Juniper-srx210-HA-配置实例及图解

1、labSRX-A# run show configuration | display set set version 10.4R5.5set groups node0 system host-name SRX-Aset groups node0 interfaces fxp0 unit 0 family inet address /24set groups node1 system host-name SRX-Bset groups node1 interfaces fxp0 unit 0 family inet address /24set apply-gro

2、ups $nodeset system root-authentication encrypted-password $1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90set system login user lab uid 2000set system login user lab class super-userset system login user lab authentication encrypted-password $1$rGLF.s4X$vD1ssStgk8wAHplBv1eF/set system max-configurations-on-flash

3、 5set system max-configuration-rollbacks 5set system license autoupdate url /junos/key_retrievalset chassis cluster reth-count 2set chassis cluster redundancy-group 0 node 0 priority 200set chassis cluster redundancy-group 0 node 1 priority 100set chassis cluster redundancy-gro

4、up 1 node 0 priority 200set chassis cluster redundancy-group 1 node 1 priority 100set chassis cluster redundancy-group 1 preemptset chassis cluster redundancy-group 1 interface-monitor ge-0/0/0 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-2/0/0 weight 255set chassis cluster

5、redundancy-group 1 interface-monitor fe-0/0/2 weight 255set chassis cluster redundancy-group 1 interface-monitor fe-2/0/2 weight 255set interfaces ge-0/0/0 gigether-options redundant-parent reth0set interfaces fe-0/0/2 fastether-options redundant-parent reth1set interfaces ge-2/0/0 gigether-options

6、redundant-parent reth0set interfaces fe-2/0/2 fastether-options redundant-parent reth1set interfaces fab0 fabric-options member-interfaces fe-0/0/5set interfaces fab1 fabric-options member-interfaces fe-2/0/5set interfaces reth0 redundant-ether-options redundancy-group 1set interfaces reth0 unit 0 f

7、amily inet address /24set interfaces reth1 redundant-ether-options redundancy-group 1set interfaces reth1 unit 0 family inet address 5/16set routing-options static route /0 next-hop set security zones security-zone untrust interfaces reth1.0set security zones se

8、curity-zone trust interfaces reth0.0set security policies from-zone trust to-zone untrust policy HA-policy match source-address anyset security policies from-zone trust to-zone untrust policy HA-policy match destination-address anyset security policies from-zone trust to-zone untrust policy HA-polic

9、y match application anyset security policies from-zone trust to-zone untrust policy HA-policy then permit primary:node0editlabSRX-A# run show chassis cluster status Cluster ID: 1 Node Priority Status Preempt Manual failoverRedundancy group: 0 , Failover count: 1 node0 200 primary no no node1 100 sec

10、ondary no no Redundancy group: 1 , Failover count: 7 node0 200 primary yes no node1 100 secondary yes no primary:node0editlabSRX-A# run show chassis cluster interfaces Control link 0 name: fxp1Control link status: UpFabric interfaces: Name Child-interface Status fab0 fe-0/0/5 up fab0 fab1 fe-2/0/5 u

11、p fab1 Fabric link status: UpRedundant-ethernet Information: Name Status Redundancy-group reth0 Up 1 reth1 Up 1 Interface Monitoring: Interface Weight Status Redundancy-group fe-2/0/2 255 Up 1 fe-0/0/2 255 Up 1 ge-2/0/0 255 Up 1 ge-0/0/0 255 Up 1 primary:node0editlabSRX-A# show # Last changed: 2011-

12、09-06 00:38:39 UTCversion 10.4R5.5;groups node0 system host-name SRX-A; interfaces fxp0 unit 0 family inet address /24; node1 system host-name SRX-B; interfaces fxp0 unit 0 family inet address /24; apply-groups $node;system root-authentication encrypted-password $1$2S7i.h.X$bY.IPqwLm

13、/4svg2tunTb90; # SECRET-DATA login user lab uid 2000; class super-user; authentication encrypted-password $1$rGLF.s4X$vD1ssStgk8wAHplBv1eF/; # SECRET-DATA max-configurations-on-flash 5; max-configuration-rollbacks 5; license autoupdate url /junos/key_retrieval; chassis cluster

14、reth-count 2; redundancy-group 0 node 0 priority 200; node 1 priority 100; redundancy-group 1 node 0 priority 200; node 1 priority 100; preempt; interface-monitor ge-0/0/0 weight 255; ge-2/0/0 weight 255; fe-0/0/2 weight 255; fe-2/0/2 weight 255; interfaces ge-0/0/0 gigether-options redundant-parent

15、 reth0; fe-0/0/2 fastether-options redundant-parent reth1; ge-2/0/0 gigether-options redundant-parent reth0; fe-2/0/2 fastether-options redundant-parent reth1; fab0 fabric-options member-interfaces fe-0/0/5; fab1 fabric-options member-interfaces fe-2/0/5; reth0 redundant-ether-options redundancy-group 1; unit 0 family inet address /24; reth1 redundant-ether-options redundancy-group 1; unit 0 family inet address 5/16; routing-options static route /0 next-hop ; securi