Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
Wondering if anyone else is seeing this.
I randomly run into really high latency issues pinging/monitoring the management IP address of some of my ex2300 series switches. Latency of 2000+ms or just plain timeouts will happen. I will start getting alerts from my SNMP monitoring system. It doesn't seem to impact the devices plugged into the switches, just the management. Sometimes I won't be able to SSH into them it gets so bad. The logs never really show anything telling of the problem.
Thanks for the response, that is one thing I'm trying to keep an eye on.
Do you know of a way to get more of a continous update on resource useage, like TOP?
The junos command from kb26261 listed above is essentially running top from inside junos. This will help you identify what is using the cpu during incidents.
show system processes extensive
Yeah, I was looking for something that isn't static, like how TOP continously updates those fields.
Maybe that isn't an option with this command.
You can drop to the shell and run top directly too.
Good Day, i am seeing this same issue still. Anyone know why this is happening. Previously these switches were completely inaccesable, only after i picked up on some IPV6 ICMP traffic on the network and blocked it the switches become accessible again, however i am still seeing from time to time this happeing. I am also concerend that it might be effecting passthought traffic aswell.
I too have this problem. Only EX2300's are affected, even the old EX2200 soldier on untroubled. I have opened an SR back in October and I now have a third guy (now on secon level) looking at it. Problem is that nothing seems to happen, after a few initial messages with each tech radio silence follows. Do you guys have any advice?
Thaks for the advice!
I'm actually not concened by longish ping delays, I'm more concerned by the periods, when the switch is totally unresponsive to connections to admin address. This happens after increasing ping times (but not every time). During these periods e.g. ssh connection to admin IP stops for some time. Longest such periods are on the order of one to two minutes (as reported by network monitoring). All but one of our EX2300 units run recommended software (15.1X53-D591). Most units have 802.1x authentication and dynamic VLAN assignment configured (and this seems to be affected by both the delays and traffic blocks). The delay/blocking behaviour is the same with or without dot1x configuration. All swithces run ntp to get correct time and I routinely remove the "irb unit 0 family inet dhcp vendor-id" from all Juniper switches.
PS: Thus far I have not seen this behaviour in EX2300-MP units. They have an irritating feature of their own (fxpc process dumping core about once a week).
We have these issues too. We'd be happy to run the recommended code from the 18 train, but when we install it, etherports aren't recognized/don't come up/stay up.
JTAC has been unable to assist.
We resolved these issues on our ex2300's by getting rid of any unnecessary DHCP commands in the configs. This was mentioned in one of the posts above. We also saw the issue from time to time because we had some DHCP trace logging happening, and it would spike the CPU.
From my findings the key to solving this ussue is to watch the resource useage on the switch, if the cpu use is high ICMP traffic will not get prioritized, I've seen DHCP start failing as well becuase the cpu use was too high.
We successfuly upgraded most of our ex2300's from the 15.1 versions to 18.2R3 without issue.
If there's no impact to traffic, we can rule out the possibility of a layer 2 loop or storm kind of time.
Since only ICMP (maybe other protocols) towards control plane is impacted, we need to check if there's any high CPU, if the router/switch is protected well against untrusted traffic by lo0 filter, any policier/filter/arp drops. All those needs to be checked through console during problem states