为了实现IDC网络的负载均衡和高带宽，提高网络的使用效率，在juniper SRX 防火墙和cisco 3850交换机间配置链路聚合。
cisco 3850配置:
interface Vlan254
ip address 192.168.1.253 255.255.255.0 //配置聚合口IP
port-channel load-balance src-dst-ip //负载均衡基于源和目的ip
interface Port-channel1 //创建聚合口1
switchport access vlan 254 //聚合口1划分到vlan254
switchport mode access //模式是access
interface GigabitEthernet1/0/11 //g1/0/11和g1/0/12聚合
switchport access vlan 254 //g1/0/11划分到vlan254
switchport mode access
channel-protocol lacp //聚合协议配置为lacp
channel-group 1 mode active //聚合模式配置为active
interface GigabitEthernet1/0/12 //g1/0/11和g1/0/12聚合
switchport access vlan 254 //g1/0/12划分到vlan254
switchport mode access
channel-protocol lacp //聚合协议配置为lacp
channel-group 1 mode active //聚合模式配置为active
juniper SRX 防火墙配置：
set interfaces ge-0/0/6 gigether-options 802.3ad ae0 //配置g0/0/6到聚合口ae0
set interfaces ge-0/0/7 gigether-options 802.3ad ae0 //配置g0/0/7到聚合口ae0
set chassis aggregated-devices ethernet device-count 1 //配置聚合端口数为1
set interfaces ae0 unit 0 family inet address 192.168.1.254/24 //配置聚合口Ip
set interfaces ae0 aggregated-ether-options lacp passive //聚合口的lacp模式为passive
set interfaces ae0 aggregated-ether-options link-speed 1g //聚合口速率为1g
set interfaces ae0 aggregated-ether-options lacp periodic slow //lacp的学习周期为slow
set interfaces ae0 aggregated-ether-options minimum-links 1 //聚合口里最小的链路数为1
ae0加入trust区域：
