Platforms On Which Nsm Supports Vrrp; Activating Vrrp On A Device Interface; Defining A Vsi As A Vrrp Interface - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Platforms on Which NSM Supports VRRP

Activating VRRP on a Device Interface

Defining a VSI as a VRRP interface

Copyright © 2010, Juniper Networks, Inc.
The NSM implementation of VRRP has the following limitations:
WAN and serial interfaces cannot support VRRP. VRRP requires Ethernet or gigabit
interfaces.
A single interface can support only two VRRP groups.
You can enable a VRRP group only on a single interface.
VRRP and NSRP are mutually exclusive on same device. Therefore, a device supporting
VRRP cannot support NSRP and vice versa.
All parameters available to VSI are applicable to the VRRP interface.
You can only activate VRRP on either a regular interface or a sub-interface generated
from one.
You can configure VRRP parameters only on a VSI interface generated from either a
regular interface or a sub-interface generated from one.
Release versions of ScreenOS 6.1 and NSM 2008.2 and later support VRRP fully.
NSM 2008.2 and later, support the VRRP feature in the following devices: SSG5, SSG20,
SSG140, SSG320, SSG320M, SSG350, SSG350M, SSG520, SSG520M, SSG550,
SSG550M.
NSM does not support VRRP in the following devices: ISG1000, ISG1000 with SM
ISG2000, ISG2000 with SM, NS5200M2/SPM2, NS5400M2/SPM2, Vsys devices.
You can enable VRRP on an Ethernet Interface only if VRRP has already been activated
on the device. You can only enable VRRP on a regular interface or a subinterface generated
from one. You can also configure VRRP parameters only on a VSI interface generated
from either a regular interface or a subinterface generated from a regular interface.
The VRRP interface follows the naming conventions of the NSRP VSI interface and is
defined as "interface: group-id". You must select a group-id between 1 and 7.
To enable VRRP, from the Physical Interface screen of the device, select the check boxes
to activate VRRP, as well as to enable VRRP, and click OK.
A Virtual Switch Interface (VSI) can also function as a VRRP interface. NSM treats both
VSI and VRRP interfaces similarly. You can create a VRRP through a VSI only if VRRP
has already been activated on the interface. All the VSI parameters in the interface are
editable for the VRRP. You can enter the IP mask for the VRRP. A new page is added
under the VSI Protocol subtree for configuring VRRP parameters. NSRP cluster settings
are disabled on the new VRRP page.
Chapter 5: Configuring Devices
239