Description

This article describes the issue of the SRX210HE-POE and SRX210HE showing only a maximum of 32K sessions. The same issue may happen on SRX240H-DC and SRX210BE.

Symptoms

The maximum concurrent sessions is 64K for SRX210 with high memory (1GB), as mentioned in the following URL:

http://www.juniper.net/us/en/products-services/security/srx-series/srx210/

However, the maximum-session is only 32K for SRX210HE-POE, and SRX210HE; even if no license is installed. The similar issue may also occur on SRX240H-DC and SRX210BE. The details are:

  1. Product type is SRX210HE* 
    2. root> show chassis hardware 
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                BM1811AA0003      SRX210he-poe     >>>>> product type is srx210he*
Routing Engine   REV 05   750-034596   AADP5806          RE-SRX210HE-POE
  2. Max session is only 32K 
    3. root> show security flow session summary 
Unicast-sessions: 1
Multicast-sessions: 0
Failed-sessions: 0
Sessions-in-use: 1
  Valid sessions: 1
  Pending sessions: 0
  Invalidated sessions: 0
  Sessions in other states: 0
Maximum-sessions: 32768     >>>>> max session is only 32k
  3. No license by default: 
    4. root> show system license 
License usage: none
Licenses installed: none
  4. On PFE, the AV license is installed: 
    5. root> request pfe execute command "show  security utm status all" target fwdd | match lic 
GOT: AV license status:     installed (kav:yes, eav:yes, sav:yes)

Solution

No workaround for this issue. It is fixed in Junos 10.4R6, 11.1R5, and 11.2R2.