R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

31
Figure 15 Network diagram for multiple VRRP groups configuration
2. Configuration procedure
a. Configure Firewall A
<FirewallA> system-view
[FirewallA] interface GigabitEthernet 0/1
[FirewallA-GigabitEthernet0/1] ip address 202.38.160.1 255.255.255.0
# Create VRRP group 1 and configure its virtual IP address as 202.38.160.111.
[FirewallA-GigabitEthernet0/1] vrrp vrid 1 virtual-ip 202.38.160.111
# Set the priority of Firewall A in VRRP group 1 to 110, which is higher than that of Firewall B (100), so
that Firewall A can become the master in VRRP group 1.
[FirewallA-GigabitEthernet0/1] vrrp vrid 1 priority 110
# Create VRRP group 2 and configure its virtual IP address as 202.38.160.112.
[FirewallA-GigabitEthernet0/1] vrrp vrid 2 virtual-ip 202.38.160.112
b. Configure Firewall B
<FirewallB> system-view
[FirewallB] interface GigabitEthernet 0/1
[FirewallB-GigabitEthernet0/1] ip address 202.38.160.2 255.255.255.0
# Create VRRP group 1 and configure its virtual IP address as 202.38.160.111.
[FirewallB-GigabitEthernet0/1] vrrp vrid 1 virtual-ip 202.38.160.111
# Create VRRP group 2 and configure its virtual IP address as 202.38.160.112.
[FirewallB-GigabitEthernet0/1] vrrp vrid 2 virtual-ip 202.38.160.112
# Set the priority of Firewall B in VRRP group 2 to 110, which is higher than that of Firewall A (100), so
that Firewall B can become the master in VRRP group 2.
[FirewallB-GigabitEthernet0/1] vrrp vrid 2 priority 110
c. Verify the configuration
To verify your configuration, use the display vrrp verbose command.
# Display the detailed information of the VRRP group on Firewall A.
[FirewallA-GigabitEthernet0/1] display vrrp verbose