I am not sure what the topology is based on the posts here.  I think you have an upstream router with at least the default gateway for one subnet.

And now you have added a second to that upstream router? 

Plus you have RVI on the ex to allow the 3? subnets here to communicate with each other?

So from a routing view the upstream router has direct routes for those two networks and would need a route added to reach the 3rd via a route to the RVI on the ex for one of these configured subnets. Then potentially then share that route wiht other upstream devices on the nework so that subnet has reachability.

On the ex you would create the RVI for all three subnets to communicate.  And add a default route to one of the upstream router addresses to reach the rest of the network.

Hello,

I've tried to upgrade our QFX from 15.1X53-D62.5 to 17.3R3-S1.5, but after  upgrading it was unable to ssh the box, by console it was OK but I saw some errors on log message like:

root> show system license 
error: the license-service subsystem is not running

Despite of this error, I observed all IP traffic was handled by the box, bgp session were UP.

When I tried to restart sshd I got this:

root> start shell 
root@:RE:0% /usr/sbin/sshd 
/var/etc//sshd_conf: No such file or directory
root@:RE:0% 

Then I have some questions may be you know the answers:

1)- What is the path upgrade if you want to go from 15.1X53-D62.5 to 17.3R3-S1.5 ?

Note that 17.3R3-S1.5 is the recommanded junos version for QFX10002

2)Junos name has changed before the file name was named as: jinstall-host-qfx-10-f-15.1X53-D62.5-domestic-signed.tgz, for 17.3R3 from juniper web site files are named:

- QFX 10K Fixed Series Switch with Enhanced Automation

jinstall-host-qfx-10-f-flex-x86-64-17.3R3-S1.5-secure-signed.tgz

- Limited - QFX 10K Fixed Series Switch

jinstall-host-qfx-10-f-x86-64-17.3R3-S1.5-secure-limited-signed.tgz

- QFX 10K Fixed Series Switch

jinstall-host-qfx-10-f-x86-64-17.3R3-S1.5-secure-signed.tgz

Which file not contain ssh deamon ?

Based on the error message related to license et not access to the box by ssh, I have rollback to the previous version 15.1X53, after rollback no error on license, ssh to the box OK and the error that push me to upgrade disappear

root> show chassis alarms
No alarms currently active

before I have this when I do show chassis alarms

QFX10k Major alarm  FPC 0 Errors

Thanks in advance for your replies.

Best regards,

The HMC errors will very likely go away with a reboot, which is what occurred when you changed the code.  As for SSH/non-SSH code, the image with wording "Limited" should be the only one without encryption included.

Unless you plan to use EVPN/VXLAN I would stay on 15.1X53, vs 17.3, at this time.

Hope this helps

Hi

No updates. JTAC decided to create ER instead of PR. No ETA was provided

Can I assume the ER is to support greater than double-tagged frames, as double-tagged (Q-in-Q) support is there on all models of QFX10K from FCS per:

https://apps.juniper.net/feature-explorer/parent-feature-info.html?pFName=Q-in-Q

Yes?

Hi

Correct.  Double tagged frames are passing through the switch without any problems. Problem arises when there are more than 2 tags in a frame

I am working at a site where EX3300 are failed in bulk numbers after each power shutdown activity.

At the same site, no other devices face this issue specifically. 

For the info, we are using "request system power-off" and then plugging out the power cord from the PSU.

During Power up, we check the electrical ratings before connecting the Power cord with PSU however even after taking a precaution, we have a bulk failure at the site.

Did any one see this issue with EX3300s? Also appreciate if any one can suggest a risk mitigation for the said scenario..

A couple of questions first:

Are these stand-alone devices or in a VC?

If a VC, did all devices fail to recover properly?

Do you have a TAC case open (case #?), and if not, why not?

When was (approximately) the last time these devices were power cycled, that is what was the system up-time prior to your actions?

To recover, I fully suspect a USB install will recover these devices.

Depending upon your answers, I might have some suggestions, but I fully expect that UPS/power is not related to or involved here at all.

The only thing that worked for us was following this suggestion:

https://www.reddit.com/r/Juniper/comments/76w463/cleaning_up_old_packages_on_ex3400/

Which is basically removing all older versions from /packages/db, as all older versions seem to be kept there.

This is indeed extremely bad from all points, as it's a comepletly manual process that shouldn't have to exist, as it should be properly handled, and is prone to mistakes, to which I don't know the impact, since I don't know if these are temporary files or not. And of course, nothing in the KB about that either.

