F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

170
[FirewallA] display link-aggregation load-sharing mode
Link-Aggregation Load-Sharing Mode:
destination-ip address, source-ip address
The output shows that the global link-aggregation load-sharing criteria are the source and
destination IP addresses of packets.
370BLayer 3 aggregation load sharing configuration example
1. Network requirements
As shown in
605HFigure 77, configure two Layer 3 static aggregation groups (1 and 2) on both Firewall
A and Firewall B, and configure IP addresses and subnet masks for the corresponding Layer 3
aggregate interfaces.
Configure link aggregation group 1 to perform load sharing based on source IP address and link
aggregation group 2 to perform load sharing based on destination IP address.
Figure 77 Network diagram
2. Configuration procedure
a. Configure Firewall A:
# Create Layer 3 aggregate interface Route-Aggregation 1, configure it to perform load
sharing based on source IP address, and configure an IP address and subnet mask for the
aggregate interface.
<FirewallA> system-view
[FirewallA] interface route-aggregation 1
[FirewallA-Route-Aggregation1] link-aggregation load-sharing mode source-ip
[FirewallA-Route-Aggregation1] ip address 192.168.1.1 24
[FirewallA-Route-Aggregation1] quit
# Assign Layer 3 interfaces GigabitEthernet 0/1 and GigabitEthernet 0/2 to aggregation
group 1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] port link-aggregation group 1
[FirewallA-GigabitEthernet0/1] quit
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] port link-aggregation group 1
[FirewallA-GigabitEthernet0/2] quit
# Create Layer 3 aggregate interface Route-Aggregation 2, configure its link aggregation
group to perform load sharing based on destination IP address, and configure an IP address
and subnet mask for the aggregate interface.
[FirewallA] interface route-aggregation 2
[FirewallA-Route-Aggregation2] link-aggregation load-sharing mode destination-ip
[FirewallA-Route-Aggregation2] ip address 192.168.2.1 24
[FirewallA-Route-Aggregation2] quit
# Assign Layer 3 interfaces GigabitEthernet 0/3 and GigabitEthernet 0/4 to aggregation
group 2.