High Availability

Multinode High Availability (SRX5400, SRX5600, and SRX5800 with SPC3, IOC3, SCB3, SCB4, and RE3; SRX1500, SRX4100, SRX4200, SRX4600, and vSRX 3.0)—Starting in Junos OS Release 22.3R1, we extend Multinode High Availability support to SRX4600, SRX4200, SRX4100, and SRX1500 devices and vSRX 3.0 instances. In this release, we support the following network deployment modes:
- Layer 3 network
- Default gateway
- Hybrid network
- Public cloud deployment (AWS)
SRX Series devices with Multinode High Availability support firewall and advanced security services such as application security, Content Security, intrusion prevention system (IPS), firewall user authentication, NAT, and ALG. For the complete list of features supported with Multinode High Availability, see Feature Explorer.

[See Multinode High Availability.]
PKI-based link encryption (SRX5400, SRX5600, and SRX5800 with SPC3, IOC3, SCB3, SCB4, and RE3; SRX1500, SRX4100, SRX4200, SRX4600, and vSRX 3.0)—Starting in Junos OS Release 22.3R1, we support PKI-based link encryption for interchassis links (ICLs) in Multinode High Availability. PKI provides a way of verifying the identity of a remote site by using a digital certificate.

You can now generate and store node-specific PKI objects such as local keypairs, local certificates, and certificate-signing requests on both nodes. You can generate, view, and clear node-specific certificates using the CLI commands with the node-local option.

[See Multinode High Availability, request security pki node-local generate-key-pair, request security pki node-local generate-certificate-request, and show security pki node-local local-certificate.]