!Device Configuration
!Date: 01-04-2008 22:53:46
!DeviceDescription: AppDirector Global !Base MAC Address: 00:03:b2:3d:38:c0
!Software Version: 1.06.07 (Build date Feb 13 2008, 23:50:02,Build#50) !APSolute OS Version: 10.31-01.01(26):2.06.06
!
net ip-interface create 10.0.0.4 255.255.255.0 1 net ip-interface create 192.168.3.196 255.255.255.0 17 net route table create 0.0.0.0 0.0.0.0 10.0.0.1 -i 1 redundancy mode set VRRP
appdirector farm table setCreate MainCluster -as Enabled -dm “Fewest Number of Users” -cm “No Checks”
appdirector farm table setCreate ClusterA -as Enabled -dm “Fewest Number of Users” -cm “No Checks”
appdirector farm table setCreate ClusterB -as Enabled -dm “Fewest Number of Users” -cm “No Checks”
appdirector farm server table create MainCluster 10.0.0.12 None -sn \ Server-12 -id 1 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.13
appdirector farm server table create MainCluster 10.0.0.13 None -sn \ Server-13 -id 2 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.14
appdirector farm server table create MainCluster 10.0.0.14 None -sn \ Server-14 -id 3 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.22
appdirector farm server table create MainCluster 10.0.0.22 None -sn \ Server-22 -id 4 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.23
appdirector farm server table create MainCluster 10.0.0.23 None -sn \ server-23 -id 5 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.24
appdirector farm server table create MainCluster 10.0.0.24 None -sn \ Server-24 -id 6 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.12
appdirector farm server table create ClusterA 10.0.0.12 None -sn \ Server-12 -id 7 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.13
appdirector farm server table create ClusterA 10.0.0.13 None -sn \ Server-13 -id 8 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.14
appdirector farm server table create ClusterA 10.0.0.14 None -sn \ Server-14 -id 9 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.12
appdirector farm server table create ClusterB 10.0.0.22 None -sn \ Server-22 -id 10 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.23
appdirector farm server table create ClusterB 10.0.0.23 None -sn \ server-23 -id 11 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.24
appdirector farm server table create ClusterB 10.0.0.24 None -sn \ Server-24 -id 12 -rt 0.0.0.0 -cn Enabled -ba 10.0.0.22
redundancy interface-group set enable redundancy mirror backup status set enable redundancy mirror address setCreate 10.0.0.3 redundancy backup-fake-arp set enable
appdirector farm connectivity-check httpcode setCreate MainCluster \ “200 - OK”
net next-hop-router setCreate 10.0.0.1 -fl 1
appdirector farm nhr setCreate 0.0.0.0 -ip 10.0.0.1 -fl 1 appdirector farm extended-params set MainCluster -nr 10.0.0.2 appdirector farm extended-params set ClusterA -nr 10.0.0.2 appdirector farm extended-params set ClusterB -nr 10.0.0.2
appdirector nat client address-range setCreate 10.0.0.2 -t 10.0.0.2 appdirector nat client range-to-nat setCreate 0.0.0.0 -t 255.255.255.255 redundancy backup-interface-group set enable
appdirector segmentation nhr-table setCreate DefaultNHR -ip 10.0.0.1 -fl \ 1 appdirector l4-policy table create 10.0.0.10 TCP 80 0.0.0.0 MainVIP-80 \ -fn MainCluster -ta HTTP -rs Backup
appdirector l4-policy table create 10.0.0.10 TCP 443 0.0.0.0 MainVIP-443 \ -fn MainCluster -ta HTTPS -rs Backup
appdirector l4-policy table create 10.0.0.10 TCP 11122 0.0.0.0 \ MainVIP-11122 -fn MainCluster -rs Backup
appdirector l4-policy table create 10.0.0.10 UDP 1812 0.0.0.0 \ MainVIP-1812 -fn MainCluster -rs Backup
appdirector l4-policy table create 10.0.0.10 UDP 1813 0.0.0.0 \ MainVIP-1813 -fn MainCluster -rs Backup
appdirector l4-policy table create 10.0.0.10 UDP 1645 0.0.0.0 \ MainVIP-1645 -fn MainCluster -rs Backup
appdirector l4-policy table create 10.0.0.10 UDP 1646 0.0.0.0 \ MainVIP-1646 -fn MainCluster -rs Backup
appdirector l4-policy table create 10.0.0.11 TCP 80 0.0.0.0 \ ClusterAVIP-80 -fn ClusterA -ta HTTP -rs Backup
