Hi,
I have two SRX1400 configured in a HA cluster. This is the SRX1400 model with 3 built-in 10g interfaces.
Today I tried to connect both SRX's to an EX4200 with a 10g uplink module. All 10g interfaces on SRX B works, but none on SRX A. I've tried switching cables, SFP's and just about everything but I can't seem to establish any link on the 10g interfaces on SRX A. Everything else works like it should though, including all the 1g interfaces on SRX A.
My configuration looks like this:
version 11.4R11.4;
groups {
node0 {
system {
host-name srxA;
}
}
node1 {
system {
host-name srxB;
}
}
}
apply-groups "${node}";
system {
domain-name foo.bar.com;
ports {
console log-out-on-disconnect;
}
root-authentication {
encrypted-password XXX
}
services {
ssh {
root-login deny;
protocol-version v2;
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
license {
autoupdate {
url https://ae1.juniper.net/junos/key_retrieval;
}
}
}
chassis {
alarm {
management-ethernet {
link-down ignore;
}
}
cluster {
control-link-recovery;
reth-count 2;
redundancy-group 0 {
node 0 priority 254;
node 1 priority 1;
}
redundancy-group 1 {
node 0 priority 254;
node 1 priority 1;
interface-monitor {
ge-0/0/6 weight 255;
ge-4/0/6 weight 255;
}
}
}
}
interfaces {
ge-0/0/6 {
gigether-options {
redundant-parent reth1;
}
}
ge-4/0/6 {
gigether-options {
redundant-parent reth1;
}
}
fab0 {
fabric-options {
member-interfaces {
ge-0/0/0;
ge-0/0/1;
}
}
}
fab1 {
fabric-options {
member-interfaces {
ge-4/0/0;
ge-4/0/1;
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.1.1/32;
}
}
}
reth0 {
redundant-ether-options {
redundancy-group 1;
}
}
reth1 {
redundant-ether-options {
redundancy-group 1;
}
unit 0 {
family inet {
address 10.1.1.2/30;
}
}
}
}
snmp {
community XXX {
authorization read-only;
}
}
routing-options {
router-id 192.168.1.1;
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface reth1.0 {
authentication {
md5 1 key XXX
}
}
}
}
}
security {
zones {
security-zone trust {
interfaces {
reth1.0 {
host-inbound-traffic {
system-services {
ssh;
ping;
traceroute;
}
protocols {
ospf;
}
}
}
}
}
}
}
show chassis hardware displays all interfaces and SFP's. Nothing wrong there as far as I can tell.
The 10g interfaces are numbered as follows:
xe-0/0/7 up down
xe-0/0/8 up down
xe-0/0/9 up down
xe-4/0/7 up up
xe-4/0/8 up down
xe-4/0/9 up down
The last three belongs to SRX B and works OK.
I found the following KB article, which was close but I don't think it really helps me: http://kb.juniper.net/InfoCenter/index?page=content&id=KB21437
Any ideas?