R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

• If Firewall A operates properly, packets sent from Host A to Host B are forwarded by Firewall A. If

GigabitEthernet 0/2 connecting Firewall A with the Internet becomes unavailable, packets sent

from Host A to Host B are forwarded by Firewall B.

Figure 12 Network diagram

Configuring Firewall A

# Configure the IP address of each interface and the zones. (Details not shown.)

# Create VRRP group 1 on GigabitEthernet 0/1 and configure the virtual IP address as 202.38.160.111.

• Select High Availability > VRRP from the navigation tree to enter the VRRP interfaces page. Click the

icon corresponding to GigabitEthernet 0/1 to enter the VRRP Configuration on Interface page,

as shown in Figure 13.

Figure 13 Creating VRRP group 1

• Enter 1 in the VRID field.

• Enter 202.38.160.111 in the Virtual IP field and then click Add to add the virtual IP address to the

Virtual IP Members field.

• Click Apply.

# Configure VRRP group attributes.

• On the VRRP group page of GigabitEthernet 0/1, click the icon corresponding to VRRP group

1 to enter the page shown in Figure 14.