Re: [j-nsp] nsrp ha link over ex4200

2009-04-30 Thread boikov
Hi, 10x for response when I remove interfaces of SSG from HA zone and put them an IP address everything work. NSRP ha-link probe is run on both SSGs cheers Quoting Ross Vandegrift : On Tue, Apr 28, 2009 at 11:17:04AM +0300, Yordan Boikov wrote: Hi, we have two SSG 520M firewalls and two

Re: [j-nsp] nsrp ha link over ex4200

2009-04-28 Thread Ross Vandegrift
On Tue, Apr 28, 2009 at 11:17:04AM +0300, Yordan Boikov wrote: > Hi, > > we have two SSG 520M firewalls and two ex4200 switches > > > [ SSG520M fw1 ][eth1/7] - [ge-0/0/3][ ex4200 sw1 > ][ge-0/1/2]===trunk===[ge-0/1/2][ ex4200 sw2 ][ge-0/0/3] > [eth1/7][ SSG520M fw2 ] > > I want to

Re: [j-nsp] nsrp ha link over ex4200

2009-04-28 Thread Tim Eberhard
Silly question... Why would you not just cable the firewalls directly into each other? What is the point of adding a couple of additional points of failure if you don't have to? Unless you're working with two firewalls at two physical geographic locations I see no reason to have a switch in betwe

[j-nsp] nsrp ha link over ex4200

2009-04-28 Thread Yordan Boikov
Hi, we have two SSG 520M firewalls and two ex4200 switches [ SSG520M fw1 ][eth1/7] - [ge-0/0/3][ ex4200 sw1 ][ge-0/1/2]===trunk===[ge-0/1/2][ ex4200 sw2 ][ge-0/0/3] [eth1/7][ SSG520M fw2 ] I want to configure HA between fw1 and fw2 the problem is that sw2 doesn't see fw1 sw1>sho