F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

167
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e2ff-0001
AGG AGG Partner ID Select Unselect Share
Interface Mode Ports Ports Type
------------------------------------------------------------------------------
-
BAGG1 S none 2 0 Shar
BAGG2 S none 2 0 Shar
The output shows that link aggregation groups 1 and 2 are both load-sharing-capable Layer 2
static aggregation groups and each contains two Selected ports.
# Display all the group-specific load-sharing criteria on Firewall A.
[FirewallA] display link-aggregation load-sharing mode interface
Bridge-Aggregation1 Load-Sharing Mode:
source-ip address
Bridge-Aggregation2 Load-Sharing Mode:
destination-ip address
The output shows that the load sharing criterion for link aggregation group 1 is the source IP
addresses of packets and that for link aggregation group 2 is the destination IP addresses of
packets.
368BLayer 3 static aggregation configuration example
1. Network requirements
As shown in
603HFigure 75, configure a Layer 3 static aggregation group on both Firewall A and
Firewall B and configure IP addresses and subnet masks for the corresponding Layer 3 aggregate
interfaces.
Enable traffic to be load-shared across aggregation group member ports based on source and
destination IP addresses.
Figure 75 Network diagram
2. Configuration procedure
a. Configure Firewall A:
# Create Layer 3 aggregate interface Route-Aggregation 1, and configure an IP address and
subnet mask for the aggregate interface.
<FirewallA> system-view
[FirewallA] interface route-aggregation 1
[FirewallA-Route-Aggregation1] ip address 192.168.1.1 24
[FirewallA-Route-Aggregation1] quit