HP VPN Firewall Appliances High Availability Configuration Guide

37
d. Enter 1 in the VRID field and 202.38.160.111 in the Virtual IP field, and click Add to add the
virtual IP address to the Virtual IP Members field.
e. Click Apply.
3. Create VRRP group 2 on GigabitEthernet 0/1 and configure the virtual IP address as
202.38.160.112:
a. On the VRRP group page of GigabitEthernet 0/1, click Add.
b. Enter 2 in the VRID field and 202.38.160.112 in the Virtual IP field, and click Add to add the
virtual IP address to the Virtual IP Members field.
c. Click Apply.
4. Set the priority of Firewall B in VRRP group 2 to 110:
a. Click the icon corresponding to VRRP group 2 on the VRRP group page of GigabitEthernet
0/1.
b. Enter 110 in the Priority field.
c. Click Apply.
Verifying the configuration
After the configuration, the VRRP group information on GigabitEthernet 0/1 on Firewall A and Firewall
B shows that:
• In VRRP group 1, Firewall A is the master and Firewall B is the backup. Hosts on 202.38.160.111/24
access the Internet through Firewall A.
• In VRRP group 2, Firewall A is the backup and Firewall B is the master. Hosts on 202.38.160.112 /24
access the Internet through Firewall B
Multiple VRRP groups configuration example (at the CLI)
Network requirements
• I n t h e s e g m e n t 2 0 2. 3 8 .16 0 . 0 / 2 4 , s o m e h o s t s u s e 2 0 2. 3 8 .16 0 .111/24 as their default gateway and
some hosts use 202.38.160.112/24 as their default gateway.
• Load sharing and mutual backup between default gateways can be implemented by using VRRP
groups.