R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

<FirewallB> system-view

[FirewallB] ip route-static 20.1.1.0 24 10.2.1.2 track 1

# Configure a static route to 20.1.1.0/24, with the address of the next hop as 10.4.1.3 and the

default priority 80.

[FirewallB] ip route-static 20.1.1.0 24 10.4.1.3 preference 80

# Configure a static route to 10.1.1.1, with the address of the next hop as 10.2.1.2.

[FirewallB] ip route-static 10.1.1.1 24 10.2.1.2

# Create an NQA test group with the administrator admin and the operation tag test.

[FirewallB] nqa entry admin test

# Configure the test type as ICMP-echo.

[FirewallB-nqa-admin-test] type icmp-echo

# Configure the destination address of the test as 10.1.1.1 and the next hop address as 10.2.1.2

to check the connectivity of the path from Firewall B to Router A, and then to Firewall A through

NQA.

[FirewallB-nqa-admin-test-icmp-echo] destination ip 10.1.1.1

[FirewallB-nqa-admin-test-icmp-echo] next-hop 10.2.1.2

# Configure the test frequency as 100 ms.

[FirewallB-nqa-admin-test-icmp-echo] frequency 100

# Configure reaction entry 1, specifying that five consecutive probe failures trigger the track

module.

[FirewallB-nqa-admin-test-icmp-echo] reaction 1 checked-element probe-fail

threshold-type consecutive 5 action-type trigger-only

[FirewallB-nqa-admin-test-icmp-echo] quit

# Start the NQA test.

[FirewallB] nqa schedule admin test start-time now lifetime forever

# Configure track entry 1, and associate it with reaction entry 1 of the NQA test group (with the

administrator admin, and the operation tag test).

[FirewallB] track 1 nqa entry admin test reaction 1

6. Verify the configuration:

# Display information of the track entry on Firewall A.

[FirewallA] display track all

Track ID: 1

Status: Positive

Duration: 0 days 0 hours 0 minutes 32 seconds

Notification delay: Positive 0, Negative 0 (in seconds)

Reference object:

NQA entry: admin test

Reaction: 1

# Display the routing table of Firewall A.

[FirewallA] display ip routing-table

Routing Tables: Public

Destinations : 10 Routes : 10

Destination/Mask Proto Pre Cost NextHop Interface

10.1.1.0/24 Direct 0 0 10.1.1.1 GE0/1