Description

The article describes the behavior of vSRX running 15.1X49-D15 when the virtual appliance core license is expired.

​

Symptoms

Why does pass through traffic get dropped by vSRX running 15.1X49-D15 when the virtual appliance core license is expired?

Active License:

# root > show version detail no-forwarding
Junos: 15.1X49-D15.4
JUNOS Software Release [15.1X49-D15.4] 
# root> show system uptime
Current time: 2017-06-17 23:55:11 GMT
 
# root> show system license
License usage:
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed
  Virtual Appliance                     1            1           0    2017-06-18 00:00:00 GMT
 
Licenses installed:
  License identifier: JUNOSXXXXX
  License version: 4
  Software Serial Number: XXXXXXXX
  Customer ID: LABTestlab
  Features:
    Virtual Appliance - Virtual Appliance
      date-based, 2017-06-16 00:00:00 GMT - 2017-06-18 00:00:00 GMT
 
# root> show chassis fpc pic-status
Slot 0   Online       Virtual FPC
  PIC 0  Online       Virtual GE


After the license expired: 

# root> show system uptime  
Current time: 2017-06-18 00:16:21 GMT
 
root> show system license  
License usage:
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed
  Virtual Appliance                     1            0           1    invalid
 
Licenses installed:
  License identifier: JUNOSXXXXX
  License version: 4
  Software Serial Number: XXXXXXXX
  Customer ID: LABTestlab
  Features:
    Virtual Appliance - Virtual Appliance
      date-based, 2017-06-16 00:00:00 GMT - 2017-06-18 00:00:00 GMT
 
# root> show chassis fpc pic-status  
Slot 0   Offline      Virtual FPC
 

Message logs (Show log messages): 

Jun  18 00:08:10 VSRX chassisd[1288]: LICENSE_EXPIRED_KEY_DELETED: License key "JUNOSXXXXX" has expired.
Jun  18 00:08:10  VSRX chassisd[1288]: CHASSISD_VIRT_APP_LICENSE_ERROR: (ERROR) Virtual Appliance License is invalid
Jun  18 00:08:10  VSRX chassisd[1288]: CHASSISD_FRU_OFFLINE_NOTICE: Taking FPC 0 offline: Offlined due to minor errors

Solution

This is an expected behavior for vSRX in the initial releases prior to 15.1X49-D20 where chassis daemon pushed the FPC (Flexible Physical Interface Card Controller ) to an offline state once the virtual appliance core license is expired. This leads SRX PFE (packet forwarding engine) and physical interface to disappear [since the FPC is down]. Thus, none of the physical interfaces on vSRX can send or receive traffic. The complete pass through traffic is dropped.

FPC will be pushed to offline state after approximately 10 minutes from the time the virtual appliance core license expires, as shown below. The device will be operational in a normal state for about 10 minutes even after it expires. This is designed to allow users with 10 minutes of time to install the valid virtual appliance core license on the device.
  

# Jun  17 23:59:19   license-check[1329]: LICENSE_EXPIRED_KEY_DELETED: License key "JUNOSXXXX" has expired.

# Jun  18 00:08:44   chassisd[1285]: CHASSISD_FRU_OFFLINE_NOTICE: Taking FPC 0 offline: Error <-- Delay of about 10 minutes
​

A new mechanism is introduced in release 15.1X49-D20 where only a warning message is displayed to notify the user about the virtual appliance core license expiration instead of pushing the FPC to an offline state and forcing the SRX PFE to a down state. This will help the device to perform its normal operation without any impact on pass through traffic even through the virtual appliance core license expired.

Active License: 

VSRX> show version detail no-forwarding
Junos: 15.1X49-D20
JUNOS Software Release [15.1X49-D20]

# root> show system uptime         
Current time: 2017-06-15 23:59:23 GMT

# root> show system license      
License usage:
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed
 Virtual Appliance                     1            1           0    2017-06-16 00:00:00 GMT

Licenses installed:
  License identifier: JUNOSXXXX
  License version: 4
  Software Serial Number: XXXXXXXX
  Customer ID: Lab
  Features:
    Virtual Appliance - Virtual Appliance
      date-based, 2017-06-14 00:00:00 GMT - 2017-06-16 00:00:00 GMT

# root> show chassis fpc pic-status
Slot 0   Online       FPC
  PIC 0  Online       VSRX DPDK GE

 

After the license is expired: 

# root> show system uptime
Current time: 2017-06-16 00:00:17 GMT

# root> show system license        
License usage:
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed
  Virtual Appliance                     1            0           1    invalid

  License identifier: JUNOSXXXXX
  License version: 4
  Software Serial Number: XXXXXXXX
  Customer ID: LABLab-Rishi
  Features:
    Virtual Appliance - Virtual Appliance
      date-based, 2017-06-14 00:00:00 GMT - 2017-06-16 00:00:00 GMT
 

# root> show chassis fpc pic-status
Slot 0   Online       FPC
PIC 0  Online       VSRX DPDK GE


Message Logs: 

Jun  16 00:08:22  license-check[1382]: LICENSE_EXPIRED_KEY_DELETED: License key "JUNOS903930" has expired. ​


Note: The above stated behavior is only valid for the expiration of virtual appliance core license and not on the expiration of evaluation license. When evaluation license for the core expires, packet forwarding on vSRX is disabled.

​

Modification History

2020-07-22: Added related link to License for vSRX.

Related Information