SRX

Hello all,

In a scenario where we have an SRX650 HA cluster, with one device on one floor and the backup on another floor in the same building, with the control & fabric cabling running to switches - instead of being directly connected via ge-0/0/1 & ge-0/0/2, is it required to create seperate VLAN for each port (ie.. one VLAN for the fabric heartbeat & another VLAN for the control link heartbeat) or can both links use the same VLAN?

Thanks for your help. 

They can be on the same VLAN. Only think you need to keep in mind is to allow jumbo frames on the switch-port.

Regards,

Raveen

MTU should be configured as 9014

You could refer below for more information on requirements:

http://kb.juniper.net/library/CUSTOMERSERVICE/GLOBAL_JTAC/technotes/3500165-EN.pdf

Regards,

Raveen

So referencing the KB21145 instructions to create this HA cluster with only the 4 available ports, how does one setup the physical cablilng to both the WAN switch and the internal LAN switch? I would think if LAN/WAN/DMZ sub-ints are all off one physical interface, can this port be connected to the internal switch and the management links to external switch or both ports to a single internal switch? Any diagram would be helpful. Thanks for your support.