Line Module Redundancy Overview

You can install an extra line module in a group of identical line modules to provide redundancy if one of the modules fails.

The process by which the router switches to the spare line module is called switchover. During switchover, the line, circuit, and IP interfaces on the I/O module or one or more IOAs appear to go down temporarily. The duration of the downtime depends on the number of interfaces and the size of the routing table, because the router must reload the interface configuration and the routing table from the SRP module.

If the line module software is not compatible with the running SRP module software release, a warning message appears on the console.

Module Requirements

The requirements for line module redundancy depend on the type of router that you have.

Note: The information in this section does not apply to the ERX310 Broadband Services Router, which does not support line module redundancy.

ERX7xx Models and ERX14xx Models

To use this feature on ERX7xx models and ERX14xx models, you must also install a redundancy midplane and a redundancy I/O module. For a detailed explanation of how the router provides redundancy for line modules and procedures for installing the modules, see the ERX Hardware Guide.

E120 and E320 Routers

To configure line module redundancy on the E120 or E320 Broadband Services router, you must also install an ES2-S1 Redund IOA in either slot 0 or slot 11. The ES2-S1 Redund IOA is a full-height IOA. For a detailed explanation of how the router provides redundancy for line modules and procedures for installing the modules, see the E120 and E320 Hardware Guide.

On E120 and E320 routers, each side of the chassis is treated as a redundancy group. The lowest numbered slot for each side acts as the spare line module, providing backup functionality when an ES2-S1 Redund IOA is located directly behind it. When the line module does not contain an ES2-S1 Redund IOA, it is considered a primary line module.

The router accepts the following redundancy groups:

• ES2 4G LM as backup and ES2 4G LM as primary
• ES2 10G Uplink LM and ES2 10G Uplink LM as primary
• ES2 10G LM as backup and ES2 10G LM
• ES2 10G ADV LM as backup and ES2 10G ADV LM as primary
• ES2 10G ADV LM as backup and ES2 10G LM as primary

Also, you cannot configure redundancy for the ES2-S1 Service IOA.

IOA Behavior When the Router Reboots

On E120 and E320 routers, switchover is based on the combined states of the line module and the IOAs that are installed in the affected slot.

When the router reboots and the formerly configured primary line module is not present, or is present and fails diagnostics, it switches to a spare line module and takes inventory of the IOAs. If the IOA is present and new, the router reverts back to the primary line module so that the spare line module can service other active primary line modules.

When the router reboots and there is a slot that contains a line module and one active and one inactive IOA, the inactive IOA remains in that state.

Line Module Behavior When Disabling or Enabling IOAs

On E120 and E320 routers, a line module reboots when you issue the adapter disable or adapter enable commands for an associated IOA.

When you issue the adapter disable or adapter enable commands, the line module (primary or spare) currently associated with that IOA reboots. If the IOA is protected by a line module redundancy group, an automatic line module redundancy switchover or revert can be triggered by the line module reboot. To prevent undesired line module redundancy actions, issue the redundancy lockout command for the primary line module slot before issuing the adapter disable or adapter enable commands.

Automatic Switchover

Provided you have not issued the redundancy lockout command for the primary line module, the router switches over to the spare line module automatically if it detects any of the following failures on the primary line module:

• Power-on self-test (POST) failure
• Software-detected unrecoverable error
• Software watchdog timer expiration
• Primary line module failure to respond to keepalive polling from the SRP module
• Removal, disabling, or reloading of the primary line module
• Missing or disabled primary line modules when the router reboots
• Resetting the primary line module using the concealed push button

Limitations of Automatic Switchover

If automatic switchover is enabled on a slot (the default configuration) and a spare line module is available, issuing some CLI commands for the primary line module causes a switchover (Table 3).

You can also disable automatic switchover on individual slots. For more information, see Configuring Line Module Redundancy.

Reversion After Switchover

You can install only one spare line module in the group of slots covered by the redundancy midplane or redundancy group. If the router is using the spare line module, no redundancy is available. Reverting to the primary module as soon as possible is desirable. By default, the router does not automatically revert to the primary module after switchover; however, you can configure it to do so. (See Configuring Line Module Redundancy.) Before reversion can take place, the primary line module must complete the POST diagnostics.

Configuring Line Module Redundancy

You can modify the default redundancy operations on the router
as follows:

• Disable automatic switchover on a slot.
• Enable automatic reversion after switchover.

Managing Line Module Redundancy

When the router is running and a redundancy group is installed, you can manage the redundancy situation as follows:

• Force switchover manually.
• Force reversion manually.

SRP Module Redundancy

This section covers general issues of SRP module redundancy. It does not cover NVS cards or the behavior on systems running high availability features such as hitless SRP switchover. For information about managing NVS in a router that contains two SRP modules, see Managing Flash Cards on SRP Modules in the JUNOSe System Basics Configuration Guide. For information about managing high availability in a router, see Managing Module Redundancy.

The information in this section does not apply to the ERX310 router, which does not support SRP module redundancy. For this reason, any references to synchronization that may appear in command output or system messages do not apply to the ERX310 router.

SRP Module Behavior

The SRP module uses a 1:1 redundancy scheme. When two SRP modules are installed in the router, one acts as a primary and the second as a redundant module. On ERX7xx models, ERX14xx models, and the ERX310 router, both SRP modules share a single SRP I/O module located in the rear of the chassis. On the E120 and E320 routers, both SRP modules share an SRP IOA located in the rear of the chassis.

