Configuring NetScreen Firewalls
This book offers novice users a complete opportunity to learn the NetScreen firewall appliance, covering all of the aspects of the NetScreen product line from the SOHO devices to the Enterprise NetScreen firewalls.
TABLE OF CONTENTS Configuring NetScreen Firewalls
Introducing the NetScreen Redundancy Protocol
It is time to focus on the more advanced features of NetScreen. Because the standard features are not strong enough for the more demanding environments, the mid- to high-range NetScreens provide support for the NetScreen Redundancy Protocol (NSRP). This protocol is the heart of all of the HA options covered here. NSRP has been available for several years, and was originally referred to as HA. With the introduction of NSRP version 2 in the ScreenOS 3.1 versions, this changed. HA setups are now commonly referred to as NSRP setups, or just referred to as "running NSRP."
Using NSRP version 1
The features described here apply only to NSRP version 2. If you are using an older model of NetScreen (for example, the NS-100) for which ScreenOS 4.0 or later is not available, you will be limited to NSRP version 1, which has a very limited feature set, and the commands for configuring HA are different. Instead of using get/set nsrp commands you use get/set ha commands. While the syntax is very similar to the NSRP version 2 commands, most of the features covered here are not available. If you find yourself in this situation, you should consider upgrading your hardware.
NSRP is the protocol that redundant NetScreen devices use to talk to each other when running in various HA configurations. It is the language that allows them to exchange state information and make decisions. Before we detail the specifics of what...
Copyright Syngress Publishing, Inc. 2005 under license agreement with Books24x7
