HP VPN Firewall Appliances High Availability Configuration Guide

166

Figure 75 Network diagram

2. Configuration procedure

a. Configure Firewall A:

# Create VLAN 10, and assign port GigabitEthernet 0/5 to VLAN 10.

<FirewallA> system-view

[FirewallA] vlan 10

[FirewallA-vlan10] port gigabitethernet 0/5

[FirewallA-vlan10] quit

# Create VLAN 20, and assign port GigabitEthernet 1/1 to VLAN 20.

<FirewallA> system-view

[FirewallA] vlan 20

[FirewallA-vlan20] port gigabitethernet 1/1

[FirewallA-vlan20] quit

# Create Layer 2 aggregate interface Bridge-Aggregation 1, and configure the load sharing

criterion for the link aggregation group as the source IP addresses of packets.

[FirewallA] interface bridge-aggregation 1

[FirewallA-Bridge-Aggregation1] link-aggregation load-sharing mode source-ip

[FirewallA-Bridge-Aggregation1] quit

# Assign ports GigabitEthernet 0/1 and GigabitEthernet 0/2 to link aggregation group 1.

[FirewallA] interface gigabitethernet 0/1

[FirewallA-GigabitEthernet0/1] port link-aggregation group 1

[FirewallA-GigabitEthernet0/1] quit

[FirewallA] interface gigabitethernet 0/2

[FirewallA-GigabitEthernet0/2] port link-aggregation group 1

[FirewallA-GigabitEthernet0/2] quit

# Configure Layer 2 aggregate interface Bridge-Aggregation 1 as a trunk port and assign it to

VLAN 10.

[FirewallA] interface bridge-aggregation 1

[FirewallA-Bridge-Aggregation1] port link-type trunk

[FirewallA-Bridge-Aggregation1] port trunk permit vlan 10

Please wait... Done.

Configuring GigabitEthernet0/1... Done.

Configuring GigabitEthernet0/2... Done.

[FirewallA-Bridge-Aggregation1] quit