error: the routing subsystem is not running

If you haven’t seen this error message, you will see one day when you are dealing with SRX chasssis clusters.
It may baffle you having a firewall in which you can’t display routes. It is all because of the fact that chassis cluster considers two nodes as a single data plane and routing functionality is handled on the primary node or let´s say the node having the active routing engine.

First of all this error message is by design. Don’t panic! The question is how we can reach a network that we need to? In this case “backup-router” configuration comes into play. Here is groups configuration from my SRX cluster. With this statement secondary node, can reach network 192.168.103.0/24 via the gateway 10.200.200.3. Can we forward all network ranges to this gateway? We can but according to KB http://kb.juniper.net/KB15580 this is not recommended.

You have a feedback?