Description

The article discusses the scenario in which the 1k/3k SRX High End device is deployed with NP-IOC cards but there is no dedicated NPC installed in the device and the FPC 0 PIC 0 interfaces show offline though the slot is powered up.

For additional information, refer to: KB24852 - [SRX] How to determine IOC to NPC mapping [juniper.net]

Symptoms

FPC 0 and PIC 0 are showing as offline.

Solution

Absence of dedicated NPC card in the device.


The following section describes a scenario with the above symptoms:

Setup:

Consider an SRX 3400 with the following hardware:

Slot 0 Online SRX3k SFB 12GE
Slot 1 Online SRX1k3k 2x10GE NP-IOC
Slot 2 Online SRX1k3k 2x10GE NP-IOC
Slot 5 Online SRX3k SPC
Slot 6 Online SRX3k SPC

Note that the slot 1 and slot 2 have NP-IOC cards introduced from 12.1X44-D10.
For more information on NP-IOC cards please refer to:

http://www.juniper.net/techpubs/en_US/junos12.1x44/information-products/topic-collections/release-notes/12.1x44-d10/topic-72756.html


root@SRX-03# run show chassis fpc pic-status

Slot 0      Online SRX3k SFB 12GE
PIC 0       Offline                                                  <========= FPC 0 PIC 0 is offline
Slot 1      Online SRX1k3k 2x10GE NP-IOC
PIC 0       Online 2x 10GE-SFP+
Slot 2      Online SRX1k3k 2x10GE NP-IOC
PIC 0       Online 2x 10GE-SFP+
Slot 5      Online SRX3k SPC
PIC 0       Online SPU Cp-Flow
Slot 6      Online SRX3k SPC
PIC 0       Online SPU Flow

Note that:

+ The Slot 0 is powered UP still the PIC 0 is offline.
+ Traffic can be processed by the device as the Slots 1 and 2 have NP-IOC cards, the interfaces on these cards have a dedicated NP mapped to them to enable processing.

Mapping for the IOC can be checked using the following command:

root@SRX-03# run show chassis ioc-npc-connectivity

IOC     IOC     type      IOC state   Connected    NPC NPC state Link status
0       SFB     12GE      Online        none

The above output shows there is no mapping with NP for the SFB interfaces as the NP on the NP-IOC card is dedicated for the interfaces on the NP-IOC card and there is no dedicated NPC which can serve the SFB interfaces.

It is not possible to explicitly map the NP on the NP-IOC card with the Slot 0 interfaces as described below,

root@SRX-03# set chassis ioc-npc-connectivity ioc 0 npc 1


root@SRX-03# commit check
[edit chassis ioc-npc-connectivity ioc 0]
'npc'
Illegal NPC slot number 1 for this platform
error: configuration check-out failed


This behavior is by design and to leverage the interfaces on Slot 0 PIC 0 (SFB interfaces in this case) as dedicated NPC is required.