Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (J-Web)

  1. Enable clusters. See Step 1 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  2. Configure the management interface. See Step 2 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  3. Configure the fabric interface. See Step 3 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  4. Configure the redundancy groups.
    • Select Configure>System Properties>Chassis Cluster.
    • Enter the following information, and then click Apply:
      • Redundant ether-Interfaces Count: 2
      • Heartbeat Interval: 1000
      • Heartbeat Threshold: 3
      • Nodes: 0
      • Group Number: 0
      • Priorities: 254
    • Enter the following information, and then click Apply:
      • Nodes: 0
      • Group Number: 1
      • Priorities: 254
    • Enter the following information, and then click Apply:
      • Nodes: 1
      • Group Number: 0
      • Priorities: 1
    • Enter the following information, and then click Apply:
      • Nodes: 1
      • Group Number: 1
      • Priorities: 1
      • Preempt: Select the check box.
      • Interface Monitor—Interface: xe-5/0/0
      • Interface Monitor—Weight: 255
      • Interface Monitor—Interface: xe-5/1/0
      • Interface Monitor—Weight: 255
      • Interface Monitor—Interface: xe-17/0/0
      • Interface Monitor—Weight: 255
      • Interface Monitor—Interface: xe-17/1/0
      • Interface Monitor—Weight: 255
  5. Configure the redundant Ethernet interfaces.
    • Select Configure>System Properties>Chassis Cluster.
    • Select xe-5/1/0.
    • Enter reth1 in the Redundant Parent box.
    • Click Apply.
    • Select xe-17/1/0.
    • Enter reth1 in the Redundant Parent box.
    • Click Apply.
    • Select xe-5/0/0.
    • Enter reth0 in the Redundant Parent box.
    • Click Apply.
    • Select xe-17/0/0.
    • Enter reth0 in the Redundant Parent box.
    • Click Apply.
    • See Step 5 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  6. Configure the IPsec configuration. See Step 6 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  7. Configure the static routes .
    • Select Configure>Routing>Static Routing.
    • Click Add.
    • Enter the following information, and then click Apply:
      • Static Route Address: 0.0.0.0/0
      • Next-Hop Addresses: 10.2.1.1
    • Enter the following information, and then click Apply:
      • Static Route Address: 10.3.0.0/16
      • Next-Hop Addresses: 10.10.1.2
  8. Configure the security zones. See Step 8 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  9. Configure the security policies. See Step 9 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel.
  10. Click OK to check your configuration and save it as a candidate configuration, then click Commit Options>Commit.
 

Related Documentation

 

Published: 2015-02-27

Previous Page Next Page