Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] How to troubleshoot an amber or red 'ALARM' LED on the firewall



Article ID: KB13239 KB Last Updated: 30 May 2019Version: 7.0
This article provides information on how to troubleshoot an amber or red ALARM LED on the front panel of the firewall.
The LED turns red due to the following reasons:
  • Failure of hardware component or software module.
  • Firewall attacks detected.
  • Red blinking - self-test failure occurred when ScreenOS was starting up.

The LED turns amber due to the following reasons:
  • Low memory (less than 10% remaining).
  • High CPU utilization (more than 90% in use).
  • Session full.
  • Maximum number of VPN tunnels reached,
  • When HA/NSRP is configured, the alarm LED on both of the units will turn yellow/amber to let you know that they are configured for NSRP. This is due to an informational event in the event log. For more information, refer to KB5845 - Alarm LED is yellow/amber when two Juniper Firewalls are in a NSRP cluster.
  • HA status changed or redundant group member not found.

Note:  The reasons do vary, depending on the type of Security device. The LEDs are described in the Hardware Technical Documentation User's Guide or Hardware Installation and Configuration Guide.  
Perform the following procedure to correct a red or amber ALARM LED:
  1. Run the following command to determine what alarm is being reported and note it down:
    get alarm event
  2. For the specific alarm, look for the meaning and recommended action in the Message Log Reference Guide

    Additional Reference:
    Firewall attacks are documented in the Concepts & Examples ScreenOS Reference Guide: Part 4, Attack Detection and Defense.   If a hardware component needs to be replaced, Contact Support

  3.   Clear the ALARM LED. For more information, refer to KB5394 - How do I turn off the alarm LED?
Modification History:
2019-05-22: Content reviewed for accuracy.  Links updated. 
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search