Troubleshooting Resources for the SRX4300 Firewall
To troubleshoot a device, you use the Junos OS CLI and LEDs on the components:
LEDs—When the device detects an alarm condition, the alarm LED on the interfaces glows red or yellow.
CLI—The CLI is the primary tool for controlling and troubleshooting hardware, Junos OS, and network connectivity. Use the CLI to see more information about alarms. CLI command outputs display information about network connectivity, which Junos derives from the ping and traceroute utilities.
For information about using the CLI to troubleshoot Junos OS, see the appropriate Junos OS configuration guide.
JTAC—If you need assistance during troubleshooting, you can contact the Juniper Networks Technical Assistance Center (JTAC) by using the Web or by telephone. If you encounter software problems, or problems with hardware components not discussed here, contact JTAC.
Troubleshooting Chassis and Interface Alarm Messages on the SRX4300 Firewall
When the firewall detects an alarm condition, the alarm LED on the interfaces glows red or yellow on the front panel as appropriate. To view a more detailed description of the alarm cause, issue the show chassis alarms command.
Alarm messages belong to two classes:
Chassis alarms—Indicate a problem with a chassis component such as the cooling system or PSU.
Interface alarms—Indicate a problem with a specific network interface.
For more information about the show chassis alarms command, see Network Management and Monitoring Guide.
Table 1 describes alarms that can occur for a firewall chassis component.
Table 1: Alarms for Firewall Chassis Components
Component
Alarm Conditions
Action
Alarm Severity
Boot media
If the internal flash fails at startup, the firewall automatically boots from the alternative boot device (USB storage device).
If you configured the firewall to boot from an alternative boot device, ignore this alarm condition.
If you did not configure the firewall to boot from an alternative boot device, contact JTAC.
Yellow (minor)
Hardware components on the firewall
The firewall chassis temperature is too warm.
Check the room temperature. See Environmental Requirements and Specifications for SRX4300.
Check the air flow. See Clearance Requirements for Hardware Maintenance of SRX4300.
Yellow (minor)
The firewall fan has failed.
Place your hand near the exhaust vents at the rear of the chassis to determine whether the fan is pushing air out of the chassis.
Red (major)
Note:
The system does not raise chassis alarms for problems with the output voltage from the PSU, output current from the PSU, and the internal fan in the PSU.
Note:
For more information about alarms, see the Junos OS Monitoring and Troubleshooting for Security Devices Guide.
Troubleshooting the Power System on the SRX4300
The LEDs on the firewall enable you to determine the performance and operation of the power system. The PWR LED located on the front panel of the firewall, as described in Chassis Status LEDs, indicates the different status settings of the power system.
Table 2: PWR LED Description
LED Status
LED State
Meaning
Possible Cause and Corrective Action
Green
On
The firewall is receiving power, and all AC or DC power supply units (PSUs) are working properly.
The power system is normal and no action is required.
Red
On
One or more PSUs have failed.
If you cannot determine the cause of the problem or need additional assistance:
Open a support case using the Service Request Manager link at https://www.juniper.net/support/.
Call 1-888-314-JTAC (if you're within the United States) or 1-408-745-9500 (if you're outside the United States).
Blinking green
On
The firewall, which is in the bootup phase before Junos OS initialization, is receiving power.
The power system is normal and no action is required.
Off
Off
The firewall is not receiving power.
Issue the show chassis alarms command to determine the source of the problem.
Verify that the AC power cord or DC power supply cable is not damaged. If the insulation is cracked or broken, immediately replace the cord or cable.
Verify that the source circuit breaker has the proper current rating. Each PSU must be connected to a separate source circuit breaker.
Ensure that the power socket you are plugged into is in working condition.
Connect the PSU to a different power source with a new power cord or power cables. If the LEDs on the PSU indicate that the PSU is not functioning normally, replace the PSU with a spare.
Note:
If the system temperature exceeds the threshold, Junos OS shuts down all power supplies and the LED stops indicating the status.
Junos OS also can shut down one of the PSUs for other reasons. In this case, the remaining PSU provides power to the firewall. You can view the system status through the CLI.
By default, pressing and holding the RESET CONFIG button for 15 seconds or more—until the Status LED is solid amber — deletes all configurations on the device, including the backup configurations and rescue configuration, and loads and commits the factory configuration.
To view interface status for all the interfaces, enter show interfaces xe. To view status and statistics for a specific interface, enter show interfaces xe interface-name . To view status and traffic statistics for all interfaces, enter either show interfaces xe detail or show interfaces xe extensive.
The reset Config button is available on the front panel of the SRX device. User can press this button to reset the device to its factory default configuration. The Reset Config button is depressed to prevent from being accidentally pressed by anyone working near the device.
Hardware Reset: Like many brands across and types of networking equipment, Juniper switches can be reset by using a pin or paperclip to press the small recessed reset button on the switch. This can be on either the front or the back of the switch itself.
Select the Start button, then type settings.Select Settings > Network & internet. The status of your network connection will appear at the top. Windows 10 lets you quickly check your network connection status.
Use the show configuration operational mode command to review the configuration that is currently running on the SRX Series device, which is the last committed configuration.
To start the J-Web interface: Launch your HTTPS-enabled Web browser. To use HTTPS, you must have installed a certificate on the switch and enabled HTTPS. After https:// in your Web browser, type the hostname or IP address of the switch and press Enter.
If you need to reset your Git configurations to their default settings, you should remove the configuration file. Git will recreate these files with default settings the next time it needs them.
Address: Suite 751 871 Lissette Throughway, West Kittie, NH 41603
Phone: +2366831109631
Job: Sales Producer
Hobby: Creative writing, Motor sports, Do it yourself, Skateboarding, Coffee roasting, Calligraphy, Stand-up comedy
Introduction: My name is Laurine Ryan, I am a adorable, fair, graceful, spotless, gorgeous, homely, cooperative person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.