HP VPN Firewall Appliances High Availability Configuration Guide

Specify the type of the MAC addresses mapped to the virtual IP addresses before creating a VRRP group.

You cannot change the address mapping setting after a VRRP group is created.

To specify the type of MAC addresses mapped to virtual IP addresses:

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Specify the type of MAC

addresses mapped to virtual

IP addresses.

vrrp method { real-mac |

virtual-mac }

Optional.

Virtual MAC address by default.

Creating a VRRP group and assigning virtual IP address

Configuration guidelines

• You can configure multiple virtual IP addresses for the VRRP group on an interface that connects to

multiple subnets for router backup on different subnets.

• The VRRP group is automatically created when you specify the first virtual IP address. If you later

specify another virtual IP address for the VRRP group, the virtual IP address is added to the virtual

IP address list of the VRRP group.

• The virtual IP address assigned to the VRRP group must be a legal host address and in the same

subnet as the interface IP address. If not, the state of the VRRP group is always initialize and VRRP

does not take effect. For example, although you can successfully configure a network address or

broadcast address as the virtual IP address of a VRRP group, the group cannot work.

• The maximum number of virtual IP addresses in a VRRP group is 16.

• When VRRP operates in standard mode, the virtual IP address of a VRRP group can be either an

unused IP address on the subnet where the VRRP group resides or the IP address of an interface on

a router in the VRRP group. In the latter case, the router is called the IP address owner.

• When a router is the IP address owner in a VRRP group, HP recommends not configuring the

network command on the interface to use the IP address of the interface, or the virtual IP address

of the VRRP group, to establish a neighbor relationship with the adjacent router. For more

information about the network command, see Network Management Command Reference.

• A VRRP group is removed after you remove all its virtual IP addresses, and all its configurations

become invalid.

• Removal of the VRRP group on the IP address owner causes IP address collision. To avoid the

collision, change the IP address of the interface on the IP address owner before you remove the

VRRP group from the interface.

• The virtual IP address of a VRRP group cannot be 0.0.0.0, 255.255.255.255, loopback addresses,

non-class A/B/C addresses or other illegal IP addresses such as 0.0.0.1.

• Do not create VRRP groups in the VLAN interface of a super VLAN. Otherwise, network

performance might be affected.

Configuration prerequisites

Before creating a VRRP group and configuring a virtual IP address on an interface, configure an IP

address for the interface and make sure that it is in the same subnet as the virtual IP address.