Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

I received an Error during an NSM Device Update, what do I check?

0

0

Article ID: KB9852 KB Last Updated: 05 Jul 2010Version: 7.0
Summary:
Listed below are some of the common errors received while running an NSM device update; along with the possible cause of the error.
Symptoms:
Symptoms & Errors:
  • Server Failed to receive the final status of bulk-cli from device
  • Exception caught during Update device, the following parameters did not get updated to the device
  • The device has returned the error: -1
  • Device has returned an Error. The file might be invalid one. Return value: -12
  • Verification failed
  • NSM Warning when updating Policy on ISG-IDP and standalone IDP
Solution:

Below are some of the common error messages received while performing an NSM Update.

  • Server Failed to receive the final status of bulk-cli from device” :
    When this message is seen, it usually indicates the device could not reconnect to NSM after the update was performed.   If some CLI generated by NSM causes the connection to the NSM server to drop, the default behavior for the device is to reboot with the previous configuration and restore NSM connectivity.   If this process fails for some reason, the error message above would be displayed.
  • Exception caught during Update device, the following parameters did not get updated to the device.
    This error message indicates that during the CLI generated by NSM, the device has returned an error or the parameter that NSM was trying to change did not  get changed properly.     

    This error could be due to an invalid configuration being pushed to the device that was not prevented by the user interface validation.   The output will list the CLI which have been sent to the device and it should display the error returned by the device while executing the CLI commands.  

    Another possible failure is that NSM is not generating the proper CLI that is required to set the settings on the device to match the NSM configuration.
  • Device has returned the error: -1” :
    This error message refers to the device returning an error during the update, some older versions of NSM were displaying this error instead of a more informative error message. In order to gather more information about the cause of the error, refer to the errorLog KB9851 - Where can I find the related error logs when processing directives in NSM?
  • Device has returned an Error. The file might be invalid one. Return value: -12 
    This error message indicates that the IDP policy gave error during the load on the IDP security modules. Follow instruction in article KB11028 - ISG with IDP error during a device update: The file might be invalid one. Return value: -12
  • Verification failed :
    During the device update, after NSM has sent the proper configuration parameters to the device, NSM runs a quick verification to verify if the device has properly applied the parameters that were going to be changed. If the device is not showing the proper setting, this will generate a verification failure.
  • NSM Warning when updating Policy on ISG-IDP and standalone IDP
    Consult: KB9290 - NSM Warning when updating Policy on ISG-IDP and standalone IDP

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search