appdirector l4-policy table create 10.0.0.11 TCP 443 0.0.0.0 \ ClusterAVIP-443 -fn ClusterA -ta HTTPS -rs Backup
appdirector l4-policy table create 10.0.0.11 TCP 11122 0.0.0.0 \ ClusterAVIP-11122 -fn ClusterA -rs Backup
appdirector l4-policy table create 10.0.0.11 UDP 1812 0.0.0.0 \ ClusterAVIP-1812 -fn ClusterA -rs Backup
appdirector l4-policy table create 10.0.0.11 UDP 1813 0.0.0.0 \ ClusterAVIP-1813 -fn ClusterA -rs Backup
appdirector l4-policy table create 10.0.0.11 UDP 1645 0.0.0.0 \ ClusterAVIP-1645 -fn ClusterA -rs Backup
appdirector l4-policy table create 10.0.0.11 UDP 1646 0.0.0.0 \ ClusterAVIP-1646 -fn ClusterA -rs Backup
appdirector l4-policy table create 10.0.0.21 TCP 80 0.0.0.0 \ ClusterBVIP-80 -fn ClusterB -ta HTTP -rs Backup
appdirector l4-policy table create 10.0.0.21 TCP 443 0.0.0.0 \ ClusterBVIP-443 -fn ClusterB -ta HTTPS -rs Backup
appdirector l4-policy table create 10.0.0.21 TCP 11122 0.0.0.0 \ ClusterBVIP-11122 -fn ClusterB -rs Backup
appdirector l4-policy table create 10.0.0.21 UDP 1812 0.0.0.0 \ ClusterBVIP-1812 -fn ClusterB -rs Backup
appdirector l4-policy table create 10.0.0.21 UDP 1813 0.0.0.0 \ ClusterBVIP-1813 -fn ClusterB -rs Backup
appdirector l4-policy table create 10.0.0.21 UDP 1645 0.0.0.0 \ ClusterBVIP-1645 -fn ClusterB -rs Backup
appdirector l4-policy table create 10.0.0.21 UDP 1646 0.0.0.0 \ ClusterBVIP-1646 -fn ClusterB -rs Backup
appdirector farm dns-persistency-params set MainCluster -gm 0.0.0.0 appdirector farm dns-persistency-params set ClusterA -gm 0.0.0.0 appdirector farm dns-persistency-params set ClusterB -gm 0.0.0.0 redundancy vrrp automated-config-update set Enabled
health-monitoring check create Server12-TCP-80 -id 1 -m “TCP Port” -p 80 \ -i 5 -r 3 -t 3 -d 10.0.0.12
health-monitoring check create Server12-SSL-443 -id 2 -m “SSL Hello” -p \ 443 -i 5 -r 3 -t 3 -d 10.0.0.12
health-monitoring check create Server12-TCP-11122 -id 3 -m “TCP Port” -p \ 11122 -i 5 -r 3 -t 3 -d 10.0.0.12
health-monitoring check create Server12-Ping-1812 -id 4 -p 1812 -i 5 -r \ 3 -t 3 -d 10.0.0.12
health-monitoring check create Server12-Ping-1813 -id 5 -p 1813 -i 5 -r \ 3 -t 3 -d 10.0.0.12
health-monitoring check create Server12-Ping-1645 -id 6 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.12
health-monitoring check create Server12-Ping-1646 -id 7 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.12
health-monitoring check create Server13-TCP-80 -id 8 -m “TCP Port” -p 80 \ -i 5 -r 3 -t 3 -d 10.0.0.13
health-monitoring check create Server13-SSL-443 -id 9 -m “SSL Hello” -p \ 443 -i 5 -r 3 -t 3 -d 10.0.0.13
health-monitoring check create Server13-TCP-11122 -id 10 -m “TCP Port” \ -p 11122 -i 5 -r 3 -t 3 -d 10.0.0.13
health-monitoring check create Server13-Ping-1645 -id 13 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.13
health-monitoring check create Server13-Ping-1646 -id 14 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.13
health-monitoring check create Server14-TCP-80 -id 15 -m “TCP Port” -p \ 80 -i 5 -r 3 -t 3 -d 10.0.0.14
health-monitoring check create Server14-SSL-443 -id 16 -m “SSL Hello” -p \ 443 -i 5 -r 3 -t 3 -d 10.0.0.14
health-monitoring check create Server14-TCP-11122 -id 17 -m “TCP Port” \ -p 11122 -i 5 -r 3 -t 3 -d 10.0.0.14
health-monitoring check create Server14-Ping-1812 -id 18 -p 1812 -i 5 -r \ 3 -t 3 -d 10.0.0.14
health-monitoring check create Server14-Ping-1813 -id 19 -p 1813 -i 5 -r \ 3 -t 3 -d 10.0.0.14
health-monitoring check create Server14-Ping-1645 -id 20 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.14
health-monitoring check create Server14-Ping-1646 -id 21 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.14
health-monitoring check create Server22-TCP-80 -id 22 -m “TCP Port” -p \ 80 -i 5 -r 3 -t 3 -d 10.0.0.22
health-monitoring check create Server22-SSL-443 -id 23 -m “SSL Hello” -p \ 443 -i 5 -r 3 -t 3 -d 10.0.0.22
health-monitoring check create Server22-TCP-11122 -id 24 -m “TCP Port” \ -p 11122 -i 5 -r 3 -t 3 -d 10.0.0.22
health-monitoring check create Server22-Ping-1812 -id 25 -p 1812 -i 5 -r \ 3 -t 3 -d 10.0.0.22
