Juniper-HA SSG系列cluster-id 稀缺问题的解决办法。
http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/Cluster-ID-issue-on-ssg140/m-p/15312//true
(来自瞻博官方技术员的解答)
By default, NSRP will support up to 8 cluster id‘s and 8 VSD‘s. As noted in the previous entry, you can increase this with the envar, but you need to use them in multiples of 8, and the combination of cluster id‘s and VSD‘s cannot exceed 64. You will need minimum ScreenOS 6.1 to do this.
For example, you can increase the number of cluster id‘s to 16, and number of VSD‘s to 16, using the envar commands:
set envar nsrp-max-cluster=16
set envar nsrp-max-vsd=16
After that, you need to reboot.
以上为官方的回答,简单的来讲就是cluster id 与 vsd-group id 可以增大至最大64需要ScreenOS 6.1以上支持。配置以上命令之后,重启机器之后即可。
目前公司:SSG140支持 SSG140-> set envar nsrp-max-cluster=32
SSG140-> set envar nsrp-max-vsd=16