Config Router

You are here: Home / Juniper / IP Monitoring on SRX-Series gateways

IP Monitoring on SRX-Series gateways

by

This article provides information on how to configure IP monitoring on SRX-Series gateways.

  • IP Monitoring is supported on all high end devices.
  • IP Monitoring is supported on all branch devices running 11.2 or later.

Introduction:

  • This feature is used to track the coverage of a set of configured IP addresses.
  • It impacts the failover of redundancy groups based on the coverage of the IP addresses.
  • ICMP echo messages are sent at regular intervals to the configured addresses.
  • If no replies are received after a configurable interval, the IP address is marked as unreachable.

Configuration:

  • IP monitoring is configured on a per-redundancy group basis.
  • It can be configured either as a ‘global configuration’ (impacts all the IP addresses configured under the RG), or as a ‘per-IP configuration’ (impacts only that IP address). 
    [edit chassis cluster]
redundancy-group 1 {

    interface-monitor {
        ge-0/1/9 weight 255;
    }
    ip-monitoring {
        global-weight 255;
        global-threshold 255;
        retry-interval 6;
        retry-count 7;
        family { 
            inet {
                1.1.1.5 {
                    weight 150;
                    interface reth0.10 secondary-ip-address 1.1.1.3;
                }
                1.2.3.4 {
                    weight 100;
                    interface reth0.10 secondary-ip-address 1.1.1.3;
                }
                2.3.4.5 {
                    weight 255;
                    interface reth0.10 secondary-ip-address 1.1.1.3;
                }
                10.254.5.44 {
                    weight 30;
                    interface reth0.10 secondary-ip-address 1.1.1.3;
                }
            }
        }
    }
}
  • The weight of the monitored IP’s much reach the configured global-threshold before any action is taken, and that will cause the global-weight to be subtracted from the redundancy group threshold of 255.

Troubleshooting:

The following command is used to view the status of all the configured IP addresses:

cli>show chassis cluster ip-monitoring status
 
node0:
-----------------------------------------------------
 
Redundancy group: 1
 
IP address                Status        Failure count  Reason
10.254.5.44          reachable       1            n/a
2.2.2.1                   reachable       0            n/a
1.1.1.5                   reachable       0            n/a
1.1.1.4                   reachable       0            n/a
1.1.1.1                   reachable       1            n/a

node1:
--------------------------------------------------------------
 
Redundancy group: 1
 
IP address                Status        Failure count  Reason
10.254.5.44          reachable       0            n/a
2.2.2.1                   reachable       0            n/a
1.1.1.5                   reachable       0            n/a
1.1.1.4                   reachable       0            n/a
1.1.1.1                   reachable       0            n/a