health-monitoring check create Server22-Ping-1813 -id 26 -p 1813 -i 5 -r \ 3 -t 3 -d 10.0.0.22
health-monitoring check create Server22-Ping-1645 -id 27 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.22
health-monitoring check create Server22-Ping-1646 -id 28 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.22
health-monitoring check create Server23-TCP-80 -id 29 -m “TCP Port” -p \ 80 -i 5 -r 3 -t 3 -d 10.0.0.23
health-monitoring check create Server23-SSL-443 -id 30 -m “SSL Hello” -p \ 443 -i 5 -r 3 -t 3 -d 10.0.0.23
health-monitoring check create Server23-TCP-11122 -id 31 -m “TCP Port” \ -p 11122 -i 5 -r 3 -t 3 -d 10.0.0.23
health-monitoring check create Server23-Ping-1812 -id 32 -p 1812 -i 5 -r \ 3 -t 3 -d 10.0.0.23
health-monitoring check create Server23-Ping-1813 -id 33 -p 1813 -i 5 -r \ 3 -t 3 -d 10.0.0.23
health-monitoring check create Server23-Ping-1645 -id 34 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.23
health-monitoring check create Server23-Ping-1646 -id 35 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.23
health-monitoring check create Server24-TCP-80 -id 36 -m “TCP Port” -p \ 80 -i 5 -r 3 -t 3 -d 10.0.0.24
health-monitoring check create Server24-SSL-443 -id 37 -m “SSL Hello” -p \ 443 -i 5 -r 3 -t 3 -d 10.0.0.24
health-monitoring check create Server24-TCP-11122 -id 38 -m “TCP Port” \ -p 11122 -i 5 -r 3 -t 3 -d 10.0.0.24
health-monitoring check create Server24-Ping-1812 -id 39 -p 1812 -i 5 -r \ 3 -t 3 -d 10.0.0.24
health-monitoring check create Server24-Ping-1813 -id 40 -p 1813 -i 5 -r \ 3 -t 3 -d 10.0.0.24
health-monitoring check create Server24-Ping-1645 -id 41 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.24
health-monitoring check create Server24-Ping-1646 -id 42 -p 1646 -i 5 -r \ 3 -t 3 -d 10.0.0.24
health-monitoring binding create 1 1 health-monitoring binding create 2 1 health-monitoring binding create 3 1 health-monitoring binding create 4 1 health-monitoring binding create 5 1 health-monitoring binding create 6 1 health-monitoring binding create 7 1 health-monitoring binding create 8 2 health-monitoring binding create 9 2 health-monitoring binding create 10 2 health-monitoring binding create 11 2 health-monitoring binding create 12 2 health-monitoring binding create 13 2 health-monitoring binding create 14 2 health-monitoring binding create 15 3 health-monitoring binding create 16 3
health-monitoring binding create 21 3 health-monitoring binding create 22 4 health-monitoring binding create 23 4 health-monitoring binding create 24 4 health-monitoring binding create 25 4 health-monitoring binding create 26 4 health-monitoring binding create 27 4 health-monitoring binding create 28 4 health-monitoring binding create 29 5 health-monitoring binding create 30 5 health-monitoring binding create 31 5 health-monitoring binding create 32 5 health-monitoring binding create 33 5 health-monitoring binding create 34 5 health-monitoring binding create 35 5 health-monitoring binding create 36 6 health-monitoring binding create 37 6 health-monitoring binding create 38 6 health-monitoring binding create 39 6 health-monitoring binding create 40 6 health-monitoring binding create 41 6 health-monitoring binding create 42 6 health-monitoring binding create 1 7 health-monitoring binding create 2 7 health-monitoring binding create 3 7 health-monitoring binding create 4 7 health-monitoring binding create 5 7 health-monitoring binding create 6 7 health-monitoring binding create 7 7 health-monitoring binding create 8 8 health-monitoring binding create 9 8 health-monitoring binding create 10 8 health-monitoring binding create 11 8 health-monitoring binding create 12 8 health-monitoring binding create 13 8
