Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Troubleshooting the SRX550 HM

Troubleshooting with the CLI on the SRX550 High Memory Services Gateway

The Junos OS command-line interface (CLI) is the primary tool for controlling and troubleshooting services gateway hardware, Junos OS, routing protocols, and network connectivity. The CLI commands display information from routing tables, information specific to routing protocols, and information about network connectivity derived from the ping and trace route utilities.

You need to enter the CLI commands on one or more external management devices connected to the services gateway to display the information.

Troubleshooting with LEDs on the SRX550 High Memory Services Gateway

The LEDs available on the services gateway display the status of various components. Table 1 describes the LEDs on the chassis.

Table 1: Component LEDs on the Services Gateway Chassis

LED

Location

Usage

ALARM

Left side of the front chassis panel

The ALARM LED has the following indicators:

  • Solid red indicates a hardware component or software module failure.

  • Solid amber indicates a major alarm, such as low memory (less than 10% remaining), session full, maximum number of VPN tunnels reached, high availability (HA) status change, or redundant group member not found.

  • Off indicates that the device is starting up.

Note:

When the system is running, if the ALARM LED is off, it indicates that no alarms are present on the device.

STATUS

Left side of the front chassis panel

The STATUS LED has the following indicators:

  • Solid green indicates that the services gateway is functioning normally.

  • Solid red indicates that the services gateway has failed.

  • Solid amber indicates that the services gateway is starting up, running diagnostics, or shutting down.

  • Off indicates that the device is not receiving power.

POWER

Left side of the front chassis panel

The POWER LED has the following indicators:

  • Solid green indicates that all power supply units (PSUs) are functioning normally.

  • Solid red indicates a failure of one or more PSUs.

  • Solid amber indicates that the Power button has been pressed. The services gateway will shut down.

  • Off indicates that the device is not receiving power.

HA

Left side of the front chassis panel

The HA LED has the following indicators:

  • Solid green indicates that all configured high availability links are available.

  • Solid red indicates that a cluster member is missing or unreachable.

  • Solid amber indicates that some configured high availability links are down, but enough links are still active for full high availability functionality. In this situation, performance might be reduced, current bandwidth could cause packet drops, or single point of failure might now exist.

  • Off indicates that HA is not enabled.

ACE

Left side of the front chassis panel

Note:

ACE LED is not functional.

RPS

Left side of the front chassis panel

Solid green indicates that the redundant power supply is operating normally.

Solid red indicates that one of the following conditions has occurred:

  • The primary power supply has failed, and the device is being powered by the redundant power supply.

  • The redundant power supply has been installed, but is not connected to a power source.

MPIM-1 and MPIM-2

Left side of the front chassis panel

Solid green indicates that the Mini-PIM in the corresponding slot is functioning normally.

Solid red indicates that the Mini-PIM hardware in the corresponding slot has failed or its anti-counterfeit check failed.

Off indicates that there is no Mini-PIM in the corresponding slot, or that the Mini-PIM is not detected by the device.

Troubleshooting with Chassis and Interface Alarm Messages on the SRX550 High Memory Services Gateway

When the services gateway detects an alarm condition, it lights the red or yellow alarm LED on the front panel as appropriate. For a detailed description of the alarm condition, issue the show chassis alarms CLI command.

There are two classes of alarm messages:

  • Chassis alarms—Indicate a problem with a chassis component such as the cooling system or power supply.

  • Interface alarms—Indicate a problem with a specific network interface.

For more information about the show chassis alarms command, see Network Management and Monitoring Guide.

Table 2 describes alarms that can occur for a services gateway chassis component.

Table 2: Alarms for Services Gateway Chassis Components

Component

Alarm Conditions

Action

Alarm Severity

Boot media

The services gateway boots from an alternate boot device.

If the internal flash fails at startup, the services gateway automatically boots itself from the alternative boot device (USB storage device).

If you configured your services gateway to boot from an alternative boot device, ignore this alarm condition.

If you did not configure the services gateway to boot from an alternative boot device, contact JTAC.

Yellow (minor)

Gigabit-Backplane Physical Interface Module (GPIM)

A GPIM has failed.

Contact JTAC.

See Juniper Networks Technical Assistance Center

Red (major)

Hardware components on the services gateway

The services gateway chassis temperature is too high.

Yellow (minor)

The services gateway fan has failed.

Place your hand near the exhaust vents at the side of the chassis to determine whether the fan is pushing air out of the chassis.

If you must replace a fan, contact JTAC.

See Juniper Networks Technical Assistance Center

Red (major)

Note:

For more information about alarms, see the Network Management and Monitoring Guide.

Troubleshooting the Power System on the SRX550 High Memory Services Gateway

The LEDs on the services gateway enable you to determine the performance and operation of the power system. The POWER LED located on the front panel of the services gateway, as described in Table 3, indicates the different status settings with respect to the power system. The LEDs on the faceplate of each power supply also show power supply status as described in Table 4.

