Description

Which command is used to check IDP license expired alarms.

Symptoms

SRX device has the yellow alarm LED ON, and the /var/log/messages shows it is due to the IDP signature expired:

Mar 2 17:42:46.721 2011 FW2 alarmd[1123]: %DAEMON-4: Alarm set: License color=YELLOW, class=CHASSIS, reason=IDP Signature usage requires a license
Mar 2 17:42:46.723 2011 FW2 alarmd[1123]: %DAEMON-1-LICENSE_EXPIRED: License for feature idp-sig(29) expired
Mar 2 17:42:46.730 2011 FW2 craftd[1124]: %DAEMON-4: Minor alarm set, IDP Signature usage requires a license
However, no alarms are in from show chassis alarms. Why?
test@FW2> show chassis alarms
No alarms currently active

Solution

When a license is expired, an ALARM_TYPE_SYSTEM type alarm is raised, and it can be checked in ‘show system alarms’. The 'show system alarms' is not included in the request support information , so you have to issue the command separately.

Chassis alarms from the chassisd process triggers an ALARM_TYPE_CHASSIS and an ALARM_TYPE_SYSTEM type alarm simultaneously, so you can check chassis alarm by both 'show system alarms' and 'show chassis alarms'.

Example :

root> show chassis alarms
4 alarms currently active

root> show system alarms
4 alarms currently active 
Alarm time               Class  Description
2011-02-28 05:44:25 UTC  Major  PEM 3 Input Failure
2011-02-28 05:44:25 UTC  Major  PEM 3 Not OK
2011-02-28 05:44:25 UTC  Major  PEM 0 Input Failure
2011-02-28 05:44:25 UTC  Major  PEM 0 Not OK

Alarm time               Class  Description
2011-02-28 05:44:25 UTC  Major  PEM 3 Input Failure
2011-02-28 05:44:25 UTC  Major  PEM 3 Not OK
2011-02-28 05:44:25 UTC  Major  PEM 0 Input Failure
2011-02-28 05:44:25 UTC  Major  PEM 0 Not OK