health-monitoring binding create 14 8 health-monitoring binding create 15 9 health-monitoring binding create 16 9 health-monitoring binding create 17 9 health-monitoring binding create 18 9 health-monitoring binding create 19 9 health-monitoring binding create 20 9 health-monitoring binding create 21 9 health-monitoring binding create 22 10 health-monitoring binding create 23 10 health-monitoring binding create 24 10 health-monitoring binding create 25 10 health-monitoring binding create 26 10 health-monitoring binding create 27 10 health-monitoring binding create 28 10 health-monitoring binding create 29 11 health-monitoring binding create 30 11 health-monitoring binding create 31 11 health-monitoring binding create 32 11 health-monitoring binding create 33 11 health-monitoring binding create 34 11 health-monitoring binding create 35 11 health-monitoring binding create 36 12 health-monitoring binding create 37 12 health-monitoring binding create 38 12 health-monitoring binding create 39 12 health-monitoring binding create 40 12 health-monitoring binding create 41 12 health-monitoring binding create 42 12 health-monitoring status set enable
redundancy vrrp virtual-routers create 1 1 -as up -p 100 -pip 10.0.0.4 redundancy vrrp associated-ip create 1 1 10.0.0.10
redundancy vrrp associated-ip create 1 1 10.0.0.3 redundancy vrrp associated-ip create 1 1 10.0.0.11 redundancy vrrp associated-ip create 1 1 10.0.0.21 redundancy vrrp associated-ip create 1 1 10.0.0.2
manage user table create radware -pw GndridF04zNWSGOrZjKFV78REiEra/Qm manage telnet status set enable
net l2-interface set 100001 -ad up manage terminal prompt set AppDirector_B
manage snmp groups create SNMPv1 public -gn initial
manage snmp groups create SNMPv1 ReadOnlySecurity -gn InitialReadOnly manage snmp groups create SNMPv2c public -gn initial
manage snmp groups create SNMPv2c ReadOnlySecurity -gn InitialReadOnly manage snmp groups create UserBased radware -gn initial
manage snmp groups create UserBased ReadOnlySecurity -gn InitialReadOnly manage snmp access create initial SNMPv1 noAuthNoPriv -rvn iso -wvn iso \ -nvn iso
manage snmp access create InitialReadOnly SNMPv1 noAuthNoPriv -rvn \ ReadOnlyView
manage snmp access create initial SNMPv2c noAuthNoPriv -rvn iso -wvn iso \ -nvn iso
manage snmp access create InitialReadOnly SNMPv2c noAuthNoPriv -rvn \ ReadOnlyView
manage snmp access create initial UserBased authPriv -rvn iso -wvn iso \ -nvn iso
manage snmp access create InitialReadOnly UserBased authPriv -rvn \ ReadOnlyView
manage snmp views create iso 1
manage snmp views create ReadOnlyView 1
manage snmp views create ReadOnlyView 1.3.6.1.4.1.89.2.7.2 -cm excluded manage snmp views create ReadOnlyView 1.3.6.1.6.3.18.1.1 -cm excluded manage snmp views create ReadOnlyView 1.3.6.1.6.3.15.1.2.2 -cm excluded manage snmp views create ReadOnlyView 1.3.6.1.4.1.89.35.1.61 -cm \ excluded
manage snmp views create ReadOnlyView 1.3.6.1.6.3.16.1.2 -cm excluded manage snmp views create ReadOnlyView 1.3.6.1.6.3.16.1.4 -cm excluded manage snmp views create ReadOnlyView 1.3.6.1.6.3.16.1.5 -cm excluded manage snmp notify create allTraps -ta v3Traps
manage snmp users create radware -cf 0.0 -ap MD5 -akc \ 27b3b471956b14d758029658921e092e -pp DES -pkc \
27b3b471956b14d758029658921e092e
radware-authPriv
manage snmp target-parameters create public-v1 -d SNMPv1 -sm SNMPv1 -sn \ public -sl noAuthNoPriv
manage snmp target-parameters create public-v2 -d SNMPv2c -sm SNMPv2c \ -sn public -sl noAuthNoPriv
manage snmp target-parameters create radware-authPriv -d SNMPv3 -sm \ UserBased -sn radware -sl authPriv
manage snmp community create public -n public -sn public manage telnet session-timeout set 120
manage telnet auth-timeout set 30
appdirector global connectivity-check tcp-timeout set 3 !File Signature: 5e329021c901f95404673d9fce626311
Copyright 2008 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, JUNOS, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. JUNOSe is a trademark of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. CORPORATE AND SALES HEADQUARTERS
Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA Phone: 888.JUNIPER (888.586.4737) or 408.745.2000 Fax: 408.745.2100 www.juniper.net EMEA HEADQUARTERS Juniper Networks Ireland Airside Business Park Swords, County Dublin, Ireland Phone: 35.31.8903.600 Fax: 35.31.8903.601 APAC HEADQUARTERS
Juniper Networks (Hong Kong) 26/F, Cityplaza One 1111 King’s Road Taikoo Shing, Hong Kong Phone: 852.2332.3636 Fax: 852.2574.7803