R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

30
Configuring Firewall B
<FirewallB> system-view
[FirewallB] interface gigabitethernet 0/1
[FirewallB-GigabitEthernet0/1] ip address 202.38.160.2 255.255.255.0
# Create VRRP group 1 and configure its virtual IP address as 202.38.160.111.
[FirewallB-GigabitEthernet0/1] vrrp vrid 1 virtual-ip 202.38.160.111
# Configure Firewall B to operate in the preemptive mode, with the preemption delay set to 5 seconds.
[FirewallB-GigabitEthernet0/1] vrrp vrid 1 preempt-mode timer delay 5
Verifying the configuration
After the configuration, Host B can be pinged successfully on Host A. To verify your configuration, use the
display vrrp verbose command.
# Display detailed information about VRRP group 1 on Firewall A.
[FirewallA-GigabitEthernet0/1] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 1
Admin Status : Up State : Master
Config Pri : 110 Running Pri : 110
Preempt Mode : Yes Delay Time : 5
Auth Type : None
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.1
# Display detailed information about VRRP group 1 on Firewall B.
[FirewallB-GigabitEthernet0/1] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 1
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 5
Become Master : 4200ms left
Auth Type : None
Virtual IP : 202.38.160.111
Master IP : 202.38.160.1
The output shows that in VRRP group 1 Firewall A is the master, Firewall B is the backup and packets sent
from Host A to Host B are forwarded by Firewall A.
If Firewall A fails, you can still ping Host B successfully on Host A. To view detailed information about the
VRRP group on Firewall B, use the display vrrp verbose command.