SRX Services Gateway
Highlighted
SRX Services Gateway

10g interfaces on SRX1400 won't come up

‎06-11-2014 08:54 AM

Hi,

 

I have two SRX1400 configured in a HA cluster. This is the SRX1400 model with 3 built-in 10g interfaces.

 

Today I tried to connect both SRX's to an EX4200 with a 10g uplink module. All 10g interfaces on SRX B works, but none on SRX A. I've tried switching cables, SFP's and just about everything but I can't seem to establish any link on the 10g interfaces on SRX A. Everything else works like it should though, including all the 1g interfaces on SRX A.

 

My configuration looks like this:

 

version 11.4R11.4;
groups {
    node0 {
        system {
            host-name srxA;
        }
    }
    node1 {
        system {
            host-name srxB;
        }
    }
}
apply-groups "${node}";
system {
    domain-name foo.bar.com;
    ports {
        console log-out-on-disconnect;
    }
    root-authentication {
        encrypted-password XXX
    }
    services {
        ssh {
            root-login deny;
            protocol-version v2;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    license {
        autoupdate {
            url https://ae1.juniper.net/junos/key_retrieval;
        }
    }
}
chassis {
    alarm {
        management-ethernet {
            link-down ignore;
        }
    }
    cluster {
        control-link-recovery;
        reth-count 2;
        redundancy-group 0 {
            node 0 priority 254;
            node 1 priority 1;
        }
        redundancy-group 1 {
            node 0 priority 254;
            node 1 priority 1;
            interface-monitor {
                ge-0/0/6 weight 255;
                ge-4/0/6 weight 255;
            }
        }
    }
}
interfaces {
    ge-0/0/6 {
        gigether-options {
            redundant-parent reth1;
        }
    }
    ge-4/0/6 {
        gigether-options {
            redundant-parent reth1;
        }
    }
    fab0 {
        fabric-options {
            member-interfaces {
                ge-0/0/0;
                ge-0/0/1;
            }
        }
    }
    fab1 {
        fabric-options {
            member-interfaces {
                ge-4/0/0;
                ge-4/0/1;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 192.168.1.1/32;
            }
        }
    }
    reth0 {
        redundant-ether-options {
            redundancy-group 1;
        }
    }
    reth1 {
        redundant-ether-options {
            redundancy-group 1;
        }
        unit 0 {
            family inet {
                address 10.1.1.2/30;
            }
        }
    }
}
snmp {
    community XXX {
        authorization read-only;
    }
}
routing-options {
    router-id 192.168.1.1;
}
protocols {
    ospf {
        area 0.0.0.0 {
            interface lo0.0 {
                passive;
            }
            interface reth1.0 {
                authentication {
                    md5 1 key XXX
                }
            }
        }
    }
}
security {
    zones {
        security-zone trust {
            interfaces {
                reth1.0 {
                    host-inbound-traffic {
                        system-services {
                            ssh;
                            ping;
                            traceroute;
                        }
                        protocols {
                            ospf;
                        }
                    }
                }
            }
        }
    }
}

 

show chassis hardware displays all interfaces and SFP's. Nothing wrong there as far as I can tell.

 

The 10g interfaces are numbered as follows:

 

xe-0/0/7                up    down
xe-0/0/8                up    down
xe-0/0/9                up    down
xe-4/0/7                up    up
xe-4/0/8                up    down
xe-4/0/9                up    down

 

The last three belongs to SRX B and works OK.

 

I found the following KB article, which was close but I don't think it really helps me: http://kb.juniper.net/InfoCenter/index?page=content&id=KB21437

 

Any ideas?

 

4 REPLIES 4
Highlighted
SRX Services Gateway

Re: 10g interfaces on SRX1400 won't come up

‎06-13-2014 07:11 PM
Are you sure the ex4200 uplink module is running in 10Gb mode and not 1Gb?
Highlighted
SRX Services Gateway

Re: 10g interfaces on SRX1400 won't come up

‎06-17-2014 04:27 AM

RG0 is primary on SRXA or SRX B.

 

How about the status on the connected switch.

 

Regards,

rparthi

Highlighted
SRX Services Gateway

Re: 10g interfaces on SRX1400 won't come up

‎06-19-2014 10:46 AM

Your configuration has ge-x/y/z interfaces configured instead of xe-x/y/z interfaces.  Maybe change your configuration (remember JunOS boxes seperate the configuration from the hardware meaning you can have configuration for interfaces that do not exist, and interfaces that are not configured).

 

Ron

JNCIE-SEC #127
JNCIE-ENT #489
Highlighted
SRX Services Gateway
Solution
Accepted by topic author joeld
‎08-26-2015 01:27 AM

Re: 10g interfaces on SRX1400 won't come up

‎07-02-2014 02:30 AM

JTAC replaced the SYSIO card. All xe interfaces are now working again.

Feedback