[j-nsp] SRX monitor-interface question

[Asad Raza]

Its not recommended to use control plane for traffic logs, you can
configure sex to forward traffic logs directly from data plane

RG0 aka control plane controls your rotuing engine, routing protocols and
chassis. Failing it over will cause your routing daemon to restart ,
routing protocols to reconverge and so on...

Asad

On Friday, December 13, 2013, R S wrote:

> And what about syslog or firewall traffic logging flows on the RG1 Active
> node if RG0 remain active on the Passive ?
>
> Date: Fri, 13 Dec 2013 16:34:53 +0500
> Subject: Re: [j-nsp] SRX monitor-interface question
> From: fahad.khan at gmail.com <javascript:;>
> To: dim0sal at hotmail.com <javascript:;>
> CC: juniper-nsp at puck.nether.net <javascript:;>
>
> RG0 only contains Control Plane or REs.
> In SRX failover, its not necessary to failover RG0 when there is a
> failover in RG1 due to a link failure. So we only do interface-monitor in
> RG1, RG2 ... not in RG0. RG0 already run in A/P mode.
>
>
> It can be possible that SRX B is Primary in RG0 while Secondary in RG1
> (means SRX A is Primary in RG 1)
> Muhammad Fahad Khan
> JNCIE-M # 756
> Lead Network and Security Consultant - IBM
>
> +92-301-8247638
> Skype: fahad-ibm
> http://pk.linkedin.com/in/muhammadfahadkhan
>
>
> On Fri, Dec 13, 2013 at 2:07 PM, R S <dim0sal at hotmail.com <javascript:;>>
> wrote:
>
>
>
>
>
> Hi
>
>
>
> In an SRX5800 cluster
>
> A/P deployment, does anybody recommend to monitor-interface also on RG0 or
> not
>
> ?
>
>
>
> PRO ? CONS ?
>
>
>
>
>
>
>
> We did it but
>
> unfortunately during an SPU crash the RG0 didn’t switch properly and JTAC
> told us it’s
>
> not recommended monitor-interface under RG0 in same corner case…
>
>
>
>
>
>
>
> Any experience to share
>
> is useful
>
>
>
>
>
>
>
> Tks
>
>
>
>
>
> _______________________________________________
>
> juniper-nsp mailing list juniper-nsp at puck.nether.net <javascript:;>
>
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net <javascript:;>
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>