After you install two SRP modules, the modules negotiate for the primary role. A number of factors determine which module becomes the primary; however, preference is given to the module in the lower slot. The SRP modules record their latest roles and retain them the next time you switch on the router.

With the default software settings, if the primary SRP module fails, the redundant SRP module assumes control without rebooting itself. For information about preventing the redundant SRP module from assuming control, see Managing SRP Module Redundancy.

On E120 and E320 routers, the switch fabric is distributed between the SFMs and the SRP modules. If the primary SRP module fails a diagnostic test on its resident slice of switch fabric, then it abdicates control to the redundant SRP module if both of the following are true:

• The standby SRP module does not indicate any error.
• The standby SRP module passes diagnostics on its attached fabric slice.

When the redundant SRP module assumes control, the following sequence of events occurs:

1. The original primary SRP module reboots and assumes the redundant role.
2. The redundant SRP module restarts and assumes the primary role without reloading new code. (When upgrading software, you must reload the software on the redundant SRP module. See Installing JUNOSe Software in the JUNOSe System Basics Configuration Guide.)
3. All line modules reboot.

The following actions activate the redundant SRP module:

• Failure of the primary SRP module (hardware or software)
• Pushing the recessed reset button on the primary SRP module (See Figure 1 and Figure 2.)
• Issuing the srp switch command
• Issuing the redundancy force-switchover command

  Figure 1: SRP Module on ERX7xx Models and ERX14xx Models

  

  Figure 2: SRP Module on the E120 and E320 Routers

  

Specifying the Configuration for Redundant SRP Modules

On a router with redundant SRP modules, you can specify the configuration that both the primary and redundant modules load in the event of a reload or switchover. A switchover can result from an error on the primary SRP module or from an srp switch command. The following behavior takes place only in the event of a cold restart; it does not take place in the event of a warm restart.

When you arm a configuration (.cnf) file by issuing the boot config cnfFilename command, a subsequent SRP switchover causes the redundant SRP module to take the role of primary SRP module with the configuration specified by the .cnf file. The new primary SRP module does not use the running configuration.

If you want the redundant SRP module to instead use the running configuration when it takes the primary role, then you must first arm a configuration file with the boot config cnfFilename once command. To exhaust the once option, you must then cause the redundant SRP module to reload for some reason, such as by issuing a reload command or by arming a new JUNOSe software release or a hotfix file.

When a switchover subsequently occurs, the redundant SRP module reloads with the running configuration and takes the primary role. For more information about the boot config command, see Booting the System in the JUNOSe System Basics Configuration Guide.

Installing a Redundant SRP Module

You can install a redundant SRP module into a running router, provided that the redundant SRP module has a valid, armed software release on its NVS card. Access to a software release in NVS ensures that the redundant SRP module can boot; the release need not be the same as that on the primary SRP module.

Warning: Do not insert any metal object, such as a screwdriver, or place your hand into an open slot or the backplane when the router is on. Remove jewelry (including rings, necklaces, and watches) before working on equipment that is connected to power lines. These actions prevent electric shock and serious burns.

Caution: When handling modules, use an antistatic wrist strap connected to the router’s ESD grounding jack, and hold modules by their edges. Do not touch the components, pins, leads, or solder connections. These actions help to protect modules from damage by electrostatic discharge.

To install a redundant SRP module into a running router, follow these steps:

1. Install the redundant SRP module into the open SRP slot (slot 6 or 7 for ERX14xx models, the E120 router, and the E320 router; slot 0 or 1 for ERX7xx models).

   For detailed information about installing the SRP module, see the ERX Hardware Guide or the E120 and E320 Hardware Guide.

2. Wait for the redundant SRP module to boot, initialize, and reach the standby state.

   When the module is in standby state, the REDUNDANT LED is on and the ONLINE LED is off. If you issue the show version command, the state field for the slot that contains the redundant SRP module is standby.

3. Synchronize the NVS file system of the redundant SRP module to that of the primary SRP module.

   Note: The SRP module reboots after synchronization is complete.

Managing SRP Module Redundancy

You can prevent the redundant SRP module from taking over when:

• The primary SRP module experiences a software failure.
• You push the reset button on the primary SRP module.

  Note: If you do not configure this option, when troubleshooting an SRP module, disconnect the other SRP module from the router. This action prevents the redundant SRP module from taking over if you push the reset button on the primary SRP module.

To configure this option:

1. Issue the disable-switch-on-error command.
2. Synchronize the NVS file system of the redundant SRP module to that of the primary SRP module.

Switching to the Redundant SRP Module

To switch immediately from the primary SRP module to the redundant SRP module, issue the redundancy force-switchover command or the srp switch command. You can configure the router to prompt you if the modules are in a state that could lead to loss of configuration data or NVS corruption.

Upgrading Software on a Redundant SRP Module

For information about upgrading software on SRP modules on ERX7xx models, ERX14xx models, or the ERX310 router, see Installing JUNOSe Software in the JUNOSe System Basics Configuration Guide.

Monitoring the Status LEDs

You can determine the redundancy state of line modules and SRP modules by examining their status LEDs. See Table 4 for a description of the LEDs functions. In addition, if you issue the show version command, the state field for the slot that contains the redundant SRP module indicates standby.