Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Virtual MAC (VMAC) address for HA pair when using nsrp-max-cluster and nsrp-max-vsd variables

0

0

Article ID: KB11150 KB Last Updated: 17 Dec 2012Version: 5.0
Summary:
What is the VMAC address when using nsrp-max-cluster and nsrp-max-vsd variables,  Enhanced Range of Cluster IDs and VSD IDs?
Symptoms:
In ScreenOS 6.1, the number of Cluster IDs and Virtual Security Device (VSD) IDs can be increased up to 64.
Previous releases supported up to 7 NSRP clusters, and each NSRP cluster supported up to 8 VSD groups.

After increasing the number of Cluster IDs or Virtual Security Device (VSD) IDs, the VMAC address will change.
Solution:
To enable NSRP enhancements:

set envar nsrp-max-cluster=<num 1>                  <--  Number of NSRP clusters
set envar nsrp-max-vsd=<num 2>                      <--  Number of VSD groups
save, reset                                         <--  Device needs to be rebooted for the environment variable take effect.

The variables nsrp-max-cluster and nsrp-max-vsd can take values between 0 and 64 and its product should not exceed 512.

The VMAC address for the shared interface of an HA pair has the following format after configuring NSRP enhancement variables:  

0010 db 1111110X XXXXXXXX NNNNNNNN
where
XXXXXXXXX (9-bit) is for NSRP cluster id and VSD group id
NNNNNNNN (8-bit) is for interface number


Example:
set nsrp cluster id 30  --> 30=11110
set envar nsrp-max-cluster=32
set envar nsrp-max-vsd=16

nsrp-max-cluster=32 = 2^5 --> 5 bits used for NSRP cluster id
nsrp-max-vsd=16 = 2^4 --> 4 bits used for VSD group id

SSG520(M)-> get int e0/2
Interface ethernet0/2:
  description ethernet0/2
  number 6, if_info 393120, if_index 0, mode nat
6=0000 0110


Therefore, the VMAC addresses for VSD group 1, 3, 8, 9 and 15 are:

eth0/2:1     0010 db 11111101 1110 0001 0000 0110    = 0010.dbfd.e106
eth0/2:3     0010 db 11111101 1110 0011 0000 0110    = 0010.dbfd.e306
eth0/2
:8     0010 db 11111101 1110 1000 0000 0110    = 0010.dbfd.e806
eth0/2
:9     0010 db 11111101 1110 1001 0000 0110    = 0010.dbfd.e906
eth0/2
:15   0010 db 11111101 1110 1111 0000 0110    = 0010.dbfd.ef06


Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search