SRX

Hi,

I just tried doing the "dual root partition" on a new SRX and now I am wondering how storage is set up on SRX in general. I know there is a CF card, and with dual root partition you can have a backup boot partition. Does that backup partition also store the configuration, e.g. do I have to make snapshots on a regular basis? Or is the config stored on yet another partition?

Are there any KB articles or other reads you would recommend so I can get the hang about all this and how SRX storage is being used in general?

Thanks

Hi,

1. first of all, you know internal CF is always primary media and USB is secondary media in SRX low-end firewalls

2. Now, if SRX is installed with dual partition scheme (9.6 or later) then we have active and backup copies of JunOS. These can be viewed as

Boot Media: internal (da0)
Active Partition: da0s2a
Backup Partition: da0s1a
Currently booted from: active (da0s2a)

Partitions Information:
  Partition  Size   Mountpoint
      s1a    293M   altroot
      s2a    293M   /
      s3e    24M    /config
      s3f    342M   /var
      s4a    30M    recovery

here on disk 0 (da0), slice-1 and slice-2 have backup and active JunOS copies, respectively. Notably, /config and /var are mounted on different slices. It indicates configuraion files are save separately from backup and active JunOS copies.

While taking snapshots, all slices /, /altroot, /config, /var and recovery slices are copied to media (e.g usb)

root@TestBox> request system snapshot media usb partition 
Clearing current label...
Partitioning usb media (/dev/da1) ...
Partitions on snapshot:

  Partition  Mountpoint  Size    Snapshot argument
      s1a    /           1.2G    none
      s2a    /altroot    1.2G    none
      s3e    /config     94M     none
      s3f    /var        1.1G    none
      s4a    recovery    131M    none
Copying '/dev/da0s1a' to '/dev/da1s1a' .. (this may take a few minutes)
Copying '/dev/da0s2a' to '/dev/da1s2a' .. (this may take a few minutes)
Copying '/dev/da0s3e' to '/dev/da1s3e' .. (this may take a few minutes)
Copying '/dev/da0s3f' to '/dev/da1s3f' .. (this may take a few minutes)
Copying '/dev/da0s4a' to '/dev/da1s4a' .. (this may take a few minutes)
The following filesystems were archived: / /altroot /config /var recovery

read for details

http://www.juniper.net/techpubs/software/junos-security/junos-security10.2/junos-security-admin-guide/jd0e34829.html

regards

Rasmus, thanks a lot, that's excellent info. I understand much better now.

Is there any more info about the different directories that Junos uses? What is /jail for example?