Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

This guide shows how to jump to the VTY of the pfe on Juniper SRX branch firewalls (srx100 to srx650).

The SRX branch devices have a virtual (or software) PFE. It is formed from a flowd daemon running on the routing engine unix and taking 100% cpu due to polling mode.

[code]
last pid: 62815; load averages: 0.12, 0.05, 0.05 up 42+06:32:33 10:36:45
58 processes: 2 running, 55 sleeping, 1 zombie
CPU states: 53.1% user, 0.0% nice, 3.1% system, 0.0% interrupt, 43.7% idle
Mem: 167M Active, 101M Inact, 575M Wired, 105M Cache, 112M Buf, 22M Free
Swap:

PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND
1340 root 5 76 0 514M 58192K select 0 1126.5 95.46% flowd_octeon_hm[/code]

The Junos VTY is a special interface that allows interaction with different hardware or software components in Juniper products running the Junos operating system.

On the SRX, it can be used to connect to Packet forwarding engines running on SPUs, IOCs, CPP and so on.

[h2]How to access/vty on the PFE from CLI on Juniper SRX branch firewalls.[/h2]
[code]user@srx> start shell pfe network fwdd


BSD platform (OCTEON processor, 416MB memory, 8192KB flash)

FLOWD_OCTEON(srxvty)# [/code]