HP VPN Firewall Appliances High Availability Configuration Guide

14
Item Descri
p
tion
Priority
Set the priority of the routers in a VRRP group. The greater the value, the higher the
priority.
IMPORTANT:
• VRRP determines the role (master or backup) of each router in the VRRP group by
priority. A router with a higher priority has more opportunity to become the master.
• VRRP priority is in the range of 0 to 255. Priority 0 is reserved for special uses and
priority 255 for the IP address owner.
• When a router acts as the IP address owner, its priority is always 255. That is, the
IP address owner in a VRRP group acts as the master as long as it works correctly.
Preempt Mode
Set the working mode of the VRRP group:
• Preemptive—After setting the preempt mode to Preemptive, you need to configure
the preemption delay time.
• Non-preemptive—Non-preemptive mode.
IMPORTANT:
An IP address owner always operates in preemptive mode.
Delay
Authentication
Set the authentication mode and plain text authentication key of the VRRP group:
• Null—No authentication and no authentication key.
• Simple—Simple text authentication. In this case, you need to configure a plain text
authentication key.
• MD5—MD5 authentication. In this case, you need to configure a plain text
authentication key.
IMPORTANT:
You can configure different authentication modes and authentication keys for the VRRP
groups on an interface. However, the members of the same VRRP group must use the
same authentication mode and authentication key.
Key
Advertise Time
Set the interval at which the master sends VRRP advertisements.
Excessive traffic or different timer setting on routers can cause the Backup timer to time
out abnormally and trigger a change of the state. To solve this problem, you can
prolong the time interval to send VRRP packets.
IMPORTANT:
Routers in the same VRRP group must use the same setting of advertisement interval.
5. Click Display Track Config to expand the configuration items of the tracking function.