Juniper Networks 5000 SERIES manual Establishing AN HA Connection

Establishing an HA Connection

ESTABLISHING AN HA CONNECTION

To assure continuous traffic flow in the event of system failure, you can cable and configure two NetScreen devices in a redundant cluster, with one device acting as a master and the other as its backup. The master propagates all its network, configuration and session information to the backup. Should the master fail, the backup is promoted to master and takes over the traffic processing.

To physically connect the master and backup devices, the 5000-M and 5000-M2 management modules provide a pair of High Availability (HA) ports. To connect the NetScreen-5000 Series devices, you can use the provided Gigabit Ethernet mini-GBIC cable. Use this cable to connect the HA1 port on one system to the HA1 port on another system. Though you cannot connect HA ports between 5000-M and 5000-M2 management modules, you can connect HA ports between the same type of management module. For example, a 5000-M management module to another 5000-M management module.

For information on setting up HA configurations, see the NetScreen Concepts & Examples ScreenOS Reference Guide.

CONNECTING THE NETSCREEN-5000 SERIES TO A ROUTER OR SWITCH

You can establish a high-speed connection to a router or switch, and provide firewall and general security for your network, by connecting a Secure Port Module (SPM) to a fiber- optic or copper wire backbone. There are two ways to create this connection:

•Connect a Fiber Optic cable from one of the mini-GBIC ports to the router (or switch).

•Connect an Unshielded Twisted Pair (UTP) CAT5 cable from an FE port to the router (or switch).

NetScreen-5000 Series 19