I am trying to set up a SRX650 cluster. Initially I used directly connected cables between both nodes to do initial configuration. This worked fine and the cluster set up correctly.
Now I am installing the cluster on the customers network, but the difference is that we interconnect the nodes using a layer-2 network. Now the nodes don't see eachother and the cluster is broken. The network is based on HP ProCurve 5400 series switches.
I used a separate VLAN for the control-port (untagged on the switchports), no IP on the VLAN and added the VLAN to the trunk. I enabled jumbo packages support on this VLAN as mentioned in Junipers application note "Clustering Across L2 Networks.pdf".
For the data-port I added a different VLAN, with the same settings (no IP, jumbo etc).
If I check the cluster status using "show chassis cluster control-plane statistics" on either node, I only see data being send, but nothing being received.
After a few days, my local Juniper SE sent me two text messages with some new information:
- Disable IGMP snooping on the switched network (I presume only on the VLANs used for the HA)
- the control-port apparently is sending out traffic TAGGED with VLAN ID 4094.
However, any query on the KB or the Forum doesn't reveal any conformation about this!
I set the switch config for the switchports used by the control-ports to a untagged interface in VLAN 4094 (as it is already tagged by the SRX) and added this VLAN to the trunks. I also disabled IGMP on both VLANS. No change however in the clustering...
Does anyone have a SRX cluster already running over a switched network? Please send me your config specifications as Juniper does not give sufficient information on this setup.