[j-nsp] SRX Deployment Questions

[Payam Chychi]

Check your load balancing hash, normally this is by default set to hash
based on layer3/4 dst info, this means that if you are sending all traffic
from one src to the same dst ip/port, it will only hash and bind to one
interface.



On Wednesday, 17 August 2016, Jeffrey Nikoletich <jeffn at xfernet.com> wrote:

> Hello,
>
> We have a SRX we are deploying and are having some issues and some
> guidance would be great. We have a SRX 3600 and want to deploy in the
> following manner:
>
> It is connected via 2 Dell S55 External switches. 1 10G drop per switch.
> We will call that subnet 1.1.1.0/24.
>
> On the Internal side. It is connected to 6 x Dell S55 switches. 1 10G drop
> per switch. We will call that 10.0.0.0/24.
>
> For the internal, I setup a AE interface that has all 6 x 10G ports in it.
> External has an AE interface as well. External is AE0 and internal is AE1.
>
> The issue I am have was it seems that the AE interfaces were only passing
> traffic via a single interface? Any reason why?
>
> Also does this setup look "sane" just wanted some feedback as this is our
> first SRX deployment.
>
> Thanks in advance.
>
>                 Regards,
>
> Jeffrey Nikoletich - Chief Information Officer | 213-201-6080
>
> Xfernet
>  | 1-855-XFERNETPh  213-201-6080 | http://www.xfernet.net
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net <javascript:;>
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>


-- 
Payam Tarverdyan Chychi
Network Security Specialist / Network Engineer