当前位置:首页 >> 信息与通信 >>

juniper srx210 HA 配置实例


## Last changed: 2011-01-18 06:48:18 UTC version 10.4R1.9; groups { node0 { system { host-name srxA; } interfaces { fxp0 { unit 0 { family inet { address 192.168.10.10/24; } } } } } node1 { s

ystem { host-name srxB; } interfaces { fxp0 { unit 0 { family inet { address 192.168.10.11/24; } } } } } } apply-groups "${node}"; system { root-authentication { encrypted-password "$1$cEQaYlmu$faHrnyawm5oh6Y1H.A2mm0"; ## SECRET-DATA } name-server { 208.67.222.222; 208.67.220.220; } services { ssh;

telnet; xnm-clear-text; web-management { http { interface [ reth0.0 reth1.0 vlan.0 fxp0.0 ]; } https { system-generated-certificate; interface vlan.0; } } dhcp { router { 192.168.2.1; } pool 192.168.2.0/24 { address-range low 192.168.2.10 high 192.168.2.20; } propagate-settings reth1; } } syslog { archive size 100k files 3; user * { any emergency; } file messages { any critical; authorization info; } file interactive-commands { interactive-commands error; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } chassis { cluster {

reth-count 2; redundancy-group 0 { node 0 priority 200; node 1 priority 100; } redundancy-group 1 { node 1 priority 100; node 0 priority 200; preempt; interface-monitor { ge-0/0/0 weight 255; ge-2/0/0 weight 255; fe-0/0/5 weight 255; fe-2/0/5 weight 255; } } } } interfaces { ge-0/0/0 { gigether-options { redundant-parent reth0; } } fe-0/0/3 { unit 0 { family inet { address 192.168.10.2/24; } } } fe-0/0/5 { fastether-options { redundant-parent reth1; } } ge-2/0/0 { gigether-options { redundant-parent reth0; } } fe-2/0/5 { fastether-options { redundant-parent reth1;

} } fab0 { fabric-options { member-interfaces { ge-0/0/1; } } } fab1 { fabric-options { member-interfaces { ge-2/0/1; } } } reth0 { redundant-ether-options { redundancy-group 1; } unit 0 { family inet { address 192.168.2.1/24; } } } reth1 { redundant-ether-options { redundancy-group 1; } unit 0 { family inet { address 192.168.1.51/24; } } } } routing-options { static { route 0.0.0.0/0 next-hop 192.168.1.2; } } protocols { stp;

} security { nat { source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } zones { security-zone trust { host-inbound-traffic {

system-services { all; } protocols { all; } } interfaces { reth0.0; } } security-zone untrust { screen untrust-screen; interfaces { reth1.0 { host-inbound-traffic { system-services { all; } } } } } } policies { from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } default-policy { permit-all; } } }


相关文章:
Juniper Junos SRX系列Cluster HA配置汇总
Juniper Junos SRX系列Cluster HA配置汇总_计算机硬件及网络_IT/计算机_专业资料。...This parameter applies to SRX100, SRX210, SRX220, SRX240, and SRX650 ...
juniper srx防火墙-nat实际现网配置实例
SRX NAT SRX 的 NAT 配置与 ScreenOS 显著不同, 为保证系统的灵活性, SRX 把 NAT 配置从安全策 略里剥离出来,单独成为一个层次:即在 SRX JUNOS 中安全策略...
Juniper SRX配置手册
Juniper SRX配置手册_计算机硬件及网络_IT/计算机_...srx210b JUNOS Software Release [10.4R5.5] root...CLI 命令配置举例: root# set bridge-domains bd1 ...
Juniper SRX详细配置手册(含注释)
Juniper SRX详细配置手册(含注释)_计算机硬件及网络_IT/计算机_专业资料。Juniper...Juniper SRX防火墙HA双机... 7页 1下载券 Juniper SRX Competitiv... 19页...
JuniperSRX中文配置手册及图解
(对菜单操作或者保存配置时,仍会提升一部分 CPU) 一、界面 菜单 管理 1、管理方式 JuniperSRX 系列防火墙出厂默认状态下,登陆用户名为 root 密码为空,所有接口都...
Juniper_SRX配置手册
Juniper_SRX配置手册_计算机硬件及网络_IT/计算机_...SRX210 Chassis fan Power Power Supply 0 root>...CLI 命令配置举例: root# set bridge-domains bd1 ...
juniper srx100 防火墙配置_图文
juniper srx100 防火墙配置_计算机硬件及网络_IT/计算机_专业资料。Junipersrx100 防火墙配置指导 # 一、初始化安装 1.1 设备登录 Juniper SRX 系列防火墙。 开机...
Juniper_SRX中文配置手册及图解
(对菜单操作或者保存配置时,仍会提升一部分 CPU) 一、界面 菜单 管理 1、管理方式 JuniperSRX 系列防火墙出厂默认状态下,登陆用户名为 root 密码为空,所有接口都...
Juniper_SRX_配置手册_图文
Juniper_SRX_配置手册_计算机硬件及网络_IT/计算机_...下面是配置举例及相关说明: 2.3.1 Interface based...HA 协议, 对应 ScreenOS 的 NSRP 双机集群协议, ...
juniper SRX策略顺序配置
juniper SRX策略顺序配置_计算机硬件及网络_IT/计算机_专业资料。一、web 配置 ...Juniper SRX防火墙HA双机... 7页 免费 Juniper SRX 配置手册 17页 1下载券...
更多相关标签:
juniper srx210 | juniper srx210 教程 | juniper srx210 配置 | juniper srx ha | juniper srx ha配置 | juniper srx240 ha | juniper srx550 ha | juniper srx340 |