Juniper SRX HA 配置实例文档查看须知： .3测试拓扑： .3一 路由模式 HA: .4配置： .4验证： .4配置解析： .5二 透明模式 HA（Access 接口） .6配置： .6验证： .7配置解析： .8三 透明模式 HA(Trunk 接口) .9配置： .9验证： .10配置解析： .10注意点 .12文档查看须知：测试环境：SRX 220H 两台配置须知：SRX 220H 默认带外管理口 Ge-0/0/6 控制口：Ge-0/0/7 数据同步口：Ge-0/0/1使用集群则集群后接口标示为：Ge-0/0/0-7; Ge-3/0/0-7不同型号集群后接口显示不同，详情见官方文档 拓扑对应 IP:G-0/0/3：192.168.3.1/24G-0/0/4：192.168.4.1/24G-0/0/5：192.168.5.1/24MGT:10.10.30.189-190/24F0/0：192.168.4.2/24F0/1：192.168.6.1/24 （模拟遥远互联网）测试拓扑：一 路由模式 HA:配置：On device A:set chassis cluster cluster-id 1 node 0 reboot On device B:set chassis cluster cluster-id 1 node 1 rebootOn device A:set groups node0 system host-name SRX-Primaryset groups node0 interfaces fxp0 unit 0 family inet address 10.10.30.189/24 set groups node1 system host-name SRX-Secondbyset groups node1 interfaces fxp0 unit 0 family inet address 10.10.30.190/24 set apply-groups $nodeset interfaces fab0 fabric-options member-interfaces ge-0/0/1 set interfaces fab1 fabric-options member-interfaces ge-3/0/1 set chassis cluster redundancy-group 0 node 0 priority 100 set chassis cluster redundancy-group 0 node 1 priority 1 set chassis cluster redundancy-group 1 node 0 priority 100set chassis cluster redundancy-group 1 node 1 priority 1set chassis cluster redundancy-group 1 interface-monitor ge-0/0/3 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-0/0/4 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-0/0/5 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-3/0/3 weight 255set chassis cluster redundancy-group 1 interface-monitor ge-3/0/4 weight 255 set chassis cluster redundancy-group 1 interface-monitor ge-3/0/5 weight 255set chassis cluster reth-count 3set interfaces ge-0/0/3 gigether-options redundant-parent reth0 set interfaces ge-3/0/3 gigether-options redundant-parent reth0 set interfaces reth0 redundant-ether-options redundancy-group 1 set interfaces reth0 unit 0 family inet address 192.168.3.1/24set interfaces ge-0/0/4 gigether-options redundant-parent reth1 set interfaces ge-3/0/4 gigether-options redundant-parent reth1 set interfaces reth1 redundant-ether-options redundancy-group 1 set interfaces reth1 unit 0 family inet address 192.168.4.1/24set interfaces ge-0/0/5 gigether-options redundant-parent reth2 set interfaces ge-3/0/5 gigether-options redundant-parent reth2 set interfaces reth2 redundant-ether-options redundancy-group 1set interfaces reth2 unit 0 family inet address 192.168.5.1/24set security zones security-zone trust interfaces reth0.0 set security zones security-zone untrust interfaces reth1.0set security zones security-zone DMZ interfaces reth2.0验证：查看双机状态rootSRX-Primary show chassis cluster statusCluster ID: 1Node Priority Status Preempt Manual failoverRedundancy group: 0 , Failover count: 1node0 100 primary no nonode1 1 secondary no noRedundancy group: 1 , Failover count: 1node0 100 primary no nonode1 1 secondary no no测试主备切换；查看当前设备主备情况；配置解析：On device A: set chassis cluster cluster-id 1 node 0 reboot /定义 clus