Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Fibre Channel Storage

You can configure Fibre Channel (FC) in a standard JSA deployment or in a high-availability (HA) environment. You can also configure FC multipath to provide redundancy if your FC switch fails.

When you configure an FC device, you can move the JSA data in your /store or /store/ariel file system. Then, mount the /store or /store/ariel file system to a partition on the FC device.

Frequently searched data must be moved to a faster disk. For example, move recent data or data that is used for security incident investigations. However, deploying high performance offboard disk storage might be costly. Where possible, use lower performance and less expensive offboard storage for activities such as moving older data, archiving, or for reporting purposes.

If you are using FC only for archive purposes, then use the same mount point for every appliance and configure these mount points to correspond with each unique FC volume.

In deployments that use multiple appliances, ensure that each appliance is configured to use a separate FC volume. Failure to use separate volumes can result in two devices that mount the same block device, which can corrupt the block device file system.

Depending on your device configuration, you might be required to create a partition on the volume of your FC disk.

Configuring Fibre Channel (FC) is different for a primary high-availability (HA) host than the secondary HA host. To configure FC, you must ensure that the primary HA host and secondary HA host are not connected in an HA cluster.

Fibre Channel Configuration in Standard JSA Deployments

To move data from a JSA Console or managed host to an FC storage device:

Multipath Fibre Channel Configuration in Standard JSA Deployments

To move data from a JSA Console or managed host to multiple FC storage devices:

Fibre Channel Configuration in HA Deployments

To move data in an HA deployment to an FC storage device:

If you configure FC in an HA deployment and your primary HA host fails, your FC device can be used to maintain data consistency with your secondary HA host. For more information about data consistency and shared storage in an HA environment, see the Juniper Secure Analytics High Availability Guide.

Multipath Fibre Channel Configuration in HA Deployments

To move data in an HA deployment to multiple FC storage devices: