SRX

 View Only
  • 1.  SRX 1600 - Intermittent loss of connectivity

    Posted 05-02-2025 10:31

    Morning all, just wanting to post this here for visibility and in case anyone has experienced or is experiencing this and can provide some insight. I do have an active ticket open with Juniper on this as well. I have two SRX 1600's in a cluster, and for seemingly no reason I will lose all connectivity with the SRX. It will not respond to pings, ssh attempts, and will not process traffic.  It is in our testing environment, with only 1 laptop connected via a set of switches in a VC; I have recently downgraded the Junos from version 24.2 to 23.2 and reconfigured to see if this resolves the issue and it has not, I will add this issue was still occurring with just one SRX 1600 before we acquired the second. 



    ------------------------------
    RIVR SMITH
    ------------------------------


  • 2.  RE: SRX 1600 - Intermittent loss of connectivity

    Posted 05-04-2025 17:30

    Connect using Console and when the issues occurs, collect info on status of stuff -- interfaces, ARP tables, routing tables, etc.



    ------------------------------
    Nikolay Semov
    ------------------------------



  • 3.  RE: SRX 1600 - Intermittent loss of connectivity

    Posted 05-04-2025 19:39

    Is it just the mgmt access that is lost or is through traffic also affected?



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 4.  RE: SRX 1600 - Intermittent loss of connectivity

    Posted 05-05-2025 22:35

    Perhaps paying more attention to global ipv6 binding, and maybe ipv4 for dhcp/v6. Short metrics. 65535 are quite long. So you have srx1600+2 . Completeness is the thing. Just trying.



    ------------------------------
    Adrian Aguinaga
    B.S.C.M. I.T.T. Tech
    (Construction Management)
    A.A.S. I.T.T. Tech
    (Drafting & Design)
    ------------------------------



  • 5.  RE: SRX 1600 - Intermittent loss of connectivity

    Posted 06-12-2025 10:47

    Morning all, just offering an update on this. Turns out this was an issue with Junos itself after troubleshooting with a JTAC and the case getting handed off to L2 Support. 

    PR1851909. While this PR is internal, we have the following details available:

     

    ++ This issue affects SRX firewalls configured with Security-Intelligence feature using DNS category.

    ++ The problem is fixed on the following Junos Releases:

    • junos:22.4R3-S7 > not available for SRX1600
    • junos:23.4R2-S5 > scheduled for June 12th 2025
    • junos:24.2R2-S1 > already available for download
    • junos:24.4R2 > scheduled for July 24th 2025

      I've upgraded to 23.4r2-s5 and have not had any issues so far.


    ------------------------------
    RIVR SMITH
    ------------------------------



  • 6.  RE: SRX 1600 - Intermittent loss of connectivity

    Posted 06-12-2025 11:32

    Thanks for the update! Please mark your post with the PR as Best Answer, if you can, for visibility.



    ------------------------------
    Nikolay Semov
    ------------------------------



  • 7.  RE: SRX 1600 - Intermittent loss of connectivity

    Posted 06-13-2025 15:32

    please note if your  using dynamic filters  with Security Meta Streaming it will crash the device ( well take it off line during the FPC resets if your using 24.4r1-s1 ( Dynamic filters connected fixed in the s1 version)  note I've tested with and with MN-HA enabled same outcome..  

    Ive been clearing them to avoid filling up the HD:

    /var/crash/corefiles:
    total blocks: 8456160
    -rw-r--r--  1 root  wheel  1293600090 Jun 4  00:54 core-srxpfe-BT-MAN-SRX1600A-node-0-1748998113.tgz
    -rw-r--r--  1 root  wheel  1164716468 Jun 4  11:22 core-srxpfe-BT-MAN-SRX1600A-node-1-1749035812.tgz
    -rw-r--r--  1 root  wheel  1320094976 Jun 5  19:37 core-srxpfe-BT-MAN-SRX1600A-node-2-1749151920.tgz
    -rw-r--r--  1 root  wheel  551111695 Jun 12 18:10 core-srxpfe-BT-MAN-SRX1600A-node-3-1749751526.tgz
    total files: 4

    backup:

    total blocks: 2189960
    -rw-r--r--  1 root  wheel  1121245704 Jun 11 15:31 core-srxpfe-BT-MAN-SRX1600B-node-3-1749655550.tgz
    total files: 1