Juniper-srx210-HA-配置实例及图解(共7页)

1、labSRX-A# run show configuration | display set set version 10.4R5.5set groups node0 system host-name SRX-Aset groups node0 interfaces fxp0 unit 0 family inet address 10.1.1.1/24set groups node1 system host-name SRX-Bset groups node1 interfaces fxp0 unit 0 family inet address 10.1.1.2/24set apply-gro

2、ups $nodeset system root-authentication encrypted-password $1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90set system login user lab uid 2000set system login user lab class super-userset system login user lab authentication encrypted-password $1$rGLF.s4X$vD1ssStgk8wAHplBv1eF/set system max-configurations-on-flash

3、 5set system max-configuration-rollbacks 5set system license autoupdate url set chassis cluster reth-count 2set chassis cluster redundancy-group 0 node 0 priority 200set chassis cluster redundancy-group 0 node 1 priority 100set chassis cluster redundancy-group 1 node 0 priority 200set chassis cluste

4、r redundancy-group 1 node 1 priority 100set chassis cluster redundancy-group 1 preemptset chassis cluster redundancy-group 1 interface-monitor ge-0/0/0 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-2/0/0 weight 255set chassis cluster redundancy-group 1 interface-monitor fe-0/

5、0/2 weight 255set chassis cluster redundancy-group 1 interface-monitor fe-2/0/2 weight 255set interfaces ge-0/0/0 gigether-options redundant-parent reth0set interfaces fe-0/0/2 fastether-options redundant-parent reth1set interfaces ge-2/0/0 gigether-options redundant-parent reth0set interfaces fe-2/

6、0/2 fastether-options redundant-parent reth1set interfaces fab0 fabric-options member-interfaces fe-0/0/5set interfaces fab1 fabric-options member-interfaces fe-2/0/5set interfaces reth0 redundant-ether-options redundancy-group 1set interfaces reth0 unit 0 family inet address 192.168.1.1/24set inter

7、faces reth1 redundant-ether-options redundancy-group 1set interfaces reth1 unit 0 family inet address 172.56.3.35/16set routing-options static route 0.0.0.0/0 next-hop 172.56.0.1set security zones security-zone untrust interfaces reth1.0set security zones security-zone trust interfaces reth0.0set se

8、curity policies from-zone trust to-zone untrust policy HA-policy match source-address anyset security policies from-zone trust to-zone untrust policy HA-policy match destination-address anyset security policies from-zone trust to-zone untrust policy HA-policy match application anyset security polici

9、es from-zone trust to-zone untrust policy HA-policy then permit primary:node0editlabSRX-A# run show chassis cluster status Cluster ID: 1 Node Priority Status Preempt Manual failoverRedundancy group: 0 , Failover count: 1 node0 200 primary no no node1 100 secondary no no Redundancy group: 1 , Failove

10、r count: 7 node0 200 primary yes no node1 100 secondary yes no primary:node0editlabSRX-A# run show chassis cluster interfaces Control link 0 name: fxp1Control link status: UpFabric interfaces: Name Child-interface Status fab0 fe-0/0/5 up fab0 fab1 fe-2/0/5 up fab1 Fabric link status: UpRedundant-eth

11、ernet Information: Name Status Redundancy-group reth0 Up 1 reth1 Up 1 Interface Monitoring: Interface Weight Status Redundancy-group fe-2/0/2 255 Up 1 fe-0/0/2 255 Up 1 ge-2/0/0 255 Up 1 ge-0/0/0 255 Up 1 primary:node0editlabSRX-A# show # Last changed: 2011-09-06 00:38:39 UTCversion 10.4R5.5;groups

12、node0 system host-name SRX-A; interfaces fxp0 unit 0 family inet address 10.1.1.1/24; node1 system host-name SRX-B; interfaces fxp0 unit 0 family inet address 10.1.1.2/24; apply-groups $node;system root-authentication encrypted-password $1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90; # SECRET-DATA login user la

13、b uid 2000; class super-user; authentication encrypted-password $1$rGLF.s4X$vD1ssStgk8wAHplBv1eF/; # SECRET-DATA max-configurations-on-flash 5; max-configuration-rollbacks 5; license autoupdate url chassis cluster reth-count 2; redundancy-group 0 node 0 priority 200; node 1 priority 100; redundancy-

14、group 1 node 0 priority 200; node 1 priority 100; preempt; interface-monitor ge-0/0/0 weight 255; ge-2/0/0 weight 255; fe-0/0/2 weight 255; fe-2/0/2 weight 255; interfaces ge-0/0/0 gigether-options redundant-parent reth0; fe-0/0/2 fastether-options redundant-parent reth1; ge-2/0/0 gigether-options r

15、edundant-parent reth0; fe-2/0/2 fastether-options redundant-parent reth1; fab0 fabric-options member-interfaces fe-0/0/5; fab1 fabric-options member-interfaces fe-2/0/5; reth0 redundant-ether-options redundancy-group 1; unit 0 family inet address 192.168.1.1/24; reth1 redundant-ether-options redundancy-group 1; unit 0 family inet address 172.56.3.35/16; routing-options static route 0.0.0.0/0 next-hop 172.56.0.1; security z