how can I config syslog/traffic log directly from data plane ? some config example ?
tks Date: Fri, 13 Dec 2013 14:51:58 +0300 Subject: Re: [j-nsp] SRX monitor-interface question From: asadgard...@gmail.com To: dim0...@hotmail.com CC: fahad.k...@gmail.com; juniper-nsp@puck.nether.net Its not recommended to use control plane for traffic logs, you can configure sex to forward traffic logs directly from data plane RG0 aka control plane controls your rotuing engine, routing protocols and chassis. Failing it over will cause your routing daemon to restart , routing protocols to reconverge and so on... Asad On Friday, December 13, 2013, R S wrote: And what about syslog or firewall traffic logging flows on the RG1 Active node if RG0 remain active on the Passive ? Date: Fri, 13 Dec 2013 16:34:53 +0500 Subject: Re: [j-nsp] SRX monitor-interface question From: fahad.k...@gmail.com To: dim0...@hotmail.com CC: juniper-nsp@puck.nether.net RG0 only contains Control Plane or REs. In SRX failover, its not necessary to failover RG0 when there is a failover in RG1 due to a link failure. So we only do interface-monitor in RG1, RG2 ... not in RG0. RG0 already run in A/P mode. It can be possible that SRX B is Primary in RG0 while Secondary in RG1 (means SRX A is Primary in RG 1) Muhammad Fahad Khan JNCIE-M # 756 Lead Network and Security Consultant - IBM +92-301-8247638 Skype: fahad-ibm http://pk.linkedin.com/in/muhammadfahadkhan On Fri, Dec 13, 2013 at 2:07 PM, R S <dim0...@hotmail.com> wrote: Hi In an SRX5800 cluster A/P deployment, does anybody recommend to monitor-interface also on RG0 or not ? PRO ? CONS ? We did it but unfortunately during an SPU crash the RG0 didn’t switch properly and JTAC told us it’s not recommended monitor-interface under RG0 in same corner case… Any experience to share is useful Tks _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
