Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

‘[Archive]’SRX is very unresponsive for both console and SSH. Appears to be "High CPU" but counters show otherwise.

0

0

Article ID: KB24165 KB Last Updated: 25 Jun 2020Version: 3.0
Summary:

There are conditions where SRX becomes very unresponsive for both console and SSH. It appears to be "High CPU" but no counter shows it high. The device may not even be connected to the network and no traffic is going through but still the device is showing very sluggish response. 

This article will attempt to explain one of those situations and how to resolve the issue.

Symptoms:

Check to see if the following configuration is present

system {
    accounting {
        events [ login change-log interactive-commands ];
        destination {
            tacplus {
                server {
                    172.30.3.15 {
                        port 49;
                        source-address 172.30.1.25;
                    }
                }
            }
        }
    }
}

If it is there then make sure there is connectivity between the SRX and TacPlus server.

To verify please look for the following log message in the "messages log";
efwa32-manage-01a mgd[2220]: UI_TACPLUS_ERROR: TACACS+ failure: connect: timed out
If the above conditions match, then the issue is most likely a known issue.

 
Solution:

Workaround:
===========


There are two possible solutions/workarounds:

  1. Deactivate the "system accounting" stanza.

  2. Restore the connectivity between the SRX and TacPlus server.

 
Modification History:
Can be moved to ​ ‘[Archive]’ . Not much relevant now . 
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search