Description

SRX is not performing auto backup to the server with configuration stating "transfer on commit"

Symptoms

pfed: ACCT_TRANSFER_FILE_FAILED_ITER: Error <256> uploading file '/var/transfer/config/123_juniper.conf.gz'. Remaining retry attempts = 2, retry in 595 seconds...

logger[43161]: transfer-file failed to transfer /var/transfer/config/123_juniper.conf.gz rc 1

Solution

It was identified that user did not have enough permission to do the copy of the file from SRX to the server

[email protected]:/home/srx/DC-Logs/PR-SRX-1500  

[email protected]'s password: 

/var/transfer/config/SRX1500_juniper.conf.gz: Permission denied

error: put-file failed

error: could not send local copy of file

 

Login with root/ user who have superuser permission to copy the file from SRX to the server using SCP 

root@SRX1500> file copy /var/transfer/config/SRX1500juniper.conf.gz scp://   "scp://test@<IP>:/home/srx/DC-Logs/PR-SRX-1500                                    scp://test@<IP>:/home/srx/DC-Logs/PR-SRX-1500 

Sep 12 15:55:23

The authenticity of host '<IP>(<IP>)' can't be established.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '<IP>' (ECDSA) to the list of known hosts.

 

test@<IP>'s password: 

 

SRX1500_juniper.conf.gz                                                           0%  0   0.0KB/s  --:-- ETA

SRX1500_juniper.conf.gz                                                          100% 300KB  6.7MB/s  00:00   

 

 

Please validate user privileges to perform the config backup to the server 

Modification History

2024-09-12 : Article Created