Hi Kashif, great post.

To clarify, does this work on an 'old fashioned' vSwitch (as opposed to a dvSwitch) - as that doesn't support LACP? Can you do the same LAG config, sans LACP and just have a 'static LAG'?

Thanks (sorry this was 2 years late - but I think future Googlers might appreciate it too!)

you just need to add prefer-status-control active konb on all mc-ae interfaces on both MC_LAG peers.

set interfaces ae0 aggregated-ether-options mc-ae events iccp-peer-down prefer-status-control-active

it will make sure that LACP system ID will be retained to configured vlaues once MC_LAG peer is getting reboot or shutdown.   You will get maximum 1 or 2 ping drops once knob is applied.

Hello Junos

we are using Ex9208 as core and Ex3400 as TOR's, the weird issue is I can't SSH from my laptop to the other TOR SW's SSH only works with the TOR that im connecting to or shh to the Core and then I can SSH to the other TOR's from the Core but not directly from my Laptop. yet not from TOR to another i have to ssh to ex9208 first the to the other TOR. it dosen't say an error message or anything its just stay blank like it waiting to get response and it never comes although telnet work from TOR to another but when i use my root and password it says its incorrect. why is that?

I used to work with  Cisco and when configuring SSH i usually make Domain name ans specify SSH V2 etc. and the admin user will work for both SSH and telnet

is it different here in Juniper do i missing something? as i only enabled SSH under system services that all.

thanks in advance

Hi Team,

I am seeing errors like these on my EX4300, this has thus caused a spike in CPU utilisation for pfex_junos process around 30%. Request your help in understanding these messages and how to get rid of these.

Does the restart of "pfex_junos" solve this issue.

Oct 21 18:30:05 test_host pfex: Scheduler Oinker
Oct 21 18:30:05 test_host pfex: Frame 00: sp = 0x03bc4230, pc = 0x018466b4
Oct 21 18:30:05 test_host pfex: Frame 01: sp = 0x03bc4248, pc = 0x0180edf0
Oct 21 18:30:05 test_host pfex: Frame 02: sp = 0x03bc42a0, pc = 0x018108ac
Oct 21 18:30:05 test_host pfex: Frame 03: sp = 0x03bc42d0, pc = 0x0184bcf8
Oct 21 18:30:05 test_host pfex: Frame 04: sp = 0x03bc4318, pc = 0x018103a4
Oct 21 18:30:05 test_host pfex: IPC Socket is closed
Oct 21 18:30:05 test_host pfex: BULKGET: Master socket closed
Oct 21 18:30:05 test_host pfex: BULKGET disconnected: BULKGET socket closed abruptly
Oct 21 18:30:05 test_host pfex: Bulkget manager reconnection succeeded after 1 tries
Oct 21 18:30:05 test_host pfex: BULKGET master RE reconnection made
Oct 21 18:37:00 test_host pfex: uncached heap start 0x234db000 0x78000000 size 0x8000000 status 0
Oct 21 18:37:00 test_host pfex: dma desc heap start 0x2a4db000 end 0x2b4db000 status 0
Oct 21 18:37:01 test_host pfex: PFEBM: BEM0
Oct 21 18:37:01 test_host pfex: BME0 created
Oct 21 18:37:02 test_host pfex: AN-INIT: an_gencfg_init Analytics gencfg init done
Oct 21 18:37:02 test_host pfex: L2ALM: failed to connect to Master
Oct 21 18:37:02 test_host pfex: Error in bcm_switch_control_set(Egress) : Reason Invalid unit
Oct 21 18:37:02 test_host pfex: sflow socket connect failed (no route to host)
Oct 21 18:37:02 test_host pfex: mojito_get_pci_base_addr: BCM device id 0xb648
Oct 21 18:37:02 test_host pfex: cmex_asic_init: PCI Base address 0xc0000000 devid 0xb648 revid 0x11
Oct 21 18:37:04 test_host pfex: TimeSync PLL not locked on unit 0 status = 0x00000102
Oct 21 18:37:04 test_host pfex: BroadSync PLL not locked on unit 0 status = 0x00000102
Oct 21 18:37:10 test_host pfex: Frame 00: sp = 0x04520a90, pc = 0x01849480
Oct 21 18:37:10 test_host pfex: Frame 01: sp = 0x04520aa8, pc = 0x0180f714
Oct 21 18:37:10 test_host pfex: Frame 02: sp = 0x04520b00, pc = 0x018111d0
Oct 21 18:37:10 test_host pfex: Frame 03: sp = 0x04520b30, pc = 0x01824ce0
Oct 21 18:37:10 test_host pfex: Frame 04: sp = 0x04520c08, pc = 0x01821e08
Oct 21 18:37:10 test_host pfex: Frame 05: sp = 0x04520c50, pc = 0x0180a668
Oct 21 18:37:10 test_host pfex: Frame 06: sp = 0x04520c78, pc = 0x01810cc8
Oct 21 18:37:24 test_host pfex: vlan 2 mac_learn 0 get failed (-4-Invalid parameter)
Oct 21 18:37:24 test_host pfex: learn disable failed(1000) on egress default vlan
Oct 21 18:37:26 test_host pfex: PFE-BCM-L2,pfe_bcm_l2_dev_init(),398:Egress default VLAN creation failed (Entry exists:-8)
Oct 21 18:37:26 test_host pfex: cmex_poe_init Unsupported board id 2908

Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: Error getting IFD info for PFE 0 Port 4
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC] ex_bcm_linkscan_handler: Link 5 DOWN
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: No IFD available for PFE 0 port 5
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: Error getting IFD info for PFE 0 Port 5
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC] ex_bcm_linkscan_handler: Link 6 DOWN
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: No IFD available for PFE 0 port 6
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: Error getting IFD info for PFE 0 Port 6
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC] ex_bcm_linkscan_handler: Link 7 DOWN
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: No IFD available for PFE 0 port 7
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC]: Error getting IFD info for PFE 0 Port 7
Oct 21 18:37:26 test_host pfex: [EX-BCM PIC] ex_bcm_linkscan_handler: Link 8 DOWN

//Nexon

Couple of questions:

1.  Can we assume the connections from EX9200 to each EX3400s are pure L2, but that to get between EX3400 to another EX3400 requires some L3 at the EX9200?

2.  If you SSH from EX9200 to EX3400, can you then create an SSH session from EX3400 back to EX9200?

Hi all,

I tried to autoinstall a configuration file from a USB Memory Stick onto an EX3300 (Junos 15.1R7.8) without success.

I followed the following guideline:

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/autoinstallation-ex-series-usb-autoinstallation.html

Who successfully auto-installed a configuration file from a USB Memory Stick onto an EX3300?

When USB Memory Stick was inserted EX3300 stuck in boot loop until USB Memory stick was extracted. See following command lines:

