SRX

 View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
Expand all | Collapse all

Dual Control link SRX5800 not working

  • 1.  Dual Control link SRX5800 not working

    Posted 01-25-2018 01:36

    Hello,

    I have question wrt to dual control link. i have srx with two RE installed

    Below my configuration :

     

     show configuration chassis cluster
    control-link-recovery;
    control-ports {
        fpc 0 port 0;
        fpc 12 port 0;
        fpc 0 port 1;
        fpc 12 port 1;

    ( i know that it s not recomended to use just single spc 🙂 anyway it must be in that configuration )

    show chassis cluster control-plane statistics
    Control link statistics:
        Control link 0:
            Heartbeat packets sent: 2064
            Heartbeat packets received: 2059
            Heartbeat packet errors: 0
        Control link 1:
            Heartbeat packets sent: 2064
            Heartbeat packets received: 0
            Heartbeat packet errors: 0

     

    as you can see second link is not receiving heartbeats. In cluster information looks as follows : 

        Control-link Failure Information:
            Link Status: Up
            Dual Control Link Status: Activated

     

    How can i troubleshoot it? Is it possible that i missed something in configuration? As far as i know there is not more config required. I would like to check what could be the cause. Worth to notice that devices are directly connected via fiber. 

     

    Thanks



  • 2.  RE: Dual Control link SRX5800 not working

     
    Posted 01-25-2018 01:49
    Can you share this output from both nodes.

    show chassis cluster control-plane statistics


  • 3.  RE: Dual Control link SRX5800 not working

    Posted 01-25-2018 01:56

    sure, here you are :

     

    node 0 :

     

    how chassis cluster control-plane statistics
    Control link statistics:
        Control link 0:
            Heartbeat packets sent: 3448
            Heartbeat packets received: 3443
            Heartbeat packet errors: 0
        Control link 1:
            Heartbeat packets sent: 3448
            Heartbeat packets received: 0
            Heartbeat packet errors: 0

    node 1 :

     

    show chassis cluster control-plane statistics
    Control link statistics:
        Control link 0:
            Heartbeat packets sent: 7789
            Heartbeat packets received: 7594
            Heartbeat packet errors: 0
        Control link 1:
            Heartbeat packets sent: 7789
            Heartbeat packets received: 0
            Heartbeat packet errors: 0



  • 4.  RE: Dual Control link SRX5800 not working

    Posted 01-25-2018 03:29

    Hi Kzet, 

     

    What is the version of Junos running of the  RE1 (secondary RE) ? You have to explicitly console onto the RE1 to view the version. 

     

    You could check this KB30371 which mentions that certain versions of RE needs to be be upgraded to the non-affected versions in order to bring up the secondary control link, 

     

    The affected versions are, 

     

    • 12.1X47-D10  through 12.1X47-D30
    • 12.1X48-D10 through 12.1X48-D25
    • 15.1X49-D10 through 15.1X49-D30

    I would also recommend you to check / swap the SFPs , fibre to rule out any HW issues.  



  • 5.  RE: Dual Control link SRX5800 not working

    Posted 01-25-2018 03:49

    I read similar article therefore i ve upgraded both RE1 recently:

     

    RE0 : Model: srx5800
    Junos: 15.1X49-D110.4
    JUNOS Software Release [15.1X49-D110.4]

    RE1:

    root> show version
    Model: olive
    JUNOS Software Release [12.3X48-D60.2]

     

    If i understood it correctly, this version is free of error. I will check cable again( which are completly new )  but i do not have more idea for now 🙂

     ps. version of junos can be different on RE1 inn compare to RE0? as far as i know yes, but maybe i did not read something



  • 6.  RE: Dual Control link SRX5800 not working

    Posted 01-25-2018 06:57

    i changed cables from control link 0 which was working fine to control link 1 and in opposite way from 1 to 0... and the same situation.. :


        Control link 0:
            Heartbeat packets sent: 25605
            Heartbeat packets received: 24465
            Heartbeat packet errors: 0
        Control link 1:
            Heartbeat packets sent: 25605
            Heartbeat packets received: 0
            Heartbeat packet errors: 0

     

    in both nodes. So i think that i can exclude cable issue. I will power off cluster and replug re1 on both nodes, after again check system version etc and reconnect cables. If it will not help, i am affraid that only jtac can help..


    What do you think ?

     



  • 7.  RE: Dual Control link SRX5800 not working

     
    Posted 01-25-2018 07:16
    You need to reboot the secondary RE after unplug of cables, if I remember correctly the secondary control link is not hot swappable.


  • 8.  RE: Dual Control link SRX5800 not working

    Posted 01-26-2018 02:05

    I am affraid that i did everything and unfortunately it still not working.  I will open jtac.

     

    what i did :

     

    Upgrade of RE0 to newest version : 15.1X49-D120.3

    Upgrade  of RE01 to :12.3X48-D60

    changed cable

    changed sfp

    reboot re1

    power off - replug re01-power on

     

    still the same beheaviour, heartbeats are being sent but not received on both side



  • 9.  RE: Dual Control link SRX5800 not working

    Posted 01-26-2018 03:01

    Two cluster members in an SRX chassis cluster must run the same version. This is mentioned in the deployment guide (https://kb.juniper.net/library/CUSTOMERSERVICE/GLOBAL_JTAC/NT260/SRX_HA_Deployment_Guide.pdf) on page 11:

     

     

    "1. Make sure that both devices that will be clustered together are running the exact same Junos software release. "

     

    Please upgrade RE1 to 15.1x49-D120.3 and report back with the result.



  • 10.  RE: Dual Control link SRX5800 not working

    Posted 01-26-2018 04:08

    Hi,

    I do not think that its the root cause becaus of :

     

    https://www.juniper.net/documentation/en_US/junos/topics/concept/chassis-cluster-dual-control-link-understanding.html

     

    it says :

     

    The second Routing Engine, to be installed on SRX5000 line devices only, does not provide backup functionality. It does not need to be upgraded, even when there is a software upgrade of the master Routing Engine on the same node.

     

    so in my view second routing engine does not have to be the same software version. In my case of course master routing engines on both nodes have the same soft, Jus secondary have different



  • 11.  RE: Dual Control link SRX5800 not working
    Best Answer

    Posted 09-06-2018 03:25

    Issue solved quite time ago but forgot to mentioned about it here. Upgrade to different version solved an issue.