Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Troubleshooting Scenarios

Learn about common troubleshooting methods for SRX1600, SRX4120, and SRX4300 Firewalls.

You can use existing troubleshooting features to work around issues with the SRX1600, SRX4120, and SRX4300 Firewalls. You can use monitoring commands, log files, trace options, and packet captures for transit traffic through the firewall or control traffic to and from the Routing Engine. Request support information (RSI) includes all the commands supported on these firewalls.

  • Trace options—The firewall device must support trace options for all processes, services, and protocols. Trace options are very useful during debugging and troubleshooting.

  • RSI—On-box UI and centralized management must provide any option to create and download the RSI information for TAC case or ticket.

  • Boot messages—An option must be provided to save boot messages in a file, such that user should be able to retrieve errors or messages displayed during boot process.

For more information about troubleshooting, see:

Trace Options

SRX1600, SRX4120, and SRX4300 Firewalls support trace options for all processes, services, and protocols.

Use the references below for more details on trace option:

RSI and Logs

Use the following commands to generate RSI output, archive log files, and upload the required large files to TAC support:

  • > request support information | save /var/log/rsi#-YYYY-MM-DD.txt

    > file archive compress source /var/log/* destination /var/tmp/logs#-YYYY-MM-DD

    This command creates the /var/tmp/logs#-YYYY-MM-DD/tgz file to archive and compress log files from /var/log.

  • To move the files from the secondary node to the primary node:

    file copy /var/tmp/logs-node1--YYYY-MM-DD.tgz node0:/var/tmp/

  • To upload large files to a TAC support case using SFTP, see How to upload large files to a TAC support case using SFTP.

Boot Messages

  • To see the boot messages for the most recent boot messages, run the show system boot-messages command.

    For more information, see show system boot-messages.

    You can also find this information in /var/run/dmesg.boot.