Juniper SA Archiving in a Cluster

[CoreyLivingston_]

Hello All,

I have an active/active Juniper SA cluster and I just configured SCP archiving. I have confirmed that the archiving configuration is shared between the cluster members.

It appears that only the primary cluster member is generating the archives. Is that to be expected or should the secondary node also generate archives?

If this is expected behavior, has anyone restored a cluster using the single binary created by the primary member?

Thank you in advance,

-Corey

[kalagesan_]

Hi Corey,

I  believe that this as an expected behavior, you should see the cluster name for System configuration files that are archived.You shoudle be able to restore a cluster using the single binary created by the primary member. I haven't tested this  however it should work since I have tested a system config restore file  taken from the primary node in a cluster using the mport/export option, imported the exported config and this was successful where it also pushed configs to secondary.

Moreover cluster configuration is synchronised between primary and replica.

Regards,

Kannan

[jayLaiz_]

Hi Corey,

Yes this is expected behavior.There is a kb on syslog but it will apply to SCP archiving as well

http://kb.pulsesecure.net/InfoCenter/kb25571

Only the leader node sends the config when the logs are synchronised and the leader is the one that holds the config as well so yes you can restore the config using that binary file

Regards,

Jay