Platforms On Which Nsm Supports Vrrp; Activating Vrrp On A Device Interface; Defining A Vsi As A Vrrp Interface; Managing Configuration Files - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Platforms on Which NSM Supports VRRP

Activating VRRP on a Device Interface

Defining a VSI as a VRRP interface

Managing Configuration Files

Copyright © 2010, Juniper Networks, Inc.
VRRP and NSRP are mutually exclusive on same device. Therefore, a device supporting
VRRP cannot support NSRP and vice versa.
All parameters available to VSI are applicable to the VRRP interface.
You can only activate VRRP on either a regular interface or a sub-interface generated
from one.
You can configure VRRP parameters only on a VSI interface generated from either a
regular interface or a sub-interface generated from one.
Release versions of ScreenOS 6.1 and NSM 2008.2 and later support VRRP fully.
NSM 2008.2 and later, support the VRRP feature in the following devices: SSG5, SSG20,
SSG140, SSG320, SSG320M, SSG350, SSG350M, SSG520, SSG520M, SSG550,
SSG550M.
NSM does not support VRRP in the following devices: ISG1000, ISG1000 with SM
ISG2000, ISG2000 with SM, NS5200M2/SPM2, NS5400M2/SPM2, Vsys devices.
You can enable VRRP on an Ethernet Interface only if VRRP has already been activated
on the device. You can only enable VRRP on a regular interface or a subinterface generated
from one. You can also configure VRRP parameters only on a VSI interface generated
from either a regular interface or a subinterface generated from a regular interface.
The VRRP interface follows the naming conventions of the NSRP VSI interface and is
defined as "interface: group-id". You must select a group-id between 1 and 7.
To enable VRRP, from the Physical Interface screen of the device, select the check boxes
to activate VRRP, as well as to enable VRRP, and click OK.
A Virtual Switch Interface (VSI) can also function as a VRRP interface. NSM treats both
VSI and VRRP interfaces similarly. You can create a VRRP through a VSI only if VRRP
has already been activated on the interface. All the VSI parameters in the interface are
editable for the VRRP. You can enter the IP mask for the VRRP. A new page is added
under the VSI Protocol subtree for configuring VRRP parameters. NSRP cluster settings
are disabled on the new VRRP page.
Configuration file management is available for Junos devices. These features allow the
NSM administrator to access the configuration in its native text format, typically ASCII
text, and process it in the NSM database where you can view it, compare it with other
configuration file versions, or use it to update a device.
You can fetch a configuration file from a device interactively from the NSM menus, or
you can set up a cron job to import the configuration text file periodically and put these
configuration file versions into the NSM database.
Chapter 5: Configuring Devices
237