[j-nsp] Juniper SRX 58K cluster IPv6 enable

[Brian Johnson]

From my experience... Any change of the mode on a protocol requires a reboot of JunOS. Correct?

- Brian J.

Sent from my iPhone
Please excuse typos

> On Feb 20, 2018, at 5:59 AM, Ola Thoresen <ola at nytt.no> wrote:
> 
>> On 20. feb. 2018 11:10, Imran Kamal wrote:
>> Hi all,
>> 
>> Can anyone please confirm once I enable "IPv6 Flow mode", do I need to
>> reboot both SRX 58K boxes at the time or one after another?
>> 
>> The firewall cluster in production and we can't afford any outage window at
>> the moment
> 
> 
> 
> I have not tested it on 58k spcifically, but on other SRX-clusters, and you need to reboot both nodes.
> 
> However, you can reboot them one after each other, and ensure that you failover all redundancy groups gracefully between the reboots.
> 
> So I would suggest enabling IPv6 flow mode, then reboot the secondary node. After it comes back up, failover all redundancy groups to the already rebooted node. Then reboot the former primary node.
> 
> Then you can decide whether you want to fail back to the old primary again after the second reboot.
> 
> But no matter what you do - I would do this in a service window. It SHOULD work without any traffic interruptions, but better to be safe than sorry.
> 
> 
> /Ola (T)
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp