Understanding readiness errors and warnings
Readiness check warnings and errors can occur for any of the three readiness checks: OS reload, license upgrade, or version upgrade. The following list provides information on these error and warning codes.
Error 1000
An OS reload is already running on a different node in the HA cluster. The other node's OS reload must be completed before you run a second OS reload.
Error 1002
An error occurred in the connectivity check. Contact IBM Support.
Error 1003
The root user for the host is not found.
Error 1004
The root user credentials for the host are not found.
Error 1005
The host SSH console connection was not created. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1007
The host SSH console connection was not created. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1008
The host SSH console cannot process the command. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1009
The host has an invalid IP address, or is blocked by a firewall. SSH failed. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1011
The root user's credentials for the gateway were not found.
Error 1012
The gateway SSH console connection failed. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1013
The root user for the gateway was not found.
Error 1014
The gateway readiness check timed out.
Error 1017
The gateway SSH console connection was not created. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1018
The gateway SSH console could not process the command. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1019
The gateway has an invalid IP address, or is blocked by a firewall. SSH failed. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1021
An error occurred in the connectivity check. Contact IBM Support.
Error 1022
The gateway readiness precheck failed with an unexpected exception. Try again or contact IBM Support.
Error 1023
The gateway readiness precheck failed the DNS accessibility check on the Ubuntu host. Confirm that a network access to the private 10.0.0.0/8 subnet from the host exists.
Error 1024
The gateway readiness precheck failed with an unexpected exception. Try again or contact IBM Support.
Error 1025
The IPMI interface is disabled for the Gateway host. Check IPMI status and enable the interface if it is disabled. Try again or contact IBM Support.
Error 1026
The Ubuntu host is unable to write to the attached storage as it is read only. Reboot the host and try again or contact IBM Support.
Error 1101
An error occurred during the readiness check. Try again or contact IBM Support.
Error 1102
The host experienced a precheck setup failure. Try again or contact IBM Support.
Error 1103
The host experienced a precheck setup failure. Try again or contact IBM Support.
Error 1104
The host experienced a precheck setup failure. Try again or contact IBM Support.
Error 1105
The host experienced a precheck setup failure and cannot SSH to the gateway. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1106
The host experienced a precheck setup failure and cannot SSH to the private IP for the other node's host. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1107
The host experienced a precheck setup failure due to an invalid password. Correct the password and try again. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1108
The gateway experienced a precheck setup failure due to an invalid password. Correct the password and try again. See Correcting connectivity errors for information on how to resolve SSH connectivity check errors.
Error 1109
The gateway experienced a precheck setup failure, and is unable to check the vSRX disk capacity. Remove any unnecessary files from /var and try again.
Error 1110
The gateway experienced a precheck setup failure because the vSRX file-system-reached capacity. Remove any unnecessary files from /var and try again.
Error 1111
The gateway experienced a precheck setup failure due to a general failure in the JunOS RPC call. Try again or contact IBM Support.
Error 1112
The gateway experienced a precheck setup failure due to a cluster error. Ensure redundancy group 0 is online and has no monitor-failures.
Error 1113
The host experienced a precheck setup failure and is unable to determine the status of the host VM by using virsh. Try again or contact IBM Support.
Error 1114
The host has a precheck setup failure because insufficient memory is installed on the bare-metal server. A minimum of 32 GB is required. Contact IBM Support to install the required amount of memory.
Error 1115
The gateway has a precheck setup failure due to an incompatible SSH connection limit in the vSRX configuration. Remove the SSH connection limit from the vSRX configuration and retry.
Error 1116
The host has a precheck setup failure. Ubuntu is missing the telnet software package. Install telnet and retry.
Error 1117
The host's Ubuntu mirror server is not accessible. Retry the operation when the mirror is accessible.
Error 1118
The vSRX node is not started. Start the vSRX VM and retry the operation.
Error 1119
The vSRX node's VM is running but the node is not accessible from telnet. Exit from all console (telnet) sessions and retry the operation. Alternatively, see Correcting error 1119 for more information.
Error 1120
The vSRX node does not have a valid license. Remove any evaluation licenses and apply for a valid license. Then, retry the operation. See Known limitations for IBM Cloud Juniper vSRX for more information on identifying and removing the evaluation license.
Error 1121
License operations against vSRX v15.1 are not supported. Upgrade to a newer version of the vSRX.
Error 1122
An error occurred in the readiness check, try again or contact IBM support.
Error 1123
The vSRX console has an active session in edit mode. Exit the console session and retry.
Error 1124
The gateway experienced a precheck setup failure due to a Juniper incompatibility change in version 18.4. Specify a vlan-id for each interface configured with vlan-tagging. See Correcting error 1124 for more information.
Error 1125
The gateway experienced a precheck setup failure due to a Juniper incompatibility change in the version 18.4 syslog settings. See Correcting error 1125 for more information.
Error 1126
The gateway control link is down. Ensure vnet0 and vnet1 are configured on the Ubuntu host and retry.
Error 1127
The Ubuntu host is missing an Ethernet interface in bond0. Ensure bond0 includes the 2 private Ethernet interfaces.
Error 1128
The Ubuntu host is missing an Ethernet interface in bond1. Ensure bond1 includes the 2 public Ethernet interfaces.
Error 1129
The Ubuntu host has an extra Ethernet interface in bond0. Ensure bond0 includes only the 2 private Ethernet interfaces.
