HP VPN Firewall Appliances High Availability Configuration Guide

13
Figure 10 Modifying the VRRP group configuration
4. Configure the parameters as described in Table 4.
Table 4 Configuration items
Item Descri
p
tion
VRID Display group number of the VRRP group.
Virtual IP
Configure the virtual IP address of the VRRP group.
If an interface connects to multiple subnets, you can configure multiple virtual IP
addresses for the VRRP group to implement router backup on different subnets.
IMPORTANT:
• The virtual IP address cannot be 0.0.0.0, 255.255.255.255, a loopback address,
any other invalid IP address (like 0.0.0.1), or an address that does not belong to
class A, B or C.
• The virtual IP address can be either an unused IP address on the segment where the
VRRP group resides or the IP address of an interface on a router in the VRRP group.
In the latter case, the router is called the "IP address owner." Removal of the VRRP
group on the IP address owner will cause IP address collision. Therefore, you can
modify the IP address of the interface on the IP address owner to resolve the
collision.
• The VRRP group can operate correctly only when the configured virtual IP address
and the interface IP address belong to the same segment and are valid host
addresses. If the configured virtual IP address and the interface IP address do not
belong to the same network segment, or the configured IP address is the network
address or network broadcast address of the network segment to which the
interface IP address belongs, the state of the VRRP group is not always initialize
though you can perform the configuration successfully, that is, VRRP does not take
effect in this case.