我的任务是将主动/被动集群中的一些瞻博网络 SSG 140 迁移到 SRX 340 集群。我对 ScreenOS 非常熟悉，但仍在学习 JunOS。
目前，我们通过交换机通过单个上行链路连接到我们的上游提供商，但将切换到使用 SRX 的双上行链路设置：
Current:
|
Provider R1 ---|---- switch ---(vlan)- ssg1
| ^ XX
^------(vlan)- ssg2
Future:
|
Provider R1 ---|---- srx1 (ge-0/0/7)
XX | XX
Provider R2 ---|---- srx2 (ge-5/0/7)
|
两个 SRX 设备位于一个机箱集群中，我想将一个连接到每个上行链路。但是，我很担心意外创建一个切换循环并使我们的连接脱机。
我的提供商告诉我他们正在运行 HSRP，并给了我三个 IP：R1、R2 和 HSRP IP。从我读过的内容来看，似乎一次应该只有一个上行链路处于活动状态。
我想尝试这样的事情：
set interfaces ge-0/0/7 gigether-options redundant-parent reth2
set interfaces ge-5/0/7 gigether-options redundant-parent reth2
set interfaces reth2 family inet address 1.2.3.4/26
- 如果我将两个接口（每个 SRX 上一个）放在 a 中
reth，是否足以确保不会有任何循环？ - 这是确保两条上游链路冗余的正确/最佳方法吗？
- 强制活动 SRX 机箱与活动上游路由器匹配是否有任何好处？如果是这样，如何实现？（
interface-monitor似乎它不会工作，因为两个接口在正常操作下都会启动）
编辑：提供商从他们那里向我发送了有关配置的更多信息。似乎他们的路由器是dst0009和dst0010：
dst0009#sh run int vlan586
Building configuration...
Current configuration : 365 bytes
!
interface Vlan586
description <snip>
ip address x.y.61.2 255.255.255.240
no ip unreachables
no ip proxy-arp
ip flow ingress
no ip mroute-cache
load-interval 30
ntp disable
arp timeout 180
standby 1 ip x.y.61.1
standby 1 preempt
standby 1 mac-address 0000.0c00.0586
standby 1 track Vlan903 20
standby 1 track Vlan924 20
end
dst0009#sh standby Vlan586
Vlan586 - Group 1
State is Active
1 state change, last state change 50w4d
Virtual IP address is x.y.61.1
Active virtual MAC address is 0000.0c00.0586
Local virtual MAC address is 0000.0c00.0586 (cfgd)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.192 secs
Preemption enabled
Active router is local
Standby router is x.y.61.3, priority 60 (expires in 8.848 sec)
Priority 100 (default 100)
Track interface Vlan903 state Up decrement 20
Track interface Vlan924 state Up decrement 20
Group name is "hsrp-Vl586-1" (default)
dst0009#sho vlan id 586
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
586 <snip> active Po1, Fa9/89
=========================================================
dst0010#sh run int vlan586
Building configuration...
Current configuration : 365 bytes
!
interface Vlan586
description <snip>
ip address x.y.61.3 255.255.255.240
no ip unreachables
no ip proxy-arp
ip flow ingress
no ip mroute-cache
load-interval 30
ntp disable
arp timeout 180
standby 1 ip x.y.61.1
standby 1 preempt
standby 1 mac-address 0000.0c00.0586
standby 1 track Vlan903 20
standby 1 track Vlan924 20
end
dst0010#sh standby Vlan586
Vlan586 - Group 1
State is Standby
1 state change, last state change 50w4d
Virtual IP address is x.y.61.1
Active virtual MAC address is 0000.0c00.0586
Local virtual MAC address is 0000.0c00.0586 (cfgd)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.544 secs
Preemption enabled
Active router is x.y.61.2, priority 100 (expires in 9.888 sec)
Standby router is local
Priority 60 (default 100)
Track interface Vlan903 state Down decrement 20
Track interface Vlan924 state Down decrement 20
Group name is "hsrp-Vl586-1" (default)