HP VPN Firewall Appliances High Availability Configuration Guide

163
# Create Layer 2 aggregate interface Bridge-Aggregation 1.
[FirewallA] interface bridge-aggregation 1
[FirewallA-Bridge-Aggregation1] quit
# Assign ports GigabitEthernet 0/1 and GigabitEthernet 0/2 to link aggregation group 1.
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] port link-aggregation group 1
[FirewallA-GigabitEthernet0/1] quit
[FirewallA] interface gigabitethernet 0/2
[FirewallA-GigabitEthernet0/2] port link-aggregation group 1
[FirewallA-GigabitEthernet0/2] quit
# Configure Layer 2 aggregate interface Bridge-Aggregation 1 as a trunk port and assign it to
VLANs 10 and 20.
[FirewallA] interface bridge-aggregation 1
[FirewallA-Bridge-Aggregation1] port link-type trunk
[FirewallA-Bridge-Aggregation1] port trunk permit vlan 10 20
Please wait... Done.
Configuring GigabitEthernet0/1... Done.
Configuring GigabitEthernet0/2... Done.
[FirewallA-Bridge-Aggregation1] quit
# Configure Device A to use the source and destination IP addresses of packets as the global
link-aggregation load sharing criteria.
[FirewallA] link-aggregation load-sharing mode source-ip destination-ip
b. Configure Firewall B in the same way Firewall A is configured. (Details not shown.)
3. Verify the configuration
# Display summary information about all aggregation groups on Firewall A.
[FirewallA] display link-aggregation summary
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e2ff-0001
AGG AGG Partner ID Select Unselect Share
Interface Mode Ports Ports Type
-------------------------------------------------------------------------------
BAGG1 S none 2 0 Shar
The output shows that link aggregation group 1 is a load-shared Layer 2 static aggregation group
and it contains two Selected ports.
# Display the global link-aggregation load sharing criteria on Firewall A.
[FirewallA] display link-aggregation load-sharing mode
Link-Aggregation Load-Sharing Mode:
destination-ip address, source-ip address
The output shows that all link aggregation groups created on the device perform load sharing
based on source and destination IP addresses.
Layer 2 dynamic aggregation configuration example
1. Network requirements