Search

1 to 4 of 4
Sort by

Discussion Post
Fabric Monitoring

Is it safe to enable chassis cluster fabric monitoring on production firewalls with no impact to service?



Discussion Post
SRX240 cluster with LACP through a Cisco switch

Here is the config from the SRXs and the switch: set groups node0 interfaces fxp0 unit 0 family inet address 10.X.Y.2/24 set groups node1 interfaces fxp0 unit 0 family inet address 10.X.Y.3/24 set chassis cluster reth-count 1 set chassis cluster redundancy-group 1 node 0 priority 200 set chassis cluster redundancy-group 1 node 1 priority 100 set chassis cluster redundancy-group 1 interface-monitor ge-0/0/14 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-0/0/15 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-5/0/15 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-5/0/14 weight 255 set security zones security-zone MGMT host-inbound-traffic system-services ping set security zones security-zone MGMT host-inbound-traffic protocols all set security zones security-zone MGMT interfaces reth1.100 set security zones security-zone MGMT interfaces reth1.104 set security zones security-zone MGMT interfaces reth1.108 set security zones security-zone MGMT interfaces reth1.254 set interfaces ge-0/0/14 gigether-options redundant-parent reth1 set interfaces ge-0/0/15 gigether-options redundant-parent reth1 set interfaces ge-5/0/14 gigether-options redundant-parent reth1 set interfaces ge-5/0/15 gigether-options redundant-parent reth1 set interfaces fab0 fabric-options member-interfaces ge-0/0/2 set interfaces fab1 fabric-options member-interfaces ge-5/0/2 set interfaces reth1 vlan-tagging set interfaces reth1 redundant-ether-options redundancy-group 1 set interfaces reth1 redundant-ether-options minimum-links 1 set interfaces reth1 redundant-ether-options lacp passive set interfaces reth1 redundant-ether-options lacp periodic slow set interfaces reth1 unit 100 vlan-id 100 set interfaces reth1 unit 100 family inet address 10.X.Y.1/24 set interfaces reth1 unit 104 vlan-id 104 set interfaces reth1 unit 104 family inet address 10.X.Y.1/22 set interfaces reth1 unit 108 vlan-id 108 set interfaces reth1 unit 108 family inet address 10.X.Y.1/23 set interfaces reth1 unit 254 vlan-id 254 set interfaces reth1 unit 254 family inet address 10.X.Y.1/24 vlan 100 name MGMT vlan 104 name whatever vlan 108 name whatever108 vlan 33 name control vlan 34 name fabric vlan 254 name vlan254 interface Port-channel10 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100,104,108,254 switchport mode trunk !


Discussion Thread 9
SRX240 cluster with LACP through a Cisco switch

Focus Search - Here is the config from the SRXs and the switch: set groups node0 interfaces fxp0 unit 0 family inet address 10.X.Y.2/24 set groups node1 interfaces fxp0 unit 0 family inet address 10.X.Y.3/24 set chassis cluster reth-count 1 set chassis cluster redundancy-group 1 node 0 priority 200 set chassis cluster redundancy-group 1 node 1 priority 100 set chassis cluster redundancy-group 1 interface-monitor ge-0/0/14 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-0/0/15 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-5/0/15 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-5/0/14 weight 255 set security zones security-zone MGMT host-inbound-traffic system-services ping set security zones security-zone MGMT host-inbound-traffic protocols all set security zones security-zone MGMT interfaces reth1.100 set security zones security-zone MGMT interfaces reth1.104 set security zones security-zone MGMT interfaces reth1.108 set security zones security-zone MGMT interfaces reth1.254 set interfaces ge-0/0/14 gigether-options redundant-parent reth1 set interfaces ge-0/0/15 gigether-options redundant-parent reth1 set interfaces ge-5/0/14 gigether-options redundant-parent reth1 set interfaces ge-5/0/15 gigether-options redundant-parent reth1 set interfaces fab0 fabric-options member-interfaces ge-0/0/2 set interfaces fab1 fabric-options member-interfaces ge-5/0/2 set interfaces reth1 vlan-tagging set interfaces reth1 redundant-ether-options redundancy-group 1 set interfaces reth1 redundant-ether-options minimum-links 1 set interfaces reth1 redundant-ether-options lacp passive set interfaces reth1 redundant-ether-options lacp periodic slow set interfaces reth1 unit 100 vlan-id 100 set interfaces reth1 unit 100 family inet address 10.X.Y.1/24 set interfaces reth1 unit 104 vlan-id 104 set interfaces reth1 unit 104 family inet address 10.X.Y.1/22 set interfaces reth1 unit 108 vlan-id 108 set interfaces reth1 unit 108 family inet address 10.X.Y.1/23 set interfaces reth1 unit 254 vlan-id 254 set interfaces reth1 unit 254 family inet address 10.X.Y.1/24 vlan 100 name MGMT vlan 104 name whatever vlan 108 name whatever108 vlan 33 name control vlan 34 name fabric vlan 254 name vlan254 interface Port-channel10 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100,104,108,254 switchport mode trunk !