SRX (High end) by default keeps logs on data plane and they have to be forwarded to any external syslog
http://kb.juniper.net/InfoCenter/index?page=content&id=KB16506 however from Junos 10 perhaps you can copy them from data plane to control plane if you want to see them on console. Muhammad Fahad Khan JNCIE-M # 756 Lead Network and Security Consultant - IBM +92-301-8247638 Skype: fahad-ibm http://pk.linkedin.com/in/muhammadfahadkhan On Fri, Dec 13, 2013 at 7:28 PM, R S <[email protected]> wrote: > The only part missing will remain local control plane resources (ie logs, > snmp, etc) that remain on RG0 secondary. > > Am I right ? > > ------------------------------ > Date: Fri, 13 Dec 2013 14:58:46 +0300 > > Subject: Re: [j-nsp] SRX monitor-interface question > From: [email protected] > To: [email protected] > CC: [email protected]; [email protected] > > Reffer data plane on following: > > http://kb.juniper.net/InfoCenter/index?page=content&id=KB16224 > > Asad > > > > On Friday, December 13, 2013, R S wrote: > > how can I config syslog/traffic log directly from data plane ? > some config example ? > > tks > > ------------------------------ > Date: Fri, 13 Dec 2013 14:51:58 +0300 > Subject: Re: [j-nsp] SRX monitor-interface question > From: [email protected] > To: [email protected] > CC: [email protected]; [email protected] > > Its not recommended to use control plane for traffic logs, you can > configure sex to forward traffic logs directly from data plane > > RG0 aka control plane controls your rotuing engine, routing protocols and > chassis. Failing it over will cause your routing daemon to restart , > routing protocols to reconverge and so on... > > Asad > > On Friday, December 13, 2013, R S wrote: > > And what about syslog or firewall traffic logging flows on the RG1 Active > node if RG0 remain active on the Passive ? > > Date: Fri, 13 Dec 2013 16:34:53 +0500 > Subject: Re: [j-nsp] SRX monitor-interface question > From: [email protected] > To: [email protected] > CC: [email protected] > > RG0 only contains Control Plane or REs. > In SRX failover, its not necessary to failover RG0 when there is a > failover in RG1 due to a link failure. So we only do interface-monitor in > RG1, RG2 ... not in RG0. RG0 already run in A/P mode. > > > It can be possible that SRX B is Primary in RG0 while Secondary in RG1 > (means SRX A is Primary in RG 1) > Muhammad Fahad Khan > JNCIE-M # 756 > Lead Network and Security Consultant - IBM > > +92-301-8247638 > Skype: fahad-ibm > http://pk.linkedin.com/in/muhammadfahadkhan > > > On Fri, Dec 13, 2013 at 2:07 PM, R S <[email protected]> wrote: > > > > > > Hi > > > > In an SRX5800 cluster > > A/P deployment, does anybody recommend to monitor-interface also on RG0 or > not > > ? > > > > PRO ? CONS ? > > > > > > > > We did it but > > unfortunately during an SPU crash the RG0 didn’t switch properly and JTAC > told us it’s > > not recommended monitor-interface under RG0 in same corner case… > > > > > > > > Any experience to share > > is useful > > > > > > > > Tks > > > > > > _______________________________________________ > > juniper-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/juniper-nsp > > > > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
