R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

36
Introduction to asymmetric path
The stateful failover feature supports asymmetric path. When two firewalls operate properly, traffic can
pass through one firewall to the internal network and go out through the other firewall. The session passes
through one of the two firewalls randomly when leaving the internal network to achieve load sharing.
Configuring stateful failover
Select High Reliability > Stateful Failover from the navigation tree to enter the stateful failover
configuration page, as shown in Figure 19.
Figure 19 Stateful failover configuration page
Table 6 Stateful failover configuration items
Item Descri
p
tion
Enable Stateful Failover Enable/disable the stateful failover feature.
Backup Type
Select whether to support asymmetric path.
The configuration items are available only after you select the Enable Stateful
Failover checkbox.
Backup Interface
Set the failover interface that is validated at the next startup.
Click Modify Backup Interface to enter the Backup Interface Configuration page,
and then you can:
• Select one or more interfaces from the Optional Backup Interface(s) list, and
then click the << button to add the selected interfaces to the Backup Interface(s)
After Reboot list.
• Select one or more interfaces from the Backup Interface(s) After Reboot list, and
then click the >> button to remove the selected interfaces from the list.
IMPORTANT:
The failover interface configurations take effect after you reboot the device.
The lower part of the page displays the current stateful failover configuration and the failover interface
information.