09 сентября 2015

Big problems of cluster Juniper SRX 1K and above

Sorry for my French.

If you have made a cluster of High-End Series Juniper SRX, forget about using IPSec. Or you should use Active/Passive configuration of cluster. Of course there is a scenario where it's possible (quasi). If the traffic does not go between nodes.

Juniper realy? It's a joke?

Passive device worth few kilo$ be buzzing fans and quietly wait in the wings.

The funny thing is no such restriction for branch series of SRX.

Proof