11-16-2010 07:28 AM
is it true that you cannot use the interfaces on slots 0 and 5 in an ethernet switching mode ( i.e. all on the same vlan ) when you have two SRX240s in a cluster?
Will this change in the future?
11-16-2010 07:35 AM - edited 11-16-2010 07:37 AM
Starting from Junos 11.2, Ethernet Switching can be configured on Branch SRX products deployed in cluster environment.
This includes same VLAN can span across nodes.
11-16-2010 07:41 AM
the srx 240 has 16 onboard ethernet ports in fpc 0 and 4 slots numbered from fpc 1 to fpc 4 .
First let me anwesr this question in standalone mode.
In standalone we currently do not support ethernet switching on the 1 port mini-pims that can be inserted in slots 1 to 4.
It really does not add much value as we already support switching on the 16 onboard ethernet ports.
As far as HA is concerened, it would be nice, if we could support switching across to separate nodes, such that a vlan can span across both nodes (on board ports on both nodes).
This is not possible today. However it is in the roadmap targeted for the first half of 2011.
The solution would allow for a single vlan to span across 2 nodes.
To support switching across a HA pair you will need a 3rd link (apart from control and fab) between the 2 nodes.
In theory we really do not need this link as we can use fab link to sync the switching tables.
However the fabric link traverses from cpu(of node 0) to cpu (of node 1) and syncing this way is slow for ethernet switching. Hence we are proposing a third link which is directly connected from switch(of node 0) to switch (of node 1)
11-16-2010 07:59 AM - edited 11-16-2010 02:31 PM
Junos 10.4 - End of Nov / Early December
- 1 x GE SFP mPIM
- Auto USB software upgrade
- Jflow v9 support
- Dynamic VPN enhancements (Shared and Group IKE)
- J Web Wizards for VPN, NAT etc
- Some on box reporting
- Local address pools for IKE (including dynamic VPNs)
- DSCP ALG for Voice traffic
- X.509 certification encoding support for IKE
- More use cases related to termination of st0 interface in non default VR (st0 is non default VR is supported from 10.0R3 in Branch SRX and from 10.4 in SRX DC)
- Support for VLAN interfaces in non default VR
- IPv6 support for ALGs, NAT-PT
Please note above list is non-exhaustive for Branch SRX devices and subjected to tentative dates, please refer release notes for more information.
For features on future releases please contact you local account teams, they can assist you under NDA