Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] NSM/Junos Space fails to recognize SRX as a cluster/standalone device type unless Virtual Chassis flag is removed

0

0

Article ID: KB26414 KB Last Updated: 02 Jan 2014Version: 3.0
Summary:
This article describes the issue of NSM/Junos Space adding the SRX cluster or SRX stand-alone device as a Virtual Chassis.
Symptoms:
SRX Virtual Chassis (VC) is a feature to enable inband management of SRX cluster from NSM. For more information, see KB18228 - What is SRX Virtual Chassis and how is it added to NSM?

If the SRX devices were configured as a Virtual Chassis in the past for NSM management, then the following condition may occur:
  • NSM/Junos Space will continue to recognize the SRX devices as a VC instead of a Cluster member.
  • NSM will see the device as a Virtual Chassis.
  • Junos Space may fail to establish connectivity with the device.
Cause:

Solution:

Perform the following steps:

A. Check device 'netconf' response from SRX

Verify the problem:
  1. Execute the following command via any command line SSH client, such as from the NSM or Junos Space Command Line:

    # ssh <user>@<deviceip> -s netconf 

    Where user is the security device's administrator login username and deviceip is the security device's IP address. For example:
    # ssh root@10.10.10.1 -s netconf 
    Where root is the SRX administrator user and 10.10.10.1 is the SRX IP address.


  2. After you are connected, you will be presented with the prompt:
    </hello>
    ]]>]]>
    
    
  3. At the prompt, paste the following command:
<rpc><get-system-information/></rpc><rpc><close-session/></rpc>

  1. The following example displays the messages that are received, after the above command is executed:
    <rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:junos="http://xml.juniper.net/junos/11.4R3/junos">
    <system-information>
    <hardware-model>srx650</hardware-model>
    <os-name>junos-es</os-name>
    <os-version>11.4R3.7</os-version>
    <serial-number>************</serial-number>
    <host-name>asdsrx01</host-name>
    <virtual-chassis/>
    </system-information>
    </rpc-reply> 
    Notice  virtual chassis highlighted in blue above.

If <virtual-chassis> is shown in your output, then continue to section: B. Remove virtual-chassis flag from SRX



B. Remove virtual-chassis flag from SRX

Fix the problem as follows:
  1. Delete the Virtual Chassis configuration via the SRX command line:

    # delete chassis cluster network-management cluster-master

    Note: Type (or copy/paste) the whole command, as it is a hidden command (the ''Tab' key cannot complete the keywords).

    # commit

  2. After the commit, run the commands as stated above under section 'A.  Check device 'netconf' response from SRX' to confirm if virtual-chassis is still seen or not. If seen, continue to step 3 as mentioned below.  If it is no longer displayed, the problem should be fixed; you do not need to do step 3.

  3. Reboot device:   

    # request system reboot


Important:
  You will need to verify this on all devices, and each device may need to be rebooted, if virtual-chassis is not cleared after a commit.



Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search