ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

SSG 550M High Availability configuration

06.20.11   |  
‎06-20-2011 06:43 PM

Hello,

 

Can anyone provide the basic configuration for high availability config of two 550M firewalls? Is it enough if we just connect an HA cable between the 0/3 port to configure HA. I am looking at the following link

 

http://www.juniper.net/techpubs/hardware/netscreen-systems/netscreen-systems60/HW_SSG500M_600.pdf

 

Thanks

2 REPLIES
ScreenOS Firewalls (NOT SRX)

Re: SSG 550M High Availability configuration

06.21.11   |  
‎06-21-2011 02:05 AM

Hi

 

The below lines are from a SSG550M running HA using eth03

 

Device1:

set nsrp cluster id 1
set nsrp rto-mirror sync
set nsrp vsd-group master-always-exist
set nsrp vsd-group id 0 priority 50
set nsrp vsd-group id 0 preempt
set nsrp vsd-group id 0 preempt hold-down 5
set nsrp arp 8
set nsrp secondary-path ethernet0/0
set nsrp monitor interface ethernet0/0
set nsrp monitor interface ethernet0/1
set nsrp monitor interface ethernet0/2
set nsrp ha-link probe interval 5

 

Device2:

set nsrp cluster id 1
set nsrp rto-mirror sync
set nsrp vsd-group master-always-exist
set nsrp vsd-group id 0 priority 100
set nsrp vsd-group id 0 preempt hold-down 5
set nsrp arp 8
set nsrp secondary-path ethernet0/0
set nsrp monitor interface ethernet0/0
set nsrp monitor interface ethernet0/1
set nsrp monitor interface ethernet0/2
set nsrp ha-link probe interval 5

 

 

Regards

Hans
JNCIS-FWV

If this worked for you then please flag my post as an "Accepted Solution" so others can benefit from it. A kudo would be nice if you think I earned it
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: SSG 550M High Availability configuration

06.21.11   |  
‎06-21-2011 04:01 AM

The basic setup steps are covered and explained in KB9809.

 

http://kb.juniper.net/InfoCenter/index?page=content&id=KB9809

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV
JNCDA JNCDS-DC JNCDS-SEC
JNCIS-SP
ACE PanOS 6 ACE PanOS 7
http://puluka.com/home