juniper SRX防火墙和cisco 交换机链路聚合配置

   为了实现IDC网络的负载均衡和高带宽，提高网络的使用效率，在juniper SRX 防火墙和cisco 3850交换机间配置链路聚合。

cisco 3850配置:
interface Vlan254
ip address 192.168.1.253 255.255.255.0   //配置聚合口IP
port-channel load-balance src-dst-ip     //负载均衡基于源和目的ip
interface Port-channel1    //创建聚合口1
switchport access vlan 254    //聚合口1划分到vlan254
switchport mode access    //模式是access
interface GigabitEthernet1/0/11    //g1/0/11和g1/0/12聚合
switchport access vlan 254    //g1/0/11划分到vlan254
switchport mode access
channel-protocol lacp    //聚合协议配置为lacp
channel-group 1 mode active    //聚合模式配置为active
interface GigabitEthernet1/0/12       //g1/0/11和g1/0/12聚合
switchport access vlan 254      //g1/0/12划分到vlan254
switchport mode access
channel-protocol lacp    //聚合协议配置为lacp
channel-group 1 mode active    //聚合模式配置为active

juniper SRX 防火墙配置：
set interfaces ge-0/0/6 gigether-options 802.3ad ae0    //配置g0/0/6到聚合口ae0
set interfaces ge-0/0/7 gigether-options 802.3ad ae0    //配置g0/0/7到聚合口ae0
set chassis aggregated-devices ethernet device-count 1    //配置聚合端口数为1
set interfaces ae0 unit 0 family inet address 192.168.1.254/24    //配置聚合口Ip
set interfaces ae0 aggregated-ether-options lacp passive    //聚合口的lacp模式为passive
set interfaces ae0 aggregated-ether-options link-speed 1g    //聚合口速率为1g
set interfaces ae0 aggregated-ether-options lacp periodic slow    //lacp的学习周期为slow
set interfaces ae0 aggregated-ether-options minimum-links 1    //聚合口里最小的链路数为1

ae0加入trust区域：