Juniper SRX 日本語マニュアル

1 2018 Juniper Networks JuniperSRX 7. ChassisCluster CLI 2018 Juniper Networks Chassis Cluster CLI SRX300 JunosOS 22018 8 2018 Juniper Networks Chassis Cluster A node0 B node1 Active/Passive Trust / Untrust ge-0/0/3 ge-0/0/4 ge-1/0/3 ge-1/0/4 Chassis Cluster 3 UntrustZoneTrustZonereth ge-1/0/3ge-0/0/4 ge-1/0 (fab0) = ge-0/0/2 Control (fxp1) = ge-0/0/1 Fabric (fab1) = ge-1/0/2 Control (fxp1) = ge-1/0/1 node0 SRX300 A node1 SRX300 BEX EX EX EX 2018 Juniper Networks Chassis Cluster Chassis Cluster CLI Junos OS UTM Chassis Cluster 4 2018 Juniper Networks Chassis Cluster 5user@srx> show chassis hardware detail Hardware inventory:Item Version Part number Serial number DescriptionChassis CV3316AF1142 user@srx> show version JunosOS Model: srx300 Junos: Software Release [ ]user@srx> show system license License usage:Licenses LicensesLicensesExpiryFeature name used installed neededdynamic-vpn0 2 0 permanentLicenses installed.

2 None 2018 Juniper Networks Chassis Cluster Chassis Cluster Control Fabric Chassis Cluster Secondary SRX300 B ge-0/0/0 ge-1/0/0 6 SRX300 ASRX300 BControl ge-0/0/1 ge-1/0/1 Fabric ge-0/0/2 ge-1/0/2 2018 Juniper Networks Chassis Cluster Chassis Cluster 7 A B configuration user@srx# deleteThis will delete the entire configurationDelete everything under this level? [yes,no] (no) yesuser@srx# set system root-authentication plain-text-passwordNew password: Juniper123 Retype new password: Juniper123user@srx# commituser@srx> set chassis cluster cluster-id 1 node0 reboot A user@srx> set chassis cluster cluster-id 1 node1 reboot B 2018 Juniper Networks Chassis Cluster Chassis Cluster Chassis Cluster Control node ID Primary/Secondary 10 A A Primary {primary.}

3 Node0} configuration SRX300-1 SRX300-2 IP 8user@srx# set groups node0 system host-name SRX300-1user@srx# set groups node0 interfaces fxp0 unit 0 family inetaddress @srx# set groups node1 system host-name SRX300-2user@srx# set groups node1 interfaces fxp0 unit 0 family inetaddress @srx# set apply groups ${node} 2018 Juniper Networks Chassis Cluster Fabric redundancy redundancy-group 0 redundancy-group 1 node node 0 node 1 9user@srx# set chassis cluster redundancy-group 0 node 0 priority 100user@srx# set chassis cluster redundancy-group 0 node 1 priority 1user@srx# set chassis cluster redundancy-group 1 node 0 priority 100user@srx# set chassis cluster redundancy-group 1 node 1 priority 1user@srx# set interfaces fab0 fabric-options member-interfaces ge-0/0/2user@srx# set interfaces fab1 fabric-options member-interfaces ge-1/0/2 2018 Juniper Networks Chassis Cluster interface redundancy-group 1 interface-monitor reth-count reth0 reth1 redundancy-group 1 IP 10user@srx# set chassis cluster reth-count 2user@srx# set interfaces reth0 redundant-ether-options redundancy-group 1user@srx# set interfaces reth0 unit 0 family inetaddress @srx# set interfaces reth1 redundant-ether-options redundancy-group 1user@srx# set interfaces reth1 unit 0 family inetaddress @srx# set chassis cluster redundancy-group 1 interface-monitor ge-0/0/3 weight 255user@srx# set chassis cluster redundancy-group 1 interface-monitor ge-0/0/4 weight 255user@srx# set chassis cluster redundancy-group 1 interface-monitor ge-1/0/3 weight 255user@srx# set chassis cluster

4 Redundancy-group 1 interface-monitor ge-1/0/4 weight 255 2018 Juniper Networks Chassis Cluster reth0 reth1 A B A ge-0/0/3 ge-0/0/4 B ge-1/0/3 ge-1/0/4 11user@srx# set security zones security-zone Untrustinterfaces @srx# set security zones security-zone Trust interfaces @srx# set interfaces ge-0/0/3 gigether-options redundant-parent reth0user@srx# set interfaces ge-1/0/3 gigether-options redundant-parent reth0user@srx# set interfaces ge-0/0/4 gigether-options redundant-parent reth1user@srx# set interfaces ge-1/0/4 gigether-options redundant-parent reth1user@srx# commitnode0:configuration check succeedsnode1:commit completenode0:commit complete 2018 Juniper Networks Chassis Cluster 12user@srx# showgroups {node0 {system {host-name SRX300-1;}interfaces {fxp0 {unit 0 {family inet{address ;}}}}} 2018 Juniper Networks Chassis Cluster 13node1 {system {host-name SRX300-2;}interfaces {fxp0 {unit 0 {family inet{address ;}}}}}}apply-groups "${node}groups"; 2018 Juniper Networks Chassis Cluster 14chassis {cluster {reth-count 2;redundancy-group 0 {node 0 priority 100;node 1 priority 1;}redundancy-group 1 {node 0 priority 100;node 1 priority 1;interface-monitor {ge-0/0/3 weight 255;ge-0/0/4 weight 255;ge-1/0/3 weight 255;ge-1/0/4 weight 255;}}}} 2018 Juniper Networks Chassis Cluster 15security {zones {security-zone Untrust{interfaces { ;}}security-zone Trust {interfaces { ;}}}}interfaces {ge-0/0/3 {gigether-options {redundant-parent reth0;}} 2018 Juniper Networks Chassis Cluster 16ge-0/0/4 {gigether-options {redundant-parent reth1;}}ge-1/0/3 {gigether-options {redundant-parent reth0;}}ge-1/0/4 {gigether-options {redundant-parent reth1;}}fab0 {fabric-options {member-interfaces {ge-0/0/2;}} 2018 Juniper Networks Chassis Cluster 17fab1 {fabric-options {member-interfaces {ge-1/0/2.}}}}}

5 }}}reth0 {redundant-ether-options {redundancy-group 1;}unit 0 {family inet{address ;}}} 2018 Juniper Networks Chassis Cluster 18reth1 {redundant-ether-options {redundancy-group 1;}unit 0 {family inet{address ;}}}} 2018 Juniper Networks Chassis Cluster 19user@srx> show chassis cluster status user@srx> show chassis cluster interfaces user@srx> show chassis cluster statistics user@srx> show chassis cluster control-plane statistics user@srx> show chassis cluster data-plane statistics user@srx> show chassis cluster status redundancy-group 1 redundancy-group 1