R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

Firewall A is the backup, Firewall B is the master and the host with the default gateway of

2 0 2 . 3 8 .16 0 .112/24 accesses the Internet through Firewall B.

NOTE:

To implement load balancing between the VRRP groups, be sure to configure the default gateway as

202.38.160.111 or 202.38.160.112 on the hosts on network segment 202.38.160.0/24.

IPv6-based VRRP configuration examples

Single VRRP group configuration example

Network requirements

• Firewall A and Firewall B belong to VRRP group 1 with the virtual IPv6 addresses of 1::10/64 and

FE80::10.

• Host A wants to access Host B on the Internet. Host A learns 1::10/64 as its default gateway through

the RA messages sent by the routers.

• When Firewall A operates properly, packets sent from Host A to Host B are forwarded by Firewall

A; when Firewall A fails, packets sent from Host A to Host B are forwarded by Firewall B.

Figure 24 Network diagram

Configuring Firewall A

<FirewallA> system-view

[FirewallA] ipv6

[FirewallA] interface gigabitethernet 0/1

[FirewallA-GigabitEthernet0/1] ipv6 address fe80::1 link-local

[FirewallA-GigabitEthernet0/1] ipv6 address 1::1 64

# Create a VRRP group 1 and set its virtual IPv6 addresses to FE80::10 and 1::10.

[FirewallA-GigabitEthernet0/1] vrrp ipv6 vrid 1 virtual-ip fe80::10 link-local

[FirewallA-GigabitEthernet0/1] vrrp ipv6 vrid 1 virtual-ip 1::10

# Configure the priority of Firewall A in VRRP group 1 as 110, which is higher than that of Firewall B (100),

so that Firewall A can become the master.