R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

124
# Create Layer 3 aggregate interface Route-Aggregation 2, configure its link aggregation group to
perform load sharing based on destination IP address, and configure an IP address and subnet mask for
the aggregate interface.
[FirewallA] interface route-aggregation 2
[FirewallA-Route-Aggregation2] link-aggregation load-sharing mode destination-ip
[FirewallA-Route-Aggregation2] ip address 192.168.2.1 24
[FirewallA-Route-Aggregation2] quit
# Assign Layer 3 Ethernet interfaces GigabitEthernet 0/3 and GigabitEthernet 0/4 to aggregation
group 2.
[FirewallA] interface gigabitethernet 0/3
[FirewallA-GigabitEthernet0/3] port link-aggregation group 2
[FirewallA-GigabitEthernet0/3] quit
[FirewallA] interface gigabitethernet 0/4
[FirewallA-GigabitEthernet0/4] port link-aggregation group 2
[FirewallA-GigabitEthernet0/4] quit
Step2 Configure Firewall B
Configure Firewall B as you configure Firewall A.
Step3 Verify the configurations
# Display the summary information about all aggregation groups on Firewall A.
[FirewallA] display link-aggregation summary
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e2ff-0001
AGG AGG Partner ID Select Unselect Share
Interface Mode Ports Ports Type
-------------------------------------------------------------------------------
RAGG1 S none 2 0 Shar
RAGG2 S none 2 0 Shar
The output shows that link aggregation groups 1 and 2 are both load shared Layer 3 static aggregation
groups and each contains two selected ports.
# Display all the group-specific load sharing criteria on Firewall A.
[FirewallA] display link-aggregation load-sharing mode interface
Route-Aggregation1 Load-Sharing Mode:
source-ip address
Route-Aggregation2 Load-Sharing Mode:
destination-ip address
The output shows that the load sharing criterion for link aggregation group 1 is the source IP address and
the load sharing criterion for link aggregation group 2 is the destination IP address.