R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module

101

102

103

104

105

106

107

108

109

110

[FirewallA] interface gigabitethernet 0/1

[FirewallA-GigabitEthernet0/1] vrrp vrid 1 virtual-ip 10.1.1.10

# Set the priority of Firewall A in VRRP group 1 to 110.

[FirewallA-GigabitEthernet0/1] vrrp vrid 1 priority 110

# Configure to monitor track entry 1 and specify the priority decrement as 30.

[FirewallA-GigabitEthernet0/1] vrrp vrid 1 track 1 reduced 30

4. Configure VRRP on Firewall B:

<FirewallB> system-view

[FirewallB] interface gigabitethernet 0/1

# Create VRRP group 1, and configure the virtual IP address 10.1.1.10 for the group.

[FirewallB-GigabitEthernet0/1] vrrp vrid 1 virtual-ip 10.1.1.10

5. Verify the configuration:

After configuration, ping Host B on Host A, and you can see that Host B is reachable. Use the

display vrrp command to view the configuration result.

# Display detailed information about VRRP group 1 on Firewall A.

[FirewallA-GigabitEthernet0/1] display vrrp verbose

IPv4 Standby Information:

Run Mode : Standard

Run Method : Virtual MAC

Total number of virtual routers : 1

Interface GigabitEthernet0/1

VRID : 1 Adver Timer : 1

Admin Status : Up State : Master

Config Pri : 110 Running Pri : 110

Preempt Mode : Yes Delay Time : 0

Auth Type : None

Virtual IP : 10.1.1.10

Virtual MAC : 0000-5e00-0101

Master IP : 10.1.1.1

VRRP Track Information:

Track Object : 1 State : Positive Pri Reduced : 30

# Display detailed information about VRRP group 1 on Firewall B.

[FirewallB-GigabitEthernet0/1] display vrrp verbose