Pulse Secure formerly SSL VPN
Posts: 2
Registered: ‎08-31-2008


We have SA 2500 2 nos in the primary site and one SA 2000 in the DR site - can we cluster all the three boxes together - if so what is the solution/design


 if not can i move the existing user lic of SA 2000 to one of the box in primary site , that is SA 2500 - because we have procured only one lic for the SA 2500box


incase of teh SA 2500 box both failing - shall we manualy change the lic to the SA 2000 in the DR 


Kindly reply




Ramesh Sivaraman

Trusted Contributor
Posts: 252
Registered: ‎02-28-2008

Re: Clustering

the juniper lic are tied to the hardware id of the device. so you can not move the lic from the 2500 to the the DR site. and from what it sounds like you have a cluster only lic for your 2000 so you can not use that box independently without a master lic.


You can cluster all three of them. You can add the 2000 as a seoncary / passive device and change the cluster option to do not sync log. in active passive the user state info is transfered between the primary and all the hosts so depending on your connection between prod and dr this might not be a viable solution. 


In your case i would suggest getting another license for the 2000 so that it is a priamry and not just a cluster member. 

SA-6500 (7.3R3) Production
MAG 4610 (7.4) Lab
Copyright© 1999-2015 Juniper Networks, Inc. All rights reserved.