JIR Lab Guide Page 1 In this activity, you will complete the following objectives. Part 1: Configure and test VRRP. L L a a b b 7 7 - - 1 1 : : V V R R R R P P C C o o n n f f i i g g u u r r a a t t i i o o n n a a n n d d M M o o n n i i t t o o r r i i n n g g
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
JIR Lab Guide
Page 1
In this activity, you will complete the following objectives.
Part 1: Configure and test VRRP.
LLaabb 77--11::
VVRRRRPP CCoonnffiigguurraattiioonn aanndd
MMoonniittoorriinngg
JIR Lab Guide
Page 2
Part 1: Configure and test VRRP.
Step 1.1
Load JIR.BASIC.3R as basic topology.
[edit]
admin@SRXP# load override JIR.BASIC.3R
load complete
[edit]
admin@SRXP# commit
commit complete
Step 1.2 Configure IP address for interfaces connected to routing instances.
[edit]
admin@SRXP# delete interfaces
[edit]
admin@SRXP# edit interfaces
[edit interfaces]
admin@SRXP# set ge-0/0/8 unit 0 family inet address 10.0.P.254/24
[edit interfaces]
admin@SRXP# set ge-0/0/10 unit 0 family inet address 10.0.P.253/24
[edit interfaces]
admin@SRXP# set ge-0/0/12 unit 0 family inet address 192.168.P.254/24
[edit interfaces]
admin@SRXP# set ge-0/0/14 unit 0 family inet address 192.168.P.253/24
Step 1.3 Modify logical topology and default route for routing instance RA.
[edit interfaces]
admin@SRXP# top
JIR Lab Guide
Page 3
[edit]
admin@SRXP# edit routing-instances RA
[edit routing-instances RA]
admin@SRXP# delete
Delete everything under this level? [yes,no] (no) yes
[edit routing-instances RA]
admin@SRXP# set instance-type virtual-router
[edit routing-instances RA]
admin@SRXP# set interface ge-0/0/8.0
[edit routing-instances RA]
admin@SRXP# set interface ge-0/0/12.0
[edit routing-instances RA]
admin@SRXP# set routing-options static route 0.0.0.0/0 next-hop 192.168.P.1
[edit routing-instances RA]
admin@SRXP# show
instance-type virtual-router;
interface ge-0/0/8.0;
interface ge-0/0/12.0;
routing-options {
static {
route 0.0.0.0/0 next-hop 192.168.P.1;
}
Step 1.4 Modify logical topology and default route for routing instance RB.
[edit routing-instances RA]
admin@SRXP# top
[edit]
admin@SRXP# edit routing-instances RB
[edit routing-instances RB]
admin@SRXP# delete
Delete everything under this level? [yes,no] (no) yes
JIR Lab Guide
Page 4
[edit routing-instances RB]
admin@SRXP# set instance-type virtual-router
[edit routing-instances RB]
admin@SRXP# set interface ge-0/0/10.0
[edit routing-instances RB]
admin@SRXP# set interface ge-0/0/14.0
[edit routing-instances RB]
admin@SRXP# set routing-options static route 0.0.0.0/0 next-hop 192.168.P.1
[edit routing-instances RB]
admin@SRXP# show
instance-type virtual-router;
interface ge-0/0/10.0;
interface ge-0/0/14.0;
routing-options {
static {
route 0.0.0.0/0 next-hop 192.168.P.1;
}
}
Step 1.5
Configure VLAN for both inside(10.0.P.0/24) and outside(192.168.P.0/24) subnets.
