Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
- Create BookmarkCreate Bookmark
- Create Note or TagCreate Note or Tag
- PrintPrint
3. Data Center Security Design > Configuration
Configuration
The configuration of the SRXs for this engagement underwent a number of revisions. They were:
-
Active/passive operation with redundant Ethernet (Reth) interfaces
-
Active/active operation
-
Active/active operation with redundant Ethernet interfaces
The reasons for the multiple versions of the configuration had to do with misunderstanding of the capabilities of the SRX and a change of code versions for the SRX. The initial requirement for the SRX was an active/passive operation for the cluster. As in the other portions of the network, all traffic passes over the active interfaces and processors, while the backup equipment, while hot, only sees traffic in the event of a failure.
The version of code that was available for the initial configuration did not support active/active clustering in the transparent mode of operation, so this configuration met the customer’s requirements for both traffic handling and error recovery.
