SRX

 View Only
last person joined: 21 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
Expand all | Collapse all

Archival-Feature isn`t working anymore

  • 1.  Archival-Feature isn`t working anymore

    Posted 07-25-2017 02:25

    Hi all,

     

    since we had moved to a new archival-site, the commit-on-transfer isn`t working anymore.

    But this issue only occures on one SRX (Cluster). The other SRX-Systems are working fine with the new archival-site ...

     

    I have deleted the archival-statement and configured it new.

    I also checked, that the ssh-know-hosts was updated.

    I can also connect via ssh to the archival-target.

     

    Here is the logoutput: As you can see, there are some configs queued ... maybe too much ??

     

    <27>1 2017-07-25T09:27:00.637+02:00 junipersrx logger - - - transfer-file: file /var/transfer/config/junipersrx_juniper.conf.gz_20170602_133829 not found
    <27>1 2017-07-25T09:27:05.530+02:00 junipersrx logger - - - transfer-file failed to transfer /var/transfer/config/junipersrx_juniper.conf.gz_20170602_164823
    <27>1 2017-07-25T09:37:01.780+02:00 junipersrx logger - - - transfer-file failed to transfer /var/transfer/config/junipersrx_juniper.conf.gz_20170602_164823
    
    
    
    
    /var/transfer/config/:
    total blocks: 1400
    -rw-r-----  1 root  wheel      24014 Jun 2  19:53 junipersrx_juniper.conf.gz_20170602_175321
    -rw-r-----  1 root  wheel      24018 Jun 2  20:48 junipersrx_juniper.conf.gz_20170602_184849
    -rw-r-----  1 root  wheel      24021 Jun 2  21:36 junipersrx_juniper.conf.gz_20170602_193644
    -rw-r-----  1 root  wheel      24020 Jun 2  21:39 junipersrx_juniper.conf.gz_20170602_193921
    -rw-r-----  1 root  wheel      24024 Jun 2  21:49 junipersrx_juniper.conf.gz_20170602_194901
    -rw-r-----  1 root  wheel      24024 Jun 2  21:50 junipersrx_juniper.conf.gz_20170602_195042
    -rw-r-----  1 root  wheel      24037 Jun 3  01:04 junipersrx_juniper.conf.gz_20170602_230455
    -rw-r-----  1 root  wheel      24042 Jun 3  01:07 junipersrx_juniper.conf.gz_20170602_230757
    -rw-r-----  1 root  wheel      24047 Jun 3  01:09 junipersrx_juniper.conf.gz_20170602_230932
    -rw-r-----  1 root  wheel      24036 Jun 6  00:44 junipersrx_juniper.conf.gz_20170605_224417
    -rw-r-----  1 root  wheel      24044 Jun 6  00:56 junipersrx_juniper.conf.gz_20170605_225640
    -rw-r-----  1 root  wheel      24036 Jun 6  07:09 junipersrx_juniper.conf.gz_20170606_050948
    -rw-r-----  1 root  wheel      24044 Jun 6  07:32 junipersrx_juniper.conf.gz_20170606_053215
    -rw-r-----  1 root  wheel      23987 Jun 6  08:25 junipersrx_juniper.conf.gz_20170606_062553
    -rw-r-----  1 root  wheel      23966 Jun 6  08:27 junipersrx_juniper.conf.gz_20170606_062746
    -rw-r-----  1 root  wheel      23924 Jun 6  13:33 junipersrx_juniper.conf.gz_20170606_113319
    -rw-r-----  1 root  wheel      23937 Jun 13 08:30 junipersrx_juniper.conf.gz_20170613_063052
    -rw-r-----  1 root  wheel      23930 Jun 13 08:32 junipersrx_juniper.conf.gz_20170613_063227
    -rw-r-----  1 root  wheel      23879 Jun 16 08:37 junipersrx_juniper.conf.gz_20170616_063733
    -rw-r-----  1 root  wheel      23880 Jun 16 08:41 junipersrx_juniper.conf.gz_20170616_064135
    -rw-r-----  1 root  wheel      23921 Jun 26 14:45 junipersrx_juniper.conf.gz_20170626_124553
    -rw-r-----  1 root  wheel      23980 Jul 19 12:45 junipersrx_juniper.conf.gz_20170719_104519
    -rw-r-----  1 root  wheel      24022 Jul 21 09:00 junipersrx_juniper.conf.gz_20170721_070044
    -rw-r-----  1 root  wheel      24027 Jul 24 11:30 junipersrx_juniper.conf.gz_20170724_093021
    -rw-r-----  1 root  wheel      24030 Jul 24 11:31 junipersrx_juniper.conf.gz_20170724_093132
    -rw-r-----  1 root  wheel      24146 Jul 25 09:01 junipersrx_juniper.conf.gz_20170725_070105
    -rw-r-----  1 root  wheel      24155 Jul 25 09:06 junipersrx_juniper.conf.gz_20170725_070630
    -rw-r-----  1 root  wheel      24146 Jul 25 09:16 junipersrx_juniper.conf.gz_20170725_071608
    -rw-r-----  1 root  wheel      24146 Jul 25 09:26 junipersrx_juniper.conf.gz_20170725_072624
    total files: 29

