HP VPN Firewall Appliances High Availability Configuration Guide

34
Master IP : 202.38.160.2
VRRP Track Information:
Track Interface: GE0/2 State : Down Pri Reduced : 30
# If interface GigabitEthernet 0/2 on Firewall A is not available, the detailed information about
VRRP group 1 on Firewall B is displayed.
[FirewallB-GigabitEthernet0/1] display vrrp verbose
IPv4 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 4
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 5
Auth Type : Simple Key : ******
Virtual IP : 202.38.160.111
Virtual MAC : 0000-5e00-0101
Master IP : 202.38.160.2
The output shows that if interface GigabitEthernet 0/2 on Firewall A is not available, the priority
of Firewall A is reduced to 80 and it becomes the backup. Firewall B becomes the master and
packets sent from Host A to Host B are forwarded by Firewall B.
Multiple VRRP groups configuration example (in the Web
interface)
Network requirements
As shown in Figure 19, in the segment 202.38.160.0/24, some hosts use 202.38.160.111/24 as their
default gateway and some hosts use 202.38.160.112/24 as their default gateway.
Use VRRP groups to implement load balancing and mutual backup between default gateways.