R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

210
Figure 132 Configuring a backup interface
d. Click Apply to return to the Stateful Failover Configuration page and perform the
configurations shown in Figure 133.
Figure 133 Configuring stateful failover
2. Configure VRRP:
# Create VRRP group 1 and assign a virtual IP address to the group.
<FirewallA> system-view
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] vrrp vrid 1 virtual-ip 10.1.1.1
# Set the priority of Firewall A in VRRP group 1 to 150.
[FirewallA-GigabitEthernet0/1] vrrp vrid 1 priority 150
# Configure Firewall A to work in preemption mode in VRRP group 1 and set the preemption delay
to 255 seconds.
[FirewallA-GigabitEthernet0/1] vrrp vrid 1 preempt-mode timer delay 255
# Configure Firewall A to monitor the status of the uplink interface GigabitEthernet 0/2 and, when
the interface becomes unavailable, reduce its own priority in VRRP group 1 to a value lower than