HP VPN Firewall Appliances High Availability Configuration Guide

42
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Backup
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 5
Become Master : 4200ms left
Auth Type : None
Virtual IP : FE80::10
1::10
Master IP : FE80::1
The output shows that in VRRP group 1 Firewall A is the master, Firewall B is the backup and
packets sent from Host A to Host B are forwarded by Firewall A.
When Firewall A fails, you can still ping Firewall B successfully on Host A. To view the detailed
information about the VRRP group on Firewall B, use the display vrrp ipv6 verbose command.
# When Firewall A fails, display the detailed information about VRRP group 1 on Firewall B.
[FirewallB-GigabitEthernet0/1] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 100 Running Pri : 100
Preempt Mode : Yes Delay Time : 5
Auth Type : None
Virtual IP : FE80::10
1::10
Virtual MAC : 0000-5e00-0201
Master IP : FE80::2
The output shows that when Firewall A fails, Firewall B becomes the master, and packets sent from
Host A to Host B are forwarded by Firewall B.
# After Firewall A resumes normal operation, use the display vrrp ipv6 verbose command to
display the detailed information about VRRP group 1 on Firewall A.
[RouterA-GigabitEthernet0/1] display vrrp ipv6 verbose
IPv6 Standby Information:
Run Mode : Standard
Run Method : Virtual MAC
Total number of virtual routers : 1
Interface GigabitEthernet0/1
VRID : 1 Adver Timer : 100
Admin Status : Up State : Master
Config Pri : 110 Running Pri : 110
Preempt Mode : Yes Delay Time : 5
Auth Type : None