Switching

Hi all,

I have one VC that have two connection to SRX3600 chassis cluster (RETH0 only). My question can i make AE from VC to RETH connection. I already try but physical is down. I hope u understand what i try to do. Thanks

No - the reth interface on the SRX only allows a single interface to be active (forwarding) at one time, whereas an AE interface expects both interfaces to be up.

I believe in JUNOS 10.4 you can now configure AE interfaces on the SRX as RETH members meaning you will have 4 links between the SRX and the EX, but only one AE can be active at any time.

I hope this makes sense

Hi dfex,

Very2 thanks for your explanation. So that's why i try today but interface AE does not up. Thanks again n appreciate.

Hi dfex ,

LAG with Reth is supported on SRX 3K & 5K  at Junos 10.2

http://www.juniper.net/techpubs/software/junos-security/junos-security10.2/junos-security-swconfig-interfaces-and-routing/frameset.html

**************  Click on the button saying " Accept  as Solution"  if  My Post solved your problem  **************

Hi SSH,

Which is correct? It make me confuse....Is it RETH can communicate with AE?

Hi SSH,

Is it any update regarding this case?

Sorry - I just re-read your post - I assumed you were running an SRX branch.  

You will still need 4 interfaces between the EX and SRX though - 2x AE bundles, one active and one standby as part of a reth on the SRX side.

Hi dfex,

I'm use SRX3600. So u mean i can't make ae0 (EX4200) connecting to RETH0 (SRX)? Thanks n appreciate.

Yes - create two AE bundles on both the EX4200 and the SRX Cluster.  On the SRX, one AE bundle should be using physical interfaces from node0 and the other bundle should use physical interfaces from node1.  Now on the SRX, assign both AE bundles to reth0.  One bundle will be "up" as the primary interface, and one bundle will be "down" as the backup.

Physically connect them all (4 interfaces in total) to the EX.

Hi Dfex,

thank for the feedback but i'm limited port at SRX. Thanks again n appreciated your feedback.

Hi Dfex,

I have to configure the cluster of SRX 5800 and i would be getting one aggregated bundle from Cisco 6500 I to node 0 and one aggregated bundle from Cisco 6500 II to nod 1. So I want to know weather the configuration you have suggested is tested before or working somewhere or not. Thsi would be a active / passive SRX 5800M cluster.

While going through the KB, One of the KB suggests that JUNOS reth interfaces uses the  same infrastructure as for the  aggregated interafces. So if I create a reth interface say reth0 on the SRX 5800 chassis cluster and add two interfaces from nod 0 and two interfaces from nod 1 to reth0 interface and on the other side I would be getting aggregated bundle from Cisco 6500 I connected to my SRX nod 0 and another aggregated bundle from Cisco 6500 II to nod 1 of my SRX 5800 chassis cluster,  that should also work. Can you please suggest and comment

Note Cluster configuration would be active / passive.

Thanks and Regards,

Sushil Thakur

I would just recommend using multiple 10Gb interfaces in a "six pack" configuration and not use the redundant ethernet feature or AE interfaces.  Adjust the OSPF cost to prefer node 0 and enable per-packet flow in the routing options.

HI Sushi,

I have got the similar situation like yours, did you manage to sort out the network design?

Regards

Prasad

at least on the high-end devices, you can use LAGs with RETH interfaces (ie 2x interfaces to node0, 2x interfaces to node1)

the device on the other end must be configured with 2 separate LAGs (ie ae0 goes to node0, ae1 goes to node1)

see page 1171 of the Junos 11.1 Junos Security config documentation

will

Hi dfex,

I have a cluster with SRX3600. On the this cluster runs  junos 10.4R3.4.
each node has two 10G interfaces to a EX8216 Switch.
I have configured on  node0 xe-4/0/0 and xe-/4/0/1 to an ae0 interface and on node1 the same.
you have wrote that I can configure both ae interfaces to a reth interface. " Now on the SRX, assign both AE bundles to reth0.  One bundle will be "up" as the primary interface, and one bundle will be "down" as the backup."
unfortunately I do not know how and where I can do that.
Have an idea?
Thanks for your help