F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

Item Descri

tion

Track

Interface

Configure the track interface function by adding the specified interface to be

monitored and the processing method.

• Interface—Name of the interface to be tracked.

• Reduced Priority—If the monitored interface state turns from up to down, the

priority of the router decreases by a specified value.

IMPORTANT:

• The configuration takes effect only when the router is not the IP address owner.

• When the status of the tracked interface turns from down or removed to up, the

corresponding router automatically restores its priority.

• The specified interface can be a Layer 3 Ethernet interface, a VLAN interface, a

Layer 3 aggregate interface, or an MP-group interface.

Reduced

Priority

20B

Configuring IPv4 VRRP at the CLI

78BIPv4 VRRP configuration task list

To form a VRRP group, perform the following configurations on each firewall in the VRRP group.

Complete these tasks to configure VRRP for IPv4:

Task Remarks

485H

Specifying the type of MAC addresses mapped to virtual IP addresses Optional.

486H

Creating a VRRP group and assigning virtual IP address Required.

487H

Configuring router priority, preemptive mode and tracking function Optional.

488H

Configuring VRRP packet attributes Optional.

489H

Enabling the trap function for VRRP Optional.

79BSpecifying the type of MAC addresses mapped to virtual IP

addresses

You can configure VRRP in standard mode to map real or virtual MAC addresses to the virtual IP

addresses of VRRP groups, so the master in a VRRP group uses the specified type of MAC address as the

source MAC address for sending packets and answering ARP requests.

• Virtual MAC to virtual IP mapping—By default, a virtual MAC address is automatically assigned

when a VRRP group is created, and the virtual IP address of the VRRP group is mapped to the virtual

MAC address. In this mapping approach, the hosts do not need to update the gateway IP and MAC

mapping entry when the master changes.

• Real MAC address of an interface—If a VRRP group has an IP address owner, configure real MAC

to virtual IP mapping to avoid the problem of one IP address mapped to two MAC addresses (the

real and the virtual). In this approach, the virtual IP address of the VRRP group is mapped to the real

MAC address of the IP address owner, and all packets from hosts are forwarded to the IP address

owner.