R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101
i
Contents
High availability overview ··········································································································································· 1
Availability requirements ·················································································································································· 1
Availability evaluation ······················································································································································ 1
High availability technologies ········································································································································· 2
Fault detection technologies ···································································································································· 2
Protection switchover technologies ························································································································· 2
Configuring VRRP ························································································································································· 4
VRRP overview ··································································································································································· 4
Introduction to VRRP group ······································································································································ 5
VRRP timers ······························································································································································· 6
Packet format ···························································································································································· 7
Principles of VRRP ····················································································································································· 8
VRRP tracking ···························································································································································· 8
VRRP application (taking IPv4-based VRRP for example) ····················································································· 9
Configuring IPv4-based VRRP ······································································································································· 11
Configuring IPv4-based VRRP in the web interface ··························································································· 11
Configuring IPv4-based VRRP at the CLI ············································································································· 15
Configuring IPv6-based VRRP ······································································································································· 21
IPv6-based VRRP configuration task list ··············································································································· 21
Specifying the type of MAC addresses mapped to virtual IPv6 addresses ···················································· 22
Creating a VRRP group and configuring a virtual IPv6 address ······································································ 22
Configuring router priority, preemptive mode and tracking function ······························································ 23
Configuring VRRP packet attributes ····················································································································· 24
Displaying and maintaining VRRP for IPv6 ········································································································· 25
IPv4-based VRRP configuration examples ··················································································································· 25
Single VRRP group configuration example in the web interface ······································································ 25
Single VRRP group configuration example at the CLI ························································································ 29
VRRP interface tracking configuration example ································································································· 31
Multiple VRRP groups configuration example in the web interface ································································· 34
Multiple VRRP groups configuration example at the CLI ··················································································· 37
IPv6-based VRRP configuration examples ··················································································································· 40
Single VRRP group configuration example ········································································································· 40
VRRP interface tracking configuration example ································································································· 43
Multiple VRRP groups configuration example ···································································································· 46
Troubleshooting VRRP ···················································································································································· 49
The screen frequently displays error prompts ····································································································· 49
Multiple masters are present in the same VRRP group ······················································································ 49
Frequent VRRP state transition ······························································································································ 50
Configuring stateful failover ······································································································································ 51
Overview ········································································································································································· 51
Introduction to stateful failover ····························································································································· 51
Introduction to stateful failover states ·················································································································· 52
Configuring stateful failover ·········································································································································· 53
Stateful failover configuration example ······················································································································· 55
Configuration guidelines ··············································································································································· 57
Configuring IPC ·························································································································································· 58
Overview ········································································································································································· 58