## Last changed: 2011-04-07 10:15:55 UTC
version 10.4R3.4;
groups {
    node0 {
        system {
            host-name srx-3400-58;
            backup-router 172.25.45.1 destination 172.0.0.0/8;
        }
        interfaces {
            fxp0 {
                unit 0 {
                    family inet {
                        address 172.25.45.58/24;
                    }
                }
            }
        }
    }
    node1 {
        system {
            host-name srx-3400-59;
            backup-router 172.25.45.1 destination 172.0.0.0/8;
        }
        interfaces {
            fxp0 {
                unit 0 {
                    family inet {
                        address 172.25.45.59/24;
                    }
                }
            }
        }
    }
}
apply-groups "${node}";
system {
    host-name SRX3400-58;
    root-authentication {
        encrypted-password "$1$YQ330JyW$ZI59eTqyZeaF2S0Lm8VM81"; ## SECRET-DATA
    }
    scripts {
        op {
            file srx-disable-reth.slax;
            file srx-enable-reth.slax;
        }
    }
    login {
        user lab {
            uid 2005;
            class superuser;
            authentication {
                encrypted-password "$1$kAfHsXF3$Bw/OgA.Nr9X/N6XnSMJKE0"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh;
        telnet;
        web-management {
            http;
        }
    }
    syslog {
        file messages {
            any any;
        }
        file firewall-logs {
            any info;
            authorization info;
            match FLOW_SESSION;
        }
    }
}
chassis {
    aggregated-devices {
        ethernet {
            device-count 5;
        }
    }
    cluster {
        reth-count 5;
        redundancy-group 0 {
            node 0 priority 129;
            node 1 priority 128;
        }
        redundancy-group 1 {
            node 0 priority 129;
            node 1 priority 128;
            preempt;
            interface-monitor {
                ge-3/0/0 weight 100;
                ge-3/0/1 weight 100;
                ge-3/0/2 weight 100;
                ge-3/0/3 weight 100;
            }
        }
        redundancy-group 2 {
            node 0 priority 128;
            node 1 priority 129;
            preempt;
        }
    }
}
interfaces {
    ge-3/0/0 {
        gigether-options {
            redundant-parent reth1;
        }
    }
    ge-3/0/1 {
        gigether-options {
            redundant-parent reth1;
        }
    }
    ge-3/0/2 {
        gigether-options {
            redundant-parent reth0;
        }
    }
    ge-3/0/3 {
        gigether-options {
            redundant-parent reth0;
        }
    }
    ge-11/0/0 {
        gigether-options {
            redundant-parent reth3;
        }
    }
    ge-11/0/1 {
        gigether-options {
            redundant-parent reth3;
        }
    }
    ge-11/0/2 {
        gigether-options {
            redundant-parent reth2;
        }
    }
    ge-11/0/3 {
        gigether-options {
            redundant-parent reth2;
        }
    }
    fab0 {
        fabric-options {
            member-interfaces {
                ge-0/0/6;
            }
        }
    }
    fab1 {
        fabric-options {
            member-interfaces {
                ge-8/0/6;
            }
        }
    }
    fxp0 {
        unit 0 {
            family inet {
                address 172.25.45.58/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 10.10.10.58/32;
            }
        }
    }
    reth0 {
        description inside;
        redundant-ether-options {
            redundancy-group 1;
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                address 172.31.83.241/30;
            }
        }
    }
    reth1 {
        redundant-ether-options {
            redundancy-group 1;
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                address 10.12.10.2/30;
            }
        }
    }
    reth2 {
        redundant-ether-options {
            redundancy-group 2;
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                address 172.31.83.245/30;
            }
        }
    }
    reth3 {
        redundant-ether-options {
            redundancy-group 2;
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                address 10.12.10.6/30;
            }
        }
    }
}
event-options {
    policy link-down {
        events snmp_trap_link_down;
        attributes-match {
            snmp_trap_link_down.interface-name matches reth1;
        }
        then {
            event-script srx-disable-reth.slax {
                arguments {
                    down-reth reth1;
                    reth-to-disable reth0;
                }
            }
        }
    }
    policy link-up {
        events snmp_trap_link_up;
        attributes-match {
            snmp_trap_link_up.interface-name matches reth1;
        }
        then {
            event-script srx-enable-reth.slax {
                arguments {
                    down-reth reth1;
                    reth-to-enable reth0;
                }
            }
        }
    }
}
routing-options {
    static {
        route 172.0.0.0/8 {
            next-hop 172.25.45.1;
            no-readvertise;
        }
        route 0.0.0.0/0 {
            qualified-next-hop 10.12.10.1 {
                metric 5;
            }
            qualified-next-hop 10.12.10.5 {
                metric 10;
            }
        }
        route 192.168.0.0/16 {
            qualified-next-hop 172.31.83.242 {
                metric 5;
            }
            qualified-next-hop 172.31.83.246 {
                metric 10;
            }
        }
        route 172.31.0.0/16 {
            qualified-next-hop 10.12.10.1 {
                metric 5;
            }
            qualified-next-hop 10.12.10.5 {
                metric 10;
            }
        }
    }
}
protocols {
    inactive: ospf {
        area 0.0.0.0 {
            interface reth1.0;
            interface reth0.0;
        }
    }
}
security {
    log {
        mode event;
        event-rate 1500;
    }
    zones {
        security-zone trust {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                reth0.0;
                reth2.0;
            }
        }
        security-zone untrust {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                reth1.0;
                reth3.0;
            }
        }
    }
    policies {
        from-zone trust to-zone untrust {
            policy outbound {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                    log {
                        session-init;
                        session-close;
                    }
                }
            }
        }
        from-zone untrust to-zone trust {
            policy inbound {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                    log {
                        session-init;
                        session-close;
                    }
                }
            }
        }
    }
}

{primary:node0}[edit]
lab@SRX3400-58#