Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] Issues occur after installing full-cp-key / SRX3K-EXTREME-LTU license on a chassis cluster

0

0

Article ID: KB32079 KB Last Updated: 08 Oct 2020Version: 2.0
Summary:

To avoid issues after installing a full-cp-key / SRX3K-EXTREME-LTU license on a chassis cluster, both nodes within the cluster must be rebooted at the same time.

For more information about this license, refer to the following articles:

Symptoms:

Symptoms may be unpredictable. Some users have reported issues such as Key Management Daemon (KMD) crashes and IPsec failures.

Cause:

If the two nodes are rebooted at different times, the node that was first rebooted comes online and tries to synchronize with the other node.

Attempting to synchronize the nodes (one with the activated license and the other node that does not have an activated license) causes inconsistencies, which lead to unpredictable failures.

The issue persists even if the nodes are rebooted in a staggered fashion a second time.

Solution:

After installing the license, both nodes of the cluster must be rebooted at the same time (within a few seconds of each other at least).

If too much time passes between the reboot of each node, the cluster remains in an inconsistent state until they can be rebooted at the same time.

Modification History:
2020-10-07: Archived.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search