Junos newbe srx210 cluster a/p issue, I have created a new cluster with two srx210 running junos ver 10.4R10.7.
Pretty simple configuration I thought.
In testing I can ping the trust reth0.0 interface no problem with a notebook connected to a ex2200 switch.
The links coming from the cluster to the ex2200 ports are configured as “trunk” , the notebook connect to the ex2200 also, but in a “access” interface. I have replicated this for all the security zones, Trust, Untrust and DMZ on the ex2200 switch.
But I can’t ping either the untrust address or either of the two dmz interface address. I did creade a rule to allow any any any ICMP. But no luck.. I feel there is something at the layer2 switch? Does anyone see something wrong here?
Many thanks
SRX210 Cluster
## Last changed: 2012-07-11 15:37:11 EDT
version 10.4R10.7;
groups {
node0 {
system {
host-name TH_Node0;
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 192.168.40.99/24;
}
}
}
}
}
node1 {
system {
host-name TH_Node1;
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 192.168.40.98/24;
}
}
}
}
}
}
apply-groups "${node}";
system {
time-zone America/New_York;
authentication-order [ radius password ];
root-authentication {
encrypted-password "$1$OhSk.N6k$gnqYCOpPZ4CRxAmJdkOfx/";
}
chassis {
cluster {
reth-count 3;
heartbeat-interval 2000;
heartbeat-threshold 8;
redundancy-group 0 {
node 0 priority 100;
node 1 priority 1;
}
redundancy-group 1 {
node 0 priority 100;
node 1 priority 1;
gratuitous-arp-count 5;
interface-monitor {
ge-0/0/0 weight 255;
ge-2/0/0 weight 255;
ge-0/0/1 weight 255;
ge-2/0/1 weight 255;
fe-0/0/4 weight 255;
fe-2/0/4 weight 255;
}
}
redundancy-group 2 {
node 0 priority 100;
node 1 priority 1;
}
}
}
interfaces {
ge-0/0/0 {
gigether-options {
redundant-parent reth0;
}
}
ge-0/0/1 {
gigether-options {
redundant-parent reth1;
}
}
fe-0/0/4 {
fastether-options {
redundant-parent reth2;
}
}
ge-2/0/0 {
gigether-options {
redundant-parent reth0;
}
}
ge-2/0/1 {
gigether-options {
redundant-parent reth1;
}
}
fe-2/0/4 {
fastether-options {
redundant-parent reth2;
}
}
fab0 {
fabric-options {
member-interfaces {
fe-0/0/2;
fe-0/0/3;
}
}
}
fab1 {
fabric-options {
member-interfaces {
fe-2/0/2;
fe-2/0/3;
}
}
}
fxp0 {
unit 0 {
family inet {
address 192.168.40.100/24 {
master-only;
}
}
}
}
reth0 {
vlan-tagging;
redundant-ether-options {
redundancy-group 1;
}
unit 0 {
description Trust_Interface;
vlan-id 2;
family inet {
address 10.101.1.1/24;
}
}
}
reth1 {
redundant-ether-options {
redundancy-group 1;
}
unit 0 {
family inet {
address x.x.x.x/29;
}
}
}
reth2 {
vlan-tagging;
redundant-ether-options {
redundancy-group 1;
}
unit 10 {
vlan-id 10;
family inet {
address 172.19.10.1/24;
}
}
unit 11 {
vlan-id 11;
family inet {
address 172.19.11.1/24;
}
}
}
}
