R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

37
• Select High Availability > VRRP from the navigation tree to enter the VRRP interfaces page. Click the
icon corresponding to GigabitEthernet 0/1 to enter the VRRP Configuration on Interface page
and then click Add.
• Enter 1 in the VRID field.
• Enter 202.38.160.111 in the Virtual IP field and click Add to add the virtual IP address to the Virtual
IP Members field.
• Click Apply.
# Create VRRP group 2 on GigabitEthernet 0/1 and configure the virtual IP address as 202.38.160.112.
• On the VRRP group page of GigabitEthernet 0/1, click Add.
• Enter 2 in the VRID field.
• Enter 202.38.160.112 in the Virtual IP field and click Add to add the virtual IP address to the Virtual
IP Members field.
• Click Apply.
# Set the priority of Firewall B in VRRP group 2 to 11 0 .
• Click the icon corresponding to VRRP group 2 on the VRRP group page of GigabitEthernet 0/1.
• Enter 110 in the Priority field.
• Click Apply.
Verifying the configuration
After the configuration, the VRRP group information on GigabitEthernet 0/1 on Firewall A and Firewall
B shows that:
• In VRRP group 1, Firewall A is the master and Firewall B is the backup. Hosts on 202.38.160.111/24
access the Internet through Firewall A.
• In VRRP group 2, Firewall A is the backup and Firewall B is the master. Hosts on 202.38.160.112 / 24
access the Internet through Firewall B.
Multiple VRRP groups configuration example at the CLI
Network requirements
• In the segment 202.38.160.0/24, some hosts use 202.38.160.110/24 as their default gateway and
some hosts use 202.38.160.112/24 as their default gateway.
• Load sharing and mutual backup between default gateways can be implemented by using VRRP
groups.