SRX Chassis Cluster HA Configuration Generator

1- Fill the web based form

2- do the configuration

3- check the chassis cluster

http://www.juniper.net/support/tools/srxha/

Do the cabling:

ge-0/0/0 and ge-3/0/0  for mgt fxp0

ge-0/0/1 and ge-3/0/1 Control Link

ge-0/0/2 and ge-3/0/2 Fabric Link

ge-0/0/3 and ge-3/0/3  Reth0 ( to Untrusted Zone )

ge-0/0/4 and ge-3/0/4  Reth1  ( to Tusted Zone )

First Delete the configuration :

delete

commit and quit

Active RE Node:
>set chassis cluster cluster-id 1 node 0 reboot

Passive RE Node:
>set chassis cluster cluster-id 1 node 1 reboot

set groups node0 system host-name srx320-210
set groups node0 interfaces fxp0 unit 0 family inet address 172.30.95.210/25
set groups node1 system host-name srx320-211
set groups node1 interfaces fxp0 unit 0 family inet address 172.30.95.211/25
set apply-groups "${node}"
set chassis cluster reth-count 2
set chassis cluster redundancy-group 0 node 0 priority 200
set chassis cluster redundancy-group 0 node 1 priority 100
set chassis cluster redundancy-group 1 node 0 priority 200
set chassis cluster redundancy-group 1 node 1 priority 100
set interfaces fab0 fabric-options member-interfaces ge-0/0/2
set interfaces fab1 fabric-options member-interfaces ge-3/0/2
set interfaces ge-0/0/3 gigether-options redundant-parent reth0
set interfaces ge-3/0/3 gigether-options redundant-parent reth0
set interfaces ge-0/0/4 gigether-options redundant-parent reth1
set interfaces ge-3/0/4 gigether-options redundant-parent reth1
set interfaces reth0 redundant-ether-options redundancy-group 1
set interfaces reth1 redundant-ether-options redundancy-group 1
set security zones security-zone Trusted
set security zones security-zone Untrusted
set security zones security-zone Trusted host-inbound-traffic system-services all
set interfaces reth0 unit 0 family inet address 17.17.17.1/24
set security zones security-zone Trusted interfaces reth0.0
set interfaces reth1 unit 0 family inet address 17.17.18.1/24
set security zones security-zone Untrusted interfaces reth1.0

3- check the chassis cluster

root@srx320-210> show chassis cluster control-plane statistics
Control link statistics:
    Control link 0:
        Heartbeat packets sent: 1744
        Heartbeat packets received: 1492
        Heartbeat packet errors: 0
Fabric link statistics:
    Child link 0
        Probes sent: 2194
        Probes received: 2192
   Child link 1
       Probes sent: 0
       Probes received: 0