Re: SRX-Chassis-Cluster / Switched Fabric Interface / IPSEC-Termination on IRB-Interface
thanks for your reply.
RETH-Interface are not possible in that scenario.
Customer wants to have a cross connect on LAN and WAN INterface (so in total 4x LAN-Ports and 4x WAN-Ports)
The Switches, the SRX-Nodes will be connected to are in different buildings and are only connected by a Port-Channel.
So the switches can be assumes as standalone, no VSS or Virtual-Chassis or MC-LAG possible.
And this is the point, why RETH-Interfaces wont work. Whenever I put more childs on the same node into reth-interface they will create a LAG but the "standalone-Switches" will not know on how to respond on these LAG-Pakets because they will always see only the "half"paket....
So I came over to the solution to make the SRX-Cluster also act as Switch by activation of swfab.