Example: Configuring an Asymmetric Chassis Cluster Pair (CLI)

Note: First, do basic chassis cluster and management interfaces setup.

1. Configure the fabric interface.
   {primary:node1}user@host# set interfaces fab0 fabric-options member-interfaces ge-0/0/1{primary:node1}user@host# set interfaces fab1 fabric-options member-interfaces ge-7/0/1
2. Configure the redundancy groups.
   {primary:node1}user@host# set chassis cluster reth-count 1user@host# set chassis cluster heartbeat-interval 1000{primary:node1}user@host# set chassis cluster heartbeat-threshold 3{primary:node1}user@host# set chassis cluster node 0{primary:node1}user@host# set chassis cluster node 1{primary:node1}user@host# set chassis cluster redundancy-group 1 node 0 priority 100{primary:node1}user@host# set chassis cluster redundancy-group 1 node 1 priority 1{primary:node1}user@host# set chassis cluster redundancy-group 1 interface-monitor fe-1/0/0 weight 255{primary:node1}user@host# set chassis cluster redundancy-group 1 interface-monitor fe-5/0/0 weight 255
3. Configure the redundant Ethernet interfaces.
   {primary:node1}user@host# set interfaces ge-0/0/0 unit 0 family inet address 1.4.0.202/24{primary:node1}user@host# set interfaces fe-1/0/0 fastether-options redundant-parent reth0{primary:node1}user@host# set interfaces ge-7/0/0 unit 0 family inet address 1.2.1.233/24{primary:node1}user@host# set interfaces fe-5/0/0 fastether-options redundant-parent reth0{primary:node1}user@host# set interfaces reth0 unit 0 family inet address 10.16.8.1/24
4. Configure the static routes (one to each ISP, with preferred route through ge-0/0/0).
   {primary:node1}user@host# set routing-options static route 0.0.0.0/0 qualified-next-hop 1.4.0.1 metric 10{primary:node1}user@host# set routing-options static route 0.0.0.0/0 qualified-next-hop 1.2.1.1 metric 100
5. Configure the security zones.
   {primary:node1}user@host# set security zones security-zone Untrust interfaces ge-0/0/0.0{primary:node1}user@host# set security zones security-zone Untrust interfaces ge-7/0/0.0
6. Configure the security policies.
   {primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY match source-address any{primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY match destination-address any{primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY match application any{primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY then permit

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Understanding Asymmetric Routing Chassis Cluster Deployment
• Example: Configuring an Asymmetric Chassis Cluster Pair (J-Web)
• Understanding What Happens When Chassis Cluster Is Enabled
• Understanding Chassis Cluster Formation