Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Hardware requirements for NSRP clusters

0

0

Article ID: KB13851 KB Last Updated: 25 Aug 2020Version: 5.0
Summary:

This article provides information about the hardware requirements for a NetScreen Redundancy Protocol (NSRP) cluster in ScreenOS.

Examples are also given of hardware configurations that differ due to functionality and performance issues.

Symptoms:

To configure high-availability with NSRP, identical hardware devices are required, due to functionality and performance issues. In NSRP, it is always assumed that the hardware configuration of the physical devices is identical. However, at times, the hardware configuration may slightly differ.

Solution:

The requirements for a NSRP cluster are as follows:

  • Each device to be configured in NSRP should have one spare interface to be configured in the high availability (HA) zone.
  •  NSRP clusters require the use of the same hardware products with identical blades in corresponding slots within a cluster. The exception to this rule is the SSG500 series and SSG500M series devices, which can be used together in a cluster. If you are using an SSG500 series device and an SSG500M series device in a NetScreen Redundancy Protocol (NSRP) environment, all devices must be running ScreenOS 6.0r1 or later.
  • The SSG20, SSG140, SSG300, and SSG500 devices have the following exceptions:
     
    • The modules in corresponding locations for the VSIs (Virtual Security Interfaces) must be identical. For example, six Port SFP Gigabit Ethernet Universal PIM modules must be in the same slot of both units in the cluster. However, dissimilar modules of the same type are supported for VSI, as long as they are in the same slot. For example:
       
      • one Port Gigabit Ethernet 10/100/1000 Copper Enhanced PIM1,
      • one Port Fiber Gigabit Ethernet Enhanced PIM, one Port SFP 100 Mbps, or
      • Gigabit Ethernet Universal PIM
in the same slot of both units in the cluster. In other words,one Port Gigabit Ethernet 10/100/1000 Copper Enhanced PIM1 can be used in FW1 and one Port Fiber Gigabit Ethernet Enhanced PIM can be used in FW2, as long as they are in the same slot.
  • Dissimilar modules are supported for local interfaces (non-VSI). For example, two Port E1 PIMs with integrated CSU/DSU in one unit and two Port Serial PIMs in the other unit.
For more information about NSRP configuration and troubleshooting, refer to the NSRP Resolution Guides.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search