SRX

 View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  What is "the kmd instance kmd is not running"?

    Posted 08-30-2018 00:06

    I'm troubeshooting VPN issue. When run "show security ike security-associations" show me this

    error: the kmd instance kmd is not running

    Found KB said

    This is a known issue in Junos OS release 12.1X44. This issue is fixed in Junos OS release 12.1X45 or higher.

    But I'm using 12.1X47-D15.4

     

    Found that "kmd" should be a essential process for VPN. Run "show system processes extensive|match kmd" show nothing.

    It even not start after restart ipsec-key-management



  • 2.  RE: What is "the kmd instance kmd is not running"?

     
    Posted 08-30-2018 02:13

    Hello,

     

    Is it a standalone device or a cluster?

    If cluster, which node you are executing the command on?

     

    Regards,

     

    Rushi



  • 3.  RE: What is "the kmd instance kmd is not running"?

    Posted 08-30-2018 07:23

    Hello rtilak. It is standalone.



  • 4.  RE: What is "the kmd instance kmd is not running"?

     
    Posted 08-30-2018 18:41

    Hello,

     

    Can you share the output of 'show version', 'show chassis hardware' & 'show system core-dumps' from the device?

     

    Regards,

     

    Rushi



  • 5.  RE: What is "the kmd instance kmd is not running"?

    Posted 08-30-2018 20:36
      |   view attached

    Hello rtilak,

    I attached the screen dump picture files of the 3 "show" command.



  • 6.  RE: What is "the kmd instance kmd is not running"?

     
    Posted 08-30-2018 22:16

    Hello,

     

    Can you try operational mode command 'restart ipsec-key-management' & see if KMD comes up?

     

    Regards,

     

    Rushi



  • 7.  RE: What is "the kmd instance kmd is not running"?

    Posted 08-30-2018 23:09
      |   view attached

    Just like before. Restart ipsec-key-management cannot start kmd.



  • 8.  RE: What is "the kmd instance kmd is not running"?

     
    Posted 08-30-2018 23:25

    Hello,

     

     

    It is strange. Are there any overlapping traffic selectors in your VPN configuration?

    Can you do 'commit full' & check if KMD comes up?

     

    Else is it possible to reboot vSRX firefly?

     

    Regards,

     

    Rushi



  • 9.  RE: What is "the kmd instance kmd is not running"?

    Posted 08-30-2018 23:39

    "commit" command has no possible completion of "full".

    I had restart this vSRX for several times.



  • 10.  RE: What is "the kmd instance kmd is not running"?
    Best Answer

     
    Posted 08-30-2018 23:46

    Hello,

     

    commit full is hidden command so you won't get completion.

    If even reboot of the firefly does not work, I believe some corruption with vSRX firefly.

    Try spinning a new instance if possible and instead of vSRX firefly which is end of support long back,  try spinning vSRX2.0 (15.1X49) release.

     

    Regards,

     

    Rushi



  • 11.  RE: What is "the kmd instance kmd is not running"?

    Posted 09-03-2018 00:13

    Got and just setup 15.1X49-D40. Run "show security ike security-associations" has no error anymore.