SRX

last person joined: 17 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Interface monitoring and failover

    Posted 02-17-2018 08:28

    Hi,

    Please go through below configuration and suggest your openion on my requirement.

    1) If node 0 interface ge-0/0/2 goes down/disconnect node 1 interface 5/0/2 need to active and pass traffic but node 0 still remain primary node.

    2) If ge-0/0/2 (reth0) come up that should become active agan and ge5/0/2 interface need to standby mode. node o still remain primary node.

    Same should happen with interface ge-0/0/3 and ge-5/0/3 (reth1)

     

    set groups node0 system host-name SRX-A
    set groups node0 interfaces fxp0 unit 0 family inet address 172.16.10.1/30
    set groups node1 system host-name SRX-B
    set groups node1 interfaces fxp0 unit 0 family inet address 172.16.10.2/30
    set apply-groups "${node}"
    set chassis cluster reth-count 2
    set chassis cluster redundancy-group 0 node 0 priority 200
    set chassis cluster redundancy-group 0 node 1 priority 100
    set chassis cluster redundancy-group 1 node 0 priority 200
    set chassis cluster redundancy-group 1 node 1 priority 100

    set interfaces fab0 fabric-options member-interfaces ge-0/0/0
    set interfaces fab1 fabric-options member-interfaces ge-5/0/0
    set interfaces  ge-0/0/2 gigether-options redundant-parent reth0
    set interfaces  ge-5/0/2 gigether-options redundant-parent reth0
    set interfaces ge-0/0/3 gigether-options redundant-parent reth1
    set interfaces ge-5/0/3 gigether-options redundant-parent reth1
    set interfaces reth0 redundant-ether-options redundancy-group 1
    set interfaces reth0 description ***Inside***
    set interfaces reth1 redundant-ether-options redundancy-group 1
    set interfaces reth1 mtu 9192
    set interfaces reth1 description ***Outside***

    set chassis cluster redundancy-group 1 interface-monitor ge-0/0/2 weight 255
    set chassis cluster redundancy-group 1 interface-monitor ge-5/0/2 weight 255
    set chassis cluster redundancy-group 1 interface-monitor ge-0/0/3 weight 255
    set chassis cluster redundancy-group 1 interface-monitor ge-5/0/3 weight 255

    set security zones security-zone trust
    set security zones security-zone untrust
    set security zones security-zone trust host-inbound-traffic system-services all
    set security zones security-zone trust host-inbound-traffic protocols all
    set security zones security-zone untrust host-inbound-traffic system-services all
    set security zones security-zone untrust host-inbound-traffic protocols all
    set interfaces reth0 unit 0 family inet address 192.168.20.1/24
    set security zones security-zone trust interfaces reth0.0
    set interfaces reth1 unit 0 family inet address 112.138.187.41/30
    set security zones security-zone untrust interfaces reth1.0

     

    Thank you...

     


    #SRX


  • 2.  RE: Interface monitoring and failover
    Best Answer

    Posted 02-18-2018 05:27

    i have tested above configuration on our SRX devices and that is working as i expected.