root@SRX-A# run show interfaces terse reth0 Interface Admin Link Proto Local Remote reth0 up up reth0.0 up up inet 10.10.10.1/24 {primary:node0}[edit] root@SRX-A# run show chassis cluster status Monitor Failure codes: CS Cold Sync monitoring FL Fabric Connection monitoring GR GRES monitoring HW Hardware monitoring IF Interface monitoring IP IP monitoring LB Loopback monitoring MB Mbuf monitoring NH Nexthop monitoring NP NPC monitoring SP SPU monitoring SM Schedule monitoring CF Config Sync monitoring Cluster ID: 1 Node Priority Status Preempt Manual Monitor-failures Redundancy group: 0 , Failover count: 1 node0 250 primary no no None node1 50 secondary no no None Redundancy group: 1 , Failover count: 1 node0 250 primary no no None node1 50 secondary no no None {primary:node0}[edit] root@SRX-A# run show chassis cluster interfaces Control link status: Up Control interfaces: Index Interface Monitored-Status Internal-SA Security 0 em0 Up Disabled Disabled Fabric link status: Up Fabric interfaces: Name Child-interface Status Security (Physical/Monitored) fab0 ge-0/0/0 Up / Up Disabled fab0 fab1 ge-7/0/0 Up / Up Disabled fab1 Redundant-ethernet Information: Name Status Redundancy-group reth0 Up 1 Redundant-pseudo-interface Information: Name Status Redundancy-group lo0 Up 0 {primary:node0}[edit] root@SRX-A# {primary:node0}[edit] root@SRX-A# run show configuration | display set | no-more set version 17.3R1.10 set groups node0 system host-name SRX-A set groups node0 system root-authentication encrypted-password "$6$QNNZCxk0$DDyY9dtXM4RDV3zlX5NirkEQ4AqVsl0oKWnfV61rsF5i6EJR8PyEAnCiU9Rprd6R.cdXWvgRkZAsHeo/i5oCz1" set groups node0 interfaces fxp0 unit 0 family inet address 1.1.1.1/30 set groups node1 system host-name SRX-B set groups node1 system root-authentication encrypted-password "$6$cZx9mDP0$PSyh/k9kzRucIZIe7QS.QYPiwViaH3AZqU6I.b9F.i9hIngfvwAo3KUDKK3MOXiEtcyUdEwi7zwqzIp95Zv7j0" set groups node1 interfaces fxp0 unit 0 family inet address 1.1.1.2/30 set apply-groups "${node}" set system services ssh set system services web-management http interface fxp0.0 set system syslog user * any emergency set system syslog file messages any any set system syslog file messages authorization info set system syslog file interactive-commands interactive-commands any set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval set chassis cluster reth-count 1 set chassis cluster redundancy-group 0 node 0 priority 250 set chassis cluster redundancy-group 0 node 1 priority 50 set chassis cluster redundancy-group 1 node 0 priority 250 set chassis cluster redundancy-group 1 node 1 priority 50 set chassis cluster redundancy-group 1 gratuitous-arp-count 5 set security screen ids-option untrust-screen icmp ping-death set security screen ids-option untrust-screen ip source-route-option set security screen ids-option untrust-screen ip tear-drop set security screen ids-option untrust-screen tcp syn-flood alarm-threshold 1024 set security screen ids-option untrust-screen tcp syn-flood attack-threshold 200 set security screen ids-option untrust-screen tcp syn-flood source-threshold 1024 set security screen ids-option untrust-screen tcp syn-flood destination-threshold 2048 set security screen ids-option untrust-screen tcp syn-flood queue-size 2000 set security screen ids-option untrust-screen tcp syn-flood timeout 20 set security screen ids-option untrust-screen tcp land set security policies from-zone trust to-zone trust policy default-permit match source-address any set security policies from-zone trust to-zone trust policy default-permit match destination-address any set security policies from-zone trust to-zone trust policy default-permit match application any set security policies from-zone trust to-zone trust policy default-permit then permit set security policies from-zone trust to-zone untrust policy default-permit match source-address any set security policies from-zone trust to-zone untrust policy default-permit match destination-address any set security policies from-zone trust to-zone untrust policy default-permit match application any set security policies from-zone trust to-zone untrust policy default-permit then permit set security zones security-zone trust tcp-rst set security zones security-zone trust interfaces reth0.0 host-inbound-traffic system-services all set security zones security-zone trust interfaces reth0.0 host-inbound-traffic protocols all set security zones security-zone untrust screen untrust-screen set interfaces ge-0/0/2 gigether-options redundant-parent reth0 set interfaces ge-7/0/2 gigether-options redundant-parent reth0 set interfaces fab0 fabric-options member-interfaces ge-0/0/0 set interfaces fab1 fabric-options member-interfaces ge-7/0/0 set interfaces fxp0 unit 0 set interfaces reth0 redundant-ether-options redundancy-group 1 set interfaces reth0 unit 0 family inet address 10.10.10.1/24 {primary:node0}[edit] root@SRX-A# run ping 10.10.10.2 PING 10.10.10.2 (10.10.10.2): 56 data bytes ^C --- 10.10.10.2 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss {primary:node0}[edit] root@SRX-A# run ping 10.10.10.2 source 10.10.10.1 PING 10.10.10.2 (10.10.10.2): 56 data bytes ^C --- 10.10.10.2 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss {primary:node0}[edit] root@SRX-A# ===================== switch ===================== Switch#sh run Building configuration... Current configuration : 778 bytes ! ! Last configuration change at 12:27:42 EET Sun Feb 4 2018 ! version 15.1 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service compress-config ! hostname Switch ! boot-start-marker boot-end-marker ! ! ! no aaa new-model clock timezone EET 2 0 no ipv6 cef ipv6 multicast rpf use-bgp ! ip cef ! ! ! ! spanning-tree mode pvst spanning-tree extend system-id ! ! ! ! vlan internal allocation policy ascending ! ! ! ! ! ! ! ! ! ! interface Ethernet0/0 duplex auto ! interface Ethernet0/1 duplex auto ! interface Ethernet0/2 duplex auto ! interface Ethernet0/3 duplex auto ! ip default-gateway 10.10.10.1 ! no ip http server ! ! ! ! ! control-plane ! ! line con 0 logging synchronous line aux 0 line vty 0 4 ! end Switch#