Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] How to disable the management Ethernet ports on the SRX services gateway

0

0

Article ID: KB19523 KB Last Updated: 13 Dec 2012Version: 2.0
Summary:
This article provides information on how to disable the management port (fxp0) on SRX 1000, 3000, and 5000 series service gateway.
Symptoms:
This is applicable to the following Junos platforms.

  • SRX1400

  • SRX3400

  • SRX3600

  • SRX5600

  • SRX5800

On the above list of SRX devices, a dedicated port is present for Out of Band management. If this management port is not connected (physically down), it triggers a major alarm:
{primary:node0}[edit]
root@srx1> show chassis alarms
node0:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down

node1:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down
Some customers choose not to use this management port. Then they will receive a system alarm, as mentioned above.
Cause:

Solution:
Junos has the provision to manually disable the management ports using the following command.
{primary:node0}[edit]
root@srx1# set chassis alarm management-ethernet link-down ignore

{primary:node0}[edit]
root@srx1# show
    chassis {
        alarm {
            management-ethernet {
                link-down ignore;
            }
         }
The above command will also work for a chassis cluster environment.
An alternative method for doing this in a chassis cluster environment is given below:
{primary:node0}[edit]
root@srx1# set groups node0 interfaces fxp0 disable
root@srx1# set groups node1 interfaces fxp0 disable

To verify, check the alarms again.
{primary:node0}[edit]
root@srx1> show chassis alarms

node0:
--------------------------------------------------------------------------
No alarms currently active

node1:
--------------------------------------------------------------------------
No alarms currently active


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search