How to disable the management Ethernet ports on the SRX services gateway

This article provides information on how to disable the management port (fxp0) on SRX 1000, 3000, and 5000 series service gateway.

This is applicable to the following Junos platforms.

• SRX1400

• SRX3400

• SRX3600

• SRX5600

• SRX5800

On the above list of SRX devices, a dedicated port is present for Out of Band management. If this management port is not connected (physically down), it triggers a major alarm:

{primary:node0}[edit]
root@srx1> show chassis alarms
node0:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down

node1:
--------------------------------------------------------------------------
1 alarms currently active
Alarm time Class Description
2010-11-26 16:45:53 GMT Major Host 0 fxp0 : Ethernet Link Down

Some customers choose not to use this management port. Then they will receive a system alarm, as mentioned above.

Junos has the provision to manually disable the management ports using the following command.

{primary:node0}[edit]
root@srx1# set chassis alarm management-ethernet link-down ignore

{primary:node0}[edit]
root@srx1# show
    chassis {
        alarm {
            management-ethernet {
                link-down ignore;
            }
         }

The above command will also work for a chassis cluster environment.
An alternative method for doing this in a chassis cluster environment is given below:

{primary:node0}[edit]
root@srx1# set groups node0 interfaces fxp0 disable
root@srx1# set groups node1 interfaces fxp0 disable

To verify, check the alarms again.

{primary:node0}[edit]
root@srx1> show chassis alarms

node0:
--------------------------------------------------------------------------
No alarms currently active

node1:
--------------------------------------------------------------------------
No alarms currently active