I actually have the same question, or therefore lack of understanding as the fellow who originated the thread. In an active / passive HA pair in Juniper SRXs, granted that's the only real type of HA they offer; I have to use the floating IP for address reachablility, a reth interface with is a logical collection of chassis seperated physical interfaces. What is the deployment scenario with active passive and two different IP addresses? Wouldn't I need inteligent routers both pre and post firewall, seems to me like that redundancy would require or benefit more from active active L3 with dynamic routing protocols. Any light you could shed on this would be great... And oh yeah, on an HA pair, it's possible to install a passive counterpart without factory resetting the active node right? The administration guide would lead me to believe otherwsie as it's kinda telling you to factory both boxes. I setup an HA active active pair with all appropriate interfaces and such, but when I tried to join the pair there was configuraiton overlaps and therefore it wouldn't take the configuration. Pair was UP but out of SYNC. Would be neat to understand the bare minimum requirements for HA setup, which Im sure Ill find if I continue to drive into the forums. Thanks again!
... View more