HP VPN Firewall Appliances High Availability Configuration Guide
ii
Configuration guidelines ··············································································································································· 53
Configuring stateful failover in the Web interface ····································································································· 54
Configuring stateful failover ································································································································· 54
Stateful failover configuration example ·············································································································· 56
Configuring stateful failover at the CLI ························································································································· 58
Stateful failover configuration task list ················································································································· 58
Enabling stateful failover ······································································································································ 58
Enabling automatic configuration synchronization···························································································· 59
Configuring a failover interface and a backup VLAN ······················································································ 59
Displaying and maintaining stateful failover ······································································································ 60
Stateful failover configuration example ·············································································································· 60
Configuring IPC ·························································································································································· 62
Overview ········································································································································································· 62
Node ······································································································································································· 62
Link ·········································································································································································· 62
Channel ·································································································································································· 62
Packet sending modes ·········································································································································· 63
Enabling IPC performance statistics ····························································································································· 63
Displaying and maintaining IPC ··································································································································· 64
Configuring Track ······················································································································································ 65
Overview ········································································································································································· 65
Collaboration fundamentals ································································································································· 65
Collaboration application example ····················································································································· 66
Collaboration application example on an AC ··································································································· 66
Track configuration task list ··········································································································································· 67
Associating the Track module with a detection module ····························································································· 67
Associating Track with NQA ······························································································································· 67
Associating Track with BFD ·································································································································· 68
Associating Track with interface management ··································································································· 69
Associating the Track module with an application module ······················································································· 70
Associating Track with VRRP ································································································································ 70
Associating Track with static routing ··················································································································· 71
Associating Track with PBR ·································································································································· 72
Associating Track with interface backup ············································································································ 73
Displaying and maintaining track entries ···················································································································· 74
Track configuration examples ······································································································································· 74
VRRP-Track-NQA collaboration configuration example ···················································································· 74
Configuring BFD for a VRRP backup to monitor the master ·············································································· 78
Configuring BFD for the VRRP master to monitor the uplink ············································································· 81
Static routing-Track-NQA collaboration configuration example ······································································ 85
VRRP-Track-interface management collaboration configuration example ······················································· 90
Configuring a collaboration group ··························································································································· 93
Overview ········································································································································································· 93
Configuring a collaboration group in the web interface ··························································································· 94
Assigning interfaces to a collaboration group ··································································································· 94
Viewing the status of a collaboration group and its member ports ································································· 95
Collaboration group configuration example ······································································································ 96
Configuring a collaboration group at the CLI ············································································································· 98
Configuring a collaboration group ····················································································································· 98
Displaying and maintaining collaboration group ······························································································ 98
Collaboration group configuration example ······································································································ 99