Issue with snmp for SRX firewall devices modeled in Spectrum

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

We have devices SRX firewall devices modeled in Spectrum that are having problems with communicating with snmp.

Environment

Release : Any

Component : Discovery and modeling

Cause

This is an issue with the SRX devices as described in Juniper Problem Report ID PR1616775 (attached) as follows:

This issue can be seen on SRX Series devices for SNMP poll queries and traps on multi routing-instance environment.

If the SNMP query ingresses SRX on one routing-instance while the polled interface exists in a different routing-instance, then the SNMPD will drop that SNMP query.

For example: the SNMP packet ingress on routing-instance A while the polled interface is part of routing-instance B.

This occurs due to kernel inserting incorrect routing-instance ID (B instead of A) in the SNMP packet before sending to SNMPD.

Resolution

The issue is resolved in Junos releases 20.4R3-S2 and 22.1R1.