《juniper srx ha 配置实例》由会员分享,可在线阅读,更多相关《juniper srx ha 配置实例(11页珍藏版)》请在金锄头文库上搜索。
1、Juniper SRX HA 配置实例文档查看须知: .3测试拓扑: .3一 路由模式 HA: .4配置: .4验证: .4配置解析: .5二 透明模式 HA(Access 接口) .6配置: .6验证: .7配置解析: .8三 透明模式 HA(Trunk 接口) .9配置: .9验证: .10配置解析: .10注意点 .12文档查看须知:测试环境:SRX 220H 两台配置须知:SRX 220H 默认带外管理口 Ge-0/0/6 控制口:Ge-0/0/7 数据同步口:Ge-0/0/1使用集群则集群后接口标示为:Ge-0/0/0-7; Ge-3/0/0-7不同型号集群后接口显示不同,详情见官方
2、文档 拓扑对应 IP:G-0/0/3:192.168.3.1/24G-0/0/4:192.168.4.1/24G-0/0/5:192.168.5.1/24MGT:10.10.30.189-190/24F0/0:192.168.4.2/24F0/1:192.168.6.1/24 (模拟遥远互联网)测试拓扑:一 路由模式 HA:配置:On device A:set chassis cluster cluster-id 1 node 0 reboot On device B:set chassis cluster cluster-id 1 node 1 rebootOn device A:set g
3、roups node0 system host-name SRX-Primaryset groups node0 interfaces fxp0 unit 0 family inet address 10.10.30.189/24 set groups node1 system host-name SRX-Secondbyset groups node1 interfaces fxp0 unit 0 family inet address 10.10.30.190/24 set apply-groups $nodeset interfaces fab0 fabric-options membe
4、r-interfaces ge-0/0/1 set interfaces fab1 fabric-options member-interfaces ge-3/0/1 set chassis cluster redundancy-group 0 node 0 priority 100 set chassis cluster redundancy-group 0 node 1 priority 1 set chassis cluster redundancy-group 1 node 0 priority 100set chassis cluster redundancy-group 1 nod
5、e 1 priority 1set chassis cluster redundancy-group 1 interface-monitor ge-0/0/3 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-0/0/4 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-0/0/5 weight 255set chassis cluster redundancy-group 1 interface-monitor g
6、e-3/0/3 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-3/0/4 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-3/0/5 weight 255set chassis cluster reth-count 3set interfaces ge-0/0/3 gigether-options redundant-parent reth0 set interfaces ge-3/0/3 gigether-
7、options redundant-parent reth0 set interfaces reth0 redundant-ether-options redundancy-group 1 set interfaces reth0 unit 0 family inet address 192.168.3.1/24set interfaces ge-0/0/4 gigether-options redundant-parent reth1 set interfaces ge-3/0/4 gigether-options redundant-parent reth1 set interfaces
8、reth1 redundant-ether-options redundancy-group 1 set interfaces reth1 unit 0 family inet address 192.168.4.1/24set interfaces ge-0/0/5 gigether-options redundant-parent reth2 set interfaces ge-3/0/5 gigether-options redundant-parent reth2 set interfaces reth2 redundant-ether-options redundancy-group
9、 1set interfaces reth2 unit 0 family inet address 192.168.5.1/24set security zones security-zone trust interfaces reth0.0 set security zones security-zone untrust interfaces reth1.0set security zones security-zone DMZ interfaces reth2.0验证:查看双机状态rootSRX-Primary show chassis cluster statusCluster ID:
10、1Node Priority Status Preempt Manual failoverRedundancy group: 0 , Failover count: 1node0 100 primary no nonode1 1 secondary no noRedundancy group: 1 , Failover count: 1node0 100 primary no nonode1 1 secondary no no测试主备切换;查看当前设备主备情况;配置解析:On device A: set chassis cluster cluster-id 1 node 0 reboot /定义 clus