R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101
18
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
• Enter Layer 3 Ethernet subinterface view:
interface interface-type
interface-number.subnumber
• Enter Layer 3 aggregation subinterface
view:
interface route-aggregation
interface-number.subnumber
Use either command.
3. Specify a VRRP
control VLAN.
• Specify a VRRP control VLAN for the
subinterface configured with ambiguous
Dot1q termination:
vrrp dot1q vid vlan-id
• Specify a VRRP control VLAN for the
subinterface configured with ambiguous
QinQ termination:
vrrp dot1q vid vlan-id secondary-dot1q
secondary-vlan-id
Use either command.
By default, no VRRP control VLAN
is specified for the subinterface
configured with VLAN termination.
That is, the master sends VRRP
advertisements within all VLANs
whose VLAN packets are
configured to be terminated by the
subinterface.
Creating a VRRP group and configuring virtual IP address
When creating a VRRP group on an interface, configure a virtual IP address for the VRRP group. If the
interface connects to multiple sub-networks, you can configure multiple virtual IP addresses for the VRRP
group to realize router backup on different sub-networks.
A VRRP group is automatically created when you specify the first virtual IP address for the VRRP group.
If you specify another virtual IP address for the VRRP group later, the virtual IP address is added to the
virtual IP address list of the VRRP group.
NOTE:
Do not create VRRP groups on the VLAN interface of a super VLAN. Otherwise, network performance
might be affected.
Before creating a VRRP group and configuring a virtual IP address on an interface, configure an IP
address for the interface and make sure that it is in the same network segment as the virtual IP address
to be configured.
To create a VRRP group and configure a virtual IP address:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter the specified interface
view.
interface interface-type
interface-number
N/A
3. Create a VRRP group and
configure a virtual IP address
for the VRRP group.
vrrp vrid virtual-router-id virtual-ip
virtual-address
VRRP group is not created by
default.