[j-nsp] SRX monitor-interface question

[R S]

And what about syslog or firewall traffic logging flows on the RG1 Active node if RG0 remain active on the Passive ?

Date: Fri, 13 Dec 2013 16:34:53 +0500
Subject: Re: [j-nsp] SRX monitor-interface question
From: fahad.khan at gmail.com
To: dim0sal at hotmail.com
CC: juniper-nsp at puck.nether.net

RG0 only contains Control Plane or REs.
In SRX failover, its not necessary to failover RG0 when there is a failover in RG1 due to a link failure. So we only do interface-monitor in RG1, RG2 ... not in RG0. RG0 already run in A/P mode.


It can be possible that SRX B is Primary in RG0 while Secondary in RG1 (means SRX A is Primary in RG 1)
Muhammad Fahad Khan
JNCIE-M # 756
Lead Network and Security Consultant - IBM 

+92-301-8247638
Skype: fahad-ibm
http://pk.linkedin.com/in/muhammadfahadkhan


On Fri, Dec 13, 2013 at 2:07 PM, R S <dim0sal at hotmail.com> wrote:





Hi



In an SRX5800 cluster

A/P deployment, does anybody recommend to monitor-interface also on RG0 or not

?



PRO ? CONS ?







We did it but

unfortunately during an SPU crash the RG0 didn’t switch properly and JTAC told us it’s

not recommended monitor-interface under RG0 in same corner case…







Any experience to share

is useful







Tks





_______________________________________________

juniper-nsp mailing list juniper-nsp at puck.nether.net

https://puck.nether.net/mailman/listinfo/juniper-nsp