Switching

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.
  • 1.  EX2300 update failure.

    Posted 04-14-2023 13:20
    Edited by spuluka 04-14-2023 19:14

    So, I'm new to Juniper, but was trying to update a spare switch before updating some in production.

    Model: ex2300-24t
    Junos: 21.4R1.12

    I'm trying to update to recommended 51.4R3.15

    I'm copying from USB, here are the commands i'm doing
    mount_msdosfs /dev/da1s1 /mnt
    cp /mnt/junos-arm-32-21.4R3.15.tgz /var/tmp
    cli
    request system software add /var/tmp/junos-arm-32-21.4R3.15.tgz no-validate reboot

    I have tried adding force etc based off other posts, but no matter what I do, the below is my output.


    root> ...ce unlink /var/tmp/junos-arm-32-21.4R3.15.tgz reboot
    Removing /var/log/wtmp.1.gz
    Removing /var/log/wtmp.0.gz
    Removing /var/log/interactive-commands.0.gz
    Removing /var/log/messages.0.gz
    setting unlink by default.
    setting unlink by default.
    veriexec: cannot validate /packages/db/pkginst.16821/manifest.ecerts: certificate is not yet valid: /C=US/ST=CA/L=Sunnyvale/O=Juniper Networks/OU=Juniper CA/CN=PackageProductionECP256_2022/emailAddress=ca@juniper.net
    veriexec: cannot validate junos-arm-32-21.4R3.15.ecerts: certificate is not yet valid: /C=US/ST=CA/L=Sunnyvale/O=Juniper Networks/OU=Juniper CA/CN=PackageProductionECP256_2022/emailAddress=ca@juniper.net
    veriexec: /packages/db/pkginst.16821/package.xml: Authentication error
    usage: /usr/sbin/pkg add <pkg> ...
    where <pkg> is a compressed tar file
    ERROR: Failed to add junos-arm-32-21.4R3.15.tgz

    I'm at a loss and this should not be this much of a PITA.


    ***************************
    I found the issue, I never checked the system time and it was set to 2021 still and was failing. would have thought the no-validate would have bypassed the issue.



    ------------------------------
    DUSTIN ANDERSON
    ------------------------------



  • 2.  RE: EX2300 update failure.

    Posted 04-14-2023 19:15

    I think I found the issue, I had not set the date as it was a spare, but apparently no-validate is not working as it was still checking the cert.
    certificate is not yet valid

    Current time: 2021-11-17 12:20:59 UTC
    Time Source:  LOCAL CLOCK





    ------------------------------
    DUSTIN ANDERSON
    ------------------------------



  • 3.  RE: EX2300 update failure.

    Posted 07-11-2024 09:09

    Thanks Dustin!, I had the same issue with 3400, setting date as told above was the fix



    ------------------------------
    JOHN SIMON
    ------------------------------