SRX

 View Only
last person joined: 16 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX345 alarm LEDS - clearing

    Posted 07-30-2018 09:17

    Seems like a trivial problem but if the led stays red it becomes useless.

    This is a new install of an srx345. During install I created an internet disconnection alarm. This caused 2 alarm entrys - one chassis and one system with the date of the occurrence. (not a management disconnect issue). The internet is connected and functioning now.

    I can't clear the leds. I don't care about the log.

    I have rebooted, I have tried the CLI entry of   clear led alarm  . (This from an SSH via Mac terminal)

    If I look for all possible uses of  clear  I don't find anything except   clear errors  which demands some further entry. 

    Unit is running fine otherwise. I have an ips installed.

    Is this a software bug? 

    Is there some obscure incantation that I'm missing?

    Thanks

    Mark



  • 2.  RE: SRX345 alarm LEDS - clearing

    Posted 07-30-2018 10:39

    please provide output of 'show chassis alarms' and 'show system alarms' to figure out which event(s) are triggering the red alarm.

     

    Then we can help you solve it 🙂



  • 3.  RE: SRX345 alarm LEDS - clearing

    Posted 07-30-2018 10:56

    Here is:

     

    @Juniper_srx345> show chassis alarms 

    1 alarms currently active

    Alarm time               Class  Description

    2018-07-29 21:07:58 EDT  Major  Host 0 fxp0 : Ethernet Link Down

     

    @Juniper_srx345> show system alarms 

    1 alarms currently active

    Alarm time               Class  Description

    2018-07-29 21:07:58 EDT  Major  Host 0 fxp0 : Ethernet Link Down

     

     

    As I noted this occurred at one time on one day only. Actually the install was several days ago but the reboot try was yesterday. I assume it picked up that date.

     

    Mark

     

     



  • 4.  RE: SRX345 alarm LEDS - clearing
    Best Answer

    Posted 07-30-2018 11:03

    The alarm is active as you don't have link on the dedicated management port on the SRX345. If you don't intend to use this port and utilize inline management via one of the revenue interfaces, you can add this setting to your configuration to remove the alert:

     

    'set chassis alarm management-ethernet link-down ignore'



  • 5.  RE: SRX345 alarm LEDS - clearing

    Posted 07-30-2018 11:25

    Thanks!  That works.

     

    Now what did I miss? Host 0 fxp0 .

    So I guess Host 0 somehow relates to management port ???

    Intersting I saw this report but couldn't connect it to the management issue.

     

    Mark



  • 6.  RE: SRX345 alarm LEDS - clearing

    Posted 07-30-2018 11:33

    host0 is the SRX itself. If there were two SRX firewalls in a chassis cluster, you would have both host0 and host1.

    Can also be related to a router with dual routing-engines (SRX5000 series + larger MX chassis).

     

    Management port is generally refered to as fxp0 in the Junos configuration.

     

    More about management interfaces on the SRX platform.: https://www.juniper.net/documentation/en_US/junos/topics/concept/interface-security-management-understanding.html

     

    P.S. Usually you mark the post which helped you the most as the accepted solution - not your own follow up 🙂



  • 7.  RE: SRX345 alarm LEDS - clearing

    Posted 07-31-2018 17:16

    I prefer to admin down the fxp0 port instead of using the ignore link down option.

     

    set interfaces fxp0 disable