R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

162
[DeviceA-GigabitEthernet0/2] port link-aggregation group 1
[DeviceA-GigabitEthernet0/2] quit
[DeviceA] interface gigabitethernet 0/3
[DeviceA-GigabitEthernet0/3] port link-aggregation group 1
[DeviceA-GigabitEthernet0/3] quit
# Configure the global link-aggregation load sharing criteria as the source and destination IP
addresses of packets.
[DeviceA] link-aggregation load-sharing mode source-ip destination-ip
2. Configure Device B in the same way as you configure Device A. (Details not shown.)
3. Verify the configurations:
# Display summary information about all aggregation groups on Device A.
[DeviceA] display link-aggregation summary
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e2ff-0001
AGG AGG Partner ID Select Unselect Share
Interface Mode Ports Ports Type
-------------------------------------------------------------------------------
RAGG1 S none 3 0 Shar
The output shows that link aggregation group 1 is a load-shared Layer 3 static aggregation group
that contains three Selected ports.
# Display the global link-aggregation load sharing criteria on Device A.
[DeviceA] display link-aggregation load-sharing mode
Link-Aggregation Load-Sharing Mode:
destination-ip address, source-ip address
The output shows that the global link-aggregation load sharing criteria are the source and
destination IP addresses of packets.
Layer 3 aggregation load sharing configuration example
NOTE:
In this configuration example, either Device A or Device B is the firewall.
Network requirements
As shown in Figure 73, configure two Layer 3 static aggregation groups (1 and 2) on Device A and
Device B respectively and configure IP addresses and subnet masks for the corresponding Layer 3
aggregate interfaces.
Configure link aggregation group 1 to perform load sharing based on source IP address and link
aggregation group 2 to perform load sharing based on destination IP address.