Error 1130
The Ubuntu host has an extra Ethernet interface in bond1. Ensure bond1 includes only the 2 public Ethernet interfaces.
Error 1131
The vSRX configuration is using a hidden cli command not compatible with the automation. Remove and replace the address-range command syntax and retry.
Error 1132
The Ubuntu host has a kvm xml configuration that is missing the default telnet configuration that is used for console access. Add this configuration back and retry.
Error 1133
The vSRX console connection by using telnet timed out when running the commands. Rerun or contact IBM Support.
Error 1134
The node, which is OS reloaded, cannot access the other node in the cluster. Ensure that the other node is active and retry. If both nodes are unrecoverable contact IBM support to run Rebuild Cluster.
Error 1135
The vSRX license file cannot be found. Rerun or contact IBM Support.
Error 1136
The vSRX license file is found, but the contents are empty. Rerun or contact IBM support.
Error 1137
The vSRX license file cannot be read. Rerun or contact IBM support.
Error 1138
The vSRX license installation failed during the vSRX license configuration. Rerun or contact IBM support.
Error 1139
The vSRX configuration includes a tcp-mss setting on an interface. Remove the invalid configuration and rerun.
Error 1140
The vSRX configuration includes an unsupported configuration setting. Correct or remove the unsupported configuration setting and rerun. See Correcting Unsupported vSRX Configuration Commands for more information.
Error 1141
The vSRX was accessible but we were unable to determine which node is the primary.
Error 1142
The vSRX includes duplicate IPs in the interface section of the vSRX config. Remove the duplicate IPs from the config and rerun.
Error 1143
The gateway upgrade process failed with an unexpected exception. Contact IBM Support.
Error 1144
The vSRX add-on license files are not equal to the expected license count. Contact IBM Support.
Error 1145
The vSRX license does not support IDP, but IDP policies and configurations were detected on the running vSRX. Remove the policies and configurations or install a vSRX license with IDP support such as the Content Security Bundle (CSB) and retry the operation. For details on configuration removal, see Correcting error 1145 for more information.
Error 1146
The Ubuntu server's network switch does not support multicast, which is required by the gateway configuration. Contact IBM Support.
Error 1147
The vSRX configuration includes a url-pattern with invalid characters. Remove the invalid characters and retry. See Correcting error 1147 for more information.
Error 1154
Both vSRX cluster nodes are down. Start the vSRX nodes and retry.
Error 1155
The vSRX configuration cannot specify both a service and an any-service within the same security-zone interface stanza. Correct this configuration and retry.
Error 1157
vSRX SSL certificates that are included in stanzas, such as set services ssl initiation, set services ssl termination, and set services ssl proxy cannot be migrated to the newly upgraded vSRX node. Remove
these certificates from the vSRX configuration, retry, and re-import the certs after upgrade.
Error 1158
The vSRX security NAT configuration includes an invalid network address range. Specify a valid network IP range by using CIDR notation and retry.
Error 1159
The vSRX configuration includes a reference to an SSL certificate in the system services rest https config. Certs cannot be migrated during an upgrade. Deactivate the reference that uses deactivate system services rest https,
retry, and reactivate and re-import the certificate after the upgrade completes.
Error 1160
The vSRX configuration includes a security idp sensor-configuration packet-log total-memory reference. This causes issues during an upgrade. Remove the reference and retry.
Error 1163
If the vSRX configuration includes a Weak cipher, the Upgrade pre-check fails with the error 1163. To fix this error, remove or deactivate the weak cipher configuration and retry.
Error 1165
The vSRX configuration contains a Juniper security policy with keywords dynamic-application any and junos-defaults. Remove the policy or replace junos-defaults with any.
Error 1167
The vSRX configuration contains a Juniper security ike but does not specify a corresponding external-interface. Modify the configuration and retry.
Error 1168
The Ubuntu server is running in rescue mode. Exit rescue mode and retry.
Error 1169
The vSRX configuration contains a security policy that checks the match of unsupported dynamic-application junos:ICMP-TRACEROUTE. Remove the policy line that contains junos:ICMP-TRACEROUTE.
Warning 1176
The gateway experienced a precheck setup warning. A VPN establishment configuration with non-immediate was detected, which might increase the time that it takes for VPN establishment after the vSRX starts. See Correcting warning 1176 for more information.
Warning 1177
The gateway experienced a precheck setup warning. A security policy that uses dynamic-application any is detected, which can result in packet loss. This issue can also cause VPN tunnel communication to fail. See Correcting warning 1177 for more information.
Warning 1178
The license was updated. However, validation of the new license failed. It is recommended you manually check that the vSRX license is applied to each vSRX node.
Warning 1179
The vSRX version found to be running on the Gateway is unsupported. Operations such as OS Reload and Rebuild Cluster overwrites the current unsupported vSRX version with the version that is currently listed on the Gateway Details page. See Correcting warning 1179 for more information.
Warning 1180
The vSRX license that is found on the Gateway is unsupported. Correcting warning 1180 for more information.
Warning 1181
The vSRX license and version on the Gateway are both found to be unsupported. Correcting warning 1181 for more information.
Warning 1182
The vSRX add-on license files are not found. Contact IBM Support.
Warning 1183
The vSRX add-on license count is not found in the import settings. Contact IBM Support.
Warning 1184
A connection timeout error occurred when checking the installed licenses. Contact IBM Support.
Warning 1185
The gateway does not have a valid license because the license for the version might have expired. Upgrade to the version, 21.3R2-S1 or newer. Contact IBM Support.