    So, how can I troubleshoot this issue.

     

    Thanks to you all.

     

    Cheers, Christoph.



  • 2.  RE: Archival-Feature isn`t working anymore

     
    Posted 07-26-2017 02:09

    can you share the config? are you able to connect to server manually? for example if you are using scp, can you connect manully to the same server from srx manually?



  • 3.  RE: Archival-Feature isn`t working anymore
    Best Answer

    Posted 07-26-2017 02:40

    Hi Suraj,

    Thanks for your reply.

    I have just solved the problem by myself a couple of minutes ago.

    Explanation:

    I accepted remote-backup-device fingerprint onyl with my own SRX-User-Account, but not in root-account.

    After I logged into SRX via root, and acceppted the remote-backup-target`s fingerprint, the files started to transmitting.

     

    Thanks to you all.

    Cheers, Christoph.



  • 4.  RE: Archival-Feature isn`t working anymore

    Posted 12-22-2020 20:53

    Hi Christoph,

    I know, this is an old thread, but I'm having the same issue. Starting November my auto archival stopped working.

    I see messages like that

    Dec 22 20:36:47 glGW01 mgd[40273]: UI_COMMIT_COMPLETED: : commit complete
    Dec 22 20:36:54 glGW01 logger: transfer-file failed to transfer /var/transfer/config/glGW01_20201216_160858_juniper.conf.gz rc 1

    Can you explain your solution in more details?

    More Details from the logs:

    Dec 22 21:12:51 glGW01 logger: transfer-file failed to transfer /var/transfer/config/glGW01_20201223_004848_juniper.conf.gz rc 1
    Dec 22 21:12:51 glGW01 pfed: ACCT_TRANSFER_FILE_FAILED_ITER: Error <256> uploading file '/var/transfer/config/glGW01_20201223_004848_juniper.conf.gz'. Remaining retry attempts = 2, retry in 295 seconds...

    Manual copy works fine:

    XXX@glGW01> file copy /var/transfer/config/*.* scp://user@192.168.X.X:24/glGW01
    user@192.168.X.X's password:
    glGW01_20201223_012712_juniper.conf.gz 100% 7982 1.0MB/s 00:00
    glGW01_20201223_015720_juniper.conf.gz 100% 7983 1.2MB/s 00:00
    glGW01_20201223_020802_juniper.conf.gz 100% 8002 1.3MB/s 00:00
    glGW01_20201223_011053_juniper.conf.gz 100% 7981 907.0KB/s 00:00
    glGW01_20201223_004848_juniper.conf.gz 100% 7980 1.4MB/s 00:00
    glGW01_20201223_013504_juniper.conf.gz 100% 7774 1.2MB/s 00:00
    glGW01_20201223_013639_juniper.conf.gz 100% 7983 1.3MB/s 00:00
    glGW01_20201223_021156_juniper.conf.gz 100% 7982 1.3MB/s 00:00

    Thank you.



  • 5.  RE: Archival-Feature isn`t working anymore

    Posted 12-23-2020 08:54

    Just a share  as I  there is a known unpublished PR on this for QFX (so maybe the SRX as well)  .  We noticed this failure  once we upgraded to 20 and it stopped archiving.