root@TEST_USB-Bootstrap# Jun 28 18:22:19 init: vchassis-diag-manager (PID 1407) stopped by signal 17
Jun 28 18:22:19 init: license-service (PID 1405) stopped by signal 17
Jun 28 18:22:19 init: multicast-snooping (PID 1404) stopped by signal 17
Jun 28 18:22:19 init: dot1x-protocol (PID 1403) stopped by signal 17
Jun 28 18:22:19 init: sflow-service (PID 1402) stopped by signal 17
Jun 28 18:22:19 init: pki-service (PID 1400) stopped by signal 17
Jun 28 18:22:19 init: shm-rtsdbd (PID 1399) stopped by signal 17
Jun 28 18:22:19 init: ethernet-switching (PID 1398) stopped by signal 17
Jun 28 18:22:19 init: secure-neighbor-discovery (PID 1397) stopped by signal 17
Jun 28 18:22:19 init: bdbrepd (PID 1396) stopped by signal 17
Jun 28 18:22:19 init: redundancy-device (PID 1393) stopped by signal 17
Jun 28 18:22:19 init: smid (PID 1392) stopped by signal 17
Jun 28 18:22:19 init: neighbor-liveness (PID 1391) stopped by signal 17
Jun 28 18:22:19 init: firewall (PID 1390) stopped by signal 17
Jun 28 18:22:19 init: periodic-packet-services (PID 1389) stopped by signal 17
Jun 28 18:22:19 init: class-of-service (PID 1388) stopped by signal 17
Jun 28 18:22:19 init: remote-operations (PID 1387) stopped by signal 17
Jun 28 18:22:19 init: pfed (PID 1385) stopped by signal 17
Jun 28 18:22:19 init: sntp (PID 1384) stopped by signal 17Jun 28 18:22:19 init: packet-forwarding-engine (PID 1299) stopped by signal 17Terminated
root@:RE:0% JWaiting (max 60 seconds) for system process `vnlru_mem' to stop...done
Waiting (max 60 seconds) for system process `vnlru' to stop...done
Waiting (max 60 seconds) for system process `bufdaemon' to stop...done
Waiting (max 60 seconds) for system process `syncer' to stop...
Syncing disks, vnodes remaining...6 6 6 5 1 2 3 3 2 1 0 0 0 0 0 0 done
syncing disks... All buffers synced.
Uptime: 1h5m57s
Rebooting...
U-Boot 1.1.6 (Jun  4 2012 - 01:56:18)
Board: EX3300-24T 5.14
EPLD:  Version 04.130327 (0x02)
DRAM:  Initializing (1GB)
Flash: 8 MB
Firmware Version: --- 01.00.00 ---
USB:   scanning bus for devices...
Root Hub 0: 2 USB Device(s) found
T
      USB device not responding, giving up (status=40000000)
Root Hub 1: 2 USB Device(s) found
       scanning bus for storage devices... T Device NOT ready
   Request Sense returned 00 00 00
0 Storage Device(s) found
ELF file is 32 bit
Consoles: U-Boot console
FreeBSD/arm U-Boot loader, Revision 1.1
(builder@greteth, Mon Jun  4 01:40:05 UTC 2012)
Memory: 1024MB
bootsequencing is disabled
new boot device =
U-Boot 1.1.6 (Jun  4 2012 - 01:56:18)
Board: EX3300-24T 5.14
EPLD:  Version 04.130327 (0x02)
DRAM:  Initializing (1GB)
Flash: 8 MB
Firmware Version: --- 01.00.00 ---
USB:   scanning bus for devices...
Root Hub 0: 2 USB Device(s) found
      USB device not responding, giving up (status=20)
Root Hub 1: 2 USB Device(s) found
       scanning bus for storage devices... Device NOT ready
   Request Sense returned 00 00 00
0 Storage Device(s) found
ELF file is 32 bit
Consoles: U-Boot console
FreeBSD/arm U-Boot loader, Revision 1.1
(builder@greteth, Mon Jun  4 01:40:05 UTC 2012)
Memory: 1024MB
bootsequencing is disabled
new boot device =
U-Boot 1.1.6 (Jun  4 2012 - 01:56:18)
Board: EX3300-24T 5.14
EPLD:  Version 04.130327 (0x02)
DRAM:  Initializing (1GB)
Flash: 8 MB
Firmware Version: --- 01.00.00 ---
USB:   scanning bus for devices...
Root Hub 0: 2 USB Device(s) found
      USB device not responding, giving up (status=20)
Root Hub 1: 2 USB Device(s) found
       scanning bus for storage devices... Device NOT ready
   Request Sense returned 00 00 00
0 Storage Device(s) found
ELF file is 32 bit
Consoles: U-Boot console
FreeBSD/arm U-Boot loader, Revision 1.1
(builder@greteth, Mon Jun  4 01:40:05 UTC 2012)
Memory: 1024MB
bootsequencing is disabled
new boot device =
U-Boot 1.1.6 (Jun  4 2012 - 01:56:18)
Board: EX3300-24T 5.14
EPLD:  Version 04.130327 (0x02)
DRAM:  Initializing (1GB)
Flash: 8 MB
Firmware Version: --- 01.00.00 ---
USB:   scanning bus for devices...                                            # USB Memory stick extracted
Root Hub 0: 2 USB Device(s) found
Root Hub 1: 1 USB Device(s) found
       scanning bus for storage devices... 1 Storage Device(s) found
ELF file is 32 bit
Consoles: U-Boot console
FreeBSD/arm U-Boot loader, Revision 1.1
(builder@greteth, Mon Jun  4 01:40:05 UTC 2012)
Memory: 1024MB
bootsequencing is disabled
new boot device =
Loading /boot/defaults/loader.conf
/kernel data=0x9d0e98+0xfeed8 syms=[0x4+0x10a910+0x4+0xe4b71]
Hit [Enter] to boot immediately, or space bar for command prompt.
Booting [/kernel]...
Kernel entry at 0x1400100 ...
GDB: debug ports: uart
