Description

An IKEMD memory leak is happening when deleting vpn tunnels

Symptoms

An IKEMD memory leak is happening when deleting vpn tunnels

 

root@jtac-srx5800-r2020> show version |match Junos: 

Junos: 21.4R3-S5.4

 

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd 

30227 root     20  0  754M  38M select  3  0:18  0.00% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     35  0  770M  54M select  2  0:20 11.57% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     44  0  770M  55M RUN   3  0:22 14.16% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     26  0  790M  73M select  2  0:34  7.18% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     77  0  790M  73M RUN   3  0:36 16.80% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     52  0  806M  89M select  1  0:49 15.97% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     40  0  806M  89M RUN   2  0:50 13.28% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     83  0  834M  118M CPU3   3  0:57 38.38% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     42  0  834M  119M RUN   0  0:59 14.26% ikemd

--

root@jtac-srx5800-r2020> show system processes extensive | match ikemd   

30227 root     82  0  866M  148M CPU0   0  1:05 36.47% ikemd

--

Solution

Resolved-In

junos:21.4R3-S8 junos:24.2R2 junos:24.3R1

 

https://prsearch.juniper.net/problemreport/PR1815800

 

WORKAROUND:

As a workaround, to prevent ikemd crashing, customer can restart this service before IKEMD SIZE MEM reach 4 GB:

restart ike-config-management

https://www.juniper.net/documentation/us/en/software/junos/vpn-ipsec/topics/topic-map/security-ipsec-vpn-overview.html#id-ipsec-vpn-feature-support-on-srx5000-line-of-devices-with-srx5kspc3-and-vsrx-instances-with-ne

Modification History

2024-07-22 : Article Created

Related Information

https://prsearch.juniper.net/problemreport/PR1815800