Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 01-31-2017 12:06

    Hi there

     

    I'm hopeing someone might be able to advise.

     

    I have a SSG-140-SB that I want to set up in a cluster with another SSG-140 that I an waiting to recieve in the mail. I do not know if the SSG140 I an waiting to recieve is an SSG-140-SB (256MB memory) or an SSG-140-SH (512MB memory). If it was the latter would a SSG-140-SB and SSG-140-SH work as a cluster in HA mode?

     

    I would really appreciate some input if anyone could advise.

     

    Many thanks in advance.

    Kevin



  • 2.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 01-31-2017 13:15

    They are compatible, however, you might have to reduce the max sessions on the 512 model.



  • 3.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 02-02-2017 01:03

    Many thanks for the quick response rseibert. Would I be required to manually set the max sessions possible on the 512 model?



  • 4.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility
    Best Answer

    Posted 02-02-2017 02:41

    Those are limites based on the hardware not a configurable parameter.

     

    I would just setup so that the lower value hardware is the primary device in the active/passive cluster.  That way the lower values are active and if a failover occurs you won't be accidently dropping sessions because of  a hardwware limit. 



  • 5.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 02-02-2017 04:09

    Very good advice.

     

    Thank you so much for your help.



  • 6.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 02-02-2017 14:18

    @spuluka wrote:

    Those are limites based on the hardware not a configurable parameter.

     

    I would just setup so that the lower value hardware is the primary device in the active/passive cluster.  That way the lower values are active and if a failover occurs you won't be accidently dropping sessions because of  a hardwware limit. 


    This is incorrect.  You CAN set a lower session limit.

     

    set envar max_sessions=xxxxx

     

    It will require a reboot after.  This is also a requirement if you are running an ISG cluster where one device has 1G and the other has 2G.



  • 7.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 02-06-2017 08:57

    Thank you ver much for your input, it's appreciated.

     

    Should I then indeed set a session limit on bothe devices? Sorry to keep troubling you.



  • 8.  RE: SSG-140-SB and SSG-140-SH Cluster Compatibility

    Posted 02-10-2017 03:13

    Setting the session limit would make sense.

     

    Use this command to see the current max limit on both devices

     

    get session info

     

    Take the LOWER max limit and then set the HIGHER device to the LOWER limit

    set envar max_sessions=####