GDB: current port: uart
KDB: debugger backends: ddb gdb
KDB: current backend: ddb
Copyright (c) 1996-2018, Juniper Networks, Inc.
All rights reserved.
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
       The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
JUNOS 15.1R7.8 #0: 2018-04-27 20:41:48 UTC
    builder@watatsumi.juniper.net:/volume/build/junos/15.1/release/15.1R7.8/obj/arm/junos/bsd/kernels/JUNIPER-EX-3300/kernel
can't re-use a leaf (all_slot_serialid)!
CPU: Early Feroceon 88FR571 rev 0 (Marvell core)
cpu55: Early Feroceon 88FR571 revision   WB enabled EABT branch prediction enabled
  32KB/32B 4-way Instruction cache
  32KB/32B 4-way write-back-locking-C Data cache
real memory  = 1073741824 (1024 MB)
avail memory = 1028313088 (980 MB)
SOC: Marvell MV78100, TClock 200MHz
Security policy loaded: Junos MAC/veriexec (mac_veriexec)
Security policy loaded: JUNOS MAC/pcap (mac_pcap)
Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
MAC/veriexec fingerprint module loaded: SHA1
MAC/veriexec fingerprint module loaded: SHA256
ETHERNET SOCKET BRIDGE initialising
Initializing EXSERIES properties ...
mbus0: <Marvell Internal Bus (Mbus)> on motherboard
ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 8 on mbus0
gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 56,57,58,59 on mbus0
uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 12 on mbus0
uart0: console (9600,n,8,1)
uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 13 on mbus0
ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 72,16 on mbus0
usb0: EHCI version 1.0
usb0 on ehci0
usb0: USB revision 2.0
uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 1 port with 1 removable, self powered
umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 2
ehci1: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1051000-0xf1051fff irq 72,17 on mbus0
usb1: EHCI version 1.0
usb1 on ehci1
usb1: USB revision 2.0
uhub1: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub1: 1 port with 1 removable, self powered
ehci2: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1052000-0xf1052fff irq 72,18 on mbus0
usb2: EHCI version 1.0
usb2 on ehci2
usb2: USB revision 2.0
uhub2: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 1 port with 1 removable, self powered
mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 41,42,43,40,70 on mbus0
mge0: hardware MAC address f4:b5:2f:52:30:ff
miibus0: <MII bus> on mge0
e1000phy0: <Marvell 88E1310 Gigabit PHY> on miibus0
e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f on mbus0
8564 rtc0: <8564 RTC> on i2c0
poe0: <POE> on i2c0
poe_attach: re-types method failed
device_attach: poe0 attach returned 19
i2c1: <Marvell I2C ARM OnChip Controller> at mem 0xf1011100-0xf101111f on mbus0
pcib0: <Marvell MV78100 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xebffffff on mbus0
pci0: <PCI bus> on pcib0
mpfe0: <Juniper EX-series Packet Forwarding Engine> mem 0xe8000000-0xebffffff irq 112 at device 1.0 on pci0
mpfe0: 0x100000 bytes of rid 0x10 res 3 failed (0, 0xffffffff).
syspld0 at mem 0xf9000000-0xf90fffff on mbus0
cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8800000-0xf8ffffff irq 1 on mbus0
Initializing product: 112 ..
Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
Registered AMT tunnel Encap with UDP Tunnel!
Loading Redundant LT driver
###PCB Group initialized for udppcbgroup
###PCB Group initialized for tcppcbgroup
da0 at umass-sim0 bus 0 target 0 lun 0
da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
da0: 40.000MB/s transfers
da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
Kernel thread "wkupdaemon" (pid 45) exited prematurely.
Trying to mount root from ufs:/dev/da0s1a
Attaching /packages/junos via /dev/mdctl...
Mounted junos-ex package on /dev/md0...
Verified manifest signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified jboot signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified junos-ex-15.1R7.8 signed by PackageProductionEc_2018 method ECDSA256+SHA256
Mounted fips-mode-arm package on /dev/md2...
Verified manifest signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified fips-mode-arm-15.1R7.8 signed by PackageProductionEc_2018 method ECDSA256+SHA256
Mounted jdocs-ex package on /dev/md4...
Verified manifest signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified jdocs-ex-15.1R7.8 signed by PackageProductionEc_2018 method ECDSA256+SHA256
Mounted junos-ex-3300 package on /dev/md6...
Verified manifest signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified junos-ex-3300-15.1R7.8 signed by PackageProductionEc_2018 method ECDSA256+SHA256
Mounted jweb-ex package on /dev/md8...
Verified manifest signed by PackageProductionEc_2018 method ECDSA256+SHA256
Verified jweb-ex-15.1R7.8 signed by PackageProductionEc_2018 method ECDSA256+SHA256
Executing /packages/mnt/jweb-ex-15.1R7.8/mount.post..
Error execution /packages/mnt/jweb-ex-15.1R7.8/mount.post: path /var/jail does not exist
Automatic reboot in progress...
Media check on da0 on ex platforms
** /dev/da0s1a
FILE SYSTEM CLEAN; SKIPPING CHECKS
clean, 22716 free (12 frags, 2838 blocks, 0.0% fragmentation)
** Last Mounted on /var
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
365 files, 802 used, 62100 free (236 frags, 7733 blocks, 0.4% fragmentation)
Computing slice and partition sizes for /dev/da0 ...
checking for core dump...
savecore: could not be determined
No dump exists
** Last Mounted on /var/tmp
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
4 files, 4 used, 188850 free (26 frags, 23603 blocks, 0.0% fragmentation)
** Last Mounted on /config
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
3 files, 4 used, 31602 free (34 frags, 3946 blocks, 0.1% fragmentation)
rm: /var/etc/pam.conf: Operation not permitted
mkdir: /mfs/var/sdb: No such file or directory
mkdir: /mfs/var/sdb: No such file or directory
Creating initial configuration...mgd: error: Cannot open configuration file: /config/juniper.conf
mgd: warning: activating factory configuration
mgd: Running FIPS Self-tests
veriexec: no signatures for device. file='/sbin/kats/cannot-exec' fsid=71 fileid=51404 gen=1 uid=0 pid=531
mgd: FIPS Self-tests Skipped
mgd: Running FIPS Self-tests
veriexec: no signatures for device. file='/sbin/kats/cannot-exec' fsid=71 fileid=51404 gen=1 uid=0 pid=592
mgd: FIPS Self-tests Skipped
mgd: commit complete
mgd: ----------------------------------------------------------
mgd: Please login as 'root'. No password is required.
mgd: To start Initial Setup, type 'ezsetup' at the JUNOS prompt.
mgd: To start JUNOS CLI, type 'cli' at the JUNOS prompt.
mgd: ----------------------------------------------------------
Setting initial options:  debugger_on_panic=NO debugger_on_break=NO.
Starting optional daemons: .
Doing initial network setup:
.
Initial interface configuration:
additional daemons:.
Additional routing options:kern.module_path: /boot//kernel;/boot/modules ->Loading the CHMIC module
/boot/modules;/modules/peertype;/modules/ifpfe_drv;/modules/platform;/modules;
kld netpfe drv: ifpfed_chmic ifpfed_ml_cmn ifpfLoading the EX-series platform NETPFE module
ed_svcskld platform: ex_ifpfe if_vcpkld peertype: peertype_hcm peertype_pfem peertype_sfi peertype_slavere grat_arp_on_ifup=YES: net.link.ether.inet.grat_arp_on_ifup: 1 -cryptosoft0: <software crypto> on motherboard> 1
ipsec kld kats kldkldload: can't load kats.ko: File exists
IPsec: Initialized Security Association Processing.
.
Doing additional network setup:.
Starting final network daemons:.
starting local daemons:set cores for group access
.
Boot media /dev/da0 has dual root support
** /dev/da0s2a
FILE SYSTEM CLEAN; SKIPPING CHECKS
clean, 23228 free (28 frags, 2900 blocks, 0.0% fragmentation)
setting ldconfig path: /usr/lib /opt/lib
starting standard daemons: cron.
Local package initialization:.
Initialize /var subdirs
Thu Jun 28 18:56:58 UTC 2018
Amnesiac (ttyu0)
login: root
--- JUNOS 15.1R7.8 built 2018-04-27 20:41:48 UTC
root@:RE:0% cli
Broadcast Message from root@
        (no tty) at 18:57 UTC...
ALERT:Auto image Upgrade will start. This can terminate config         CLI sess
ion(s). Modified configuration will be lost. To stop Auto-image, in CLI do the
following: 'edit; delete chassis auto-image-upgrade; commit'.
{master:0}
root> configure
Entering configuration mode
Users currently editing the configuration:
  autodconfig (pid 1471) on since 2018-06-28 18:57:38 UTC
      exclusive
{master:0}[edit]
root#
{master:0}[edit]
root#
{master:0}[edit]
root#

I have never done what you are trying, but I "think" maybe that doc page has some inaccuracies! 

After power-up with USB installed, I believe switch is looking for a Junos OS image file  on USB to boot off of.

Since you are able to get to console, why not load the image via load terminal ?

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/junos-config-files-loading.html

https://www.juniper.net/documentation/en_US/release-independent/topics/task/configuration/ex-series-configuration-uploading-cli.html

This method works for sure -

yes its L2 ae trunk and yes i can ssh back to the core. whats your thoughts?

I assume all IPs are in same subnet then, yes?  If yes, I suggest you contact TAC -