R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

118
Figure 50 Network diagram
Configuration procedure
NOTE:
Before you make the configuration, make sure the devices can reach each other.
# Create an ICMP echo test group and specify 10.2.2.2 as the destination IP address for ICMP echo
requests to be sent.
<Firewall> system-view
[Firewall] nqa entry admin test
[Firewall-nqa-admin-test] type icmp-echo
[Firewall-nqa-admin-test-icmp-echo] destination ip 10.2.2.2
# Configure 10.1.1.2 as the next hop IP address for ICMP echo requests. The ICMP echo requests are sent
to Device B to Device A (the destination).
[DeviceA-nqa-admin-test-icmp-echo] next-hop 10.1.1.2
# Configure the Firewall to perform 10 probe operations per test, perform tests at an interval of 5000
milliseconds. Set the NQA probe timeout time as 500 milliseconds.
[Firewall-nqa-admin-test-icmp-echo] probe count 10
[Firewall-nqa-admin-test-icmp-echo] probe timeout 500
[Firewall-nqa-admin-test-icmp-echo] frequency 5000
# Enable the saving of history records and configure the maximum number of history records that can be
saved for a test group.
[Firewall-nqa-admin-test-icmp-echo] history-record enable
[Firewall-nqa-admin-test-icmp-echo] history-record number 10
[Firewall-nqa-admin-test-icmp-echo] quit
# Start ICMP echo tests.
[Firewall] nqa schedule admin test start-time now lifetime forever