Description

 This article describes the issue of the switching status of a SRX650 showing the Probe State as down, even though the SWFAB link is back to back.

Symptoms

  • SRX 650 is configured in a cluster.
  • The swfab0/swfab1 link is configured on ge-0/0/3 and  ge-9/0/3.
  • SRX cluster is running Junos 11.2R5.
  • SRX cluster with Routed VLAN Interface (RVI).

Solution

  • For SRX 650, the SWFAB member port must reside in the same GPIM as the switch port.
  • SWFAB members cannot span multiple GPIM cards or different cards .
  • SWFAB members cannot use the remaining onboard ethernet port; they must use ports on GPIM card.

Using the onboard ge-0/0/3 port for SWFABis not supported. Configuring ge-0/0/3 and ge-9/0/3 for swfab0/swfab1 will result in failed probe state, when looking at the Ethernet switching status. Additionally, the SWFAB interface must belong to the same GPIM.

Example: (using onboard ethernet ports)

Config: 

swfab0 {
    fabric-options {
        member-interfaces {
            ge-0/0/3;
        }
    }
}
swfab1 {
    fabric-options {
        member-interfaces {
            ge-9/0/3;
        }
    }
}

This configuration will result in the Ethernet switch probe being in a down state.  By running the show chassis cluster ethernet-switching status command, you can see the state of the cluster from an Ethernet-switching perspective: 
root@SRX650-node0# run show chassis cluster ethernet-switching status 
Cluster ID: 2 
Node                  Priority          Status    Preempt  Manual failover

Redundancy group: 0 , Failover count: 1
    node0                   100         primary        no       no  
    node1                   1           secondary      no       no  

Redundancy group: 1 , Failover count: 1
    node0                   100         primary        no       no  
    node1                   1           secondary      no       no  

Ethernet switching status:
    Probe state is DOWN. Both nodes are in separate ethernet switching domain(s).

{primary:node0}[edit]

It is recommended to change the SWFAB interface to an interface on the GPIM, where the switched ports reside. Instead of using ge-0/0/3 and ge-9/0/3 , if ge-2/0/5 and ge-11/0/5 is used, you can see the Ethernet switching status with a successful probe:

Example: (using port on GPIM card) 
swfab0 {
    fabric-options {
        member-interfaces {
            ge-2/0/4;
        }
    }
}
swfab1 {
    fabric-options {
        member-interfaces {
            ge-11/0/4;
        }
    }
}

The resulting status will show the Ethernet-switching probe as up: 
{primary:node0}[edit]
root@SRX650-node0# run show chassis cluster ethernet-switching status 
Cluster ID: 2 
Node                  Priority          Status    Preempt  Manual failover

Redundancy group: 0 , Failover count: 1
    node0                   100         primary        no       no  
    node1                   1           secondary      no       no  

Redundancy group: 1 , Failover count: 1
    node0                   100         primary        no       no  
    node1                   1           secondary      no       no  

Ethernet switching status:
    Probe state is UP. Both nodes are in single ethernet switching domain(s).

{primary:node0}[edit]