Active/Passive Cluster Configuration for pair of Juniper SA6500 (FIPS)

[sjb079]

Hello Guys,

I'm a complete newbie to Juniper devices, so I apologize in advance for any obvious answers to my questions.

I've been tasked to configure an active/passive cluster with two Juniper SA6500 devices. One device is currently LIVE in service and the second device has been installed, licensed and configured with a IP's for the Management, Internal & External interfaces.

From reading documentation, am I correct in saying that the cluster will use the internal interface to provide HA between both nodes?

The bit I am stuck on is the VIP configuration, currently both devices have their internal interfaces configured on the same VLAN 683 (same range), do I need to assign VIP addresses within the same range (VLAN 683), if so where do I assign this address?

I also assume that a VIP address needs to be created for the external access as well (VLAN 682), is this correct, if so where do I assign this address?

Many Thanks,
Regards

Simon

[Filbert]

Go into System>Clustering> Clustering Properties. Set the cluster to Active/passive and enter the internal and external VIPs. The VIPs needs to be in the same network segments as the internal and external interfaces.

[zanyterp]

From reading documentation, am I correct in saying that the cluster will use the internal interface to provide HA between both nodes?
>>>Yes, this is the required communication and will guarantee cluster failure if it goes down. You can _also_ use the external port for providing connections if desired.

The bit I am stuck on is the VIP configuration, currently both devices have their internal interfaces configured on the same VLAN 683 (same range), do I need to assign VIP addresses within the same range (VLAN 683), if so where do I assign this address?
>>>Yes, on the configuration page (as flipPipe indicated). That VLAN doesn't need tagging for traffic to flow does it?

I also assume that a VIP address needs to be created for the external access as well (VLAN 682), is this correct, if so where do I assign this address?
>>>Yes, same page as the internal VIP (as flipPipe indicated)

[zanyterp]

Sorry, I remembered the wrong poster who answered; filbert (apologies)

[sjb079]

Thanks for all your comments guys, I'll give this a go...