Open Shortest Path First (OSPF) is a routing protocol for Internet Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls into the group of interior gateway protocols (IGPs), operating within a single autonomous system (AS). It is defined as OSPF Version 2 in RFC 2328 (1998) for IPv4.
Below is a digram showing you the process flow of two routers initialising and sharing routes between each other within the same OSPF area
A three-way handshake is a method used in a TCP/IP network to create a connection between a local host/client and server. It is a three-step method that requires both the client and server to exchange SYN and ACK (acknowledgement) packets before actual data communication begins.
to remove a node from a chassis cluster run the following command
set chassis cluster disable reboot
You should see the following output before the node start the reboot procedure
Successfully disabled chassis cluster. Going to reboot now
Please follow the below steps to perform re-alignment of the network interfaces on the vSRX appliance this can happen if you have been using a release older than D62
How to recover.
1.Shutdown node0 and node1
2. Remove all NICs
3. Power up node0 and node1 , when it reaches config loading power off node0 and node1
4. Add 3 NIC to node0 and node 1 and power on the nodes
5.Check the cluster status , node0 and node1 should see each other and fabric link should be up and working
If you require more network interfaces to be added to your appliance please follow the KB in the link below
If you are making changes to network firewalls ensure that you have a backup and a revert plan as a pro-caution
I have had the wonderful joy of performing a SRX software update and it was pretty painless so here is the procedure
- Run the following command on each of the nodes
- request system software add no-copy unlink
- Once the above command has completed on all nodes complete by performing a reboot of the nodes
- Allow the nodes to reboot and you are done!
If you are using the virtual model of the SRX appliance please ensure that you have a snapshot before performing any firmware / software updates
Okay the clustering bug fix has now been released please use the following links to download the update
PR 1181269 – vSRX: Vmware interface reordering issues
PR 1201267 – High CPU % on httpd over Multiple Jweb sessions
PR 1228547 – SRX is not sending serial number to Policy Enforcer
PR 1214802 – Web Filter may crash with black or whilte lists
PR 1210689 – Anti-Malware connection failures after several RG0/RG1 failover
PR 1213584 – Reth interfaces that have only one link on one node may break sessions on failover and fail back
Okay so you can probably tell from the rest of the blog I work with Junos on a regular basis and I have found a bug that has been logged with Juniper that effects there current vSRX releases upto version D60. It would only effect your SRX if you running in chassis cluster mode and what would happen is that it would fail to detect the network interfaces
Anyway Juniper have agreed that it is an issue on there virtual appliance and a work around will be released hopefully the first week of December 2016