Hi Muhammad,
yes, JTAC agrees with you :).  We installed the NPCs using the KB procedure 
today and had no issues.

thanks!
-andy

From: Muhammad Atif Jauhar [mailto:atif.jau...@gmail.com]
Sent: Saturday, November 16, 2013 10:54 AM
To: Andy Litzinger
Cc: juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] Procedure to add a NPC to SRX HA cluster

Hi Andy,
As per your procedure, Once you boot up node 1 after installing NPC, there will 
be mismatch in hardware spics of both firewall which will cause cluster issue. 
Cluster will not comes up if there is mismatch in JUNOS, Hardware even modules 
are not installed on same slots.
Best solution is provided by JTAC.
Regards,

Muhammad Atif Jauhar
On Wed, Nov 13, 2013 at 1:32 AM, Andy Litzinger 
<andy.litzin...@theplatform.com<mailto:andy.litzin...@theplatform.com>> wrote:
can anyone recommend a procedure to add an NPC card to an SRX HA 
(active/standby) cluster?

In this case it's a pair of SRX3400s, running 12.1X44-D10.4
I've only got two redundancy groups, RG0(control) and RG1(data).
Currently the only NPC in each SRX is the integrated NPC-IOC 10GbE card in each 
chassis
Node0 is primary for both RG0 and RG1.
I'm not currently running any dynamic routing protocols.  There are some Policy 
based VPNs, ALGs and NATs in place.

Can I do something like the following?
* power down node 1, install the NPC, boot up and verify status
* manually fail RG1 to node1 via request chassis cluster failover
* manually fail RG0 to node1 via request chassis cluster failover (is the best 
way to do this?)
* power down node 1, install NPC, boot up and verify status
* fail both RG1 and RG0 back to node0

JTAC's first response was to follow this guide: 
http://kb.juniper.net/InfoCenter/index?page=content&id=KB26674  which seems 
overly complicated and possibly not applicable.  It seems to deal with the case 
of wanting to move a live SPC from one slot to another.  They say it applies to 
an NPC- but I'm not moving a live NPC, I'm inserting a new one.

thanks!
-andy
_______________________________________________
juniper-nsp mailing list 
juniper-nsp@puck.nether.net<mailto:juniper-nsp@puck.nether.net>
https://puck.nether.net/mailman/listinfo/juniper-nsp



--
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to