R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

39
Collaboration group configuration
NOTE:
The firewall supports configuring collaboration groups only in the web interface.
Overview
As shown in Figure 20, LAN users Host A, Host B and Host C access the Internet through Firewall B.
When the link connecting Router A and Firewall B goes down, the traffic switches from Firewall B to the
standby device Firewall C due to the fact that dynamic routing is enabled in the network. However,
because the link connecting Firewall B and the LAN is still up, the time required for dynamic route refresh
is long and the traffic switchover is slow, which greatly affect the LAN users’ access to the Internet.
Figure 20 Network diagram for collaboration group configuration
After the collaboration group feature is implemented, and Firewall B’s ports connecting Router A and the
LAN are assigned to a collaboration group:
• When the physical state of any port in the collaboration group is down, the other ports in the
collaboration group are set to the Linkgroup-down state, which is an administratively down state. A
port in this state cannot exchange traffic with its peer.
• When the port that was physically down goes up, the system tries to bring up the other ports in the
collaboration group. If they go up in ten seconds, the collaboration group goes up; if any port fails
to go up, the port is set to the Down state, while all the other ports are set to the Linkgroup-down
state. The collaboration group is in the Down state.
In this way, dynamic routes are timely refreshed and the traffic switchover process is speeded up, which
has little impact on the LAN users’ access to the Internet.