Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Fri Jun 02, 2023 4:40 am


Author Message
mandrei99
Post  Post subject: Juniper SRX cluster - How the hostname is configured  |  Posted: Sat Jan 31, 2015 7:04 pm

Joined: Tue Aug 04, 2009 9:16 am
Posts: 250

Offline
 

Juniper SRX cluster - How the hostname is configured

A Juniper SRX firewall adopts a different behavior when cluster enabled and rebooted.
Depending on the model, it will change the role of specific fe-/ge- interfaces to behave as cluster management and as cluster control link, a 3rd interface will be (upon configuration) a member of fabric interface for data plane inter-communication between the two cluster nodes.

Code:
root@SRX-node> set chassis cluster cluster-id ?
Possible completions:
  <cluster-id>         Cluster identifier (0..15)
  node                 Node identifier (0..1)
  reboot               Reboot the system after setting the identifiers
root@SRX-node> set chassis cluster cluster-id 1 node ?
Possible completions:
  <node>               Node identifier (0..1)

A chassis cluster is made of maximum two SRX nodes: node0 and node1. This is set with above command and it takes effect after reboot.

Both nodes need to have different hostnames, fxp0 (management interface) IP addresses and few other split configuration parts.

On SRX platforms, Junos supports a global configuration part and a node specific configuration part. The hostname and the individual split configs for each SRX chassis cluster node are set in the node specific part.

Then the node specific Junos configuration is applied based on the “apply-group” instruction.

Example: Setting Junos configuration for node0 in an SRX cluster:


Code:
# set groups node0 system host-name SRX-Cluster-Node0
# set groups node0 interfaces fxp0 unit 0 family inet address 10.1.1.101/23

Setting the corresponding apply-group:
Code:
# set apply-groups "${node}"

Node hostname in SRX chassis cluster:


Code:
{primary:node0}[edit]
root@SRX-Cluster-Node0# show system host-name | display inheritance
##
## 'SRX-Cluster-Node0' was inherited from group 'node0'
##
host-name SRX-Cluster-Node0;


The “display inheritance” junos cli filter allows to see specific configuration inheritance origin. This case the config group “node0”.





Top
Display posts from previous:  Sort by  
E-mail friendPrint view

Topics related to - "Juniper SRX cluster - How the hostname is configured"
 Topics   Author   Replies   Views   Last post 
There are no new unread posts for this topic. Juniper Firefly (vSRX) 12.1X47 chassis cluster under Vmware ESXi5.5

mandrei99

0

21939

Sun Feb 22, 2015 9:47 pm

mandrei99 View the latest post

There are no new unread posts for this topic. How to copy files between two SRX cluster nodes - remote procedure

mandrei99

0

6159

Fri Jan 23, 2015 7:03 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX - How to collect RSI (Request Support Information) to provide it to Juniper TAC

mandrei99

0

27959

Fri Jul 12, 2013 9:46 am

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX: How to access/vty on the PFE from CLI

mandrei99

0

8638

Mon Jan 26, 2015 6:39 am

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper SRX PPPoE configuration for RCS RDS provider in Romania

mandrei99

0

4313

Fri Jan 09, 2015 8:21 am

mandrei99 View the latest post

There are no new unread posts for this topic. Attachment(s) Squid http(s) transparent proxy with Juniper SRX | part 1

mandrei99

0

10465

Fri May 03, 2013 4:30 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Squid http(s) transparent proxy with Juniper SRX | part 2

mandrei99

0

9096

Tue May 21, 2013 5:58 am

mandrei99 View the latest post

There are no new unread posts for this topic. Attachment(s) Squid http(s) transparent proxy with Juniper SRX | part 3

mandrei99

0

8965

Fri May 24, 2013 8:32 am

mandrei99 View the latest post

There are no new unread posts for this topic. Juniper - SRX: SNMP monitoring of interface input output bytes per second

mandrei99

0

10359

Wed Oct 16, 2013 9:45 am

mandrei99 View the latest post

There are no new unread posts for this topic. How to monitor CPU usage and flow sessions via SNMP - Juniper SRX Branch - 12.1X44

mandrei99

0

14372

Tue Jun 18, 2013 6:13 pm

mandrei99 View the latest post

 

Who is online
Users browsing this forum: No registered users and 1 guest
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO