SRX Services Gateway
Highlighted
SRX Services Gateway

Cannot make any config changes - help!

‎05-03-2018 06:24 AM

Hi there, 

 

We made a change on our SRX240 firewall this morning which is simply to update the public ssh key for a system user. 

 

When committing the change, we got the error below:

 

node0:

configuration check succeeds

note1:

commit complete

error: error copying file (/config/juniper.conf.3.gz->/var/db/config/juni[er.conf.4.gz): No space left on device

error: rotation of old files failed

 

However, the change has been pushed into the LIVE configuration as the user can login to the firewall with the new public key that was set. 

 

But now whenever anyone logs into the configuration mode, if we run "show | compare" it shows the change for the public key (which shows a line for removing the old key and a line for adding the new key). 

 

However if we try to commit any changes, we get the error:

 

[edit system login user John authentication]
'ssh-rsa "<ssh key>"
warning: statement does not exist
[edit system login user John authentication]
'ssh-rsa'
warning: patch removes statement that is not empty

 

It seems as though the live configuration and the candidate configuration is out of sync. 

 

We cleared space on the firewall by running the system storage cleanup command. So now its trying to get the config back in sync. 

 

If anyone can advise that would be really helpful.

 

Thanks,

Vishal

3 REPLIES 3
Highlighted
SRX Services Gateway

Re: Cannot make any config changes - help!

[ Edited ]
‎05-03-2018 07:00 AM

You do not have enough disk space:

 

error: error copying file (/config/juniper.conf.3.gz->/var/db/config/juni[er.conf.4.gz): No space left on device

It is time for cleanup!!

 

You can follow KB19466

https://kb.juniper.net/InfoCenter/index?page=content&id=KB19466

 

If it would not help follow this:

https://kb.juniper.net/InfoCenter/index?page=content&id=KB28084

 

 

Regards

Leon Smirnov

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too

 

Highlighted
SRX Services Gateway

Re: Cannot make any config changes - help!

‎05-03-2018 08:48 AM

I've done a cleanup and the directory also exists, still no joy. This issue I have also is on an SRX240 running 12.1X44. 

Highlighted
SRX Services Gateway

Re: Cannot make any config changes - help!

‎05-04-2018 02:29 AM

Any other suggestions? It will be much appreciated. I was asked by JTAC to use "configure exclusive" to delete the command that's not committed however this throws a different error. 

 

"cannot use reserved identifier"
"warning: statement must contain additional statements"

Feedback