Screen OS

Hi

I want to enable chassis cluster on two srx 650 devices before I do any further configuration. I configured the root password and assigned ip addresses on both devices to interfaces ge-0/0/1 and ge-0/0/2. All the interfaces are on the same subnet, can I get the cluster to work like that?.What else do I have to configure to get the cluster to work? Backup router, gateway, routing? I ask this because when I enable the cluster("set chassis cluster cluster-id 1 node 0" and "set chassis cluster cluster-id 1 node 1") and boot the devices, the routing subsystem isn't running(it runs fine before enabling the chassis cluster) on either one of the devices. The only error I get from the boot is "HA control port cannot be configured", and nothing else. Shouldn't the routing subsystem be running on node0? Is there some way to get a more informative error message so that I could understand what is causing the error?

The guide for the srx 650 chassis clustering http://kb.juniper.net/KB15503 doesn't really give advice what should be configured before enabling the cluster so I'm pretty stuck with this, please advice.

You don't need to configure anything, just follow the instruction in KB15503. The less you configure before, the better. You shouldn't configure ge-0/0/1 it will become fxp1.

Thanks for your reply

Attachment(s)

config.txt   5 KB 1 version

Make sure you did the following :

1-load factory-default

2-set system root-authentication plain-text-password ( then press enter & enter the password )

3-Now , may be by default some configuration are added at interface ge-0/0/3  , delete it using the following :

delete interfaces ge-0/0/3 unit 0

commit

error..

Interface ge-0/0/3.0 must be configured under interfaces

I can delete the default ip address from the interfaces, but that didn't help either, same errors.

you said that you deleted the ip from interface ge-0/0/03

now do the following :

set interfaces ge-0/0/3 unit 0

commit

that should eliminate the error

Actually, the command delete interfaces ge-0/0/3 unit 0 gives an error, so I wasn't even able to commit the configuration. However if i run the command delete interfaces ge-0/0/3 unit 0 family inet xxx.xxx.xxx.xxx/xx I should end up in the same situation, right? that didn't help, I still get the error. I think the problem has something to do with the ge-0/0/1 interfaces because the error states it cannot be configure as control port. Ideas anyone?

What about the whole dhcp section of the configuration file, would deleting that help? This problem can't be this difficult, someone please point out what I'm doing wrong.

after you load the factory default & put the password  & commit , paste the configuration here

Also please paste the conf steps you are doing  till you reach the error

After that I deleted the two name servers that were there by default:

delete system name-server 208.67.222.222

delete system name-server 208.67.220.222

commit

then I went to the operational mode and ran the command

set chassis cluster cluster-id 1 node 0 reboot

and on the other device:

set chassis cluster cluster-id 1 node 1 reboot

after the reboot i get the error "Ha control port cannot be configured"

At SRX 650 , the control link is ge-0/0/1

So the error tells that  : ge-0/0/1 cannot be configured ( because it should be used as control link )

So , you should remove ge-0/0/1 from any parts at the configuration before applying the Cluster command & rebooting :

delete system services web-management http interface ge-0/0/1

delete system services web-management https system-generated-certificaste  interface ge-0/0/1

delete interfaces ge-0/0/1 unit 0 family inet

delete zones security-zone trust interface ge-0/0/1

I ran these commands:

delete system services web-management http interface ge-0/0/1
delete system services web-management https interface ge-0/0/1
delete interfaces ge-0/0/1 unit 0 family inet
delete security zones security-zone trust interfaces ge-0/0/1

(same for the ge-0/0/2 interface)

After this I deleted the dhcp pools and I was able to delete the ge-0/0/1-2 interfaces

Then I enabled the cluster and it finally works! Thank you very much.

The config file after loading factory-default and setting the password is attached 

Attachment(s)

juniper.conf.txt   4 KB 1 version