[j-nsp] Juniper SRX 58K cluster IPv6 enable

[Ola Thoresen]

On 20. feb. 2018 11:10, Imran Kamal wrote:
> Hi all,
>
> Can anyone please confirm once I enable "IPv6 Flow mode", do I need to
> reboot both SRX 58K boxes at the time or one after another?
>
> The firewall cluster in production and we can't afford any outage window at
> the moment



I have not tested it on 58k spcifically, but on other SRX-clusters, and 
you need to reboot both nodes.

However, you can reboot them one after each other, and ensure that you 
failover all redundancy groups gracefully between the reboots.

So I would suggest enabling IPv6 flow mode, then reboot the secondary 
node. After it comes back up, failover all redundancy groups to the 
already rebooted node. Then reboot the former primary node.

Then you can decide whether you want to fail back to the old primary 
again after the second reboot.

But no matter what you do - I would do this in a service window. It 
SHOULD work without any traffic interruptions, but better to be safe 
than sorry.


/Ola (T)