HP VPN Firewall Appliances Network Management Configuration Guide

339
Configuration procedure
1. Configure IP addresses for interfaces. (Details not shown.)
2. Configure static routes:
# Configure a default route on Firewall A.
<FirewallA> system-view
[FirewallA] ip route-static 0.0.0.0 0.0.0.0 1.1.4.2
# Configure two static routes on Firewall B.
<FirewallB> system-view
[FirewallB] ip route-static 1.1.2.0 255.255.255.0 1.1.4.1
[FirewallB] ip route-static 1.1.3.0 255.255.255.0 1.1.5.6
# Configure a default route on Firewall C.
<FirewallC> system-view
[FirewallC] ip route-static 0.0.0.0 0.0.0.0 1.1.5.5
3. Configure the default gateways of Host A, Host B, and Host C as 1.1.2.3, 1.1.6.1, and 1.1.3.1.
(Details not shown.)
4. Verify the configuration:
# Display the IP routing table on Firewall A.
[FirewallA] display ip routing-table
Routing Tables: Public
Destinations : 7 Routes : 7
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 60 0 1.1.4.2 GE0/2
1.1.2.0/24 Direct 0 0 1.1.2.3 GE0/1
1.1.2.3/32 Direct 0 0 127.0.0.1 InLoop0
1.1.4.0/30 Direct 0 0 1.1.4.1 GE0/2
1.1.4.1/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
# Display the IP routing table on Firewall B.
[FirewallB] display ip routing-table
Routing Tables: Public
Destinations : 10 Routes : 10
Destination/Mask Proto Pre Cost NextHop Interface
1.1.2.0/24 Static 60 0 1.1.4.1 GE0/1
1.1.3.0/24 Static 60 0 1.1.5.6 GE0/2
1.1.4.0/30 Direct 0 0 1.1.4.2 GE0/1
1.1.4.2/32 Direct 0 0 127.0.0.1 InLoop0
1.1.5.0/30 Direct 0 0 1.1.5.5 GE0/2
1.1.5.5/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
1.1.6.0/24 Direct 0 0 1.1.6.1 GE0/3