R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101
96
[Firewall] ip route-static 10.1.1.2 24 10.2.1.1 track 1
3. On Firewall, create an NQA test group.
# Create an NQA test group with the administrator name being admin and operation tag being test.
[Firewall] nqa entry admin test
# Configure the test type of the NQA test group as ICMP echo.
[Firewall-nqa-admin-test] type icmp-echo
# Configure the destination IP address of the ICMP echo test operation as 10.2.1.1.
[Firewall-nqa-admin-test-icmp-echo] destination ip 10.2.1.1
# Configure the interval between two consecutive tests as 100 milliseconds.
[Firewall-nqa-admin-test-icmp-echo] frequency 100
# Create collaboration entry 1. If the number of consecutive probe failures reaches 5, collaboration with
other modules is triggered.
[Firewall-nqa-admin-test-icmp-echo] reaction 1 checked-element probe-fail threshold-type
consecutive 5 action-type trigger-only
[Firewall-nqa-admin-test-icmp-echo] quit
# Configure the test start time and test duration for the test group.
[Firewall] nqa schedule admin test start-time now lifetime forever
4. On Firewall, create the track entry.
# Create track entry 1 to associate it with Reaction entry 1 of the NQA test group (admin-test).
[Firewall] track 1 nqa entry admin test reaction 1
5. Verify the configuration.
# On Firewall, display information about all the track entries.
[Firewall] display track all
Track ID: 1
Status: Positive
Notification delay: Positive 0, Negative 0 (in seconds)
Reference object:
NQA entry: admin test
Reaction: 1
# Display brief information about active routes in the routing table on Firewall.
[Firewall] display ip routing-table
Routing Tables: Public
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost NextHop Interface
10.1.1.0/24 Static 60 0 10.2.1.1 GE0/1
10.2.1.0/24 Direct 0 0 10.2.1.2 GE0/1
10.2.1.2/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
The information shows that the static route with the next hop 10.2.1.1 is active, and the status of the track
entry is positive. The static route configuration works.
# Remove the IP address of Ethernet 1/1 on Router A.