R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

33
Firewall A is the backup, Firewall B is the master and the host with the default gateway of
2 0 2 . 3 8 .16 0 .112/24 accesses the Internet through Firewall B.
NOTE:
To implement load balancing between the VRRP groups, be sure to configure the default gateway as
202.38.160.111 or 202.38.160.112 on the hosts on network segment 202.38.160.0/24.
Troubleshooting VRRP
Symptom 1:
The screen frequently displays error prompts.
Analysis:
This error is probably caused by:
Inconsistent configuration of the devices in the VRRP group.
A device is attempting to send illegitimate VRRP packets.
Solution:
In the first case, modify the configuration.
In the latter case, resort to non-technical measures.
Symptom 2:
Multiple masters are present in the same VRRP group.
Analysis:
Multiple masters coexist for a short period: This is normal and requires no manual intervention.
Multiple masters coexist for a long period: This is because devices in the VRRP group cannot receive
VRRP packets, or the received VRRP packets are illegal.
Solution:
Ping between these masters, and do the following:
If the ping fails, check network connectivity.
If the ping succeeds, check that their configurations are consistent in terms of number of virtual IP
addresses, virtual IP addresses, advertisement interval, and authentication.
Symptom 3:
Frequent VRRP state transition.
Analysis:
The VRRP advertisement interval is set too short.
Solution:
Increase the interval to sent VRRP advertisement or introduce a preemption delay.