Screen OS

Hi there?

I have two devices(ssg140, 320m) and tried to config nsrp.

setting same nsrp clusterid,

firewall-B-> exec nsrp sync global-config save

firewall-A(M)-> set nsrp rto-mirror sync were configured and checked rto-mirror enabled.

Technically I added a policy at master device but backup device didn't add the policy automatically.

I was wondering if these device can sync policies eachother or it should be same device.

 

Thanks for reading.

 

 

This is not supported.  The SSG-140 and SSG-320M have different interfaces, memory, etc.

NSRP can only be run with two units in identical hardware mode.  this also means that on units like the 500 and 300 series you need to have the same cards loaded in both devices too.

Thanks for replies !

And I would like to know whether nsrp include policy and config sync if I  use same devices. 

Thanks your reply spuluka. And I would like to be sure whether nsrp include policy and config sync if I use same devices and ScreenOs.

NSRP does support config, session and route sync if they both have the same hardware.

Policy and config sync automatically once NSRP is enabled.

 

Dynamic routing protocols require reconvergence unless yo implement VSDless designs.

 

You'll find the NSRP instruciton collection here.

 

http://kb.juniper.net/InfoCenter/index?page=content&id=KB22090

 

The Dynamic routing discussion:

 

http://kb.juniper.net/InfoCenter/index?page=content&id=KB11197

---

spuluka wrote:

Dynamic routing protocols require reconvergence unless yo implement VSDless designs.

---

This is actually incorrect.  You can use the command "set nsrp rto-mirror route" to sync dynamic routes, eliminating the need for VSD-less clusters.  This command was added in 6.0.

 

http://kb.juniper.net/InfoCenter/index?page=content&id=KB15690