SRX

last person joined: 14 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  SRX 650 Deployment with 4 Interfaces

    Posted 04-09-2014 23:03

     

    Hi,

    I am going to deploy 2 SRX in cluster at  the internet edge of a network.

     

    Each SRX came with only 4 interfaces, no additional modules. My issue is if I configure cluster I will not have any

    interfaces left for DMZ

     

    On each  SRX following will be the interface usage.

     

    1 for inside

    1 for outside

    1 for fab

    1 for fxp

     

    Is there a way I can configure the cluster so that I could get an interface freed up for DMZ   ?

    or how can i have a DMZ zone in this scenario;

     

     

     

    Thank in advance.

     

     

     



  • 2.  RE: SRX 650 Deployment with 4 Interfaces

    Posted 04-09-2014 23:08

    If you use SRX cluster minimum

     

    fxp0 - Management

    fxp1 - Control

    fab - Fabric

     

    3 ports needed. And fxp0 and fxp1 are fixed ports ge-0/0/0 and ge-0/0/1 respectively. So, you need aditional ports to meet the requirement.

     

    Thanks,

    SHKM.

     



  • 3.  RE: SRX 650 Deployment with 4 Interfaces
    Best Answer

     
    Posted 04-09-2014 23:18

    Hello

     

    You need to buy additional I/O modules to have DMZ network.

     

    Regards,

    Raveen



  • 4.  RE: SRX 650 Deployment with 4 Interfaces

    Posted 04-10-2014 00:05

    Thank you.



  • 5.  RE: SRX 650 Deployment with 4 Interfaces

     
    Posted 04-10-2014 03:53

    Another option is three virtual interfaces on the single reth.

     

    reth0.1 inside

    reth0.2 outside

    reth0.3 dmz