HP VPN Firewall Appliances High Availability Configuration Guide
18
Configuration procedure
To create a VRRP group and configure a virtual IP address:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter the specified interface
view.
interface interface-type
interface-number
N/A
3. Create a VRRP group and
configure a virtual IP address
for the VRRP group.
vrrp vrid virtual-router-id virtual-ip
virtual-address
VRRP group is not created by
default.
Configuring router priority, preemptive mode and tracking
function
Configuration guidelines
• The running priority of an IP address owner is always 255 and you do not need to configure it. An
IP address owner always operates in preemptive mode.
• If you configure an interface to be tracked or a track entry to be monitored on a firewall that is the
IP address owner in a VRRP group, the configuration does not take effect. If the firewall is not the IP
address owner in the VRRP group later, the configuration takes effect.
• The tracked interface can be a Layer 3 Ethernet interface, a VLAN interface, a Layer 3 aggregate
interface, or a dialer interface. The dialer interface must function as the PPPoE client and operate in
the permanent online mode.
• If the state of a tracked interface changes from down or removed to up, the priority of the firewall
where the interface resides is automatically restored.
• If the state of a track entry changes from negative or invalid to positive, the priority of the firewall
where the track entry is configured is automatically restored.
Configuration prerequisites
Before you configure router priority, preemptive mode and tracking function, create a VRRP group on an
interface and configure a virtual IP address for it.
Configuration procedure
By configuring router priority, preemptive mode, interface tracking, or a track entry, you can determine
which firewall in the VRRP group serves as the master.
To configure router priority, preemptive mode and the tracking function:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure router priority in the
VRRP group.
vrrp vrid virtual-router-id priority
priority-value
Optional.
The default is 100.