[edit routing-instances RB]
admin@SRXP# top
[edit]
admin@SRXP# set vlans INSIDE vlan-id 10
[edit]
admin@SRXP# set vlans OUTSIDE vlan-id 192
[edit]
admin@SRXP# edit interfaces
[edit interfaces]
admin@SRXP# set ge-0/0/9 unit 0 family ethernet-switching vlan members INSIDE
[edit interfaces]
JIR Lab Guide
Page 5
admin@SRXP# set ge-0/0/5 unit 0 family ethernet-switching vlan members INSIDE
[edit interfaces]
admin@SRXP# set ge-0/0/11 unit 0 family ethernet-switching vlan members INSIDE
[edit interfaces]
admin@SRXP# set ge-0/0/13 unit 0 family ethernet-switching vlan members OUTSIDE
[edit interfaces]
admin@SRXP# set ge-0/0/2 unit 0 family ethernet-switching vlan members OUTSIDE
[edit interfaces]
admin@SRXP# set ge-0/0/15 unit 0 family ethernet-switching vlan members OUTSIDE
[edit interfaces]
admin@SRXP# commit and-quit
commit complete
Exiting configuration mode
Step 1.6 Verify network connectivity for both INSIDE and OUTSIDE subnets.
admin@SRXP> ping 10.0.P.10 count 3 routing-instance RA
PING 10.0.P.10 (10.0.P.10): 56 data bytes
64 bytes from 10.0.P.10: icmp_seq=0 ttl=128 time=2.380 ms
64 bytes from 10.0.P.10: icmp_seq=1 ttl=128 time=7.254 ms
64 bytes from 10.0.P.10: icmp_seq=2 ttl=128 time=1.297 ms
--- 10.0.P.10 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.297/3.644/7.254/2.591 ms
admin@SRXP> ping 10.0.P.11 count 3 routing-instance RA
PING 10.0.P.11 (10.0.P.11): 56 data bytes
64 bytes from 10.0.P.11: icmp_seq=0 ttl=128 time=1.426 ms
64 bytes from 10.0.P.11: icmp_seq=1 ttl=128 time=1.168 ms
64 bytes from 10.0.P.11: icmp_seq=2 ttl=128 time=1.217 ms
--- 10.0.P.11 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.168/1.270/1.426/0.112 ms
admin@SRXP> ping 10.0.P.253 count 3 routing-instance RA
JIR Lab Guide
Page 6
PING 10.0.P.253 (10.0.P.253): 56 data bytes
64 bytes from 10.0.P.253: icmp_seq=0 ttl=64 time=31.143 ms
64 bytes from 10.0.P.253: icmp_seq=1 ttl=64 time=0.966 ms
64 bytes from 10.0.P.253: icmp_seq=2 ttl=64 time=0.927 ms
--- 10.0.P.253 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.927/11.012/31.143/14.235 ms
admin@SRXP> ping 192.168.P.1 count 3 routing-instance RA
PING 192.168.P.1 (192.168.P.1): 56 data bytes
64 bytes from 192.168.P.1: icmp_seq=0 ttl=255 time=1.884 ms
64 bytes from 192.168.P.1: icmp_seq=1 ttl=255 time=1.638 ms
64 bytes from 192.168.P.1: icmp_seq=2 ttl=255 time=1.760 ms
--- 192.168.P.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.638/1.761/1.884/0.100 ms
admin@SRXP> ping 192.168.P.253 count 3 routing-instance RA
PING 192.168.P.253 (192.168.P.253): 56 data bytes
64 bytes from 192.168.P.253: icmp_seq=0 ttl=64 time=4.353 ms
64 bytes from 192.168.P.253: icmp_seq=1 ttl=64 time=0.960 ms
64 bytes from 192.168.P.253: icmp_seq=2 ttl=64 time=1.021 ms
--- 192.168.P.253 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.960/2.111/4.353/1.585 ms
admin@SRXP> ping 172.26.26.P count 3 routing-instance RA
PING 172.26.26.P (172.26.26.P): 56 data bytes
64 bytes from 172.26.26.P: icmp_seq=0 ttl=127 time=2.176 ms
64 bytes from 172.26.26.P: icmp_seq=1 ttl=127 time=1.845 ms
64 bytes from 172.26.26.P: icmp_seq=2 ttl=127 time=2.198 ms
--- 172.26.26.P ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.845/2.073/2.198/0.161 ms