SSL VPN
Reply
Contributor
malik1
Posts: 164
Registered: ‎11-14-2009
0

SA Major Error ID ADM20652

Hello Community

I am facing following error on my SA cluster.Can someone please tell me what does the message below means.
Where do we configure the NTP servers in SA as i cant see the NTP server IP's configured on SA.

Due to this error the SA losses communication with the NSM and NSM shows one node of cluster "Down" for brief time.

Major    ADM20652    2012-01-16 09:14:40 - SA-Master - 127.0.0.1] System()[] - NTP server 'x.x.''x.x' is unreachable

 

Thanks & Regards

Malik

Moderator
zanyterp
Posts: 2,263
Registered: ‎11-19-2007
0

Re: SA Major Error ID ADM20652

It means what it shows: the device can't reach the NTP server.

The NTP server is configured at: System>Status>Overview

 

There is a link, edit, next to "System Date & Time" that gives you a chance to configure the NTP server. Something to confirm is that the NTP traffic is allowed to/from the internal port.

Regular Visitor
salman_140cis
Posts: 6
Registered: ‎05-15-2011
0

Re: SA Major Error ID ADM20652

Hello Zanyterp

 

NTP is allowed on ports because this behaviour is happening after every 10 to 15 minutes.

 

SA is configured to get the clocking from ex8200 switches and there is no issue with NTP assosciations on these switches.

 

However there is an another error on SA which can be seen below

 

Event Monitor     See All | Refresh
Severity     Message
Critical     2011/10/28 00:37:28 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/09/02 02:55:14 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/08/31 17:32:31 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/08/31 17:28:37 - SA-Master - System()[] - VIPs failed over to node SA-Master, reason: other node timed out
Critical     2011/08/31 17:28:32 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/08/30 21:27:23 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/08/30 21:12:50 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/08/30 20:56:50 - SA-Master - System()[] - VIPs failed over to node SA-Master, reason: other node timed out
Critical     2011/08/30 20:56:44 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.
Critical     2011/08/27 02:19:58 - SA-Master - System()[] - Node 'SA-Backup' is now unreachable from node 'SA-Master', licenses installed in node SA-Backup are now in grace period for for node SA-Master.

 

What do you think is the issue.Cluster config

 

Thanks & Regards

Malik

 

 

Moderator
zanyterp
Posts: 2,263
Registered: ‎11-19-2007
0

Re: SA Major Error ID ADM20652

Hi Malik (@salman_140cis),

 

The message is indicating that there is something wrong with your cluster communication, yes. It is possible that the units, both or singly, is having some other type of issue. Is there a firewall between the two units or are they connected to the same switch (or in some way set so there is nothing to interrupt the communication)?

Contributor
malik1
Posts: 164
Registered: ‎11-14-2009
0

Re: SA Major Error ID ADM20652

Hello Zany

 

Thank You.

 

It is humbly requested to please remove @xyz from your reply :smileyvery-happy:.

 

As far as connectivity is concerned the cluster is composed of SA6500 & is connected via same Virtual Chassis

 

There is no firewall in between. One thing that i can see is that one node in cluster is connected to primary switch

 

& second node is connected to the backup switch in VC but this does not seems to be an issue.There are no flaps on

 

physical ports on VC.

 

On the other hand NSMExpress losses communication with backup node in this cluster and shows as down and then

 

comes back up again.After investigation it says can not bring time stamps from back up and after sometomes from

 

master.

 

Thanks & Regards

Malik1 @ :smileyvery-happy:

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.