ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

Route Sync in ISG

‎09-02-2016 11:55 AM

For the command - "set nsrp rto-mirror route", if we are using VSD-ID 1 (one VSD only). Can i go ahead with this command Or the VSD-ID have to have be 0. If so, is there any other way to sync the routing table for dynamic protocols on the standby firewalls.

3 REPLIES 3
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: Route Sync in ISG

‎09-03-2016 07:29 AM

This command is only supported for vsd 0.

 

https://kb.juniper.net/InfoCenter/index?page=content&id=KB15690

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: Route Sync in ISG

‎09-06-2016 12:33 PM

Yeah i had seen this link, but the issue is that i have disbaled VSD 0 and now whenver i am giving the firewall switchover i see some impact. Running OSPF as dynamic protocol. Is there any other way around to sync the routing table for both firewalls.

Highlighted
ScreenOS Firewalls (NOT SRX)

Re: Route Sync in ISG

‎09-06-2016 04:57 PM

The RTO sync will not be an option outside of VSD 0.  

 

The only other configuration I can think of that might help, is if you change to Active/Active and then you can have active neighbors on both devices at the same time.  Then when failure occurs the neighbor does not re-establish because the other node neighbor is already up.

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Feedback