Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Ben Dale
> I'd say the idea of splitting a firewall cluster into two geographically > remote parts is itself worth to be revised twice. The chassis > interconnect pitfalls are not the main caveat in such a design. > > The most important thing about FW clusters (or even any other statefull > devices, like,

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Pavel Lunin
16.07.2012 16:49, Spam пишет: > Thanks for the info guys. I know it is not a recommended solution, but I > have > 2 ISP links in 2 different locations, which are connected together via a > single 10GB > vlan trunk between 2 switches, so I'm kinda stuck. > > I'd say the idea of splitting a firewa

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Spam
Thanks for the info guys. I know it is not a recommended solution, but I have 2 ISP links in 2 different locations, which are connected together via a single 10GB vlan trunk between 2 switches, so I'm kinda stuck. Spammy -Original Message- From: Clay Haynes To: "spam...@fioseurope.n

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Clay Haynes
SRX Technical Note 21 will have the Design Considerations and Deployment Scenarios you need. This link does require an account to login first. http://kb.juniper.net/InfoCenter/index?page=content&id=TN21 - Clay On 7/16/12 5:04 AM, "Spam" wrote: >Is it possible to connect 2 SRX devices t

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Farid Bouzemarene
Also make sur you have jumbo frame for fab link and igmp snooping deactivated - Message d'origine - De : Mark Menzies [m...@deimark.net] Envoyé : 16.07.2012 10:16 CET À : spam...@fioseurope.net Cc : juniper-nsp@puck.nether.net Objet : Re: [j-nsp] Quick Question About HA Setup Hiya bu

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Mark Menzies
Good point. Basically if we use a single switch to connect 2 SRXs in a cluster we introduce the switch as a single point of failure here. If you are dead set on separating your cluster nodes with switches, use 2 separate switches, one for control, one for data and keep the traffic on different vl

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Mike Devlin
Although it can work, its recommended that you dont. Any latency spikes between the switches can cause clustering to split, and you will suddenly be in a split brain scenario. I had a short talk with A-TAC about it a while back and they highly recommended against it for our build out. On Mon, Ju

Re: [j-nsp] Quick Question About HA Setup

2012-07-16 Thread Mark Menzies
Hiya bud Yes that can work here. Just make sure that the SRXs are less than 100ms apart and each sync connection, both fabric and control, is on separate VLANs. HTH On 16 July 2012 10:04, Spam wrote: > Is it possible to connect 2 SRX devices together into a HA Cluster by > connecting > the

[j-nsp] Quick Question About HA Setup

2012-07-16 Thread Spam
Is it possible to connect 2 SRX devices together into a HA Cluster by connecting the Control & Fabric Interlinks via switches or must they be directly connected. My planned setup is as follows: SRX<->Switch<->10GB Xconnect<->Switch<->SRX I can also give each connection is own dedicated VLAN if

Re: [j-nsp] Issue with MPLS VPN when using mixed LDP and RSVP Backbone !

2012-07-16 Thread Niko Sianipar
can you share the configuration? Thx ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp