Fibre Channel Storage
You can configure Fibre Channel (FC) in a standard JSA deployment or in a high-availability (HA) environment. You can also configure FC multipath to provide redundancy if your FC switch fails.
When you configure an FC device, you can move the JSA data in your /store or /store/ariel file system. Then, mount the /store or /store/ariel file system to a partition on the FC device.
Frequently searched data must be moved to a faster disk. For example, move recent data or data that is used for security incident investigations. However, deploying high performance offboard disk storage might be costly. Where possible, use lower performance and less expensive offboard storage for activities such as moving older data, archiving, or for reporting purposes.
If you are using FC only for archive purposes, then use the same mount point for every appliance and configure these mount points to correspond with each unique FC volume.
In deployments that use multiple appliances, ensure that each appliance is configured to use a separate FC volume. Failure to use separate volumes can result in two devices that mount the same block device, which can corrupt the block device file system.
Depending on your device configuration, you might be required to create a partition on the volume of your FC disk.
Configuring Fibre Channel (FC) is different for a primary high-availability (HA) host than the secondary HA host. To configure FC, you must ensure that the primary HA host and secondary HA host are not connected in an HA cluster.
Fibre Channel Configuration in Standard JSA Deployments
To move data from a JSA Console or managed host to an FC storage device:
-
Follow the instructions in Verifying your Emulex Adapter Installation.
-
Follow the instructions in Verifying the Fibre Channel Connections.
-
Migrate the file system to an FC device:
Multipath Fibre Channel Configuration in Standard JSA Deployments
To move data from a JSA Console or managed host to multiple FC storage devices:
-
Follow the instructions in Verifying your Emulex Adapter Installation.
-
Follow the instructions in Verifying the Fibre Channel Connections.
-
Follow the instructions in Moving the /store file system to a Multipath Fibre Channel Solution.
Fibre Channel Configuration in HA Deployments
To move data in an HA deployment to an FC storage device:
-
Follow the instructions in Verifying your Emulex Adapter Installation.
-
Follow the instructions in Verifying the Fibre Channel Connections.
-
Migrate the file system to an FC device:
-
Follow the instructions in Configuring the Mount Point for the Secondary HA Host on the secondary appliance.
If you configure FC in an HA deployment and your primary HA host fails, your FC device can be used to maintain data consistency with your secondary HA host. For more information about data consistency and shared storage in an HA environment, see the Juniper Secure Analytics High Availability Guide.
Multipath Fibre Channel Configuration in HA Deployments
To move data in an HA deployment to multiple FC storage devices:
-
Follow the instructions in Verifying your Emulex Adapter Installation.
-
Follow the instructions in Verifying the Fibre Channel Connections.
-
Follow the instructions in Moving the /store file System to a Multipath Fibre Channel Solution in an HA Deployment.