SRX Services Gateway
SRX Services Gateway

HA configuration SRX 240

11.24.10   |  
‎11-24-2010 12:46 AM

Dear all,

 

I want to have HA deployment as shown in the attached diagram. Please suggest me the best solution. Is it possible to have this kind of deployment on SRX 240 using JUNOS 10.3?

Bikash Bhattarai
Dristi Tech Pvt. Ltd

Attachments

4 REPLIES
SRX Services Gateway

Re: HA configuration SRX 240

11.24.10   |  
‎11-24-2010 01:12 PM

Run the recommenced release which is 10.2R3.10.

The two switches need to present one L2 domain, so must be interconnected.

You don't cross connect the firewalls. Active goes to left switch, passive to right.

 

Pretty much follow this scenario:

http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-security-swconfig-s...

 

You can combine the upper two and lower two switches in one device using VLANs of course.

 

Also:

http://kb.juniper.net/library/CUSTOMERSERVICE/technotes/8010055-EN.PDF

 

SRX Services Gateway

Re: HA configuration SRX 240

11.29.10   |  
‎11-29-2010 11:49 AM

But what if these are l3 capable switches and he's doing BGP?  Anymore details on this?  Otherwise yes, what they are saying about layer two and nixing cross connects to walls.

SRX Services Gateway

Re: HA configuration SRX 240

12.10.10   |  
‎12-10-2010 09:23 AM

Hi,

 

I have deployed that topology attached with EX virtual chassis.

 

Hope it helps. Let me know if you need further information.

 

 

Attachments

SRX Services Gateway

Re: HA configuration SRX 240

12.10.10   |  
‎12-10-2010 10:08 AM

From looking through your design I believe you must use VRRP to do that. If the actual design is still open for discussion I would suggest checking KB15504 on how to do chassis cluster.