Switching

Hi,

When i enter "sh vlans" on an EX3300 switch with 12.2R10.2 it says "error: the ethernet-switching subsystem is not responding to management requests" as answer.

I will be so glad if someone knows about this issue.. Thanks  in advance.

Hi Folks,

The reported observation could be due to stp loop. There are occurrences of STP loop which intern introduce flooding of control traffic in the box. Look for STP loop and DDos logs in the box.

Junos OS Distributed Denial-of-Service (DDoS) protection identifies and suppresses malicious control packets while enabling legitimate control traffic to be processed.

Couple of commands to check the DDOS violations, [verified in MX Platform]

show ddos-protection protocols statistics terse
show ddos-protection protocols statistics brief 
show ddos-protection protocols statistics detail 
show ddos-protection statistics 

Hi Python,

Thanks so much for your help. When i applied the commands you sent, it says the message below.

error: command is not valid on the ex3300-48p

huseyin@SW_AS_KAT_2_ASMA> show ddos-protection protocols statistics terse         
error: command is not valid on the ex3300-48p

{master:0}

huseyin@SW_AS_KAT_2_ASMA> show ddos-protection protocols statistics brief        
error: command is not valid on the ex3300-48p

{master:0}
huseyin@SW_AS_KAT_2_ASMA> show ddos-protection protocols statistics detail        
error: command is not valid on the ex3300-48p

{master:0}
huseyin@SW_AS_KAT_2_ASMA> show ddos-protection statistics                              
error: command is not valid on the ex3300-48p

{master:0}
huseyin@SW_AS_KAT_2_ASMA>

huseyin@SW_AS_KAT_2_ASMA> show version
fpc0:
--------------------------------------------------------------------------
Hostname: SW_AS_KAT_2_ASMA
Model: ex3300-48p
JUNOS Base OS boot [12.3R10.2]
JUNOS Base OS Software Suite [12.3R10.2]
JUNOS Kernel Software Suite [12.3R10.2]
JUNOS Crypto Software Suite [12.3R10.2]
JUNOS Online Documentation [12.3R10.2]
JUNOS Enterprise Software Suite [12.3R10.2]
JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R10.2]
JUNOS Routing Software Suite [12.3R10.2]
JUNOS Web Management [12.3R10.2]
JUNOS FIPS mode utilities [12.3R10.2]

fpc1:
--------------------------------------------------------------------------
Hostname: SW_AS_KAT_2_ASMA
Model: ex3300-48p
JUNOS Base OS boot [12.3R10.2]
JUNOS Base OS Software Suite [12.3R10.2]
JUNOS Kernel Software Suite [12.3R10.2]
JUNOS Crypto Software Suite [12.3R10.2]
JUNOS Online Documentation [12.3R10.2]
JUNOS Enterprise Software Suite [12.3R10.2]
JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R10.2]
JUNOS Routing Software Suite [12.3R10.2]
JUNOS Web Management [12.3R10.2]
JUNOS FIPS mode utilities [12.3R10.2]

{master:0}
huseyin@SW_AS_KAT_2_ASMA>

kindly regards,

I believe, at least currently, ddos protection is only available on MX, T and EX9200 products:

https://www.juniper.net/documentation/en_US/junos15.1/topics/example/subscriber-management-ddos-example.html

You could maybe try reset a Junos OS process:

https://www.juniper.net/techpubs/en_US/junos15.1/topics/task/operational/junos-process-restarting.html

Now Ethernet-switching is not an option, but 'maybe' interface-control might work???  Otherwise I would perform a switch reboot/reset, and if issue remains, then maybe RMA the switch.

I do also assume you have a TAC case open.  Good luck.

I don’t find any traces/clue for an hardware issue. It could be a issue introduced due to a loop or a genuine software issue.

Is there any eswd cores? "show system core-dumps"

switch> show ethernet-switching table

error: the ethernet-switching subsystem is not responding to management requests

switch> show system processes extensive | grep eswd

  PID USERNAME   THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND

17856 root         1 131    0 12400K 13172K RUN    636:39 87.99% eswd

Next Action:

Try restarting the Restart eswd process and try if it recovers the issue.

I could come across an interesting PR as below, however it is supposed to have the fix in 12.3 [in your release]. Please open a jtac case to get it confirmed and for any software assistance.

http://www.juniper.net/techpubs/en_US/junos12.3/information-products/topic-collections/release-notes/12.3/topic-69602.html

Also, On EX Series switches with private VLAN (PVLAN) and DHCP snooping configured, if the interface configured with PVLAN flaps, the Ethernet switching process (eswd) might stop responding to management requests, and high eswd and Software Forwarding Infrastructure process (sfid) utilization might be observed. [PR/1022312: This issue has been resolved.]

Hi,

After restarting the switch the problem resolved. Every thing is ok now.

Thanks for all.

kindly regards,