Example: Configuring an Active/Passive Chassis Cluster Pair (CLI)

1. Enable clustering.

   In node 0:

   user@host> set chassis cluster cluster-id 1 node 0warning: A reboot is required for chassis cluster to be enabled

   In node 1:

   user@host> set chassis cluster cluster-id 1 node 1 rebootSuccessfully enabled chassis cluster. Going to reboot now.
2. Configure the management interface.

   In a cluster, the configuration is shared among the cluster members. Member-specific configurations (such as the IP address of the management port of each member) are entered using configuration groups.

   {primary:node1}user@host# set groups node0 system host-name J2320-A{primary:node1}user@host# set groups node0 interfaces fxp0 unit 0 family inet address 192.168.3.110/24{primary:node1}user@host#set groups node1 system host-name J2320-B{primary:node1}user@host# set groups node1 interfaces fxp0 unit 0 family inet address 192.168.3.111/24{primary:node1}user@host# set apply-groups “${node}”
3. Configure the fabric interface.
   {primary:node1}user@host# set interfaces fab0 fabric-options member-interfaces ge-0/0/1{primary:node1}user@host# set interfaces fab1 fabric-options member-interfaces ge-4/0/1
4. Configure the redundancy groups.
   {primary:node1}user@host# set chassis cluster reth-count 2{primary:node1}user@host# set chassis cluster heartbeat-interval 1000{primary:node1}user@host# set chassis cluster heartbeat-threshold 3{primary:node1}user@host# set chassis cluster node 0{primary:node1}user@host# set chassis cluster node 1{primary:node1}user@host# set chassis cluster redundancy-group 0 node 0 priority 100{primary:node1}user@host# set chassis cluster redundancy-group 0 node 1 priority 1{primary:node1}user@host# set chassis cluster redundancy-group 1 node 0 priority 100{primary:node1}user@host# set chassis cluster redundancy-group 1 node 1 priority 1{primary:node1}user@host# set chassis cluster redundancy-group 1 interface-monitor fe-1/0/0 weight 255{primary:node1}user@host# set chassis cluster redundancy-group 1 interface-monitor fe-5/0/0 weight 255{primary:node1}user@host# set chassis cluster redundancy-group 1 interface-monitor ge-0/0/0 weight 255{primary:node1}user@host# set chassis cluster redundancy-group 1 interface-monitor ge-4/0/0 weight 255
5. Configure the redundant Ethernet interfaces.
   {primary:node1}user@host# set interfaces ge-0/0/0 gigether-options redundant-parent reth1{primary:node1}user@host# set interfaces ge-4/0/0 gigether-options redundant-parent reth1{primary:node1}user@host# set interfaces fe-1/0/0 fastether-options redundant-parent reth0{primary:node1}user@host# set interfaces fe-5/0/0 fastether-options redundant-parent reth0{primary:node1}user@host# set interfaces reth0 redundant-ether-options redundancy-group 1{primary:node1}user@host# set interfaces reth0 unit 0 family inet address 10.16.8.1/24{primary:node1}user@host# set interfaces reth1 redundant-ether-options redundancy-group 1{primary:node1}user@host# set interfaces reth1 unit 0 family inet address 1.2.0.233/24
6. Configure the security zones.
   {primary:node1}user@host# set security zones security-zone Untrust interfaces reth1.0{primary:node1}user@host# set security zones security-zone Trust interfaces reth0.0
7. Configure the security policies.
   {primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY match source-address any{primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY match destination-address any{primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY match application any{primary:node1}user@host# set security policies from-zone Trust to-zone Untrust policy ANY then permit

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Understanding Active/Passive Chassis Cluster Deployment
• Example: Configuring an Active/Passive Chassis Cluster Pair (J-Web)
• Understanding What Happens When Chassis Cluster Is Enabled
• Understanding Chassis Cluster Formation