HP VPN Firewall Appliances High Availability Configuration Guide

23
Configuring router priority, preemptive mode and tracking
function
Configuration prerequisites
Before you configure router priority, preemptive mode and tracking function, create a VRRP group and
configure its virtual IPv6 address.
Configuration guidelines
• The running priority of an IP address owner is always 255 and you do not need to configure it. An
IP address owner always operates in preemptive mode.
• Interface tracking is not configurable on an IP address owner.
• If you configure an interface to be tracked or a track entry to be monitored on a firewall that is the
IP address owner in a VRRP group, the configuration does not take effect. If the router is not the IP
address owner in the VRRP group later, the configuration takes effect.
• The tracked interface can be a Layer 3 Ethernet interface, a VLAN interfaces or a Layer 3 aggregate
interface.
• If the state of a tracked interface changes from down or removed to up, the priority of the firewall
that owns the interface is automatically restored.
• If the state of a track entry changes from negative or invalid to positive, the priority of the firewall
where the track entry is configured is automatically restored.
Configuration procedure
By configuring router priority, preemptive mode, interface tracking, or a track entry, determine which
router in the VRRP group serves as the master.
To configure router priority, preemptive mode and interface tracking:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter the specified interface
view.
interface interface-type
interface-number
N/A
3. Configure the priority of the
firewall in the VRRP group.
vrrp ipv6 vrid virtual-router-id
priority priority-value
Optional.
100 by default.
4. Configure the firewall in the
VRRP group to operate in
preemptive mode and
configure preemption delay of
the VRRP group.
vrrp ipv6 vrid virtual-router-id
preempt-mode [ timer delay
delay-value ]
Optional.
The firewall in the VRRP group
operates in preemptive mode and
the preemption delay is zero
seconds by default.
5. Configure the interface to be
tracked.
vrrp ipv6 vrid virtual-router-id track
interface interface-type
interface-number [ reduced
priority-reduced ]
Optional.
No interface is being tracked by
default.
6. Configure VRRP to track a
specified track entry.
vrrp ipv6 vrid virtual-router-id track
track-entry-number [ reduced
priority-reduced | switchover ]
Optional.
Not configured by default.