HP VPN Firewall Appliances High Availability Configuration Guide

Item Descri

tion

Track

Interface

Configure the track interface function by adding the specified interface to be

monitored and the processing method.

• Interface—Name of the interface to be tracked.

• Reduced Priority—If the monitored interface state turns from up to down, the

priority of the router decreases by a specified value.

IMPORTANT:

• The configuration takes effect only when the router is not the IP address owner.

• When the status of the tracked interface turns from down or removed to up, the

corresponding router automatically restores its priority.

• The specified interface can be a Layer 3 Ethernet interface, a VLAN interface, a

Layer 3 aggregate interface, or an MP-group interface.

Reduced

Priority

Configuring IPv4 VRRP at the CLI

IPv4 VRRP configuration task list

To form a VRRP group, perform the following configurations on each firewall in the VRRP group.

Complete these tasks to configure VRRP for IPv4:

Task Remarks

Specifying the type of MAC addresses mapped to virtual IP addresses Optional.

Creating a VRRP group and assigning virtual IP address Required.

Configuring router priority, preemptive mode and tracking function Optional.

Configuring VRRP packet attributes Optional.

Enabling the trap function for VRRP Optional.

Specifying the type of MAC addresses mapped to virtual IP

addresses

You can configure VRRP in standard mode to map real or virtual MAC addresses to the virtual IP

addresses of VRRP groups, so the master in a VRRP group uses the specified type of MAC address as the

source MAC address for sending packets and answering ARP requests.

• Virtual MAC to virtual IP mapping—By default, a virtual MAC address is automatically assigned

when a VRRP group is created, and the virtual IP address of the VRRP group is mapped to the virtual

MAC address. In this mapping method, the hosts do not need to update the gateway IP and MAC

mapping entry when the master changes.

• Real MAC address of an interface—If a VRRP group has an IP address owner, configure real MAC

to virtual IP mapping to avoid the problem of one IP address mapped to two MAC addresses (the

real and the virtual). In this method, the virtual IP address of the VRRP group is mapped to the real

MAC address of the IP address owner, and all packets from hosts are forwarded to the IP address

owner.