O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

18.1. Configure an Active-Passive NSRP Cluster in Route Mode

Problem

You need to set up a redundant default gateway for your hosts.

Solution

Set up an active-passive NSRP cluster. First, choose ports for the NSRP control and data messages:

	FIREWALL-A-> set interface ethernet0/7 zone ha
	FIREWALL-A-> set interface ethernet0/8 zone ha

	FIREWALL-B-> set interface ethernet0/7 zone ha
	FIREWALL-B->set interface ethernet0/8 zone ha

Once the links are connected, enable NSRP by setting the cluster ID, VSD-Group information, and optional cluster name, and synchronize the configurations:

	FIREWALL-A-> set nsrp cluster id 1
	FIREWALL-A(M)-> set nsrp cluster name FWCLUSTER
	FWCLUSTER:FIREWALL-A(M)-> set nsrp vsd-group id 0 priority 10

	FIREWALL-B-> set nsrp cluster id 1
	FIREWALL-B(B)-> set nsrp cluster name FWCLUSTER
	FWCLUSTER:FIREWALL-B(B)-> save
	FWCLUSTER:FIREWALL-B(B)-> exec nsrp sync global-config saved
	FWCLUSTER:FIREWALL-B(B)->reset

Once FIREWALL-B comes back online, finish the configuration by enabling RTO synchronization, configuring timers, setting up monitoring parameters, and configuring manage-ips:

	FWCLUSTER:FIREWALL-A(M)-> set nsrp rto-mirror sync
	FWCLUSTER:FIREWALL-A(B)-> set nsrp rto-mirror session ageout-ack
	FWCLUSTER:FIREWALL-A(M)-> set nsrp vsd-group hb-interval 200
	FWCLUSTER:FIREWALL-A(M)-> set nsrp secondary-path ethernet0/3
	FWCLUSTER:FIREWALL-A(M)-> set nsrp auth password iamapassword
	FWCLUSTER:FIREWALL-A(M)-> set nsrp encrypt password iamapassword
	FWCLUSTER:FIREWALL-A(M)-> set nsrp ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required