F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

178
D---LOAD P---PULLED
188BMulti-interface load balancing configuration example
375BNetwork requirement
Use interfaces GigabitEthernet 0/2 and GigabitEthernet 0/3 on Firewall A to back up the active
interface GigabitEthernet 0/1, assigning interface GigabitEthernet 0/2 a higher priority.
Configure the available bandwidth used for setting the thresholds and the enable-threshold and
disable-threshold of load balancing.
Figure 82 Network diagram
376BConfiguration procedure
1. Configure IP addresses:
Follow
616HFigure 82 to configure the IP address and subnet mask for each interface. (Details not
shown.)
2. Configure a static route:
# On Firewall A, configure a static route to the segment 192.168.2.0/24 where Host B resides.
<FirewallA> system-view
[FirewallA] ip route-static 192.168.2.0 24 gigabitethernet 0/1 1.1.1.2
[FirewallA] ip route-static 192.168.2.0 24 gigabitethernet 0/2 2.2.2.2
[FirewallA] ip route-static 192.168.2.0 24 gigabitethernet 0/3 3.3.3.2
# On Firewall B, configure a static route to the segment 192.168.1.0/24 where Host A resides.
<FirewallB> system-view
[FirewallB] ip route-static 192.168.1.0 24 gigabitethernet 0/1 1.1.1.1
[FirewallB] ip route-static 192.168.1.0 24 gigabitethernet 0/2 2.2.2.1
[FirewallB] ip route-static 192.168.1.0 24 gigabitethernet 0/3 3.3.3.1
3. Configure the standby interfaces and load balancing on Firewall A:
# Specify interfaces GigabitEthernet 0/2 and GigabitEthernet 0/3 on Firewall A to back up
GigabitEthernet 0/1, and assign them the priorities 30 and 20, respectively.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] standby interface gigabitethernet 0/2 30
[FirewallA-GigabitEthernet0/1] standby interface gigabitethernet 0/3 20
# Configure the available bandwidth used for setting the thresholds to 10000 kbps.
[FirewallA-GigabitEthernet0/1] standby bandwidth 10000