NSRP configuration copy not working

[How to run the NSM GUI under Mac OS X]

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

[bariswinston]

Hi,

I have two ISG 2000 configured as Active/Pasive cluster. cluster is wroking fine i mean when i reboot master device primary backup device is taking load itself. But when i add new rule or change interface zone etc. these changes is not copied to the backup device. when i debug nsrp communications, only the error i get is following

failed to sync session: RTO mirror peer is not active

actually i set following commands on both two device

set nsrp rto-mirror sync

any idea?

Baris Erdogan
Datateknik

[sebastan_bach]

Hi ,

for the configurtion replication from the active device to the primary device you need to set this command.

set nsrp config sync

this command will replicat al the commands from the active device to the standby device.

the syn rto-mirror is for replication of dynamic objects from active device to secondary device like sessions tabel, ipsec sa's, xate entries and so on.

try this out and let us know whether it worked.

i hope this helps.

Regards

sebastan

[KlacKeR]

I also noticed the configs were reporting as out of sync.  This can be resolved by
issueing the following command on the backup device.

" EXEC NSRP SYNC GLOBAL-CONFIG SAVE "
   wait about 1-2 minutes

" RESET "
    If prompted to save config press N
    When prompted to restart press Y.


Selamlar & Best Regards,

Fatih BASTAN

[bariswinston]

Hi,

Problem has been resolved by help of JTAC. Configs were correct but we had ISG 2000 with bad slot. we realized that one pin on the slot was horizontal, we moved interface card to another slot and then everthing worked fine.
So we started RMA process.

Thank you for your help

Baris Erdogan

•      Forum/Home
•      Store
•      Articles
•        Tech Articles
•        Industry News
•        Site News
•      Knowledgebase
•        JUNOS/Routing
•        NS/ISG/SSG/NSM
•        SSL VPN
•      Downloads

Please consider donating if we've saved you time or money. It helps pay for the bandwidth, equipment, and hosting charges to keep this site running

Submit Article/KB - Do not submit questions here.

[Today]

• SRX-210H port-mirroring s... by ociz [Today at 02:14:13 PM]
• configs out of sync by ciscler [Today at 01:11:30 PM]
• Monitoring user bandwidth... by x0rerror [Today at 12:30:20 PM]
• NSRP active/passive with ... by junreaper [Today at 08:41:52 AM]
• Ladies’ fashionable shoes... by fivefingers8 [Yesterday at 06:54:36 PM]
• Routing Traffic From Cust... by fivefingers8 [Yesterday at 06:52:49 PM]
• Load balancing on J-serie... by fivefingers8 [Yesterday at 06:49:46 PM]
• Juniper SSG or other bran... by whoppi [Yesterday at 11:23:49 AM]
• NS25 and NS Remote - Want... by mbrown [Yesterday at 10:38:14 AM]
• Netscreen SSG Policy base... by thisisnuts999 [Yesterday at 07:01:01 AM]

Members

• Total Members: 22068
• Latest: vu.luu@flysfo.com

Stats

• Total Posts: 39593
• Total Topics: 10459
• Online Today: 72
• Online Ever: 393
• (August 06, 2008, 07:40:57 AM)

Users Online

Users: 1
Guests: 28
Total: 29

eagq