FYI/ Caution: MS120 Upgrades to 14.x when used as DMZ

[Mloraditch]

We use MS120s as DMZ for HA on MXs. The MSs management IPs are on VLANs that are behind the MXs. Have been testing 14.x and had this happen both on 14.5 and 14.7.

Sometimes the MS120 fails its upgrades and if it does it ends up in a loop where it retries every two hours or so and continues to fail, the only way to correct is plug your ISP directly into your primary MX so that the ISS still has internet as it completes the update. The first time support tried several times to force the upgrade on their side to no avail until we bypassed.

Hoping support can identify as a bug and fix now that we've had a reoccurrence, but wanted to let folks know.

[DR1]

This seems to outline a use case for having active or updating firmware images cached on the MX appliance SSD (in cases were its a model that has storage).

Presumably you're using a single MS120 to manage 2+ HA links. If this isn't the case and you're using separate MS120, this might be overcome by staging upgrades.

Out of curiosity are these switches setup under a different Network than the MX appliance they're sitting in front of?

[Mloraditch]

Yes single MS120. It was actually both scenarios. We've started making them separate because of the new client tracking feature, but some older installs still have them with rest of the sites devices.