@cryptochrome wrote:
So the first interface on node 1 (ge-0/0/0) will actually become ge-7/0/0, the second interface (ge-1/0/0) will become ge-8/0/0 and so on
That numbering is not correct for the SRX650.
The SRX650 has 8 FPC slots (I think they're called FPCs, Juniper's naming scheme is TERRIBLE) in addition to the onboard ports.
When you cluster SRX650s, the first number in the interface numbering is the FPC slot number. Add 9 for the secondary node (0 = onboard, 1-8 = FPC slots in each node).
ge-0/0/0 corresponds to ge-9/0/0 on the secondary node, ge-0/0/1 corresponds to ge-9/0/1 on the secondary node.
Furthermore, ge-0/0/0 (and ge-9/0/0) become dedicated for the fxp0 management interfaces when the devices go into cluster. That leaves you only ONE open port per SRX650 to use for revenue traffic, and that would be ge-0/0/2 on both SRX devices (known as ge-9/0/2 on the secondary node.)
For any real useful capabilities in moving traffic through an SRX650 cluster, you really do need to add some PIM modules to make some actual revenue ports available.
Reference this KB article.