SRX5800configHA文档格式.docx

SRX5800configHA文档格式.docx

《SRX5800configHA文档格式.docx》由会员分享，可在线阅读，更多相关《SRX5800configHA文档格式.docx（10页珍藏版）》请在冰点文库上搜索。

user@host#setinterfacesfab1fabric-optionsmember-interfacesge-23/3/0

4.配置RedundancyGroup

RG0固定用于主控板RE切换，RG1以后用于redundantinterface，RE

切换独立于接口切换

setchassisclusterreth-count10（指定整个Cluster中redundant

ethernetinterface最多数量）

user@host#setchassisclusterreth-count2

user@host#setchassisclusterredundancy-group0node0priority129

user@host#setchassisclusterredundancy-group0node1priority128

user@host#setchassisclusterredundancy-group1node0priority129

user@host#setchassisclusterredundancy-group1node1priority128

5.每个机箱的个性化配置，便于对两台设备的区分与管理

user@host#setgroupsnode0systemhost-nameSRX5800-A

user@host#setgroupsnode0interfacesfxp0unit0familyinetaddress10.3.5.1/24

user@host#setgroupsnode0systembackup-router10.3.5.254

destination0.0.0.0/0

user@host#setgroupsnode1systemhost-nameSRX5800-B

user@host#setgroupsnode1interfacesfxp0unit0familyinetaddress10.3.5.2/24

user@host#setgroupsnode1systembackup-router10.3.5.254

user@host#setapply-groups“${node}”

6.配置RedundantEthernetInterface

user@host#setinterfacesxe-6/0/0gigether-optionsredundant-parentreth0

user@host#setinterfacesxe-6/1/0gigether-optionsredundant-parentreth1

user@host#setinterfacesxe-18/0/0gigether-optionsredundant-parentreth0

user@host#setinterfacesxe-18/1/0gigether-optionsredundant-parentreth1

user@host#setinterfacesreth0redundant-ether-optionsredundancy-group1

user@host#setinterfacesreth0unit0familyinetaddress1.1.1.1/24

user@host#setinterfacesreth1redundant-ether-optionsredundancy-group1

user@host#setinterfacesreth1unit0familyinetaddress2.2.2.1/24

user@host#setsecurityzonessecurity-zoneuntrustinterfacesreth1.0

user@host#setsecurityzonessecurity-zonetrustinterfacesreth0.0

7.配置InterfaceMonitoring，被监控的接口Down掉后，RG1将自动进行主备切换

user@host#setchassisclusterredundancy-group1interface-monitorxe-6/0/0weight255

user@host#setchassisclusterredundancy-group1interface-monitorxe-6/1/0weight255

user@host#setchassisclusterredundancy-group1interface-monitorxe-18/0/0weight255

user@host#setchassisclusterredundancy-group1interface-monitorxe-18/1/0weight255

user@host#setchassisclustercontrol-link-recovery

查看维护HA状态结果：

user@host>

showchassisclusterstatus

ClusterID:

1

NodePriorityStatusPreemptManualfailover

Redundancygroup:

0,Failovercount:

node0129primarynono

node1128secondarynono

1,Failovercount:

node1128secondarynono

{primary:

node0}

showchassisclusterinterfaces

Controllinkname:

fxp1

Redundant-ethernetInformation:

NameStatusRedundancy-group

reth0Up1

reth1Up1

InterfaceMonitoring:

InterfaceWeightStatusRedundancy-group

xe-6/0/0255Up1

xe-6/1/0255Up1

xe-18/0/0255Up1

xe-18/1/0255Up1

showconfiguration

versionx.xx.x;

groups{

node0{

system{

host-nameSRX5800¬

A;

backup-router10.3.5.254destination0.0.0.0/0;

}

interfaces{

fxp0{

unit0{

familyinet{

address10.3.5.1/24;

}

node1{

B;

address10.3.5.2/24;

}

apply-groups"

${node}"

;

system{

root-authentication{

encrypted-password"

$1$zTMjraKG$qU8rjxoHzC6Y/WDmYpR9r."

chassis{

cluster{

control-link-recovery;

reth-count2;

control-ports{

fpc1port0;

fpc13port0;

redundancy-group0{

node0priority129;

node1priority128;

redundancy-group1{

interface-monitor{

xe–6/0/0weight255;

xe–6/1/0weight255;

xe–18/0/0weight255;

xe–18/1/0weight255;

interfaces{

xe–6/0/0{

gigether–options{

redundant–parentreth0;

xe–6/1/0{

redundant–parentreth1;

xe–18/0/0{

xe–18/1/0{

fab0{

fabric–options{

member–interfaces{

ge–11/3/0;

fab1{

ge–23/3/0;

reth0{

redundant–ether–options{

redundancy–group1;

familyinet{

address1.1.1.1/24;

reth1{

address2.2.2.1/24;

security{

zones{

security–zonetrust{

host–inbound–traffic{

system–services{

all;

interfaces{

reth0.0;

security–zoneuntrust{

reth1.0;

policies{

from–zonetrustto–zoneuntrust{

policy1{

match{

source–addressany;

destination–addressany;

applicationany;

then{

permit;