Using NSRP-Lite on Midrange Appliances

With all that theory under our belt, it’s time to see how we can implement a highly available network by using the NSRP-Lite feature available on some of the midrange NetScreen appliances. NSRP-Lite is a slimmed-down variant of NSRP that does not support the full feature-set of NSRP. All of the features discussed so far are available, however, which makes NSRP-Lite a very formidable feature in and of itself.

The two main things that NSRP-Lite cannot do are the Active/Active setup and synchronization of Run-Time Objects (RTOs). The lack of RTO synchronization means that in case of a failover, any existing sessions and VPNs will be lost and must be reestablished. If you are using VPNs with NSRP-Lite, remember to enable VPN monitoring with the rekey option to ensure that the VPNs are reestablished after a failover.