SRX Series Chassis Cluster Slot Numbering and Logical Interface Naming

Chassis Cluster Slot Numbering and Physical Port and Logical Interface Naming

Table 1 shows the slot numbering, as well as the physical port and logical interface numbering, for both of the SRX Series Firewalls that become node 0 and node 1 of the chassis cluster after the cluster is formed.

After you enable chassis clustering, the two chassis joined together cease to exist as individuals and now represent a single system. As a single system, the cluster now has twice as many slots. (See Figure 1, Figure 2, Figure 3, Figure 4, and Figure 6.)

Figure 1: Slot Numbering in SRX300 Chassis Cluster

Figure 2: Slot Numbering in SRX320 Chassis Cluster

Figure 3: Slot Numbering in SRX340 Chassis Cluster

Figure 4: Slot Numbering in SRX345 Chassis Cluster

Figure 5: Slot Numbering in SRX380 Chassis Cluster

Figure 6: Slot Numbering in SRX1500 Chassis Cluster

Figure 7: Slot Numbering in SRX1600 Chassis Cluster

Chassis Cluster Slot Numbering and Physical Port and Logical Interface Naming for SRX4600 Firewalls

Table 3 and Table 4 show the slot numbering, as well as the physical port and logical interface numbering, for both of the SRX Series Firewalls that become node 0 and node 1 of the chassis cluster after the cluster is formed.

Mix and match of fabric ports are not supported. That is, you cannot use one 10-Gigabit Ethernet interface and one 40-Gigabit Ethernet interface for fabric links configuration. Dedicated fabric link supports only 10-Gigabit Ethernet Interface.

Figure 8 shows the slot numbering for both of the SRX Series Firewalls that become node 0 and node 1 of the chassis cluster after the cluster is formed.

Figure 8: Slot Numbering in SRX4600 Chassis Cluster

Chassis Cluster Slot Numbering and Physical Port and Logical Interface Naming for SRX2300, SRX4100, SRX4200, and SRX4300 Devices

The SRX4100 and SRX4200 devices use two 1-Gigabit Ethernet/10-Gigabit Ethernet ports, labeled as CTL and FAB as control port and fabric port respectively.

The SRX4300 devices supports 1-Gigabit Ethernet labeled as CTL control port.

Supported fabric interface types for SRX4100 and SRX4200 devices are 10-Gigabit Ethernet (xe) (10-Gigabit Ethernet Interface SFP+ slots).

Table 8 shows the slot numbering, as well as the physical port and logical interface numbering, for both of the SRX Series Firewalls that become node 0 and node 1 of the chassis cluster after the cluster is formed

Figure 10 and Figure 11 shows the slot numbering for both of the SRX Series Firewalls that become node 0 and node 1 of the chassis cluster after the cluster is formed.

Figure 9: Slot Numbering in SRX2300

Figure 10: Slot Numbering in SRX4100 Chassis Cluster

Figure 11: Slot Numbering in SRX4200 Chassis Cluster

Figure 12: Slot Numbering in SRX4300 Chassis Cluster

The node 1 renumbers its interfaces by adding the total number of system FPCs to the original FPC number of the interface. For example, see Table 9 for interface renumbering on the SRX Series Firewalls (SRX4100, SRX4200, and SRX4300).

On SRX4100 and SRX4200 devices, when the system comes up as chassis cluster, the xe-0/0/8 and xe-7/0/8 interfaces are automatically set as fabric interfaces links. You can set up another pair of fabric interfaces using any pair of 10-Gigabit interfaces to serve as the fabric between nodes. Note that, the automatically created fabric interfaces cannot be deleted. However, you can delete the second pair of fabric interfaces (manually configured interfaces).

Chassis Cluster Slot Numbering and Physical Port and Logical Interface Naming for SRX5800, SRX5600, and SRX5400 Firewalls

For chassis clustering, all SRX Series Firewalls have a built-in management interface named fxp0. For most SRX Series Firewalls, the fxp0 interface is a dedicated port.

For the SRX5000 line, control interfaces are configured on SPCs.

Table 10 shows the slot numbering, as well as the physical port and logical interface numbering, for both of the SRX Series Firewalls that become node 0 and node 1 of the chassis cluster after the cluster is formed.

After you enable chassis clustering, the two chassis joined together cease to exist as individuals and now represent a single system. As a single system, the cluster now has twice as many slots. (See Figure 13.)

Figure 13: Slot Numbering in SRX5800 Chassis Cluster

FPC Slot Numbering in SRX Series Firewall Cards

SRX5600 and SRX5800 devices have Flex I/O Cards (Flex IOCs) that have two slots to accept the following port modules:

• SRX-IOC-4XGE-XFP 4-Port XFP

• SRX-IOC-16GE-TX 16-Port RJ-45

• SRX-IOC-16GE-SFP 16-Port SFP

You can use these port modules to add from 4 to 16 Ethernet ports to your SRX Series Firewall. Port numbering for these modules is

slot/port module/port

where slot is the number of the slot in the device in which the Flex IOC is installed; port module is 0 for the upper slot in the Flex IOC or 1 for the lower slot when the card is vertical, as in an SRX5800 device; and port is the number of the port on the port module. When the card is horizontal, as in an SRX5400 or SRX5600 device, port module is 0 for the left-hand slot or 1 for the right-hand slot.

SRX5400 firewalls support only SRX5K-MPC cards. The SRX5K-MPC cards also have two slots to accept the following port modules:

• SRX-MIC-10XG-SFPP 10-port-SFP+ (xe)

• SRX-MIC-20GE-SFP 20-port SFP (ge)

• SRX-MIC-1X100G-CFP 1-port CFP (et)

• SRX-MIC-2X40G-QSFP 2-port QSFP (et)

See the hardware guide for your specific SRX Series model (SRX Series Services Gateways).