Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

When logging out of the backup device ScreenOS displays a prompt to save the configuration

0

0

Article ID: KB26477 KB Last Updated: 13 Dec 2012Version: 1.0
Summary:
This article describes the issue of ScreenOS displaying a prompt to save the configuration, when logging out of the backup device.
Symptoms:

In the NSRP configuration, when logging out from the backup device, it will display the following prompt:

ns5200(B)-> exit
Configuration modified, save? [y]/n

But, no configuration change was manually made, after logging on to the backup device.

Cause:

In this case, it is caused by the NTP server and NSRP time synchronization. By default, NTP server and set clock ntp are enabled:

ns5200(M)-> get ntp
NTP is Enabled
Primary server: 10.208.0.50 
Backup1 server: 
Backup2 server: 
Authentication Mode: None
Max Allowed Adjustment: 3 second(s)
Request Interval: 1 minute(s).
Sync NTP time to peer: Enabled.  < enabled by default
Update Status: Idle 
Last Update at: 12/12/2012 14:58:08
Time synchronization is sent via a sync message between the master and backup devices:

On the Master device (debug nsrp sync):
## 2012-12-13 12:33:38 : send ha sync msg: mtype(4) handle(4/4) size(107) flag(0xa0)
cmd ver: 6 flag: 0 
vsys_name: Root 
user_name: netscreen 
cmd: set clock 12/13/2012 12:33:38

## 2012-12-13 12:33:38 : send message to peer with the initial task id 71:
## 2012-12-13 12:33:38 : send ha msg:
## 2012-12-13 12:33:38 : ha msg:type(CMD/0x4) len/total(107/107) flag(0x38) taskid(71) resync_send_flag(0)
On the backup device (debug nsrp sync):
## 2012-12-13 12:33:36 : rcv ha msg:
## 2012-12-13 12:33:36 : ha msg:type(CMD/0x4) len/total(107/107) flag(0x38) taskid(71) resync_send_flag(0)
## 2012-12-13 12:33:36 : App ha msg: mtype(0x4) size(107) flag(0x38) task_id(71) resync_trigged(0)
## 2012-12-13 12:33:36 : receive the task id and record it to org_sync_request_tid 71
cmd ver: 6 flag: 0 
vsys_name: Root 
user_name: netscreen 
cmd: set clock 12/13/2012 12:33:38
Certain clock update related events are noticed on the backup device:
2012-12-13 12:33:42 system notif 00008 System clock configurations have been 
                                       changed by admin
2012-12-13 12:33:42 system notif 00008 System clock was changed manually from 
                                       13Dec2012:12:33:36.
2012-12-13 12:33:42 system notif 00531 The system clock was updated from 
                                       primary NTP server type 10.208.0.50 
                                       with an adjustment of -6 ms. 
                                       Authentication was None. Update mode 
                                       was Automatic
Solution:
Disable the time synchronization between the master and backup devices by using the set ntp no-ha-sync command:
ns5200(M)-> get ntp 
NTP is Enabled 
Primary server: 10.208.0.50 
Backup1 server: 
Backup2 server: 
Authentication Mode: None 
Max Allowed Adjustment: 3 second(s) 
Request Interval: 1 minute(s). 
Sync NTP time to peer: Enabled < enabled.
Update Status: Idle 
Last Update at: 12/12/2012 15:08:08

ns5200(M)-> set ntp no-ha-sync 
ns5200(M)-> get ntp 
NTP is Enabled 
Primary server: 10.208.0.50 
Backup1 server: 
Backup2 server: 
Authentication Mode: None 
Max Allowed Adjustment: 3 second(s) 
Request Interval: 1 minute(s). 
Sync NTP time to peer: Disabled < disabled 
Update Status: Idle 
Last Update at: 12/12/2012 15:08:08 
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search