Description

This article provides a work-around for correcting the error condition.

Symptoms

Job Type: Execute RPC, which says 'Success'; however, device enrollment will get failed which can be seen under Job Result 

image.png

image.png

Job Result: 

<output  xmlns:junos="http://xml.juniper.net/junos/21.1R0/junos">You're about to operate on an HA pair.</output>
<xnm:error xmlns:xnm="http://xml.juniper.net/xnm/1.1/xnm">
<source-daemon>op-script</source-daemon>
<message>[Error] HA pair is not working. At least one node has priority less than or equal to 0.
Please make sure your HA pair is working before enrolling/disenrolling ATP Cloud.</message>
</xnm:error>
<xnm:error xmlns:xnm="http://xml.juniper.net/xnm/1.1/xnm">
<source-daemon>op-script</source-daemon>
<message></message>
</xnm:error>

 

Below Output can be seen on SD-PE

[root@localhost ~]# mysql -uroot -pmariadb -A feeder -e "select * from device where name='JTAC-' \G;"
*************************** 1. row ***************************
                    id: 19b6cddc-8e61-4bb7-a887-5c236205395a
                 emsId: 14
               emsSdId: 1998871
            lsysDevice: 0
   lsysRootDeviceEmsId: 14
 lsysRootDeviceEmsSdId: 1998871
                  name: JTAC-vSRX-Node0
           description: NULL
                domain: NULL
          feedSourceId: NULL
                    ip: 10.219.86.30
                 model: VSRX
          serialNumber: d7bd708d4955
 secondarySerialNumber: NA
               cluster: 1
              createTs: 1720511437
              updateTs: 1720583078
            initStatus: FAILURE
          enrollStatus: ENROLL_FAILURE
feedSourceConfigStatus: NULL
      initStatusReason: Sky Enrollment Failed
  enrollFailureDetails: ['[Error] HA pair is not working. At least one node has priority less than or equal to 0.', 'Please make sure your HA pair is working before enrolling/disenrolling ATP Cloud.', 'None']
           connectorId: NULL
       perimeterDevice: 1

 

Solution

Note: We need to rectify SRX HA Pair sync issue by following KB15911 [juniper.net]. If the issue is still persist we need to get in touch with SRX device JUNIPER JTAC Support for further assistance to rectify device HA state. 

Modification History

Article Created - 10th July 24