Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Junos] Troubleshooting delay in command execution via SSH/Console connection

0

0

Article ID: KB36222 KB Last Updated: 15 Sep 2020Version: 1.0
Summary:

This article explains the possible reason of delay/latency in command execution on the CLI of the Junos device allthough the CPU appears normal.

Symptoms:

Delay of a few seconds while executing the command via ssh access or console access. The delay could be constant or random depending on the cause of the delay.

Cause:

If the delay is random in command execution, then it could be related to high CPU or a memory problem. Check for the CPU/memory utilization on the device using the following commands:

show chassis routing-engine
show system process extensive

If the delay is constant, then it could be due to the tacplus configured on the device. This behaviour may be seen in the following condition:
  1. If the authentication is set to tacacs/tacplus and tacacs/tacplus server is configured but not reachable.

    set system tacplus server xx.xx.xx.xx
  2. If the system accounting is enabled with tacplus server.

    system accounting destination tacplus server xx.xx.xx.xx
  3. Confirm if the source address for the tacplus server is correct

    set system tacplus-server xx.xx.xx.xx source-address xx.xx.xx.xx
  4. Check for any tacacs error in the logs

    Aug  9 21:27:56.100  Device mgd[27846]: UI_TACPLUS_ERROR: TACACS+ failure: TACACS+ server returned status as 'error' in the accounting reply
    Aug  9 21:28:10.902  Device mgd[27859]: UI_TACPLUS_ERROR: TACACS+ failure: TACACS+ server returned status as 'error' in the accounting reply
    Aug  9 21:28:21.373  Device mgd[27863]: UI_TACPLUS_ERROR: TACACS+ failure: TACACS+ server returned status as 'error' in the accounting reply
Solution:

If the cause is high CPU/memory utilization, then troubleshoot the underlying cause to resolve the issue.

If the cause is tacplus, then make sure the tacplus servers are reachable.

For more details on tacplus configuration, refer to the technical documentation on TACACS+ Authentication

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search