root@SRXA> show configuration ## Last commit: 2016-02-04 13:32:43 UTC by root version 10.4R10.7; groups { node0 { system { host-name SRXA; } interfaces { fxp0 { unit 0 { family inet { address 10.1.0.201/24; } } } } } node1 { system { host-name SRXB; } interfaces { fxp0 { unit 0 { family inet { address 10.1.0.202/24; } } } } } } apply-groups "${node}"; system { root-authentication { encrypted-password "$1$.RSKc5gb$P5pQAWN3tHCoJR82sFcyI1"; ## SECRET-DATA } name-server { 208.67.222.222; 208.67.220.220; } services { ssh; telnet; xnm-clear-text; web-management { http { interface vlan.0; } https { system-generated-certificate; interface vlan.0; } } dhcp { router { 192.168.1.1; } pool 192.168.1.0/24 { address-range low 192.168.1.2 high 192.168.1.254; } propagate-settings ge-0/0/0.0; } } syslog { archive size 100k files 3; user * { any emergency; } file messages { any critical; authorization info; } file interactive-commands { interactive-commands error; } } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } chassis { cluster { reth-count 2; redundancy-group 0 { node 0 priority 100; node 1 priority 1; } redundancy-group 1 { node 0 priority 100; node 1 priority 1; preempt; interface-monitor { ge-0/0/0 weight 255; ge-2/0/0 weight 255; ge-0/0/1 weight 255; ge-2/0/1 weight 255; } } } } interfaces { ge-0/0/0 { gigether-options { redundant-parent reth1; } } ge-0/0/1 { gigether-options { redundant-parent reth0; } } fe-0/0/2 { unit 0; } fe-0/0/3 { unit 0; } fe-0/0/4 { unit 0; } ge-2/0/0 { gigether-options { redundant-parent reth1; } } ge-2/0/1 { gigether-options { redundant-parent reth0; } } fab0 { fabric-options { member-interfaces { fe-0/0/5; } } } fab1 { fabric-options { member-interfaces { fe-2/0/5; } } } reth0 { vlan-tagging; redundant-ether-options { redundancy-group 1; } unit 10 { description Untrust; vlan-id 10; family inet { address 172.16.10.1/24; } } } reth1 { vlan-tagging; redundant-ether-options { redundancy-group 1; } unit 20 { description trust; vlan-id 20; family inet { address 172.16.20.1/24; } } } } protocols { stp; } security { zones { security-zone trust { tcp-rst; host-inbound-traffic { system-services { all; } } interfaces { reth1.20; } } security-zone untrust { tcp-rst; host-inbound-traffic { system-services { all; } } interfaces { reth0.10; } } } policies { from-zone untrust to-zone trust { policy PING { match { source-address any; destination-address any; application junos-icmp-all; } then { permit; } } } from-zone trust to-zone untrust { policy PING { match { source-address any; destination-address any; application junos-icmp-all; } then { permit; } } } } } routing-instances { Testing { instance-type virtual-router; interface reth0.10; interface reth1.20; routing-options { static { route 0.0.0.0/0 next-hop 172.16.10.2; } } } } {primary:node0} root@SRXA>