F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100
138
2. On Firewall, configure a unicast static route, and associate the static route with a track entry:
# Configure a static route, and associate the static route with track entry 1.
<Firewall> system-view
[Firewall] ip route-static 10.1.1.2 24 10.2.1.1 track 1
3. On Firewall, configure an ICMP echo operation:
# Create an NQA operation with the administrator name being admin and operation tag being
test1.
[Firewall] nqa entry admin test1
# Configure the NQA operation type as ICMP echo.
[Firewall-nqa-admin-test1] type icmp-echo
# Configure 10.2.2.1 as the destination IP address.
[Firewall-nqa-admin-test1-icmp-echo] destination ip 10.2.1.1
# Configure the operation to repeat at an interval of 100 milliseconds.
[Firewall-nqa-admin-test1-icmp-echo] frequency 100
# Create reaction entry 1. If the number of consecutive probe failures reaches 5, collaboration is
triggered.
[Firewall-nqa-admin-test1-icmp-echo] reaction 1 checked-element probe-fail
threshold-type consecutive 5 action-type trigger-only
[Firewall-nqa-admin-test1-icmp-echo] quit
# Start the ICMP echo operation.
[Firewall] nqa schedule admin test1 start-time now lifetime forever
4. On Firewall, create the track entry:
# Create track entry 1, and associate it with reaction entry 1 of the ICMP echo operation
(admin-test1).
[Firewall] track 1 nqa entry admin test1 reaction 1
337BVerifying the configuration
# On Firewall, display information about all track entries.
[Firewall] display track all
Track ID: 1
Status: Positive
Notification delay: Positive 0, Negative 0 (in seconds)
Reference object:
NQA entry: admin test1
Reaction: 1
# Display brief information about active routes in the routing table on Firewall.
[Firewall] display ip routing-table
Routing Tables: Public
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost NextHop Interface
10.1.1.0/24 Static 60 0 10.2.1.1 GE0/1
10.2.1.0/24 Direct 0 0 10.2.1.2 GE0/1
10.2.1.2/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0