Table 3: POWER LED Description

LED Status

LED State

Meaning

Possible Cause and Corrective Action

Green

On

The services gateway is receiving power, and all power supply units (PSUs) are working properly.

Normal indication. No action is required.

Red

On

Indicates failure of one or more PSUs.

If you cannot determine the cause of the problem or need additional assistance while troubleshooting a services gateway, open a support case using the Case Manager link at https://www.juniper.net/support/, or call 1-888-314-JTAC (within the United States) or 1-408-745-9500 (outside the United States).

Amber

On

Power button has been pressed. The services gateway will shut down.

Once the services gateway is running again, continue troubleshooting.

 

Off

Indicates that the services gateway is not receiving power.

If a red alarm condition occurs, issue the show chassis alarms command to determine the source of the problem.

  • Verify that the AC power cord or DC power supply cable is not damaged. If the insulation is cracked or broken, immediately replace the cord or cable.

  • Verify that the source circuit breaker has the proper current rating. Each power supply must be connected to a separate source circuit breaker.

  • Ensure that the power socket is in working condition.

  • Connect the power supply to a different power source with a new power cord or power cable. If the power supply status LEDs indicate that the power supply is not functioning normally, the power supply is the source of the problem. Replace the power supply with a spare.

Note:

If the system temperature exceeds the threshold, Junos OS shuts down all power supplies so that no status is displayed.

Junos OS also can shut down one of the power supplies for other reasons. In this case, the remaining power supplies provide power to the services gateway, and you can still view the system status through the CLI.

Table 4: Power Supply Faceplate LEDs

Power Supply Type

LED Label

Color

Meaning

Possible Cause and Corrective Action

AC

DC OK

Green

The DC output voltages produced by the power supply are within tolerance.

Normal indication. No action is required.

Red

One or more of the DC output voltages produced by the power supply are outside of tolerance.

Unlit

The power supply is not receiving input power.

AC OK

Green

The AC input power provided to the power supply is within tolerance.

Normal indication. No action is required.

Amber

The AC input power provided to the power supply is outside of tolerance.

Unlit

The power supply is not receiving input power.

DC

DC OK

Green

The DC output voltages produced by the power supply are within tolerance.

Normal indication. No action is required.

Red

One or more of the DC output voltages produced by the power supply are outside of tolerance.

Unlit

The power supply is not receiving input power.

INPUT OK

Green

The DC input power provided to the power supply is within tolerance.

Normal indication. No action is required.

Amber

The DC input power provided to the power supply is outside of tolerance.

Unlit

The power supply is not receiving input power.

Using the RESET CONFIG Button on the SRX550 High Memory Services Gateway

If a configuration fails or denies management access to the services gateway, you can use the RESET CONFIG button to restore the services gateway to the factory-default configuration or a rescue configuration. For example, if someone inadvertently commits a configuration that denies management access to a services gateway, you can delete the invalid configuration and replace it with a rescue configuration by pressing the RESET CONFIG button. The button is recessed to prevent it from being pressed accidentally.

The rescue configuration is a previously committed, valid configuration. You must have previously set the rescue configuration through the J-Web interface or the CLI.

To press the RESET CONFIG button, insert a small probe (such as a straightened paper clip) into the pinhole on the front panel.

CAUTION:
  • By default, pressing and quickly releasing the RESET CONFIG button loads and commits the rescue configuration through the J-Web interface or the CLI. (For details, see the CLI Explorer.)

  • By default, pressing and holding the RESET CONFIG button for 15 seconds or more—until the STATUS LED blinks red—deletes all configurations on the services gateway, including the backup configurations and rescue configuration, and loads and commits the factory configuration.

For details about factory-default settings, see How to View Factory-Default Settings of the SRX550 High Memory Services Gateway.

Changing the RESET CONFIG Button Behavior

You can change the default operation of the RESET CONFIG button by limiting how the button resets the services gateway:

  • To prevent the RESET CONFIG button from setting the device to the factory-default configuration and deleting all other configurations:

    admin@host# set chassis config-button no-clear

    You can still press and quickly release the button to reset it to the rescue configuration.

  • To prevent the RESET CONFIG button from setting the device to the rescue configuration:

    admin@host# set chassis config-button no-rescue

    You can still press and hold the button for 15 seconds or more to reset the gateway to the factory-default configuration.

  • To disable the button and prevent the device from resetting to either the factory-default or rescue configuration:

    admin@host# set chassis config-button no-clear no-rescue

The no-clear option prevents the RESET CONFIG button from deleting all configurations on the services gateway. The no-rescue option prevents the RESET CONFIG button from loading the rescue configuration.

To return the function of the RESET CONFIG button to its default behavior, remove the config-button statement from the device configuration.