In an active/passive SRX cluster you may see duplicates of the following NAT syslog messages from an SRX chassis cluster.
RT_SRC_NAT_PBA_ALLOC_LS
RT_SRC_NAT_PBA_RELEASE_LS
Both nodes of the SRX are designed to generate these log messages. In an A/A setup, the ports will be different per node and so each node will send a separate log for the respective port assignment.
In an A/P setup, the port pool is shared and so these will arrive as redundant syslog messages.
The cluster can be set to send only from the active node with the following configuration knob:
set security nat source pool <pool-name> port block-allocation log on_primary_node
2024-11-29 : Article Created