SRX5800configHA文档格式.docx

1、userhost# set interfaces fab1 fabric-options member-interfaces ge-23/3/04. 配置Redundancy GroupRG0 固定用于主控板RE 切换，RG1 以后用于redundant interface ，RE 切换独立于接口切换set chassis cluster reth-count 10 （指定整个Cluster 中redundant ethernet interface 最多数量）userhost# set chassis cluster reth-count 2userhost# set chassis clu

2、ster redundancy-group 0 node 0 priority129userhost# set chassis cluster redundancy-group 0 node 1 priority 128userhost# set chassis cluster redundancy-group 1 node 0 priority 129userhost# set chassis cluster redundancy-group 1 node 1 priority 1285. 每个机箱的个性化配置，便于对两台设备的区分与管理 userhost# set groups node0

3、 system host-name SRX5800-Auserhost# set groups node0 interfaces fxp0 unit 0 family inet address 10.3.5.1/24userhost# set groups node0 system backup-router 10.3.5.254destination 0.0.0.0/0userhost# set groups node1 system host-name SRX5800-Buserhost# set groups node1 interfaces fxp0 unit 0 family ine

4、t address 10.3.5.2/24userhost# set groups node1 system backup-router 10.3.5.254userhost# set apply-groups “$node”6. 配置Redundant Ethernet Interfaceuserhost# set interfaces xe-6/0/0 gigether-options redundant-parent reth0userhost# set interfaces xe-6/1/0 gigether-options redundant-parent reth1userhost

5、# set interfaces xe-18/0/0 gigether-options redundant-parent reth0userhost# set interfaces xe-18/1/0 gigether-options redundant-parent reth1userhost# set interfaces reth0 redundant-ether-options redundancy-group 1userhost# set interfaces reth0 unit 0 family inet address 1.1.1.1/24userhost# set inter

6、faces reth1 redundant-ether-options redundancy-group 1userhost# set interfaces reth1 unit 0 family inet address 2.2.2.1/24userhost# set security zones security-zone untrust interfaces reth1.0userhost# set security zones security-zone trust interfaces reth0.07. 配置Interface Monitoring，被监控的接口Down 掉后，RG

7、1 将自动进行主备切换userhost# set chassis cluster redundancy-group 1 interface-monitor xe-6/0/0 weight 255userhost# set chassis cluster redundancy-group 1 interface-monitor xe-6/1/0 weight 255userhost# set chassis cluster redundancy-group 1 interface-monitor xe-18/0/0 weight 255userhost# set chassis cluster

8、redundancy-group 1 interface-monitor xe-18/1/0 weight 255userhost# set chassis cluster control-link-recovery查看维护HA状态结果：userhost show chassis cluster statusCluster ID: 1Node Priority Status Preempt Manual failoverRedundancy group: 0 , Failover count: node0 129 primary no no node1 128 secondary no no

9、1 , Failover count: node1 128 secondary no noprimary:node0 show chassis cluster interfacesControl link name: fxp1Redundant-ethernet Information: Name Status Redundancy-group reth0 Up 1 reth1 Up 1Interface Monitoring: Interface Weight Status Redundancy-group xe-6/0/0 255 Up 1 xe-6/1/0 255 Up 1 xe-18/

10、0/0 255 Up 1 xe-18/1/0 255 Up 1 show configurationversion x.xx.x;groups node0 system host-name SRX5800A; backup-router 10.3.5.254 destination 0.0.0.0/0; interfaces fxp0 unit 0 family inet address 10.3.5.1/24; node1 B; address 10.3.5.2/24;apply-groups $node;system root-authentication encrypted-passwo

11、rd $1$zTMjraKG$qU8rjxoHzC6Y/WDmYpR9r.chassis cluster control-link-recovery; reth-count 2; control-ports fpc 1 port 0; fpc 13 port 0; redundancy-group 0 node 0 priority 129; node 1 priority 128; redundancy-group 1 interface-monitor xe6/0/0 weight 255; xe6/1/0 weight 255; xe18/0/0 weight 255; xe18/1/0

12、 weight 255;interfaces xe6/0/0 gigetheroptions redundantparent reth0; xe6/1/0 redundantparent reth1; xe18/0/0 xe18/1/0 fab0 fabricoptions memberinterfaces ge11/3/0; fab1 ge23/3/0; reth0 redundantetheroptions redundancygroup 1; family inet address 1.1.1.1/24; reth1 address 2.2.2.1/24;security zones securityzone trust hostinboundtraffic systemservices all; interfaces reth0.0; securityzone untrust reth1.0; policies fromzone trust tozone untrust policy 1 match sourceaddress any; destinationaddress any; application any; then permit;