SRX

I have a standalone SRX3600, but we are purchasing another one to cluster it with in the fall. We are making some topology changes to our datacenter this summer, and I'd like to preempt the cluster by configuring a reth interface between our core switch and firewall instead of an ae LAG interface. This way I think I could just drop the 2nd firewall in place later on, and things will Magically Work Out Of The Box 😉

Just a basic configuration like:

set chassis cluster redundancy-group 1 node 0 priority 100
set chassis cluster redundancy-group 1 node 1 priority 200
set chassis cluster redundancy-group 1 preempt
set interfaces ge-0/0/0 gigether-options redundant-parent reth0
set interfaces ge-0/0/1 gigether-options redundant-parent reth0
set interfaces ge-0/0/2 gigether-options redundant-parent reth0
set interfaces ge-0/0/3 gigether-options redundant-parent reth0
set interfaces reth0 redundant-ether-options lacp active
set interfaces reth0 vlan-tagging
set interfaces reth0 redundant-ether-options redundancy-group 1
set interfaces reth0 unit 50 vlan-id 50
set interfaces reth0 unit 50 family inet address 1.1.1.1/24
set interfaces reth0 unit 51 vlan-id 51
set interfaces reth0 unit 51 family inet address 2.2.2.2/24

Is this a supported configuration? I ran it through commit check without any errors, but will I experience problems if I commit this config and connect the interfaces to our switch running a corresponding port-channel? Since I only have 1 node up, I won't have any problems with primacy, etc, right? 

Hi

This should be working fine, as 1 node of the cluster must work if second fails.
Two points

1) If you are having only node 0 now, then its better to set node 0 priority
for redundancy group 1 higher than that of node 1 (you have opposite setting now).

2) On the switch, interfaces that go to node 1 will be needed to put in different
LAG (ae) bundle - when you will have node 1.

Thanks a lot for the quick reply, pk! You are right about the priority of course.

Hi

The whole concept of clustering is different on SRX compared to Netscreen, so the answer is no.