Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] How to determine the state of an NSRP device (M, B, I)

0

0

Article ID: KB11377 KB Last Updated: 10 Sep 2020Version: 4.0
Summary:
This article explains how to identify the NSRP state if the device is ion Master, Backup or Inoperable.
Solution:
The simplest way to tell the device status is to view the firewall prompt.  The state is displayed in parentheses after the hostname: M, B or I. 
For example:
  • SSG550(M) means master
  • SSG550(B) means Backup
  • SSG550(I) means Inoperable mode

It is helpful to understand the status of the VSD.  The 5 states are listed below:
  • Master – The state of a VSD group member that processes traffic sent to the VSI.
  • Backup – The state of a VSD group member that monitors the status of the master and takes over should the master fail.
  • Initial – The transient state of a of a VSD group member while it joins a VSD group.
  • Inoperable – The state of a VSD group member after a system check determines that the device has an internal problem or a network connection problem (link down).  Refer to KB11338 for more information.
  • Ineligible – The state that an administrator purposefully assigns to a VSD group member so that it cannot participate in the election process.  This state is commonly used during upgrades. Refer to KB11477 for more information.

To further verify the status,  follow the steps below:

1.  Enter the command 'get nsrp cluster' to get the local unit ID.  In the output below, the local unit ID is 8345472.
 
SSG550(M)-> get nsrp cluster
cluster id: 3, no name
local unit id: 8345472
active units discovered:
index: 0, unit id:   8345472, ctrl mac: 0005857f5787, data mac: 0005857f5787
index: 1, unit id:  10923520, ctrl mac: 00121ea6ae07, data mac: 00121ea6ae07
total number of units: 2
SSG550(M)->

2. Then enter 'get nsrp vsd-group' to check the VSD status of that local unit ID.   In the output below, the local device unit ID 8345472 is master.
 
SSG550(M)-> get nsrp vsd-group

VSD group info:
init hold time: 8
heartbeat lost threshold: 3
heartbeat interval: 1000(ms)
master always exist: disabled
group priority preempt holddown inelig   master       PB other members
    0      100 no             3 no       myself 10923520
total number of vsd groups: 1
Total iteration=177331,time=1456903463,max=187722,min=7251,average=8215

vsd group id: 0, member count: 2, master: 8345472
member information:
---------------------------------------------------------------------
group  unit_id  state          prio flag rto_peer   hb miss holddown
---------------------------------------------------------------------
    0 10923520  primary backup  100    0        0    1    0        3
    0  8345472  master          100    0        0    0    0        3

SSG550(M)->
Modification History:
2020-09-09: Minor, non-technical edits.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search