Juniper CX111 Handbuch PDF herunterladen (Seite 9)

APPLICATION NOTE - Configuring the CX111 for J Series and Branch SRX Series Devices

CX111 Used for Backup

In this example, the CX111 will only be used when the primary interface is down. This is shown mostly for illustrative

purposes, as only a failure in the primary interface will trigger a failover.

Also, this example can only be used with the CX111 operating in “always on” mode, as once connected, the DHCP

requests from the SRX Series will keep the connection up. (Increasing the lease times is not a good idea, since there are

no guarantees that, after a new connection, the modem will be assigned the same IP. Thus, this situation requires short

lease times to make sure that the gateway is notified of the address change).

Figure 4: Interface backup

192.168.1.0/24

Trust Zone

CX111

SRX210

OFFICE

INTERNET

ge-0/0/0.0 is connected to the Internet

ge-0/0/1.0 is connected to the CX111

/* Interface Congs */

set interfaces interface-range Trust member-range fe-0/0/2 to fe-0/0/6

set interfaces interface-range Trust unit 0 family ethernet-switching port-mode

access

set interfaces interface-range Trust unit 0 family ethernet-switching vlan

members Trust

/* Main Internet Link */

set interfaces ge-0/0/0 unit 0 family inet address 198.0.0.2/24

/* CX111 backup link */

set interfaces ge-0/0/1 unit 0 family inet dhcp

set vlans default l3-interface vlan.1

set interfaces vlan unit 1 description Trust

set interfaces vlan unit 1 family inet address 192.168.1.1/24

/* Default route points to the primary link and it takes precedence over the DHCP

assigned default */

set routing-options static route 0.0.0.0/0 next-hop 198.0.0.1

/* NAT Conguration */

set security nat source rule-set Outbound-NAT from zone trust

set security nat source rule-set Outbound-NAT to zone untrust

set security nat source rule-set Outbound-NAT rule Nat-All match source-address

0.0.0.0/0

set security nat source rule-set Outbound-NAT rule Nat-All match destination-

address 0.0.0.0/0

set security nat source rule-set Outbound-NAT rule Nat-All then source-nat

1 2 3 4 5 6 7 8 9 10 11 12 13 14

Keine Kommentare

Juniper CX111 Handbuch Seite 9