    From my testing and trying to make a work around with  on box scripting I got the same results when using curl.   So im guessing under the hood archive uses curl . Looking forward to seeing if I was right once the bug has been resolved.

    We don't archive on commit .. So  Long story short.. I'm working on a script now sftp to the switch/router/fw and get the file I want from /config/

    and just save it with in the format archive does.




  • 6.  RE: Archival-Feature isn`t working anymore

    Posted 12-23-2020 10:30

    Yes.

    Looks like issue started when we upgraded to 20.2 and after.

    Hope it's going to be fixed soon.



    ------------------------------
    Alex
    ------------------------------



  • 7.  RE: Archival-Feature isn`t working anymore

    Posted 01-14-2021 06:00
    Hi,

    I've exactly same problems that Alex since I've upgraded my SRX320 from 19.3 to 20.4R1.12.

    Sames logs in /var/log/messages :

    Jan 14 11:49:38 abcdeg mgd[32530]: UI_COMMIT_COMPLETED: : commit complete
    Jan 14 11:50:09 abcdeg logger: transfer-file failed to transfer /var/transfer/config/abcdeg_20210114_104938_juniper.conf.gz rc 1
    Jan 14 11:50:09 abcdeg pfed: ACCT_TRANSFER_FILE_FAILED_ITER: Error <256> uploading file '/var/transfer/config/abcdeg_20210114_104938_juniper.conf.gz'. Remaining retry attempts = 2, retry in 295 seconds...
    Jan 14 11:52:04 abcdeg mgd[32530]: UI_DBASE_LOGOUT_EVENT: User 'root' exiting configuration mode
    Jan 14 11:55:08 abcdeg logger: transfer-file failed to transfer /var/transfer/config/abcdeg_20210114_104938_juniper.conf.gz rc 1


    Manual copying also works, which validate flow still open since junos upgrade :

    root@abcdeg% cd /var/transfer/config/
    root@abcdeg% ls
    abcdeg_20210114_104938_juniper.conf.gz
    root@abcdeg% ls -lrt
    total 12
    -rw-r----- 1 root wheel 4744 Jan 14 11:49 abcdeg_20210114_104938_juniper.conf.gz
    root@abcdeg% cli
    root@abcdeg> file copy /var/transfer/config/abcdeg_20210114_104938_juniper.conf.gz scp://root@tools01:/tmp
    root@tools01's password:
    abcdeg_20210114_104938_juniper.conf.gz 100% 4744 1.4MB/s 00:00


  • 8.  RE: Archival-Feature isn`t working anymore

    Posted 01-23-2021 11:09
    I contacted JTAC and their engineers admitted the issue and promised to fix it in the next release.

    ------------------------------
    Alex
    ------------------------------



  • 9.  RE: Archival-Feature isn`t working anymore

     
    Posted 01-25-2021 02:30
    Hi Alex,
    can you please share the PR number?
    Thanks
    Ulf


  • 10.  RE: Archival-Feature isn`t working anymore

    Posted 03-01-2021 09:48
    Hi,
    Same here, can anyone share the PR number please ?
    Best,
    G


  • 11.  RE: Archival-Feature isn`t working anymore

    Posted 08-25-2021 15:39
    PR1563641


  • 12.  RE: Archival-Feature isn`t working anymore

    Posted 09-14-2021 08:56
    Hi,

    We also had the same problem. Manual copy was working but it always said:
    "transfer-file failed to transfer /var/transfer/config/..........." in the logs.

    So I tried this:
    configure private
    set system archival configuration transfer-interval 15
    commit comment "archival setup - interval"
    set system archival configuration transfer-on-commit
    commit comment "archival setup - on commit" and-quit​

    Since then, configuration transfer on commit is working again.

    We have 20.2R2-S2.6.

    BR,
    Aleksandar

    ------------------------------
    ALEKSANDAR BAJER
    ------------------------------



  • 13.  RE: Archival-Feature isn`t working anymore

    Posted 09-23-2021 05:12
    I did try a bunch of SRX versions from 19.3 to 21.2.
    The most stable version where auto-archival actually works with scp and almost no other issues is 20.4R3.8
    At least in our environment.

    ------------------------------
    Alex
    ------------------------------