Juniper-srx210-HA-配置實(shí)例及圖解

1、精選優(yōu)質(zhì)文檔-傾情為你奉上精選優(yōu)質(zhì)文檔-傾情為你奉上專心-專注-專業(yè)專心-專注-專業(yè)精選優(yōu)質(zhì)文檔-傾情為你奉上專心-專注-專業(yè)labSRX-A# run show configuration | display set set version 10.4R5.5set groups node0 system host-name SRX-Aset groups node0 interfaces fxp0 unit 0 family inet address /24set groups node1 system host-name SRX-Bset groups node1 interfaces f

2、xp0 unit 0 family inet address /24set apply-groups $nodeset system root-authentication encrypted-password $1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90set system login user lab uid 2000set system login user lab class super-userset system login user lab authentication encrypted-password $1$rGLF.s4X$vD1ssStgk8wA

3、HplBv1eF/set system max-configurations-on-flash 5set system max-configuration-rollbacks 5set system license autoupdate url /junos/key_retrievalset chassis cluster reth-count 2set chassis cluster redundancy-group 0 node 0 priority 200set chassis cluster redundancy-group 0 node 1 priority 100set chass

4、is cluster redundancy-group 1 node 0 priority 200set chassis cluster redundancy-group 1 node 1 priority 100set chassis cluster redundancy-group 1 preemptset chassis cluster redundancy-group 1 interface-monitor ge-0/0/0 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-2/0/0 weigh

5、t 255set chassis cluster redundancy-group 1 interface-monitor fe-0/0/2 weight 255set chassis cluster redundancy-group 1 interface-monitor fe-2/0/2 weight 255set interfaces ge-0/0/0 gigether-options redundant-parent reth0set interfaces fe-0/0/2 fastether-options redundant-parent reth1set interfaces g

6、e-2/0/0 gigether-options redundant-parent reth0set interfaces fe-2/0/2 fastether-options redundant-parent reth1set interfaces fab0 fabric-options member-interfaces fe-0/0/5set interfaces fab1 fabric-options member-interfaces fe-2/0/5set interfaces reth0 redundant-ether-options redundancy-group 1set

7、interfaces reth0 unit 0 family inet address /24set interfaces reth1 redundant-ether-options redundancy-group 1set interfaces reth1 unit 0 family inet address 5/16set routing-options static route /0 next-hop set security zones security-zone untrust interfaces reth1.0set security zones security-zone t

8、rust interfaces reth0.0set security policies from-zone trust to-zone untrust policy HA-policy match source-address anyset security policies from-zone trust to-zone untrust policy HA-policy match destination-address anyset security policies from-zone trust to-zone untrust policy HA-policy match appli

9、cation anyset security policies from-zone trust to-zone untrust policy HA-policy then permit primary:node0editlabSRX-A# run show chassis cluster status Cluster ID: 1 Node Priority Status Preempt Manual failoverRedundancy group: 0 , Failover count: 1 node0 200 primary no no node1 100 secondary no no

10、Redundancy group: 1 , Failover count: 7 node0 200 primary yes no node1 100 secondary yes no primary:node0editlabSRX-A# run show chassis cluster interfaces Control link 0 name: fxp1Control link status: UpFabric interfaces: Name Child-interface Status fab0 fe-0/0/5 up fab0 fab1 fe-2/0/5 up fab1 Fabric

11、 link status: UpRedundant-ethernet Information: Name Status Redundancy-group reth0 Up 1 reth1 Up 1 Interface Monitoring: Interface Weight Status Redundancy-group fe-2/0/2 255 Up 1 fe-0/0/2 255 Up 1 ge-2/0/0 255 Up 1 ge-0/0/0 255 Up 1 primary:node0editlabSRX-A# show # Last changed: 2011-09-06 00:38:3

12、9 UTCversion 10.4R5.5;groups node0 system host-name SRX-A; interfaces fxp0 unit 0 family inet address /24; node1 system host-name SRX-B; interfaces fxp0 unit 0 family inet address /24; apply-groups $node;system root-authentication encrypted-password $1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90; # SECRET-DATA

13、login user lab uid 2000; class super-user; authentication encrypted-password $1$rGLF.s4X$vD1ssStgk8wAHplBv1eF/; # SECRET-DATA max-configurations-on-flash 5; max-configuration-rollbacks 5; license autoupdate url /junos/key_retrieval; chassis cluster reth-count 2; redundancy-group 0 node 0 priority 20

14、0; node 1 priority 100; redundancy-group 1 node 0 priority 200; node 1 priority 100; preempt; interface-monitor ge-0/0/0 weight 255; ge-2/0/0 weight 255; fe-0/0/2 weight 255; fe-2/0/2 weight 255; interfaces ge-0/0/0 gigether-options redundant-parent reth0; fe-0/0/2 fastether-options redundant-parent

15、 reth1; ge-2/0/0 gigether-options redundant-parent reth0; fe-2/0/2 fastether-options redundant-parent reth1; fab0 fabric-options member-interfaces fe-0/0/5; fab1 fabric-options member-interfaces fe-2/0/5; reth0 redundant-ether-options redundancy-group 1; unit 0 family inet address /24; reth1 redundant-ether-options redundancy-group 1; unit 0 family inet address 5/16; routing-options static route /0 next-hop ; security z