Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] How to force a device from primary to backup in NSRP

0

0

Article ID: KB5885 KB Last Updated: 26 Aug 2020Version: 8.0
Summary:

This article describes a way to force a primary NSRP device to become a backup device.

 

Symptoms:
  • How can I manually fail over the primary device to the backup device in the CLI?

  • Is there a way I can force a primary device in NSRP to become a backup device?

 

Cause:

A device usually becomes a backup device when the change is intentionally made by a user by assigning higher priority to the device. But users can make a device to become a backup device by using the following command, depending on the conditions mentioned in Solution:

exec nsrp vsd-group 0 mode ineligible[backup]

 

Solution:

Let's say that device A is the primary firewall and device B is the backup firewall running NSRP.

  1. Log in to device A by using Telnet or SSH (or HyperTerminal if directly connected through the console port). Log in as the root admin or an admin with read-write privileges.

  2. Issue one of the following CLI commands on device A. The command you need to execute depends on whether or not the preempt option is enabled on the primary device.

    1. If the preempt option is enabled:
exec nsrp vsd-group 0 mode ineligible
  1. If the preempt option is not enabled:

exec nsrp vsd-group 0 mode backup

Either command forces the primary device to step down and the backup device to immediately assume the primary device's role.

Note: To change the state of the firewall from ineligible to backup (or to make the firewall eligible to be a backup device), enter the following command:

Warning: Before executing this command, ensure that the other node is in healthy state and is ready to take mastership.

exec nsrp vsd-group 0 mode backup

 

Modification History:

2020-08-25: Modified cause in the article and made a few minor changes

 

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search