Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Which HA interfaces will become the control and data channel for NSRP?

0

0

Article ID: KB11468 KB Last Updated: 16 Sep 2013Version: 5.0
Summary:

This article discusses which interfaces will become the high availability (HA) control and data links for NetScreen Redundancy Protocol (NSRP). When interfaces of different link speeds are used in the HA zone, the lowest interface number will not always become the control link. In fact, the highest speed interface will always become the control link.

Symptoms:

Cause:

Solution:

If two interfaces of the same speed (gigabit or 100-megabit) are bound to the HA zone, the interface with the lower number becomes the control link, and the interface with the higher number becomes the data link.

However, when 100-megabit and gigabit links are mixed in the HA zone, then the gigabit interface has the highest priority to become the control link.

If there are two gigabit links and one 100-megabit link in the HA zone, then the two gigabit links will be used for the control and data channel. The 100-megabit link will be backup.

For example, if only ethernet0/7 is bound to the HA zone, it becomes the control link. If then ethernet0/6 is added to the HA zone, it becomes the control link (because it has a lower number than ethernet0/7), and ethernet0/7 changes to the data link.
Here is an example from an SSG-140 in different scenarios:

When using eth0/6 and eth0/7 (both 100Mbps):

nsrp link info:
control   channel: ethernet0/6 (ifnum: 10)  mac: 0017cb40340a state: up
data      channel: ethernet0/7 (ifnum: 11)  mac: 0017cb40340b state: up


When using eth0/8 and eth0/9 (both 1Gps):

nsrp link info:
control   channel: ethernet0/8 (ifnum: 12)  mac: 0017cb411d8c state: up
data      channel: ethernet0/9 (ifnum: 13)  mac: 0017cb411d8d state: up

When using eth0/7 and eth0/8 (100Mbps and 1Gbps respectively):

nsrp link info:
control   channel: ethernet0/8 (ifnum: 12)  mac: 0017cb40340c state: up
data      channel: ethernet0/7 (ifnum: 11)  mac: 0017cb40340b state: up

 (Note: control and data reversed)

When placing three interfaces in the HA zone--eth0/7, eth0/8 and eth0/9 (100Mbps, 1Gbps and 1Gbps respectively):

nsrp link info:
control   channel: ethernet0/8 (ifnum: 12)  mac: 0017cb411d8c state: up
data      channel: ethernet0/9 (ifnum: 13)  mac: 0017cb411d8d state: up

When placing three interfaces in the HA zone--eth0/6, eth0/7 and eth0/9 (100Mbps, 100Mbps and 1Gbps respectively):

nsrp link info:
control   channel: ethernet0/9 (ifnum: 13)  mac: 0017cb411d8d state: up
data      channel: ethernet0/6 (ifnum: 10)  mac: 0017cb411d8a state: up

If you bind a single gigabit interface to the HA zone, the HA link supports both control and data messages. If you bind one 100-megabit interface to the HA zone, the HA link supports control messages only.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search