R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

14
Item Descri
p
tion
Virtual IP
Configure the virtual IP address of the VRRP group.
If an interface connects to multiple subnets, you can configure multiple virtual IP
addresses for the VRRP group to implement router backup on different subnets.
IMPORTANT:
• The virtual IP address cannot be 0.0.0.0, 255.255.255.255, a loopback
address, any other invalid IP address (like 0.0.0.1), or an address that does
not belong to class A, B or C.
• The virtual IP address can be either an unused IP address on the segment
where the VRRP group resides or the IP address of an interface on a router in
the VRRP group. In the latter case, the router is called the IP address owner.
Removal of the VRRP group on the IP address owner will cause IP address
collision. Therefore, you can modify the IP address of the interface on the IP
address owner to resolve the collision.
• The VRRP group can operate properly only when the configured virtual IP
address and the interface IP address belong to the same segment and are
valid host addresses. If the configured virtual IP address and the interface IP
address do not belong to the same network segment, or the configured IP
address is the network address or network broadcast address of the network
segment that the interface IP address belongs to, the state of the VRRP group
is always initialize though you can perform the configuration successfully.
VRRP does not take effect in this case.
Priority
Set the priority of the routers in a VRRP group. The greater the value, the higher
the priority.
IMPORTANT:
• VRRP determines the role (master or backup) of each router in the VRRP group
by priority. A router with a higher priority has more opportunity to become the
master.
• VRRP priority is in the range of 0 to 255. Priority 0 is reserved for special uses
and priority 255 for the IP address owner.
• When a router acts as the IP address owner, its priority is always 255. That is,
the IP address owner in a VRRP group acts as the master as long as it operates
properly.
Preempt Mode Set the working mode of the VRRP group:
• Preemptive—After setting the preempt mode to Preemptive, you need to
configure the preemption delay time.
• Non-preemptive—Non-preemptive mode.
IMPORTANT:
An IP address owner always operates in the preemptive mode.
Delay
Authentication Set the authentication mode and plain text authentication key of the VRRP group:
• Null—No authentication and no authentication key.
• Simple—Simple text authentication. In this case, you need to configure a plain
text authentication key.
• MD5—MD5 authentication. In this case, you need to configure a plain text
authentication key.
IMPORTANT:
You can configure different authentication modes and authentication keys for the
VRRP groups on an interface. However, the members of the same VRRP group must
use the same authentication mode and authentication key.
Key