Re: [j-nsp] SRX Active/Active

2016-06-27 Thread Aaron Dewell

> On Jun 27, 2016, at 9:16 AM, Hugo Slabbert  wrote:
> 
> 
> On Sun 2016-Jun-26 20:51:41 -0700, Brian Spade  wrote:
> 
>> Hi Alexandre,
>> 
>> Thanks for all the details.  I will check with our Juniper team and see
>> what's the latest on A/A vs A/P.  For most of our sites, we plan to just
>> use A/P.  But for the largest sites with multi-10Gbps egress, we want to
>> try A/A.
> 
> Aside from the other option listed of splitting the cluster into separate 
> nodes, if your goal is multi-10G egress, you could also LAG 10G interfaces on 
> the SRX northbound.  The config isn't super intuitive, but you can LAG reth 
> child members in an A/P setup.


It’s not that bad.  It’s just keeping in mind that it’s really two LAGs, one to 
each cluster member.  So it’s configured twice on the switch, but only once on 
the SRX cluster.  Odd, but it makes sense in the end.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] SRX Active/Active

2016-06-27 Thread Hugo Slabbert


On Sun 2016-Jun-26 20:51:41 -0700, Brian Spade  wrote:


Hi Alexandre,

Thanks for all the details.  I will check with our Juniper team and see
what's the latest on A/A vs A/P.  For most of our sites, we plan to just
use A/P.  But for the largest sites with multi-10Gbps egress, we want to
try A/A.


Aside from the other option listed of splitting the cluster into separate 
nodes, if your goal is multi-10G egress, you could also LAG 10G interfaces 
on the SRX northbound.  The config isn't super intuitive, but you can LAG 
reth child members in an A/P setup.


--
Hugo Slabbert   | email, xmpp/jabber: h...@slabnet.com
pgp key: B178313E   | also on Signal



signature.asc
Description: Digital signature
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp