R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

326
Public Routing Table : Static
Summary Count : 2
Static Routing table Status : < Active>
Summary Count : 1
Destination/Mask Proto Pre Cost NextHop Interface
120.1.1.0/24 Static 65 0 10.1.1.100 GigabitEthernet0/1
Static Routing table Status : < Inactive>
Summary Count : 1
Destination/Mask Proto Pre Cost NextHop Interface
120.1.1.0/24 Static 60 0 12.1.1.2 GigabitEthernet0/1
BFD for static routes configuration example (indirect next hop)
at the CLI
Network requirements
In Figure 235, Firewall A has a route to interface Loopback1 (2.2.2.9/32) on Router B, with the output
interface GigabitEthernet 0/1. Router B has a route to interface Loopback1 (1.1.1.9/32) on Firewall A,
with the output interface GigabitEthernet 0/1. Router D has a route to 1.1.1.9/32, with the output interface
GigabitEthernet 0/1, and a route to 2.2.2.9/32, with the output interface GigabitEthernet 0/2.
Configure a static route to subnet 120.1.1.0/24 on Firewall A, configure a static route to subnet
121.1.1.0/24 on Router B. Enable BFD for both routes so that when the link between Firewall A and Router
B through Router D fails, BFD can detect the failure immediately and Firewall A and Router B can
communicate through Router C.
Figure 235 Network diagram
Device Interface IP address Device Interface IP address
Firewall
A
GE0
/
1 12.1.1.1/24 Router B GE0
/
1 11.1.1.2/24
GE0/2 10.1.1.102/24 GE0/2 13.1.1.1/24
Loop1 1.1.1.9/32 Loop1 2.2.2.9/32
Router C GE0
/
1 10.1.1.100
/
24 Router D GE0
/
1 12.1.1.2/24
GE0/2 13.1.1.2/24 GE0/2 11.1.1.1/24
Configuration procedure
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure BFD:
GE0/2
GE0/
2