev/da0s2a
FILE SYSTEM CLEAN; SKIPPING CHECKS
clean, 74476 free (28 frags, 9306 blocks, 0.0% fragmentation)
Fri Sep 9 18:12:31 UTC 2016
Amnesiac (ttyu0)
login:
Continue configuration:
The default account is “root” with no password. If you have no experience with the setup of such device purely via CLI I advise you to hook up a LAN cable between your machine and the first ethernet port of the device (that is port 0/0) and set up a static IP in the 192.168.1.0/24
range. You should then be able to browse to the URL:
http://192.168.1.1/
The welcome screen should be like below:
You can login with “root” and will be welcomed by a setup wizard which will guide you through the rest of the setup based on several simple questions.
Hello, do you still have the image for this EOL SRX100? Mine it’s stuck at can’t load ‘/kernel’can’t load ‘/kernel.old’.
I don’t have a valid support contract with Juniper so i cannot download the Junos.
Do you still have the image? Thank you
Hi,
I’m afraid not. I have searched the backup files I have of several devices but the SRX is not among them anymore. The problem is also that you are not able to download it for free from the Juniper website (which used to be the case in the past…).
Should I find it again I’ll let you know!
Kind regards,
Jeffrey