Juniper-srx210-HA-配置实例及图解

lab@SRX-A#runshowconfiguration|displaysetsetversion10.4R5.5setgroupsnode0systemhost-nameSRX-Asetgroupsnode0interfacesfxp0unit0familyinetaddress10.1.1.1/24setgroupsnode1systemhost-nameSRX-Bsetgroupsnode1interfacesfxp0unit0familyinetaddress10.1.1.2/24setapply-groups${node}setsystemroot-authenticationencrypted-password$1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90setsystemloginuserlabuid2000setsystemloginuserlabclasssuper-usersetsystemloginuserlabauthenticationencrypted-password$1$rGLF.s4X$vD1ssStgk8wAHplBv1eF//setsystemmax-configurations-on-flash5setsystemmax-configuration-rollbacks5setsystemlicenseautoupdateurl{primary:node0}[edit]lab@SRX-A#runshowchassisclusterstatusClusterID:1NodePriorityStatusPreemptManualfailoverRedundancygroup:0,Failovercount:1node0200primarynononode1100secondarynonoRedundancygroup:1,Failovercount:7node0200primaryyesnonode1100secondaryyesno{primary:node0}[edit]lab@SRX-A#runshowchassisclusterinterfacesControllink0name:fxp1Controllinkstatus:UpFabricinterfaces:NameChild-interfaceStatusfab0fe-0/0/5upfab0fab1fe-2/0/5upfab1Fabriclinkstatus:UpRedundant-ethernetInformation:NameStatusRedundancy-groupreth0Up1reth1Up1InterfaceMonitoring:InterfaceWeightStatusRedundancy-groupfe-2/0/2255Up1fe-0/0/2255Up1ge-2/0/0255Up1ge-0/0/0255Up1{primary:node0}[edit]lab@SRX-A#show##Lastchanged:2011-09-0600:38:39UTCversion10.4R5.5;groups{node0{system{host-nameSRX-A;}interfaces{fxp0{unit0{familyinet{address10.1.1.1/24;}}}}}node1{system{host-nameSRX-B;}interfaces{fxp0{unit0{familyinet{address10.1.1.2/24;}}}}}}apply-groups${node};system{root-authentication{encrypted-password$1$2S7i.h.X$bY.IPqwLm/4svg2tunTb90;##SECRET-DATA}login{userlab{uid2000;classsuper-user;authentication{encrypted-password$1$rGLF.s4X$vD1ssStgk8wAHplBv1eF//;##SECRET-DATA}}}max-configurations-on-flash5;max-configuration-rollbacks5;license{autoupdate{url}}}chassis{cluster{reth-count2;redundancy-group0{node0priority200;node1priority100;}redundancy-group1{node0priority200;node1priority100;preempt;interface-monitor{ge-0/0/0weight255;ge-2/0/0weight255;fe-0/0/2weight255;fe-2/0/2weight255;}}}}interfaces{ge-0/0/0{gigether-options{redundant-parentreth0;}}fe-0/0/2{fastether-options{redundant-parentreth1;}}ge-2/0/0{gigether-options{redundant-parentreth0;}}fe-2/0/2{fastether-options{redundant-parentreth1;}}fab0{fabric-options{member-interfaces{fe-0/0/5;}}}fab1{fabric-options{member-interfaces{fe-2/0/5;}}}reth0{redundant-ether-options{redundancy-group1;}unit0{familyinet{address192.168.1.1/24;}}}reth1{redundant-ether-options{redundancy-group1;}unit0{familyinet{address172.56.3.35/16;}}}}routing-options{static{route0.0.0.0/0next-hop172.56.0.1;}}security{zones{security-zoneuntrust{interfaces{reth1.0;}}security-zonetrust{interfaces{reth0.0;}}}policies{from-zonetrustto-zoneuntrust{policyHA-policy{match{source-addressany;destination-addressany;applicationany;}then{permit;}}}}}{primary:node0}[edit]