Best Practices for SRX Series Chassis Cluster Management

More documents

Recommendations

Info

Best Practices for SRX Series Chassis Cluster ManagementUsing the Control Plane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Using the Junos OS XML Management Protocol or NETCONF XMLManagement Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Using the Data Plane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Using the Junos OS XML Management Protocol or NETCONF XMLManagement Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Using SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Provisioning Chassis Cluster Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Monitoring Chassis Cluster Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36Monitoring Chassis Cluster Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38Redundant Group Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38Interface Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38Services Processing Unit Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39Junos OS XML RPC Instrumentation for SPU Monitoring . . . . . . . . . . . . 39SNMP MIB Instrumentation for SPU Monitoring . . . . . . . . . . . . . . . . . . . . 41Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42Other Statistics and MIBS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44RMON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Chassis Cluster Device Health Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45Monitoring Chassis Cluster Faults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45SNMP Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46System Log Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72Failover Trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74Other Indications for Failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77Managing and Monitoring a Chassis Cluster Using Operational and EventScripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78Using the Utility MIB for Monitoring a Chassis Cluster . . . . . . . . . . . . . . . . . . . 79Log Messages for SRX Series Chassis Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Sessions and Packet Flows Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Configuring High-End SRX Series Device Logging . . . . . . . . . . . . . . . . . . . . . . 81Configuring High-End SRX Series Device Data Plane Logging to the ControlPlane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82Configuring SRX Series Branch Devices to Send Traffic Log MessagesThrough the Data Plane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82Configuring Control Plane Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84Configuring Branch SRX Series Devices for Logging . . . . . . . . . . . . . . . . . . . . 85Sending Data Plane Log Messages with an IP Address in the Same Subnetas the fxp0 Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86Tracking Applications on an SRX Series Chassis Cluster . . . . . . . . . . . . . . . . . . . . 87Managing SRX Series Chassis Clusters Using RPCs . . . . . . . . . . . . . . . . . . . . . . . . 87Managing SRX Series Chassis Clusters Using SNMP . . . . . . . . . . . . . . . . . . . . . . . 92Event Script for Generating Chassis Cluster SNMP Traps . . . . . . . . . . . . . . . . . . . 95Utility MIB Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96ivCopyright © 2013, Juniper Networks, Inc.
IntroductionChassis Cluster OverviewThis document provides the best practices and methods for monitoring high-end SRXSeries chassis clusters using instrumentation available in the Junos ® operating system(Junos OS) such as SNMP, the NETCONF XML management protocol, and syslog. Thisdocument is applicable to all high-end SRX Series Services Gateways.A chassis cluster provides high redundancy. Before you begin managing an SRX Serieschassis cluster, you need to have a basic understanding of how the cluster is formed andhow it works.Chassis cluster functionality includes:• A resilient system architecture, with a single active control plane for the entire clusterand multiple Packet Forwarding Engines. This architecture presents a single deviceview of the cluster.• Synchronization of configuration and dynamic runtime states between nodes withina cluster.• Monitoring of physical interfaces and failover if the failure parameters cross a configuredthreshold.To form a chassis cluster, a pair of the same model of supported SRX Series devices arecombined to act as a single system that enforces the same overall security. Chassiscluster formation depends on the model. For SRX3400 and SRX3600 chassis clusters,the location and type of Services Processing Cards (SPCs), I/O cards (IOCs), and NetworkProcessing Cards (NPCs) must match in the two devices. For SRX5600 and SRX5800chassis clusters, the placement and type of SPCs must match in the two clusters.An SRX Series chassis cluster is created by physically connecting two identicalcluster-supported SRX Series devices using a pair of the same type of Ethernetconnections. The connection is made for both a control link and a fabric (data) linkbetween the two devices.Hardware RequirementsThis following hardware components are required to support chassis clusters:• SRX1400, SRX3400, SRX3600, SRX5600, or SRX5800 Services Gateways• SRX100, SRX200, or SRX600 Series branch devicesSoftware RequirementsThis following software components are required to support chassis clusters:• Junos OS Release 9.5 or laterCopyright © 2013, Juniper Networks, Inc.1
Page 1 and 2: Network Configuration ExampleBest P
Page 3: Table of ContentsIntroduction . . .
Page 7 and 8: • Best Practices for Managing a C
Page 9 and 10: Figure 2: SRX Series High-End Chass
Page 11: }interfaces {fxp0 {unit 0 {family i
Page 14 and 15: Best Practices for SRX Series Chass
Page 54 and 55:
Best Practices for SRX Series Chass
Page 56 and 57:
Page 58 and 59:
Page 60 and 61:
Page 62 and 63:
Page 64 and 65:
Page 66 and 67:
Page 68 and 69:
Page 70 and 71:
Page 72 and 73:
Page 74 and 75:
Page 76 and 77:
Page 78 and 79:
Page 80 and 81:
Page 82 and 83:
Page 84 and 85:
Page 86 and 87:
Page 88 and 89:
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Page 100 and 101:
Page 102:
show all

Best Practices for SRX Series Chassis Cluster Management

Create successful ePaper yourself

Delete template?

Save as template?