ScreenOS Firewalls (NOT SRX)
Reply
Contributor
Peter_B
Posts: 15
Registered: ‎12-03-2009
0

HA Interface IP Addresses?

Hi there,

I'm configuring a pair of SSG320s in an active/passive cluster.  I've plugged 2 crossover cables into ports in HA zones on each of the firewalls.  Looking at the interface config the HA interfaces are layer 3 and don't have IP addresses on them (this is the default).  Do I need to put IP addresses on them?  Should I make them layer 2?

 

They are plugged directly from 1 firewall to the other so I wouldn't have thought they needed addresses.

 

Thanks,

Pete.

ML
Contributor
ML
Posts: 19
Registered: ‎12-06-2008
0

Re: HA Interface IP Addresses?

Hello Peter



Sure, Since two firewalls are directly connected you wouldn't need IP addresses for HA.
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.