How to disable the management Ethernet ports on the SRX services gateway

SUMMARY:

This article provides information on how to disable the management port (fxp0) on SRX 1000, 3000, and 5000 series service gateway.

PROBLEM OR GOAL:

This is applicable to the following Junos platforms.

  • SRX1400
  • SRX3400
  • SRX3600
  • SRX5600
  • SRX5800

On the above list of SRX devices, a dedicated port is present for Out of Band management. If this management port is not connected (physically down), it triggers a major alarm:

{primary:node0}[edit]
root@srx1> show chassis alarms
node0:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down

node1:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down

Some customers choose not to use this management port. Then they will receive a system alarm, as mentioned above.

CAUSE:

SOLUTION:

Junos has the provision to manually disable the management ports using the following command.

{primary:node0}[edit]
root@srx1# set chassis alarm management-ethernet link-down ignore

{primary:node0}[edit]
root@srx1# show
    chassis {
        alarm {
            management-ethernet {
                link-down ignore;
            }
         }

The above command will also work for a chassis cluster environment.
An alternative method for doing this in a chassis cluster environment is given below:

{primary:node0}[edit]
root@srx1# set groups node0 interfaces fxp0 disable
root@srx1# set groups node1 interfaces fxp0 disable

To verify, check the alarms again.

{primary:node0}[edit]
root@srx1> show chassis alarms

node0:
--------------------------------------------------------------------------
No alarms currently active

node1:
--------------------------------------------------------------------------
No alarms currently active

PURPOSE:

Configuration
Implementation
Troubleshooting

You may also like...

Bir Cevap Yazın

E-posta hesabınız yayımlanmayacak. Gerekli alanlar * ile işaretlenmişlerdir