F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

25
22B
IPv4 VRRP configuration examples
91B Single VRRP group configuration example (in the Web
interface)
250B Network requirements
As shown in 494H Figure 12, Host A wants to access Host B on the Internet, using 202.38.160.111/24 as its
default gateway. Firewall A and Firewall B belong to VRRP group 1 with the virtual IP address
2 0 2 . 3 8 .16 0 .111/24.
If Firewall A operates properly, the packets that Host A sends to Host B are forwarded by Firewall A. If
GigabitEthernet 0/2 connecting Firewall A to the Internet becomes unavailable, packets sent from Host
A to Host B are forwarded by Firewall B.
To prevent spoof attacks to the VRRP group from unauthorized users, configure the authentication mode
as plain text to authenticate the VRRP packets in VRRP group 1. Specify the authentication key as hello.
Figure 12 Network diagram
251B Configuring Firewall A
1. Configure the IP address of each interface and the zones. (Details not shown.)
2. Create VRRP group 1 on GigabitEthernet 0/1 and configure the virtual IP address as
202.38.160.111:
a. Select High Availability > VRRP from the navigation tree.
b. Click the icon corresponding to GigabitEthernet 0/1.
The VRRP group page appears.
c. Click Add.
The page for creating a VRRP group appears.
d. Enter 1 in the VRID field and 202.38.160.111 in the Virtual IP field, and then click Add to add
the virtual IP address to the Virtual IP Members field.
e. Click Apply.