High Availability; Chapter 13 High Availability; Nsrp Clusters Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

CHAPTER 13

High Availability

NSRP Clusters Overview

Copyright © 2010, Juniper Networks, Inc.
High availability (HA) provides a way to minimize the potential for device failure within
a network. Because all of your network traffic passes through a Juniper Networks security
device, you need to remove as many points of failure as possible from your network by
ensuring that the device has a backup in case it fails.
Setting up your security devices in HA pairs removes one potential point of failure from
your network design. You can remove other potential points of failure by setting up
redundant switches on either side of the HA pair of security devices. This chapter explains
how to configure NSM NetScreen Redundancy Protocol (NSRP) clusters and describes
how to use NSRP to support HA.
For detailed information on NSRP and HA, see the Concepts & Examples ScreenOS
Reference Guide.
This chapter contains the following topics:
NSRP Clusters Overview on page 363
Creating an NSRP Cluster on page 365
Configuring Active/Passive Cluster on page 366
Example: Configuring Active/Passive Cluster (NSM Procedure) on page 367
Active/Active Configurations Overview on page 370
Configuring an Active/Active Cluster (NSM Procedure) on page 371
Synchronizing Virtual Router Configurations and RunTime Objects (NSM
Procedure) on page 371
Changing VSD Group Member States (NSM Procedure) on page 373
Example: Changing VSD Group Member States (NSM Procedure) on page 374
Configuring NSRP to Detect Interface and Zone Failure on page 375
Vsys Clusters Overview on page 378
Exporting and Importing Device Configurations (NSM Procedure) on page 379
An NSRP cluster consists of two security devices that enforce the same security policy
and share the same configuration settings. When you assign a security device to an NSRP
363