RETH redundant ethernet interface Junos

07.02 2024 | by massimiliano

---

Una RETH (Redundant Ethernet) aggregate interface è una interfaccia che include almeno una porta fisica di due nodi in cluster […]

Una RETH (Redundant Ethernet) aggregate interface è una interfaccia che include almeno una porta fisica di due nodi in cluster tra loro.

La reth interface del nodo active è responsabile per il trasporto del traffico (esempi di nodi Juniper in cluster abbiamo la famiglia di SRX). Di seguito vediamo un esempio reale di configurazione tra un cluster di SRX ed una coppia di switch EX in virtual-chassis.

EX Switch (virtual-chassis):

set interface xe-0/0/3 ether-option 802.3ad ae2

set interface xe-0/0/4 ether-option 802.3ad ae2 

set interface xe-1/0/3 ether-option 802.3ad ae3

set interface xe-1/0/4 ether-option 802.3ad ae3

!

set interface ae2 aggregate-eth-option lacp active

set interface ae2 description to-SRX-Node0

set interface ae2 unit 0 family ethernet-switching port-mode trunk

set interface ae2 unit 0 family ethernet-switching vlan members <2-3-4-5>

!

set interface ae3 aggregate-eth-option lacp active

set interface ae3 description to-SRX-Node1

Set interface ae3 unit 0 family ethernet-switching port-mode trunk

set interface ae3 unit 0 family ethernet-switching vlan members <2-3-4-5>

!

SRX Firewall (cluster):

set interface xe-0/0/18 gigether-option redundant-parent reth1

set interface xe-0/0/19 gigether-option redundant-parent reth1

set interface xe-7/0/18 gigether-option redundant-parent reth1

set interface xe-7/0/19 gigether-option redundant-parent reth1

!

set interface reth1 vlan-tagging

set interface reth1 redundant-ether-option redundancy-group 1

set interface reth1 redundand-ether-option lacp active

!

set interface reth1 unit 2 vlan-id 2

set interface reth1 unit 2 family inet address 1.1.1.2/30

set interface reth1 unit 3 vlan-id 3

set interface reth1 unit 3 family inet address 2.2.2.6/30

!

set security zones security-zone trust host-inbound-traffic system service all

set security zones security-zone trust host-inbound-traffic protocols all

set security zones security-zone trust interface reth1.2

!

set security zones security-zone untrust host-inbound-traffic system service all

set security zones security-zone untrust host-inbound-traffic protocols all set security zones security-zone untrust interface reth1.3