Troubleshooting the SRX1500
Troubleshooting Resources for the SRX1500 Firewall Overview
To troubleshoot a services gateway, you use the Junos OS command-line interface (CLI) and LEDs on the components:
LEDs—When the services gateway detects an alarm condition, the alarm LED on the interfaces glows red or yellow.
CLI—The CLI is the primary tool for controlling and troubleshooting hardware, Junos OS, and network connectivity. Use the CLI to display more information about alarms. CLI commands display information about network connectivity derived from the ping and traceroute utilities. For information about using the CLI to troubleshoot Junos OS, see the appropriate Junos OS configuration guide.
JTAC—If you need assistance during troubleshooting, you can contact the Juniper Networks Technical Assistance Center (JTAC) by using the Web or by telephone. If you encounter software problems, or problems with hardware components not discussed here, contact JTAC.
Troubleshooting Chassis and Interface Alarm Messages on the SRX1500 Services Gateway
When the services gateway detects an alarm condition, the alarm LED on the interfaces
glows red or yellow on the front panel as appropriate. To view a more detailed
description of the alarm cause, issue the show chassis alarms
command.
There are two classes of alarm messages:
-
Chassis alarms—Indicate a problem with a chassis component such as the cooling system or power supply.
-
Interface alarms—Indicate a problem with a specific network interface.
For more information about the show chassis alarms
command, see Network Management and Monitoring Guide.
Table 1 describes alarms that can occur for a services gateway chassis component.
Component |
Alarm Conditions |
Action |
Alarm Severity |
---|---|---|---|
Boot media |
The services gateway boots from an alternate boot device. |
If the internal flash fails at startup, the services gateway automatically boots itself from the alternative boot device (USB storage device). If you configured the services gateway to boot from an alternative boot device, ignore this alarm condition. If you did not configure the services gateway to boot from an alternative boot device, contact JTAC. |
Yellow (minor) |
Hardware components on services gateway |
The services gateway chassis temperature is too warm. |
|
Yellow (minor) |
The services gateway fan has failed. |
Place your hand near the exhaust vents at the rear of the chassis to determine whether the fan is pushing air out of the chassis. |
Red (major) |
For more information about alarms, see the appropriate Junos OS Monitoring and Troubleshooting for Security Devices Guide.
Troubleshooting the Power System on the SRX1500 Services Gateway
The LEDs on the services gateway enable you to determine the performance and operation of the power system. The PWR LED located on the front panel of the services gateway, as described in Table 2, indicates the different status settings with respect to the power system.
LED Status |
LED State |
Meaning |
Possible Cause and Corrective Action |
---|---|---|---|
Green |
On |
The services gateway is receiving power, and all AC and/or DC power supply units (PSUs) are working properly. |
Normal indication. No action is required. |
Red |
On |
Indicates failure of one or more PSUs. |
If you cannot determine the cause of the problem or need additional assistance while troubleshooting a services gateway, open a support case using the Case Manager link at https://www.juniper.net/support/, or call 1-888-314-JTAC (within the United States) or 1-408-745-9500 (outside the United States). |
Blinking green |
On |
The services gateway is receiving power - the services gateway is in the bootup phase before OS initialization. |
Normal indication. No action is required. |
Off |
Off |
Indicates that the services gateway is not receiving power. |
If a red alarm condition occurs, issue the
Note:
If the system temperature exceeds the threshold, Junos OS shuts down all power supplies so that no status is displayed. Junos OS also can shut down one of the power supplies for other reasons. In this case, the remaining power supply provides power to the services gateway, and you can still view the system status through the CLI. |
Using the RESET CONFIG Button on the SRX1500 Services Gateway
If a configuration fails or denies management access to the services gateway, you can use the RESET CONFIG button to restore the services gateway to the factory-default configuration. The button is recessed to prevent it from being pressed accidentally.
To press the RESET CONFIG button, insert a small probe (such as a straightened paper clip) into the pinhole on the front panel.
Pressing and holding the RESET CONFIG button for 5 seconds or more deletes all configurations (backup configurations and rescue configuration) on the device, and loads and commits the factory configuration.
You can reset the configuration to the rescue configuration
by pressing and holding the Reset button for
a time interval ranging from 5 seconds to 15 seconds. The configuration
is not reset If you configured chassis config-button no-rescue
or if a rescue configuration is not already set.
You can reset the configuration to the factory-default configuration
by pressing and holding the Reset button for
more than 15 seconds. If you configured chassis config-button
no-clear
, then the configuration is not reset.
For details about factory-default settings, see Viewing SRX1500 Services Gateway Factory-Default Settings.
For details about performing initial software configuration, see Configuring the SRX1500 Services Gateway Using the CLI.