R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101
30
If interface GigabitEthernet 0/1 through which Firewall A connects to the Internet is not available, you
can still successfully ping Host B on Host A. To view the detailed information of the VRRP group, use the
display vrrp verbose command.
# If interface GigabitEthernet 0/1 on Firewall A is not available, the detailed information of VRRP group
1 on Firewall A is displayed.
[FirewallA-GigabitEthernet0/1] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/2
VRID : 1 Adver Timer : 4
Admin Status : Up State : Backup
Config Pri : 110 Running Pri : 80
Preempt Mode : Yes Delay Time : 5
Become Master : 4200ms left
Auth Type : Simple Key : hello
Virtual IP : 202.38.160.111
Master IP : 202.38.160.2
VRRP Track Information:
Track Interface: GE0/1 State : Down Pri Reduced : 30
# If interface GigabitEthernet 0/1 on Firewall A is not available, the detailed information of VRRP group
1 on Firewall B is displayed.
[FirewallB-GigabitEthernet0/2] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/2
VRID : 1 Adver Timer : 4
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 5
Auth Type : Simple Key : hello
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.2
The output shows that if interface GigabitEthernet 0/1 on Firewall A is not available, the priority of
Firewall A is reduced to 80 and it becomes the backup. Firewall B becomes the master and packets sent
from Host A to Host B are forwarded by Firewall B.
Multiple VRRP groups configuration example
1. Network requirements
• I n t h e s e g m e n t 2 02. 3 8 .16 0 . 0 / 2 4 , s o m e h o s t s u s e 2 02 . 3 8 .16 0 .111/24 as their default gateway and
some hosts use 202.38.160.112/24 as their default gateway.
• Load sharing and mutual backup between default gateways can be implemented by using VRRP
groups.