R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101
132
[Firewall-nqa-admin-test] type icmp-echo
# Configure ICMP echo requests to use 10.2.2.1 as the destination IP address.
[Firewall-nqa-admin-test-icmp-echo] destination ip 10.2.1.1
# Configure the device to perform tests at an interval of 100 milliseconds.
[Firewall-nqa-admin-test-icmp-echo] frequency 100
# Create reaction entry 1. If the number of consecutive probe failures reaches 5, collaboration
with other modules is triggered.
[Firewall-nqa-admin-test-icmp-echo] reaction 1 checked-element probe-fail
threshold-type consecutive 5 action-type trigger-only
[Firewall-nqa-admin-test-icmp-echo] quit
# Configure the test start time and test duration for the test group.
[Firewall] nqa schedule admin test start-time now lifetime forever
4. On Firewall, create the track entry.
# Create track entry 1 to associate it with Reaction entry 1 of the NQA test group (admin-test).
[Firewall] track 1 nqa entry admin test reaction 1
Verifying the configuration
# On Firewall, display information about all the track entries.
[Firewall] display track all
Track ID: 1
Status: Positive
Notification delay: Positive 0, Negative 0 (in seconds)
Reference object:
NQA entry: admin test
Reaction: 1
# Display brief information about active routes in the routing table on Firewall.
[Firewall] display ip routing-table
Routing Tables: Public
Destinations : 5 Routes : 5
Destination/Mask Proto Pre Cost NextHop Interface
10.1.1.0/24 Static 60 0 10.2.1.1 GE0/1
10.2.1.0/24 Direct 0 0 10.2.1.2 GE0/1
10.2.1.2/32 Direct 0 0 127.0.0.1 InLoop0
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0
127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0
The output shows that the static route with the next hop 10.2.1.1 is active, and the status of the track entry
is positive. The static route configuration works.
# Remove the IP address of GigabitEthernet 0/1 on Router A.
<RouterA> system-view
[RouterA] interface gigabitethernet 0/1
[RouterA-GigabitEthernet0/1] undo ip address
# On Firewall, display information about all the track entries.
[Firewall] display track all
Track ID: 1