Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  ha secondary path link not available

    Posted 10-16-2009 06:35

    hi all,

    i try to configure nsrp between two SSG 550M. 

    But a see tha the ha link in secondary path not available

    this is the output of get nsrp

     

    cluster1:ZONE-2-FW1(M)-> get nsrp
    nsrp version: 2.0

    cluster info:
    cluster id: 1, name: cluster1
    local unit id: 1896064
    active units discovered:
    index: 0, unit id:   1896064, ctrl mac: 0021591cee8e, data mac: 0021591cee95
    index: 1, unit id:   9132800, ctrl mac: 001db58b5b0e, data mac: 001db58b5b15
    total number of units: 2

    VSD group info:
    init hold time: 8
    heartbeat lost threshold: 3
    heartbeat interval: 1000(ms)
    master always exist: disabled
    group priority preempt holddown inelig   master       PB other members
        1       50 yes           10 no       myself  9132800
        2      100 yes            3 no      9132800   myself
    total number of vsd groups: 2
    Total iteration=459,time=13324580,max=161517,min=22338,average=29029

    RTO mirror info:
    run time object sync:   enabled
    route synchronization: disabled
    ping session sync: enabled
    coldstart sync done
    nsrp data packet forwarding is enabled

    nsrp link info:
    control   channel: ethernet4/0 (ifnum: 14)  mac: 0021591cee8e state: up
    data      channel: ethernet1/0 (ifnum: 21)  mac: 0021591cee95 state: up
    ha secondary path link not available

    NSRP encryption: disabled
    NSRP authentication: disabled
    device based nsrp monitoring threshold: 255, weighted sum: 0, not failed
    device based nsrp monitor interface:
    device based nsrp monitor zone:
    device based nsrp track ip: (weight: 255, disabled)
    number of gratuitous arps: 5
    config sync: enabled

    track ip: disabled
    cluster1:ZONE-2-FW1(M)-> 

    Message Edited by Abdallah on 10-16-2009 06:44 AM


  • 2.  RE: ha secondary path link not available
    Best Answer

    Posted 10-16-2009 09:09

    Have you configured secondary path via CLI "set nsrp secondary-path interface"?

    Is that interface Up?