Connecting SRX Series Devices to Create a Chassis Cluster
An SRX Series chassis cluster is created by physically connecting two identical cluster-supported SRX Series devices together using a pair of the same type of Ethernet connections. The connection is made for both a control link and a fabric (data) link between the two devices.
Control links in a chassis cluster are made using specific ports.
The interface value changes with the cluster offset value. Based on the cluster index, the interface is named as type-fpc/pic/port. For example, ge-1/0/1 , where 1 is cluster index and the FPC number. You must use the following ports to form the control link on the following SRX Series devices:
For SRX300 devices, connect the ge-0/0/1 on node 0 to the ge-1/0/1 on node 1.
For SRX320 devices, connect the ge-0/0/1 on node 0 to the ge-3/0/1 on node 1.
For SRX340, SRX345, and SRX380 devices, connect the ge-0/0/1 on node 0 to the ge-5/0/1 on node 1.
For SRX550M devices, connect the ge-0/0/1 on node 0 to the ge-9/0/1 on node 1.
For SRX1500 devices, connect the HA control port on node 0 to the HA control port on node 1
To establish a fabric link:
For SRX300 and SRX320 devices, connect any interface except ge-0/0/0 and ge-0/0/1.
For SRX340 and SRX345 devices, connect any interface except fxp0 and ge-0/0/1.
For SRX1500 devices, the connection that serves as the control link must be between the built-in control ports on each device.
You can connect two control links (SRX4600, SRX5000 and SRX3000 lines only) and two fabric links between the two devices in the cluster to reduce the chance of control link and fabric link failure. See Understanding Chassis Cluster Dual Control Links and Understanding Chassis Cluster Dual Fabric Links.
SRX5000 line devices do not have built-in ports, so the control link for these gateways must be the control ports on their Services Processing Cards (SPCs) with a slot numbering offset of 3 for SRX5400, offset of 6 for SRX5600 devices and 12 for SRX5800 devices.
When you connect a single control link on SRX5000 line devices, the control link ports are a one-to-one mapping with the Routing Engine slot. If your Routing Engine is in slot 0, you must use control port 0 to link the Routing Engines.
When a SPC is the control plane as well as hosting the control port, this creates a single point of failure. If the SPC goes down on the primary node, the node is automatically rebooted to avoid split brain.
Dual control links are not supported on an SRX5400 device due to the limited number of slots.