R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

129
Figure 57 Network diagram
Configuration procedure
NOTE:
Before you make the configuration, make sure the devices can reach each other.
1. Configure Firewall B:
# Enable the NQA server and configure a listening service to listen to IP address 10.2.2.2 and
UDP port 8000.
<FirewallB> system-view
[FirewallB] nqa server enable
[FirewallB] nqa server udp-echo 10.2.2.2 8000
2. Configure Firewall A:
# Create a UDP echo test group.
<DeviceA> system-view
[DeviceA] nqa entry admin test
[DeviceA-nqa-admin-test] type udp-echo
# Configure UDP packets to use 10.2.2.2 as the destination IP address and port 8000 as the
destination port.
[FirewallA-nqa-admin-test-udp-echo] destination ip 10.2.2.2
[FirewallA-nqa-admin-test-udp-echo] destination port 8000
# Enable the saving of history records.
[FirewallA-nqa-admin-test-udp-echo] history-record enable
[FirewallA-nqa-admin-test-udp-echo] quit
# Start UDP echo tests.
[FirewallA] nqa schedule admin test start-time now lifetime forever
# Stop UDP echo tests after a period of time.
[FirewallA] undo nqa schedule admin test
# Display the results of the last UDP echo test.
[FirewallA] display nqa result admin test
NQA entry (admin admin, tag test) test results:
Destination IP address: 10.2.2.2
Send operation times: 1 Receive response times: 1
Min/Max/Average round trip time: 25/25/25
Square-Sum of round trip time: 625
Last succeeded probe time: 2007-11-22 10:36:17.9
Extended results:
Packet loss in test: 0%
Failures due to timeout: 0
Failures due to disconnect: 0
Failures due to no connection: 0