Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Connecting SRX Series Devices to Create a Chassis Cluster

An SRX Series chassis cluster is created by physically connecting two identical cluster-supported SRX Series devices together using a pair of the same type of Ethernet connections. The connection is made for both a control link and a fabric (data) link between the two devices.

Control links in a chassis cluster are made using specific ports.

The interface value changes with the cluster offset value. Based on the cluster index, the interface is named as type-fpc/pic/port. For example, ge-1/0/1 , where 1 is cluster index and the FPC number. You must use the following ports to form the control link on the following SRX Series devices:

  • For SRX300 devices, connect the ge-0/0/1 on node 0 to the ge-1/0/1 on node 1.

  • For SRX320 devices, connect the ge-0/0/1 on node 0 to the ge-3/0/1 on node 1.

  • For SRX340, SRX345, and SRX380 devices, connect the ge-0/0/1 on node 0 to the ge-5/0/1 on node 1.

  • For SRX550M devices, connect the ge-0/0/1 on node 0 to the ge-9/0/1 on node 1.

  • For SRX1500 devices, connect the HA control port on node 0 to the HA control port on node 1

To establish a fabric link:

  • For SRX300 and SRX320 devices, connect any interface except ge-0/0/0 and ge-0/0/1.

  • For SRX340 and SRX345 devices, connect any interface except fxp0 and ge-0/0/1.

Figure 1, Figure 2, Figure 3, Figure 4, Figure 6 and Figure 7 show pairs of SRX Series devices with the fabric links and control links connected.

Figure 1: Connecting SRX300 Devices in a Chassis ClusterConnecting SRX300 Devices in a Chassis Cluster
Figure 2: Connecting SRX320 Devices in a Chassis ClusterConnecting SRX320 Devices in a Chassis Cluster
Figure 3: Connecting SRX340 Devices in a Chassis ClusterConnecting SRX340 Devices in a Chassis Cluster
Figure 4: Connecting SRX345 Devices in a Chassis ClusterConnecting SRX345 Devices in a Chassis Cluster
Figure 5: Connecting SRX380 Devices in a Chassis ClusterConnecting SRX380 Devices in a Chassis Cluster
Figure 6: Connecting SRX550M Devices in a Chassis ClusterConnecting SRX550M Devices in a Chassis Cluster
Figure 7: Connecting SRX1500 Devices in a Chassis ClusterConnecting SRX1500 Devices in a Chassis Cluster

For SRX1500 devices, the connection that serves as the control link must be between the built-in control ports on each device.

You can connect two control links (SRX4600, SRX5000 and SRX3000 lines only) and two fabric links between the two devices in the cluster to reduce the chance of control link and fabric link failure. See Understanding Chassis Cluster Dual Control Links and Understanding Chassis Cluster Dual Fabric Links.

Figure 8, Figure 9 and Figure 10 show pairs of SRX Series devices with the fabric links and control links connected.

Figure 8: Connecting SRX4600 Devices in a Chassis ClusterConnecting SRX4600 Devices in a Chassis Cluster
Figure 9: Connecting SRX4100 Devices in a Chassis ClusterConnecting SRX4100 Devices in a Chassis Cluster
Figure 10: Connecting SRX4200 Devices in a Chassis ClusterConnecting SRX4200 Devices in a Chassis Cluster

Figure 11, Figure 12, and Figure 13 show pairs of SRX Series devices with the fabric links and control links connected.

Figure 11: Connecting SRX5800 Devices in a Chassis ClusterConnecting SRX5800 Devices in a Chassis Cluster
Figure 12: Connecting SRX5600 Devices in a Chassis ClusterConnecting SRX5600 Devices in a Chassis Cluster

SRX5000 line devices do not have built-in ports, so the control link for these gateways must be the control ports on their Services Processing Cards (SPCs) with a slot numbering offset of 3 for SRX5400, offset of 6 for SRX5600 devices and 12 for SRX5800 devices.

When you connect a single control link on SRX5000 line devices, the control link ports are a one-to-one mapping with the Routing Engine slot. If your Routing Engine is in slot 0, you must use control port 0 to link the Routing Engines.

When a SPC is the control plane as well as hosting the control port, this creates a single point of failure. If the SPC goes down on the primary node, the node is automatically rebooted to avoid split brain.

Figure 13: Connecting SRX5400 Devices in a Chassis ClusterConnecting SRX5400 Devices in a Chassis Cluster

Dual control links are not supported on an SRX5400 device due to the limited number of slots.