Over the past few days I've been upgrading to JUNOS 10.2R3.10 on three branch SRX 210s and two main office SRX 650s. Yesterday I upgraded the three SRX 210s without issue (although I had to host the upgrade image on an Internet accessible web server so the SRX could download it properly - I had issues getting the SRX to download the image over the VPN tunnel from the main office site). So today I set out to upgrade on of the SRX 650s which had active tunnels to the three SRX 210s. All appeared to go well, however, when the SRX 650 recovered only one of the branch SRX 210s recovered. The other two SRX 210s didn't recover although I could see in the logs (show log kmd) that they were trying to connect. The only real common point was that the two SRX 210s that didn't recover where configured as aggressive mode while the one SRX 210 that did recover was configured as main mode.
It ended up that I had to reboot both SRX 210s that were configured as aggressive mode to get them to reconnect after I upgraded the SRX 650.
Is that odd or what?
