SRX5800configHA.docx
- 文档编号:2775374
- 上传时间:2023-05-04
- 格式:DOCX
- 页数:10
- 大小:147.48KB
SRX5800configHA.docx
《SRX5800configHA.docx》由会员分享,可在线阅读,更多相关《SRX5800configHA.docx(10页珍藏版)》请在冰点文库上搜索。
SRX5800configHA
SRX5800ConfigHA
网络拓扑示意图:
配置SRX5800HA步骤如下:
l.配置Clusterid和Nodeid
Onnode0:
user@host>setchassisclustercluster-id1node0reboot
Onnode1:
user@host>setchassisclustercluster-id1node1reboot
2.指定ControlPort(如果主控板RE上有固定control-ports,则无需指定):
user@host#setchassisclustercontrol-portsfpc1port0
user@host#setchassisclustercontrol-portsfpc13port0
3.指定FabricLinkPort
user@host#setinterfacesfab0fabric-optionsmember-interfacesge-11/3/0
user@host#setinterfacesfab1fabric-optionsmember-interfacesge-23/3/0
4.配置RedundancyGroup
RG0固定用于主控板RE切换,RG1以后用于redundantinterface,RE
切换独立于接口切换
setchassisclusterreth-count10(指定整个Cluster中redundant
ethernetinterface最多数量)
user@host#setchassisclusterreth-count2
user@host#setchassisclusterredundancy-group0node0priority129
user@host#setchassisclusterredundancy-group0node1priority128
user@host#setchassisclusterredundancy-group1node0priority129
user@host#setchassisclusterredundancy-group1node1priority128
5.每个机箱的个性化配置,便于对两台设备的区分与管理
user@host#setgroupsnode0systemhost-nameSRX5800-A
user@host#setgroupsnode0interfacesfxp0unit0familyinetaddress10.3.5.1/24
user@host#setgroupsnode0systembackup-router10.3.5.254
destination0.0.0.0/0
user@host#setgroupsnode1systemhost-nameSRX5800-B
user@host#setgroupsnode1interfacesfxp0unit0familyinetaddress10.3.5.2/24
user@host#setgroupsnode1systembackup-router10.3.5.254
destination0.0.0.0/0
user@host#setapply-groups“${node}”
6.配置RedundantEthernetInterface
user@host#setinterfacesxe-6/0/0gigether-optionsredundant-parentreth0
user@host#setinterfacesxe-6/1/0gigether-optionsredundant-parentreth1
user@host#setinterfacesxe-18/0/0gigether-optionsredundant-parentreth0
user@host#setinterfacesxe-18/1/0gigether-optionsredundant-parentreth1
user@host#setinterfacesreth0redundant-ether-optionsredundancy-group1
user@host#setinterfacesreth0unit0familyinetaddress1.1.1.1/24
user@host#setinterfacesreth1redundant-ether-optionsredundancy-group1
user@host#setinterfacesreth1unit0familyinetaddress2.2.2.1/24
user@host#setsecurityzonessecurity-zoneuntrustinterfacesreth1.0
user@host#setsecurityzonessecurity-zonetrustinterfacesreth0.0
7.配置InterfaceMonitoring,被监控的接口Down掉后,RG1将自动进行主备切换
user@host#setchassisclusterredundancy-group1interface-monitorxe-6/0/0weight255
user@host#setchassisclusterredundancy-group1interface-monitorxe-6/1/0weight255
user@host#setchassisclusterredundancy-group1interface-monitorxe-18/0/0weight255
user@host#setchassisclusterredundancy-group1interface-monitorxe-18/1/0weight255
user@host#setchassisclustercontrol-link-recovery
查看维护HA状态结果:
user@host>showchassisclusterstatus
ClusterID:
1
NodePriorityStatusPreemptManualfailover
Redundancygroup:
0,Failovercount:
1
node0129primarynono
node1128secondarynono
Redundancygroup:
1,Failovercount:
1
node0129primarynono
node1128secondarynono
{primary:
node0}
user@host>showchassisclusterinterfaces
Controllinkname:
fxp1
Redundant-ethernetInformation:
NameStatusRedundancy-group
reth0Up1
reth1Up1
InterfaceMonitoring:
InterfaceWeightStatusRedundancy-group
xe-6/0/0255Up1
xe-6/1/0255Up1
xe-18/0/0255Up1
xe-18/1/0255Up1
user@host>showconfiguration
versionx.xx.x;
groups{
node0{
system{
host-nameSRX5800¬A;
backup-router10.3.5.254destination0.0.0.0/0;
}
interfaces{
fxp0{
unit0{
familyinet{
address10.3.5.1/24;
}
}
}
}
}
node1{
system{
host-nameSRX5800¬B;
backup-router10.3.5.254destination0.0.0.0/0;
}
interfaces{
fxp0{
unit0{
familyinet{
address10.3.5.2/24;
}
}
}
}
}
}
apply-groups"${node}";
system{
root-authentication{
encrypted-password"$1$zTMjraKG$qU8rjxoHzC6Y/WDmYpR9r.";
}
chassis{
cluster{
control-link-recovery;
reth-count2;
control-ports{
fpc1port0;
fpc13port0;
}
redundancy-group0{
node0priority129;
node1priority128;
}
redundancy-group1{
node0priority129;
node1priority128;
interface-monitor{
xe–6/0/0weight255;
xe–6/1/0weight255;
xe–18/0/0weight255;
xe–18/1/0weight255;
}
}
}
}
interfaces{
xe–6/0/0{
gigether–options{
redundant–parentreth0;
}
}
xe–6/1/0{
gigether–options{
redundant–parentreth1;
}
}
xe–18/0/0{
gigether–options{
redundant–parentreth0;
}
}
xe–18/1/0{
gigether–options{
redundant–parentreth1;
}
}
fab0{
fabric–options{
member–interfaces{
ge–11/3/0;
}
}
}
fab1{
fabric–options{
member–interfaces{
ge–23/3/0;
}
}
}
reth0{
redundant–ether–options{
redundancy–group1;
}
unit0{
familyinet{
address1.1.1.1/24;
}
}
}
reth1{
redundant–ether–options{
redundancy–group1;
}
unit0{
familyinet{
address2.2.2.1/24;
}
}
}
}
security{
zones{
security–zonetrust{
host–inbound–traffic{
system–services{
all;
}
}
interfaces{
reth0.0;
}
}
security–zoneuntrust{
interfaces{
reth1.0;
}
}
}
policies{
from–zonetrustto–zoneuntrust{
policy1{
match{
source–addressany;
destination–addressany;
applicationany;
}
then{
permit;
}
}
}
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- SRX5800configHA