R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

120
# Display all the group-specific load sharing criteria on Firewall A.
[FirewallA] display link-aggregation load-sharing mode interface
Bridge-Aggregation1 Load-Sharing Mode:
source-ip address
Bridge-Aggregation2 Load-Sharing Mode:
destination-ip address
The output above shows that the load sharing criterion for link aggregation group 1 is the source IP
addresses of packets and that for link aggregation group 2 is the destination IP addresses of packets.
Layer 3 Static Aggregation Configuration Example
Network requirements
As shown in Figure 47:
• Firewall A and Firewall B are connected by their Layer 3 Ethernet interfaces GigabitEthernet 0/1
through GigabitEthernet 0/3.
• Configure a Layer 3 static link aggregation group on Firewall A and Firewall B respectively and
configure IP addresses and subnet masks for the corresponding Layer 3 aggregate interfaces.
• Enable traffic to be load-shared across aggregation group member ports based on source and
destination IP addresses.
Figure 47 Network diagram for Layer 3 static aggregation
Configuration procedure
Step1 Configure Firewall A
# Create Layer 3 aggregate interface Route-aggregation 1, and configure an IP address and subnet
mask for the aggregate interface.
<FirewallA> system-view
[FirewallA] interface route-aggregation 1
[FirewallA-Route-Aggregation1] ip address 192.168.1.1 24
[FirewallA-Route-Aggregation1] quit
# Assign Layer 3 Ethernet interfaces GigabitEthernet 0/1 through GigabitEthernet 0/3 to aggregation
group 1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] port link-aggregation group 1
[FirewallA-GigabitEthernet0/1] quit
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] port link-aggregation group 1
[FirewallA-GigabitEthernet0/2] quit
[FirewallA] interface gigabitethernet 0/3
[FirewallA-GigabitEthernet0/3] port link-aggregation group 1