srx ha active standby in mode transparent with IPS

[gvasquez@adexus.com…]

Hello my name is Giancarlo

I have two srx 240 h, and i would like to configuring in mode transparent L2 in HA Active / Standby, using the funcionality of IPS, because i have the license

How can i do it

Do you have any information about it?

Regards

Giancarlo

[JunOS_Fan]

Hi ,

For transparent mode configuration in SRX branch , you can refer to KB21421

for IDP/IPS and HA cluster setup ( and many other things), you can check the SRX Jumpstation - KB15694

[JunOS_Fan]

One thing to note -

As of Junos 11.2  , On SRX100, SRX210, SRX220, SRX240, and SRX650 devices, Intrusion Detection and Prevention (IDP) is not supported in Layer 2 transparent mode active/active and active/backup chassis clusters. On SRX3400, SRX3600, SRX5600, and SRX5800 devices, IDP is not supported in Layer 2 transparent mode active/active but is supported in active/backup chassis clusters.

[gvasquez@adexus.com…]

Hi Pradeep

I don't  understand you. According your advice, in 11.2 i can configure srx 240 in layer 2 (mode transparent)  in HA Active/Stanby but i can not configure the funcionallity of IDP?

Please could you help me about it

Thanks for your answer

Regards

Giancarlo

[JunOS_Fan]

Hi ,

As per page 145 of Junos 11.2 release notes ,

http://www.juniper.net/techpubs/en_US/junos11.2/information-products/topic-collections/release-notes... ,  you are correct.

" In 11.2 we can configure srx 240 in layer 2 (mode transparent)  in HA Active/Stanby but with out  the funcionallity of IDP"

Junos 11.3 is not available for SRX and in Junos 11.4 release notes, page 231 states the Layer 3 transparent mode limitations, in which IDP is not there, But I am not sure whether it is supported in 11.4 or not .