R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

122
Figure 48 Network diagram for Layer 3 dynamic aggregation
Configuration procedure
Step1 Configure Firewall A
# Create Layer 3 aggregate interface Route-aggregation 1, configure the link aggregation mode as
dynamic, and configure an IP address and subnet mask for the aggregate interface.
<FirewallA> system-view
[FirewallA] interface route-aggregation 1
[FirewallA-Route-Aggregation1] link-aggregation mode dynamic
[FirewallA-Route-Aggregation1] ip address 192.168.1.1 24
[FirewallA-Route-Aggregation1] quit
# Assign Layer 3 Ethernet interfaces GigabitEthernet 0/1 through GigabitEthernet 0/3 to aggregation
group 1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] port link-aggregation group 1
[FirewallA-GigabitEthernet0/1] quit
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] port link-aggregation group 1
[FirewallA-GigabitEthernet0/2] quit
[FirewallA] interface gigabitethernet 0/3
[FirewallA-GigabitEthernet0/3] port link-aggregation group 1
[FirewallA-GigabitEthernet0/3] quit
# Configure to use the source and destination IP addresses of packets as the global link-aggregation
load sharing criteria.
[FirewallA] link-aggregation load-sharing mode source-ip destination-ip
Step2 Configure Firewall B
Configure Firewall B as you configure Firewall A.
Step3 Verify the configurations
# Display the summary information about all aggregation groups on Firewall A.
[FirewallA] display link-aggregation summary
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e2ff-0001
AGG AGG Partner ID Select Unselect Share
Interface Mode Ports Ports Type
-------------------------------------------------------------------------------
RAGG1 D 0x8000, 000f-e2ff-0002 3 0 Shar