51CTO下载-JuniperNSRP学习笔记

《51CTO下载-JuniperNSRP学习笔记》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、192.168.1.10096102005002259192.168.2.10096052005000554routeadd172.16.1.0mask255.255.255.0192.168.1.1setinterface"ethernet1"zone"Trust"setinterface"ethernet2"zone"Untrust"setinterfaceethernet1ip192.168.1.1/24setinterfaceethernet1natsetinterfaceethernet2ip192.168.155.192/24setinterfaceeth

2、ernet2routesetinterfaceethernet1manage-ip192.168.1.10setnsrpclusterid1setnsrprto-mirrorsessionclear-on-inactivesetnsrpvsd-groupid0priority50setnsrpmonitorinterfaceethernet1setnsrpmonitorinterfaceethernet2setinterfaceethernet3zoneHAsetinterfaceethernet4zoneHAsetnsrpauthpasswordNYj7uaUrrN

3、PIpJsetnsrpencryptpasswordY0D8VkdLonMthfsetinterface"ethernet1"zone"Trust"setinterface"ethernet2"zone"Untrust"setinterfaceethernet1ip192.168.1.1/24setinterfaceethernet1natsetinterfaceethernet2ip192.168.155.192/24setinterfaceethernet2routesetinterfaceethernet1manage-ip192.168.1.11setnsrp

4、clusterid1setnsrprto-mirrorsessionclear-on-inactivesetnsrpvsd-groupid0priority100setnsrpmonitorinterfaceethernet1setnsrpmonitorinterfaceethernet2setinterfaceethernet3zoneHAsetinterfaceethernet4zoneHAsetnsrpauthpasswordNYj7uaUrrNPIpJsetnsrpencryptpasswordY0D8VkdLonMthfsetnsrparp511、Netwo

5、rk>NSRP>Monitor>Interface如果只有一个VSD组，在选择被监控的端口时选择“VSDID:DEVICE”组或在CLI里输入：setnsrpmonitorethernet3/1weight25525A:00961020050022590096052005000554204A:（望京IDC）：0098032007000192eth1192.168.1.1/24Trust0010dbdd9930eth20.0.0.0/0DMZ0010dbdd9935eth30.0.0.0/0Untrust0010dbdd9936eth40.0.0.0/0HA0010db

6、dd9937（马秀云）：0098042007000388eth1192.168.1.1/24Trust0010dbe09410eth20.0.0.0/0DMZ0010dbe09415eth30.0.0.0/0Untrust0010dbe09416eth40.0.0.0/0HA0010dbe09417204A:HSRPE3MAC:0010dbff2060VSI：虚拟安全接口；VSD的“虚拟安全接口（VSI）”被绑定到主设备的物理接口上。VRRP：虚拟路由器冗余协议VSD：虚拟安全设备“虚拟安全设备”组是一对物理安全设备，它们共同组成一个VSD。如果主设备出现故障，则VS

7、D故障切换到备份设备，并且VSI绑定转移到备份设备的物理接口，该备份设备立即晋升为主设备。VSI接口表示方法：VSD1的ethernet1：ethernet1:1VSI0的ethernet1：ethernet1====================主备模式：====================默认路由：220.194.19.62255.255.255.224主：setinterfaceethernet1ip192.168.1.1/24setinterfaceethernet1natsetinterfaceethernet3ip220.194.1