R3166-R3206-HP High-End Firewalls High Availability Configuration Guide-6PW101

50
• The always Invalid state of the track entry shows that the association does not take effect and each
interface keeps its original forwarding state. When the track entry turns to Invalid from other state,
a standby interface becomes the active interface.
Follow these steps to associate track with interface backup:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view interface interface-type interface-number —
Associate the interface with a track
entry
standby track track-entry-number
Required
Not configured by
default.
NOTE:
• You can associate an interface with only one track entry. If you execute the standby track command
repeatedly, the last configuration takes effect.
• You can associate a nonexistent track entry with an interface. The association takes effect only after you
use the track command to create the track entry.
• Ten-GigabitEthernet interfaces do not support associating track with interface backup.
Displaying and maintaining track entries
To do… Use the command… Remarks
Display information about the specified track
entry or all track entries
display track
{ track-entry-number | all }
Available in any view
Track configuration examples
VRRP-track-NQA collaboration configuration example (the
master monitors the uplinks)
Network requirements
• As shown in Figure 24, Host A needs to access Host B on the Internet. The default gateway of Host
A i s 10 .1.1.10 / 24 .
• Firewall A and Firewall B belong to VRRP group 1, whose virtual IP address is 10.1.1.10.
• When Firewall A works normally, packets from Host A to Host B are forwarded through Firewall A.
When VRRP finds that there is a fault on the uplink of Firewall A through NQA, packets from Host
A to Host B are forwarded through Firewall B.