R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

97
The output shows that in VRRP group 1, Firewall A is the master and Firewall B is a backup. Packets
from Host A to Host B are forwarded through Firewall A.
# Shut down the uplink interface GigaibtEthernet 0/2 on Firewall A.
[FirewallA-GigabitEthernet0/1] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] shutdown
After shutting down the uplink interface on Firewall A, you can still successfully ping Host B on Host
A. Use the display vrrp command to view information about VRRP group 1.
# After shutting down the uplink interface on Firewall A, display detailed information about VRRP
group 1 on Firewall A.
[FirewallA-GigabitEthernet0/2] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 110 Running Pri : 80
Preempt Mode : Yes Delay Time : 0
Become Master : 2200ms left
Auth Type : None
Virtual IP : 10.1.1.10
Master IP : 10.1.1.2
VRRP Track Information:
Track Object : 1 State : Negative Pri Reduced : 30
# After shutting down the uplink interface on Firewall A, display detailed information about VRRP
group 1 on Firewall B.
[FirewallB-GigabitEthernet0/1] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 0
Auth Type : None
Virtual IP : 10.1.1.10
Virtual MAC : 0000-5e00-0101
Master IP : 10.1.1.2
The output shows that when the uplink interface on Firewall A is shut down, the priority of Firewall
A decreases to 80. Firewall A becomes the backup, and Firewall B becomes the master. Packets
from Host A to Host B are forwarded through Firewall B.