SRX Services Gateway
Highlighted
SRX Services Gateway

SRX3400 Active passive chassis cluster OID

‎01-25-2015 12:54 AM

hi all,

the below OID generated the Graph(attached). may you please explain for us what each value means?

 

1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6

(jnxJsSPUMonitoringCurrentFlowSession)

 

 

 

Attachments

10 REPLIES 10
Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

[ Edited ]
‎01-25-2015 04:32 AM

This graph is showing the current number of active sessions per second on each SPC (SPU) that you have installed in your SRX cluster. 

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-25-2015 01:32 PM

hi,

 

may you please explain it further.

 

thanks

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-25-2015 01:46 PM

Whenever traffic passes through your firewall from one zone to another, a session is created. This graph is showing the number of active sessions. On the high end SRX, there must be one Services Processing Card per node and it looks like you have two SPCs in your chassis and since you have them in a cluster and two nodes in a cluster need the exact same hardware configuration, you have a total of 4 SPCs. 

 

Here is the hardware guide for the SPCs:

 

https://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/spc-srx3600.html

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-27-2015 03:05 AM

hi

 

thank you for your support.

 

 Actually I am aware of this SPC thing but the issue was these numbers 22, 23 and 6 and 7? what are these numbers?  Also please confirm how these sessions are shared on these SPCs. As far as I know, if SRX is working in cluster the total no of sessions are shared amongst each node (need your confirmation). Now in our case since we have 2 SPCs on each node, are these working in load sharing basis? If so, the graph should show equal no of sessions on each SPC. Appreciate your confirmation on this.

 

appreciate your valuable support.

 

thanks,

 

regards,

Haihtam Jneid

 

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-27-2015 03:27 AM

Hi Haitham,

 

When you activate CLustering on SRX, there is a change in naming convention. For example on SRX3400 we have 8 CFM slots (on which we insert IOC/SPC/NPC), on node 0 they are named as slot 0-7 and in node 1 they are named as slot 8-15

 

Below URL explains the naming convention in clusters.

 

http://www.juniper.net/techpubs/en_US/junos11.4/topics/reference/general/chassis-cluster-srx-series-...

 

Please post your "show chassis fpc pic-status" output to understand the numbering in a better way, i belive 22, 23 and 6 and 7 are the SPUs .

 

Regarding, different number of sessions between the SPC/SPU in same node, its possible because one SPU is acting as "Cp-Flow" and you may have half number of sessions compared to SPU acting as "Flow".

 

I hope this helps.

 

Thanks,

Suraj

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too

 

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-27-2015 03:30 AM

rsuraj,

How do you check the mode configuration of the SPC?  This is something I was just looking up when you responded, but I can't seem to find it.

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-27-2015 03:35 AM

Operational mode command "show chassis fpc pic-status " will show the mode.

 


root@srx3k> show chassis fpc pic-status
Slot 0   Online       SRX3k SFB 12GE
  PIC 0  Online       8x 1GE-TX 4x 1GE-SFP
Slot 3   Online       SRX3k SPC
  PIC 0  Online       SPU Cp-Flow
Slot 12  Online       SRX3k NPC
  PIC 0  Online       NPC PIC

 

Thanks,

Suraj

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too

 

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎01-27-2015 11:18 PM

Hi Suraj

 

appreciate your valuable support.

 

please find below the output of the show command your requested.

 

admin@BAS-SRX3400-1> show chassis fpc pic-status 

node0:

--------------------------------------------------------------------------

Slot 0   Online       SRX3k SFB 12GE

  PIC 0  Online       8x 1GE-TX 4x 1GE-SFP

Slot 5   Online       SRX3k NPC

  PIC 0  Online       NPC PIC

Slot 6   Online       SRX3k SPC

  PIC 0  Online       SPU Cp-Flow

Slot 7   Online       SRX3k SPC

  PIC 0  Online       SPU Flow

 

node1:

--------------------------------------------------------------------------

Slot 0   Online       SRX3k SFB 12GE

  PIC 0  Online       8x 1GE-TX 4x 1GE-SFP

Slot 5   Online       SRX3k NPC

  PIC 0  Online       NPC PIC

Slot 6   Online       SRX3k SPC

  PIC 0  Online       SPU Cp-Flow

Slot 7   Online       SRX3k SPC

  PIC 0  Online       SPU Flow

 

please refer back to the diagram attached earlier and provide me with answers regarding below question if you please:

 

  1. What is this numbers indicate, 22, 23 and 6 and 7?
  2. How these sessions are shared between SPCs?
  3. Are SPCs working in load sharing basis?  If so, the graph should show equal no of sessions on each SPC.

 

thank you very much

 

Haitham

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

‎02-04-2015 08:18 AM

hi All,

 

any answer for my previous reply.

 

thanks,

 

regards,
haitham Jneid

Highlighted
SRX Services Gateway

Re: SRX3400 Active passive chassis cluster OID

[ Edited ]
‎02-04-2015 08:28 AM

@Haitham Jneid wrote:
1. What is this numbers indicate, 22, 23 and 6 and 7?
 

This is pretty obvious - 6 and 7 are the slot numbers of your SPCs.  22 and 23 are the redundant chassis slot numbers, which are offset because of the clustering.

 


@Haitham Jneid wrote:
2. How these sessions are shared between SPCs?

As you can see, your SPCs are in different modes, as indicated by the 'SPU Cp-Flow' and the 'SPU Flow' output.  Please see http://www.juniper.net/techpubs/en_US/junos12.1/topics/concept/session-flow-central-point-for-srx-se... for a description of these modes.

 


@Haitham Jneid wrote:
3. Are SPCs working in load sharing basis?  If so, the graph should show equal no of sessions on each SPC.

The documentation above should answer this question, as well.  rsuraj answered all these questions in post #6 above:

 

http://forums.juniper.net/t5/SRX-Services-Gateway/SRX3400-Active-passive-chassis-cluster-OID/m-p/267...

Feedback