Description

This article provides information on how to disable the management port ( fxp0 ) on SRX 1000, 3000, and 5000 series service gateway.

Symptoms

This is applicable to the following Junos platforms.

  • SRX1400

  • SRX3400

  • SRX3600

  • SRX5600

  • SRX5800

On the above list of SRX devices, a dedicated port is present for Out of Band management. If this management port is not connected (physically down), it triggers a major alarm: 
{primary:node0}[edit]
root@srx1> show chassis alarms
node0:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down

node1:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down
Some customers choose not to use this management port. Then they will receive a system alarm, as mentioned above.

Solution


Junos has the provision to manually disable the management ports using the following command. 

{primary:node0}[edit]
root@srx1# set chassis alarm management-ethernet link-down ignore

{primary:node0}[edit]
root@srx1# show
    chassis {
        alarm {
            management-ethernet {
                link-down ignore;
            }
         }
The above command will also work for a chassis cluster environment.
An alternative method for doing this in a chassis cluster environment is given below: 
{primary:node0}[edit]
root@srx1# set groups node0 interfaces fxp0 disable
root@srx1# set groups node1 interfaces fxp0 disable

To verify, check the alarms again. 
{primary:node0}[edit]
root@srx1> show chassis alarms

node0:
--------------------------------------------------------------------------
No alarms currently active

node1:
--------------------------------------------------------------------------
No alarms currently active