Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Unable to login due to Enhanced Subscriber Management daemon BBE-SMGD running out of COS service index

0

0

Article ID: KB32733 KB Last Updated: 19 Jun 2018Version: 1.0
Summary:

In some cases, subscribers will not be  able to login due to Enhanced Subscriber Management daemon BBE-SMGD running out of COS service indexes. COS service indexes are used during allocation of COS parameters such as schedulers, policers, etc.

Symptoms:
  1. Subscribers are unable to login

  2. The following errors are generated and incrementing:

    show shmlog statistics logname all | match err | match cos
    
      24 BBE_COS_DPROF_CONFIG_ERR       Dec  5 14:54:05.016114       486798     0
      47 BBE_COS_DPROF_END_ERR_STR       Dec  5 14:54:05.016118      165995     0
    
  3. This log appears in BBE-SMGD traceoptions:

    Dec  5 13:08:40 bbe_create_service_internal: ifl: COS-TCP => Could not allocate service index
    
  4. Check the number of service indexes used by this command:

    start shell csh command "vty -s 7208 -c 'show services summary' 128.0.0.1 "
    Active Service Summary
    Total Count:                        2259 <---- Total number of serivce indexes
                        COS_GLOBAL:     1
              COS_FIXED_CLASSIFIER:     0
                    COS_CLASSIFIER:    11
                  COS_REWRITE_RULE:     7
                 COS_SCHEDULER_MAP:     3
                     COS_SCHEDULER:  1443
                  COS_DROP_PROFILE:     3
              COS_FORWARDING_CLASS:     8
                           COS_TCP:   287
             COS_FRAGMENTATION_MAP:     0
                   COS_IFLSET_CONF:     0
                       COS_IFL_TCP:     0
                   DFW_FILTER_HEAD:     0
                     SECURE_POLICY:     0
                       L2TP_TUNNEL:     0
                  DFW_FILTER_STATE:     0
                   DFW_FILTER_TERM:     0
                       DFW_POLICER:     0
              DFW_TRICOLOR_POLICER:     0
                  DFW_HIER_POLICER:     0
                    DFW_CFG_FILTER:   324
                   DFW_CFG_POLICER:    52
        DFW_CFG_HIERCHICAL_POLICER:     0
          DFW_CFG_TRICOLOR_POLICER:     0
               DFW_CFG_PREFIX_LIST:   112
                 DFW_CFG_FWD_CLASS:     8
                          UCAC_OBJ:     0
                          MC_GROUP:     0
                       DFW_CFG_FCU:     0
                             DVLAN:     0
                      COS_IFD_CONF:     0
                           MC_SYNC:     0
                           Unknown:     0
                           Unknown:     0
                           Unknown:     0
               IFL_SERVICE_OPTIONS:     0
    Invalid Count:                      0
    
Cause:

Service index is used for each new unique COS parameter such as scheduler, scheduler-map, classifier, rewrite-rule, etc. Using too many unique combinations for these parameters may cause it to run out of service indexes (2^18 is the maximum).

Solution:

Use more shared combinations for COS variables for subscribers when possible.

If number of service indexes are more than expected, please contact JTAC for further investigation.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search