oot@srx320-poe-01# run show configuration ## Last commit: 2021-08-23 13:33:37 UTC by root version 20200407.122723_builder.r1099298; groups { node0 { system { host-name srx320-poe-01; backup-router 10.10.10.1 destination 10.10.10.0/24; } interfaces { fxp0 { unit 0 { family inet { address 10.10.10.195/24; } } } } } node1 { system { host-name srx320-poe-02; backup-router 10.10.10.1 destination 10.10.10.0/24; } interfaces { fxp0 { unit 0 { family inet { address 10.10.10.196/24; } } } } } } apply-groups "${node}"; system { root-authentication { encrypted-password ""; ## SECRET-DATA } services { ssh; netconf { ssh; } dhcp-local-server { group jdhcp-group { interface irb.0; } group testdhcp { interface irb.172; } } web-management { https { system-generated-certificate; interface [ ge-0/0/5.0 ge-3/0/5.0 ]; } } } name-server { 8.8.8.8; 8.8.4.4; } syslog { archive size 100k files 3; user * { any emergency; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } phone-home { server https://redirect.juniper.net; rfc-compliant; } } chassis { cluster { control-link-recovery; reth-count 2; heartbeat-interval 2000; redundancy-group 0 { node 0 priority 200; node 1 priority 100; } redundancy-group 1 { node 0 priority 200; node 1 priority 100; preempt; } redundancy-group 2 { node 0 priority 100; node 1 priority 200; preempt; } } } security { screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } policies { from-zone trust to-zone trust { policy trust-to-trust { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } } zones { security-zone trust { host-inbound-traffic { system-services { all; dhcp; ping; ssh; traceroute; } protocols { all; } } interfaces { irb.0 { host-inbound-traffic { system-services { dhcp; all; ping; ssh; traceroute; https; dns; } protocols { all; } } } irb.172 { host-inbound-traffic { system-services { all; ping; ssh; dhcp; https; dns; } protocols { all; } } } } } security-zone untrust { screen untrust-screen; interfaces { dl0.0 { host-inbound-traffic { system-services { tftp; } } } ge-0/0/5.0 { host-inbound-traffic { system-services { dhcp; ssh; https; ping; dns; } protocols { all; } } } ge-3/0/5.0 { host-inbound-traffic { system-services { dhcp; ssh; https; ping; dns; } protocols { all; } } } } } } } interfaces { ge-0/0/5 { unit 0 { family inet { address 192.168.0.10/24; } } } ge-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/7 { unit 0 { family ethernet-switching { vlan { members vlan172; } } } } cl-1/0/0 { dialer-options { pool 1 priority 100; } } ge-3/0/5 { unit 0 { family inet { address 192.168.2.10/24; } } } dl0 { unit 0 { family inet { negotiate-address; } family inet6 { negotiate-address; } dialer-options { pool 1; dial-string 1234; always-on; } } } fab0 { fabric-options { member-interfaces { ge-0/0/2; ge-0/0/3; } } } fab1 { fabric-options { member-interfaces { ge-3/0/2; ge-3/0/3; } } } irb { unit 0 { family inet { filter { input FILTER-1; } address 192.168.1.1/24; } } unit 172 { family inet { filter { input FILTER-2; } address 172.16.16.1/24; } } } swfab0 { fabric-options { member-interfaces { ge-0/0/4; } } } swfab1 { fabric-options { member-interfaces { ge-3/0/4; } } } } firewall { filter FILTER-1 { term 1 { from { source-address { 192.168.1.0/24; } } then { routing-instance ISP-1; } } } filter FILTER-2 { term 1 { from { source-address { 172.16.16.0/24; } } then { routing-instance ISP-2; } } } } access { address-assignment { pool junosDHCPPool { family inet { network 192.168.1.0/24; range junosRange { low 192.168.1.2; high 192.168.1.254; } dhcp-attributes { name-server { 8.8.8.8; 8.8.4.4; } router { 192.168.1.1; } } } } pool testdhcppool { family inet { network 172.16.16.0/24; range r1 { low 172.16.16.2; high 172.16.16.254; } dhcp-attributes { name-server { 8.8.4.4; 8.8.8.8; } router { 172.16.16.1; } } } } } } routing-instances { ISP-1 { instance-type forwarding; routing-options { static { route 0.0.0.0/0 next-hop 192.168.0.1; } } } ISP-2 { instance-type forwarding; routing-options { static { route 0.0.0.0/0 next-hop 192.168.2.1; } } } } vlans { vlan-trust { vlan-id 3; l3-interface irb.0; } vlan172 { vlan-id 172; l3-interface irb.172; } } protocols { l2-learning { global-mode switching; } rstp { interface all; } } poe { interface all; } routing-options { static { route 10.10.10.0/24 next-hop 10.10.10.1; } interface-routes { rib-group inet IMPORT-GROUP; } rib-groups { IMPORT-GROUP { import-rib [ inet.0 ISP-1.inet.0 ISP-2.inet.0 ]; } } } {primary:node0}[edit] root@srx320-poe-01#