[j-nsp] SRX650 Clustering - IPv6

[Ben Dale]

Ah yes this one really annoyed me.  In 10.1 and earlier IPv6 is supported on VLAN interfaces.  When you upgrade to 10.2 or later they stop you being able to apply this configuration, however EXISTING configuration still works just fine:

bdale at srx210# show interfaces vlan.10 
description "LAN RVI Interface";
family inet {
    address 172.16.10.254/24;
}
family inet6 {
    address 2001:a4b0:d0d:77a::1/64;
}

[edit]
bdale at srx210# set interfaces vlan.10 family inet6
                                            ^
syntax error.
bdale at srx210# set interfaces vlan.10 family inet6   
bdale at srx210# run show route                             

...
inet6.0: 18 destinations, 19 routes (18 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
...
2001:a4b0:d0d:77a::/64*[Direct/0] 6d 21:51:58
                    > via vlan.10


On 03/11/2010, at 6:39 AM, Paul Stewart wrote:

> Hmmm.. interesting - I thought I had reviewed 10.2 for this support... will dig deeper.  So then comes the question - anyone actually *using* IPv6 on clustered SRX?  Any real-world feedback?
> 
> I have an SRX210H at home and recently discovered an annoying "bug" that IPv6 isn't supported on VLAN interfaces... that was kind of a shock to be blunt..
> 
> Thanks,
> Paul
> 
> 
> -----Original Message-----
> From: Crist Clark [mailto:Crist.Clark at globalstar.com] 
> Sent: Tuesday, November 02, 2010 3:22 PM
> To: Paul Stewart; juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] SRX650 Clustering - IPv6
> 
> I just happened to be looking at the 10.2 release notes after
> seeing your email.
> 
>  "IPv6 Support
>    [snip]
> 
>    * Chassis cluster—In JUNOS Release 10.2, we support chassis
> cluster in an active-passive (failover) deployment. [Junos OS Security
> Configuration Guide]"
> 
> You may want to have a closer look at the 10.2 documentation
> (the current recommended release for SRXs). I am not using
> this feature so I have no personal experience whether it actually
> works.
> 
> 
> On 11/2/2010 at 10:43 AM, "Paul Stewart" <paul at paulstewart.org> wrote:
>> Hi there.
>> 
>> 
>> 
>> We are looking to bring on an additional SRX650 at a site by
> clustering.
>> One of the requirements though is IPv6 traffic and it appears it's
> not
>> supported?
>> 
>> 
>> 
>> From
>> 
> http://www.juniper.net/techpubs/en_US/junos10.0/information-products/topic-c
> 
>> ollections/release-notes/10/topic-39007.html :
>> 
>> 
>> 
>> Chassis Cluster
>> 
>> On SRX Series and J Series devices, the following features are not
> supported
>> when chassis clustering is enabled on the device:
>> 
>> *	All packet-based protocols, such as MPLS, Connectionless
> Network
>> Service (CLNS), and IP version 6 (IPv6)
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> Do any of the SRX boxes support clustering with IPv6?  Is there any
> timeline
>> on this being fixed that anyone knows of?
>> 
>> 
>> 
>> Our goal is redundant routing engines should something happen - makes
> more
>> $$$ sense to add an additional SRX650 when there is one existing..
>> 
>> 
>> 
>> Thanks in advance,
>> 
>> 
>> 
>> Paul
>> 
>> 
>> 
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net 
>> https://puck.nether.net/mailman/listinfo/juniper-nsp 
> 
> 
> -- 
> 
> Crist Clark
> Network Security Specialist, Information Systems
> Globalstar
> 408 933 4387
> 
> 
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp