Showing posts with label Troubleshoot. Show all posts
Showing posts with label Troubleshoot. Show all posts

Monday, 18 March 2013

Juniper SRX minor system alarms

Juniper SRX minor system alarms

Recently we replaced one of our Juniper SRX firewalls and I had to put the new one into the cluster.
Once I had finished configuring the new device, I ran few commands to make sure everything was ok.

I want to make sure the cluster was running smoothly, make sure the system was behaving properly.

Then I came across two minor system alarms:

root@firewall-a01> show system alarms
2 alarms currently active
Alarm time               Class  Description
2013-02-26 16:11:35 UTC   Minor Rescue configuration is not set
2013-02-26 16:11:36 UTC  Minor  Autorecovery information needs to be saved

root@firewall-a01>show chassis craft-interface

All the juniper firewall is telling us is, we need to:

1) We need to set the rescue configuration
root@firewall-a01>request system configuration rescue save

2) We need to save an auto-recovery configuration
root@firewall-a01> request system autorecovery state save

This will take care of these minor alarms and everything will look nice and green.

I think these are nice features provided by Juniper. Creating a restore point where you know when things were working fine ans you can restore easily and quick is just a nice thinking.

Autorecovery

To save current state of the disk partitioning, configuration, and licenses for autorecovery.
root@firewall-a01> request system autorecovery state save
To clear all saved autorecovery information.
root@firewall-a01> request system autorecovery state clear

To perform checks and shows status of all autorecovered items.
root@firewall-a01> show system autorecovery state   
Acording to the Juniper website:
Amber and steadily on indicates a major alarm, such as low memory (less than 10% remaining), session full, maximum number of VPN tunnels reached,
HA status change, or redundant group member not found.

Trobleshooting Amber lights on SRX
root@firewall-a01>show chassis craft-interface

You should see an output similar to the one below:
Front Panel System Indicator:
Routing Engine   0
-----------------------------
OK               *

Front Panel Alarm Indicator:
----------------------------
RED            .
ORANGE         *

Front Panel HA Indicator:
-------------------------
GREEN          .

Front Panel PS Indicator:
PS             0
-------------------------
RED            .
GREEN          *


I hope this will help you guys.

by Renato de Oliveira