[j-nsp] Juniper SRX 240 Clustering

[Per Westerlund]

Strange, this is from a production system:

apply-groups [ "${node}" rfc-5735 ];

(where rfc-5735 is a group that not is relevant for this discussion). This line is manually configured, not something that is an effect of activating cluster mode. Are you running some kind of tool setting up the clustering and configuration instead of straight CLI?

This is the version we are running:

{primary:node1}
adm_perw at dkcphfw01b> show version
node0:
--------------------------------------------------------------------------
Hostname: dkcphfw01a
Model: srx550
JUNOS Software Release [12.1R2.9]

node1:
--------------------------------------------------------------------------
Hostname: dkcphfw01b
Model: srx550
JUNOS Software Release [12.1R2.9]

/Per Westerlund


25 nov 2012 kl. 07:11 skrev Bikash Bhattarai:

> Dear Westerlund,
> 
> Thank you for your email. When I configure clustering all the configuration automatically moves to apply-groups [ node0 node1 ]. 
> 
> 
> Regards,
> Bikash Bhattarai | Dristi Tech (P.) Ltd | +977 9851039710 | www.dristi.com.np
> Lazimpat, Kathmandu |Tel  977 1 4427949  |  Fax 977 1 4410385
> 
> 
> 
> 
> On Sun, Nov 25, 2012 at 2:07 AM, Per Westerlund <p1 at westerlund.se> wrote:
> Begin with replacing 'apply-groups [ node0 node1 ];' with 'apply-groups "${NODE}";', the idea is that the two nodes should have different configurations. And while you are making changes, move the section on "services" from "groups node0" to the global configuration, else it will only work when you are connecting to node0, not node1.
> 
> /Per Westerlund
> 
> 
> 24 nov 2012 kl. 18:43 skrev Bikash Bhattarai:
> 
> > Dear all,
> >
> > I have just configured two SRX 240 in clustering. One firewall is working
> > as primary and another is working as secondary. When primary router wan
> > interface fails the secondary router becomes primary. But after fail-over
> > network becomes unreachable even from LAN side.
> >
> > I have attached the whole configuration.I have configured as per Juniper
> > documentation. It will be very helpful if anyone point me if I am missing
> > something.
> >
> > Regards,
> > Bikash Bhattarai | Dristi Tech (P.) Ltd | +977 9851039710 |
> > www.dristi.com.np
> > Lazimpat, Kathmandu |Tel  977 1 4427949  |  Fax 977 1 4410385*
> >
> > *
> > <Cluster-Config.txt>_______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
>