HP VPN Firewall Appliances High Availability Configuration Guide

28
Figure 16 Configuring VRRP group attributes
Verifying the configuration
After the configuration, Host A can ping Host B. You can view the VRRP group information on
GigabitEthernet 0/1 on Firewall A and Firewall B. In VRRP group 1, Firewall A is the master and Firewall
B is the backup. Firewall A is responsible for forwarding packets sent from Host A to Host B.
If the interface that connects Firewall A to the Internet fails, Host A can still ping Host B. In this case, the
VRRP group information on the two firewalls shows that Firewall A becomes a backup with the priority 80
and Firewall B becomes the master. Firewall B forwards the packets from Host A to Host B.
Single VRRP group configuration example (at the CLI)
Network requirements
• Host A needs to access Host B on the Internet, using 202.38.160.111/24 as its default gateway.
• Firewall A and Firewall B belong to VRRP group 1 with the virtual IP address of 202.38.160.111/24.
• If Firewall A operates correctly, packets sent from Host A to Host B are forwarded by Firewall A. If
Firewall A fails, packets sent from Host A to Host B are forwarded by Firewall B.