NetScreen防火墙培训_HA高可用性-AA.pptVIP

HA高可用性 NSRP Active/Active Configuration Active/Active Configuration Steps On both devices Configure cluster settings Remove VSD 0 Create two other VSDs Adjust VSD settings Configure VSIs Configure interfaces to be monitored On one device Change interfaces, policies, etc. as desired Changes will automatically be copied via HA link 1: Configure Cluster Settings Device 1 Device 2 2: Remove VSD 0 Device 1 Device 2 3: Create Two VSDs Device 1 Device 2 4: Configure VSIs - WebUI Device 1 Repeat to create one VSI per VSD per interface 4: Configure VSIs – CLI Device 2 5: Configure Interfaces to Be Monitored Verifying Active/Active Device 1 – normal operations Device 1 – failover Verifying Active/Active VSD Priority is Device-Specific Not passed to other device in cluster Device 1 Device 2 Interface Redundancy Creates backup path for individual interface If interface fails, backup interface takes over Device only fails over if all interfaces in redundancy group fail Does NOT provide additional bandwidth! Redundant Interface Configuration Steps Create redundant interface Assign interfaces to redundant group Select interface to be primary link 1: Create Redundant Interface 2: Assign Interfaces On 5000 8G card, ports must be in same ASIC group (1-4, 5-8) 3: Select Primary Link Verifying Redundant Interfaces Verifying Redundant Interfaces (cont.) “get interface” on NS device MAC table on switch Interface Failover “get interface” on NS device MAC table on switch Thank You * Copyright ? 2005 Juniper Networks, Inc. Proprietary and Confidential Copyright ? 2005 Juniper Networks, Inc. Proprietary and Confidential * VSI E1/1:2 VSI E1/2:2 VSI E1/1:1 VSI E1/2:1 VSD 1 VSI E1/1:1 VSI E1/2:1 VSD 1 VSD 2 VSI E1/1:2 VSI E1/2:2 VSD 2 HA link E1/2 E1/2 E1/1 E1/1 Device 1 (Top) Device 2 (Bottom) NetworkNSRPCluster Bottom- set nsrp cluster id 1 NetworkNSRPVSD Group Bottom(M)- unset nsrp vsd-group id 0 NetworkNSRPVSD Group Configuration Bottom