- play_arrow Setting Up a Chassis Cluster
- SRX Series Chassis Cluster Configuration Overview
- SRX Series Chassis Cluster Slot Numbering and Logical Interface Naming
- Preparing Your Equipment for Chassis Cluster Formation
- Connecting SRX Series Firewalls to Create a Chassis Cluster
- Example: Setting the Node ID and Cluster ID for Security Devices in a Chassis Cluster
- Chassis Cluster Management Interfaces
- Chassis Cluster Fabric Interfaces
- Chassis Cluster Control Plane Interfaces
- Chassis Cluster Redundancy Groups
- Chassis Cluster Redundant Ethernet Interfaces
- Configuring Chassis Clustering on SRX Series Devices
- Example: Enabling Eight-Queue Class of Service on Redundant Ethernet Interfaces on SRX Series Firewalls in a Chassis Cluster
- Conditional Route Advertisement over Redundant Ethernet Interfaces on SRX Series Firewalls in a Chassis Cluster
- play_arrow Configuring Redundancy and Failover in a Chassis Cluster
- Chassis Cluster Dual Control Links
- Chassis Cluster Dual Fabric Links
- Monitoring of Global-Level Objects in a Chassis Cluster
- Monitoring Chassis Cluster Interfaces
- Monitoring IP Addresses on a Chassis Cluster
- Configuring Cluster Failover Parameters
- Understanding Chassis Cluster Resiliency
- Chassis Cluster Redundancy Group Failover
- play_arrow Chassis Cluster Operations
- Aggregated Ethernet Interfaces in a Chassis Cluster
- NTP Time Synchronization on Chassis Cluster
- Active/Passive Chassis Cluster Deployments
- Example: Configuring an SRX Series Services Gateway as a Full Mesh Chassis Cluster
- Example: Configuring an Active/Active Layer 3 Cluster Deployment
- Multicast Routing and Asymmetric Routing on Chassis Cluster
- Ethernet Switching on Chassis Cluster
- Media Access Control Security (MACsec) on Chassis Cluster
- Understanding SCTP Behavior in Chassis Cluster
- Example: Encrypting Messages Between Two Nodes in a Chassis Cluster
- play_arrow Upgrading or Disabling a Chassis Cluster
- play_arrow Troubleshooting
- Troubleshooting a Control Link Failure in an SRX Chassis Cluster
- Troubleshooting a Fabric Link Failure in an SRX Chassis Cluster
- Troubleshooting a Redundancy Group that Does Not Fail Over in an SRX Chassis Cluster
- Troubleshooting an SRX Chassis Cluster with One Node in the Primary State and the Other Node in the Disabled State
- Troubleshooting an SRX Chassis Cluster with One Node in the Primary State and the Other Node in the Lost State
- Troubleshooting an SRX Chassis Cluster with One Node in the Hold State and the Other Node in the Lost State
- Troubleshooting Chassis Cluster Management Issues
- Data Collection for Customer Support
- play_arrow Configuration Statements and Operational Commands
- play_arrow Chassis Cluster Support on SRX100, SRX210, SRX220, SRX240, SRX550M, SRX650, SRX1400, SRX3400, and SRX3600 Devices
Chassis Cluster Features Supported on SRX Series Devices
To determine if a feature is supported by a specific platform or Junos OS release, refer to Feature Explorer.
Supported Features on Standalone and Chassis Cluster
All features are supported in both chassis cluster and standalone mode on the same platform, except what is indicated in the below table.
Table 1 lists the features that are not supported in standalone or chassis cluster.
Category | Features | Standalone | Chassis cluster |
|---|---|---|---|
Ethernet Link Aggregation | LACP (port priority) Layer 3 Mode LACP (port priority) Layer 2 Mode | Yes Not supported in Active/Backup and Active/Active modes. | |
Diagnostics Tools | J-Flow Ping MPLS | Yes | Yes Not supported in Active/Active and Active/Active Failover mode. But state is synched to backup node. |
Ethernet Interfaces | Promiscuous mode on Ethernet interface | Yes | |
Chassis Management | Chassis cluster SPC insert IEEE 802.3af/ 802.3at support | Yes | Yes Not supported in Active/Backup, Active/Backup Failover, Active/Active, Active/Active Failover. |
Class of Service | Simple filters | Yes | |
Flow-Based and Packet-Based Processing- | End-to-end packet debugging Express Path support Host bound fragmented traffic Packet-based processing Selective stateless packet-based services | Yes | |
GPRS | GPRS (transparent mode and route mode) | Yes | |
Multicast VPN | Basic multicast features in C-instance Multicast VPN membership discovery with BGP P2MP LSP support P2MP OAM to P2MP LSP ping Reliable multicast VPN routing information exchange | Yes | |
GTPv2 | IMSI prefix and APN filtering Message-length filtering Message-rate limiting Message-type filtering Packet sanity check Policy-based inspection Restart GTPv2 path Sequence-number and GTP-U validation Stateful inspection Traffic logging Tunnel cleanup | Yes | |
IDP | Cryptographic key handling DSCP marking IDP class-of-service action IDP inline tap mode IDP SSL inspection Jumbo frames Performance and capacity tuning for IDP | Yes | |
Layer 2 Mode | Q-in-Q tunneling | Yes | |
SNMP v1,v2,v3 | Yes | ||
Stateless Firewall Filters | Stateless firewall filters(ACLs) | Yes | |
Transparent Mode | Bridge domain | Yes | |
UTM | Antivirus–Express Antivirus–Full Stateful active/active cluster mode Web filtering–Websense redirect | Yes Not supported in Active/Backup Failover and Active/Active Failover modes. | |
User Interfaces | J-Web user interface Junos XML protocol Session and Resource Control (SRC) application | Yes | |
Upgrading and Rebooting | ISSU | No | Yes |
