Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  Reducing ScreenOS tasks - SSG20-HM - 6.3.0r1.0

    Posted 05-10-2010 09:34

    I am running an SSG20 w/full UTM, now upgraded to 6.3. I have been having issues with logging into the box (via CLI) and with NSM communications. Working with JTAC we determined that the problem is with the task count. The SSG20 has a limit of 111 tasks. My unit runs at 110 to 111 tasks constantly. The bulk of the tasks are idle and my CPU usage is under 5%. I am trying to determine how I can eliminate some tasks so that I can get my count down.

     

    Example - there is an idle "telnet" task - I don't allow telnet but the task is there. Same for dialer, nsrp (not running) Any assistance is greatly appreciated.



  • 2.  RE: Reducing ScreenOS tasks - SSG20-HM - 6.3.0r1.0
    Best Answer

    Posted 05-11-2010 00:53

    Hi Kevin,

     

    We had a similar issue with our SSG350Ms, which were originally running 6.2.0r3. After lots of back-and-forth with JTAC, trying out various things to try and solve the problem, they issued us with a patched version of 6.2.0r4 which increased the maximum number of allowed tasks. This fix has been included in the generally-available releases since 6.2.0r5 - see "Unable to telnet to firewall" in the "Changes to Default Behavior Introduced in 6.2.0r5" section of the release notes.

     

    Looking at the release notes for 6.3.0r2, I see that the issue has been fixed there too - look for item 455868 in the "Addressed Issues in ScreenOS 6.3.0r2" section of the release notes.

     

    Hope that helps.

     

    Regards,

    Graeme



  • 3.  RE: Reducing ScreenOS tasks - SSG20-HM - 6.3.0r1.0

    Posted 05-11-2010 08:49

    Graeme - thanks for the post! Upgrading took care of it. I have had a call into JTAC since last Friday asking them for a path forward and you provided it. Thanks to you I will update my case and close it out.

     

    Welcome to the Forum!