Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] NSM/Junos Space fails to recognize SRX as a cluster/standalone device type unless Virtual Chassis flag is removed



Article ID: KB26414 KB Last Updated: 05 Aug 2020Version: 4.0

This article describes the issue of NSM/Junos Space adding the SRX cluster or SRX stand-alone device as a Virtual Chassis.


SRX Virtual Chassis (VC) is a feature to enable inband management of SRX cluster from a netconf management such as Junos Space. For more information, see KB18228 - What is SRX Virtual Chassis and how is it added to NSM?

If both SRX cluster members can be reached by the management system (Space initated connection)  or Both cluster members can reach the management system (device initiated connection) then this setting needs to be disabled.  When only one member of the cluster can reach the management system, this should be set.

If the SRX devices were configured as a Virtual Chassis in the past for management, then the following condition may occur:

  • NSM/Junos Space will continue to recognize the SRX devices as a VC instead of a Cluster member.
  • NSM will see the device as a Virtual Chassis.
  • Junos Space may fail to establish connectivity with the device.

Perform the following steps:

A. Check device 'netconf' response from SRX

Verify the problem:

  1. Execute the following command via any command line SSH client, such as from the NSM or Junos Space Command Line:

    # ssh <user>@<deviceip> -s netconf 

    Where user is the security device's administrator login username and deviceip is the security device's IP address. For example:

    # ssh root@ -s netconf 

    Where root is the SRX administrator user and is the SRX IP address.

  2. After you are connected, you will be presented with the prompt:

  3. At the prompt, paste the following command:

  4. The following example displays the messages that are received, after the above command is executed:

    <rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:junos="">
    Notice virtual chassis highlighted in blue above.
If <virtual-chassis> is shown in your output, then continue to section: B. Remove virtual-chassis flag from SRX.

B. Remove virtual-chassis flag from SRX

Fix the problem as follows:
  1. Delete the Virtual Chassis configuration via the SRX command line:

    # delete chassis cluster network-management cluster-master

    Note: Type (or copy/paste) the whole command, as it is a hidden command (the ''Tab' key cannot complete the keywords).

    # commit

  2. After the commit, run the commands as stated above under section 'A.  Check device 'netconf' response from SRX' to confirm if virtual-chassis is still seen or not. If seen, continue to step 3 as mentioned below.  If it is no longer displayed, the problem should be fixed; you do not need to do step 3.

  3. Reboot device:   

    # request system reboot

Important:  You will need to verify this on all devices, and each device may need to be rebooted, if virtual-chassis is not cleared after a commit.

Modification History:
2020-08-04: Modified for Junos Space.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search